$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: GVOrJJ/DxyXUcoV0q/YRpWi4jUz+k9Tw0gW30IlXJog= Subject key identifier: CE:C7:94:D1:6A:63:80:A3:70:C2:18:0F:68:31:EC:47:8B:E2:BF:A6 Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 291D915DD386A98E4387718A598A3E4B68AE7A7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:24:58 +0000 Manifest this update: Thu 23 Jul 2026 20:19:58 +0000 Manifest next update: Fri 24 Jul 2026 20:38:58 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) 2: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: xlCjh5I2PdFyQoR2bGz1sAfngM3XHiQ/P8YRQ99j/3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1d:91:5d:d3:86:a9:8e:43:87:71:8a:59:8a:3e:4b:68:ae:7a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Jul 23 20:19:58 2026 GMT Not After : Jul 24 20:38:58 2026 GMT Subject: CN=CEC794D16A6380A370C2180F6831EC478BE2BFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:a0:d8:fa:da:73:11:83:54:0d:09:14:bb: b9:8f:d8:80:d7:02:f6:af:48:64:98:ab:00:22:19: f4:8c:42:73:ca:0a:af:fb:e7:8b:a6:a2:9d:9d:ab: 85:1c:c4:b7:c7:e5:ce:c7:8f:2e:15:17:72:ab:df: d6:a3:bf:40:92:39:5b:9d:88:62:47:2b:b7:57:05: 52:2b:74:2d:4d:95:0f:15:0c:3d:c4:8a:e5:18:01: 9e:aa:97:47:ed:a0:6a:13:cc:ff:c2:3f:18:23:1a: a2:70:16:0b:3c:51:25:97:aa:8d:f1:9a:ba:0a:c4: c7:0b:a6:8b:53:55:ec:a8:f4:03:60:05:f9:25:80: d7:7b:96:67:14:c5:f6:57:a1:d3:6e:e8:fe:db:b2: a9:73:3d:41:73:1d:7c:46:7f:89:b0:9e:5a:8a:eb: 10:8b:17:60:82:b0:e7:3b:b9:33:24:42:fd:48:81: 07:89:17:3c:01:56:7b:12:72:0e:ad:87:1c:aa:88: 96:b7:6a:ad:84:89:3b:8c:0b:1a:da:5d:91:e7:ce: a8:05:27:2b:bd:05:0b:d0:f2:28:95:36:5f:48:e3: 75:a2:ac:c9:38:16:37:33:c2:4e:e6:24:e4:da:cd: 21:ad:b7:05:13:5b:61:6d:48:74:9a:b0:6f:37:bb: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C7:94:D1:6A:63:80:A3:70:C2:18:0F:68:31:EC:47:8B:E2:BF:A6 X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:12:6f:b1:9f:81:7b:38:4d:8f:48:42:87:54:cd:b4:96:c2: af:27:42:7b:8c:21:9e:0e:9c:a9:f0:bc:25:3d:02:4e:63:3f: 99:6d:ee:6f:b7:9d:a7:a2:13:32:9d:d8:a2:8e:c6:08:7a:c8: 62:03:ac:6d:89:dc:87:c2:72:d5:ab:40:88:0b:af:2a:c7:c7: 25:7c:62:f2:9c:46:35:28:de:97:0b:b5:ba:17:42:4c:18:50: ce:6e:cd:70:0a:f8:fd:b6:fb:95:5e:18:81:e9:71:f2:00:7a: 24:b2:df:c4:66:0b:d3:e8:e6:30:68:cb:59:ea:25:79:c3:bc: 27:d0:fe:b4:14:d0:23:b3:e2:95:06:33:c0:1d:ae:ba:ab:8c: 8d:f9:03:c1:98:a5:ac:2c:7e:d8:87:82:aa:ea:71:36:54:e9: 58:d2:7e:75:3a:b9:8f:c9:e0:cd:ac:ec:c4:36:8b:80:e0:f0: 24:93:80:8b:52:70:b3:35:75:32:ea:b2:79:56:9b:92:fe:f4: 80:a1:eb:8e:ab:4e:94:cd:cb:29:9a:ea:e7:53:d1:e3:07:e4: 2c:d7:5c:dc:3f:07:aa:b2:31:b6:e4:c3:69:5f:82:84:d7:a9: b1:92:39:da:14:68:f4:0e:6f:3d:5a:d2:93:74:e3:47:3e:f4: a3:1b:e1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKR2RXdOGqY5Dh3GKWYo+S2iuen8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA3MjMyMDE5NThaFw0yNjA3MjQyMDM4NThaMDMxMTAvBgNV BAMTKENFQzc5NEQxNkE2MzgwQTM3MEMyMTgwRjY4MzFFQzQ3OEJFMkJGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QqDY+tpzEYNUDQkUu7mP2IDX AvavSGSYqwAiGfSMQnPKCq/754umop2dq4UcxLfH5c7Hjy4VF3Kr39ajv0CSOVud iGJHK7dXBVIrdC1NlQ8VDD3EiuUYAZ6ql0ftoGoTzP/CPxgjGqJwFgs8USWXqo3x mroKxMcLpotTVeyo9ANgBfklgNd7lmcUxfZXodNu6P7bsqlzPUFzHXxGf4mwnlqK 6xCLF2CCsOc7uTMkQv1IgQeJFzwBVnsScg6thxyqiJa3aq2EiTuMCxraXZHnzqgF Jyu9BQvQ8iiVNl9I43WirMk4Fjczwk7mJOTazSGttwUTW2FtSHSasG83u/QDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzseU0WpjgKNwwhgPaDHsR4viv6YwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgSb7GfgXs4TY9IQodUzbSWwq8nQnuMIZ4O nKnwvCU9Ak5jP5lt7m+3naeiEzKd2KKOxgh6yGIDrG2J3IfCctWrQIgLryrHxyV8 YvKcRjUo3pcLtboXQkwYUM5uzXAK+P22+5VeGIHpcfIAeiSy38RmC9Po5jBoy1nq JXnDvCfQ/rQU0COz4pUGM8AdrrqrjI35A8GYpawsftiHgqrqcTZU6VjSfnU6uY/J 4M2s7MQ2i4Dg8CSTgItScLM1dTLqsnlWm5L+9ICh646rTpTNyyma6udT0eMH5CzX XNw/B6qyMbbkw2lfgoTXqbGSOdoUaPQObz1a0pN040c+9KMb4Xo= -----END CERTIFICATE-----Generated at Fri Jul 24 12:08:43 2026 by rpki-client