$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: AR0U9ZfqpsTJRMXUSQ10kFJmmfTXlmolqfDsjCRkkEk= Subject key identifier: EA:23:03:A0:9E:48:F4:2E:D6:72:CF:58:82:3B:AB:14:94:27:35:C0 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 259F5E1CDA252D046D56ADBB7E34F3D94DD394C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:17:27 +0000 Manifest this update: Thu 23 Jul 2026 14:12:27 +0000 Manifest next update: Fri 24 Jul 2026 17:23:27 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: kbFu5nj07LFgOe6iTiO1O/m4F0LJAe68IL7R1+beIhk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9f:5e:1c:da:25:2d:04:6d:56:ad:bb:7e:34:f3:d9:4d:d3:94:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Jul 23 14:12:27 2026 GMT Not After : Jul 24 17:23:27 2026 GMT Subject: CN=EA2303A09E48F42ED672CF58823BAB14942735C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:e2:70:02:1b:51:6c:97:2d:b0:36:69:11: 2c:95:e9:bb:ee:18:1e:2d:6d:53:e1:12:e1:70:f0: 65:37:0c:19:25:03:d5:91:96:8f:d8:96:b4:04:62: 37:28:eb:d7:e8:08:4f:72:26:44:60:93:75:17:76: 07:a1:a9:8b:b6:f9:fd:5f:d0:f9:bc:cf:0e:00:17: 69:b7:47:06:a0:e6:4f:d9:b2:5d:44:0d:5f:a4:54: a2:bb:b6:62:3e:23:3c:95:b0:94:4f:85:27:79:41: 77:71:9f:64:7b:a9:15:23:75:d2:34:a7:4b:93:c9: 9a:1b:a9:f5:29:a5:e8:85:d6:3a:bb:94:6d:ff:a5: be:11:a6:1b:75:f2:ab:6b:96:55:bf:32:06:7e:2c: 2a:f5:33:bb:1b:ac:b4:0d:58:89:c7:3d:d2:85:1a: 6f:91:b8:e9:a4:6d:a2:b5:f9:ba:f8:e8:5c:b2:97: c3:c0:c2:e0:62:0e:14:f8:49:e6:dd:52:68:33:00: 56:91:57:a0:5f:e6:bd:7f:18:1b:e2:2f:7a:93:5c: a1:88:5d:78:b1:81:ea:33:4a:25:b0:93:ff:71:28: b6:15:4d:3c:45:3e:9a:fe:c1:e5:ad:87:d5:9b:e8: 5b:be:25:1e:bc:cf:f7:12:8a:0d:b3:1d:3b:5b:ff: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:03:A0:9E:48:F4:2E:D6:72:CF:58:82:3B:AB:14:94:27:35:C0 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ad:35:e5:8f:3d:d0:a2:f1:46:d6:f5:85:eb:33:a3:bf:c9: 41:92:14:0a:69:be:75:ab:85:aa:b2:ea:1f:42:a4:8a:d7:01: b8:56:55:c6:ec:d9:be:9a:c6:a0:58:93:d9:22:cb:4d:36:54: 78:db:b6:0e:a9:0d:32:12:8a:a8:af:ed:f7:e0:c6:3d:26:ba: ce:d0:7c:70:7e:a5:25:6b:1f:99:34:36:db:fe:fb:66:ad:4f: b2:fe:74:92:0b:0f:13:6b:ec:e3:ca:37:00:d9:16:e7:99:62: d0:0c:0a:19:88:09:a9:eb:c4:d3:51:71:f5:bc:72:16:78:cf: 02:c8:15:82:42:8e:58:09:90:f6:6c:37:a5:30:9e:94:40:39: 09:02:8b:46:8c:9c:48:99:46:f5:b9:74:74:01:d5:53:7a:b7: 31:5d:c5:96:b7:9a:84:ae:ef:d8:9f:ff:40:9e:9e:c4:e7:53: e4:f0:4e:b5:35:c9:5e:06:78:c7:1a:d1:06:ce:fe:0a:99:5a: 08:88:7b:9b:1b:01:4a:46:d1:85:6f:4e:1d:79:e9:54:bc:d6: 60:b0:e5:fe:be:2a:2f:77:c3:cf:3f:4e:6a:9c:2e:51:8d:9f: 85:d0:32:5f:15:49:2a:a9:7b:0f:84:72:fe:fc:0e:10:cb:05: dc:cc:cb:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZ9eHNolLQRtVq27fjTz2U3TlMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA3MjMxNDEyMjdaFw0yNjA3MjQxNzIzMjdaMDMxMTAvBgNV BAMTKEVBMjMwM0EwOUU0OEY0MkVENjcyQ0Y1ODgyM0JBQjE0OTQyNzM1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqx+JwAhtRbJctsDZpESyV6bvu GB4tbVPhEuFw8GU3DBklA9WRlo/YlrQEYjco69foCE9yJkRgk3UXdgehqYu2+f1f 0Pm8zw4AF2m3Rwag5k/Zsl1EDV+kVKK7tmI+IzyVsJRPhSd5QXdxn2R7qRUjddI0 p0uTyZobqfUppeiF1jq7lG3/pb4Rpht18qtrllW/MgZ+LCr1M7sbrLQNWInHPdKF Gm+RuOmkbaK1+br46Fyyl8PAwuBiDhT4SebdUmgzAFaRV6Bf5r1/GBviL3qTXKGI XXixgeozSiWwk/9xKLYVTTxFPpr+weWth9Wb6Fu+JR68z/cSig2zHTtb/8LXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6iMDoJ5I9C7Wcs9YgjurFJQnNcAwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqtNeWPPdCi8UbW9YXrM6O/yUGSFAppvnWr haqy6h9CpIrXAbhWVcbs2b6axqBYk9kiy002VHjbtg6pDTISiqiv7ffgxj0mus7Q fHB+pSVrH5k0Ntv++2atT7L+dJILDxNr7OPKNwDZFueZYtAMChmICanrxNNRcfW8 chZ4zwLIFYJCjlgJkPZsN6UwnpRAOQkCi0aMnEiZRvW5dHQB1VN6tzFdxZa3moSu 79if/0CensTnU+TwTrU1yV4GeMca0QbO/gqZWgiIe5sbAUpG0YVvTh156VS81mCw 5f6+Ki93w88/TmqcLlGNn4XQMl8VSSqpew+Ecv78DhDLBdzMy8s= -----END CERTIFICATE-----Generated at Fri Jul 24 01:12:35 2026 by rpki-client