$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: YgRjK5DNm41JCl09r6++nktYdPy8UlA4Vp9JkQzl1Uw= Subject key identifier: 1E:E3:26:1B:2D:7F:5C:0D:D0:9A:06:86:E0:0F:1C:CB:74:EA:7B:62 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 50120B486F065FA004BC34BA751CCA0463D774FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:52:07 +0000 Manifest this update: Thu 23 Jul 2026 09:47:07 +0000 Manifest next update: Fri 24 Jul 2026 13:24:07 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) 2: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: 73sIjV6q+GsWtcR8iY/RMqVSj+ytRPAlXx4NAtYC/ro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:12:0b:48:6f:06:5f:a0:04:bc:34:ba:75:1c:ca:04:63:d7:74:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Jul 23 09:47:07 2026 GMT Not After : Jul 24 13:24:07 2026 GMT Subject: CN=1EE3261B2D7F5C0DD09A0686E00F1CCB74EA7B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:90:5a:3e:b6:8e:65:cd:82:eb:e1:a7:06: aa:69:91:71:5e:98:2c:e2:55:c2:79:93:46:41:e7: 76:1e:4b:75:09:d8:cf:bf:07:c3:41:11:bb:d5:e2: ec:85:c6:03:02:aa:a4:69:01:e0:ab:cc:26:d1:ad: 16:bd:0c:99:5d:8e:e8:2b:c2:c7:e9:87:45:7a:7a: ae:9b:86:4f:08:12:dd:dc:77:00:9d:1e:00:3d:13: b1:c6:2d:b5:41:c7:4b:79:ed:8e:c5:c0:93:9b:1b: 3f:64:27:0c:5e:bc:0c:be:14:1b:6c:71:09:cf:8b: bb:63:35:21:1f:5a:41:2e:d2:1a:7a:c1:ab:7b:97: cb:4d:96:d5:1c:e3:d7:0a:66:bc:42:95:39:96:f8: f9:63:66:f0:f4:b9:80:ba:83:68:61:a9:c0:aa:75: e6:53:62:f6:40:c6:10:35:1b:90:91:49:59:26:20: ad:4e:c7:86:79:d9:41:71:97:ce:e1:de:51:f4:ba: 7d:33:2a:6f:cc:a7:9f:0c:61:ab:1c:0c:23:f9:ca: 88:b1:a9:30:37:a2:b9:11:de:52:5d:a9:37:0f:2a: d6:8d:ed:e7:0b:cd:d0:6a:70:b0:4f:ce:0a:40:ea: 0e:9f:61:e6:55:ba:6c:c4:1e:3a:ef:e5:3f:0c:03: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:26:1B:2D:7F:5C:0D:D0:9A:06:86:E0:0F:1C:CB:74:EA:7B:62 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:37:0c:90:ce:d4:b2:4c:a5:45:0f:c7:fa:c5:05:19:3a:28: 1f:c8:c8:09:dd:2c:ec:e0:0f:78:84:26:bf:02:93:90:4c:41: ab:3d:d6:79:57:c9:18:86:94:63:05:3d:c2:21:d2:92:ad:cf: 04:43:2f:90:fe:b9:0c:50:e7:4c:92:40:f7:f1:71:20:d4:a7: c0:38:97:c7:4f:b9:a6:5a:6b:9c:b5:be:ba:8c:17:a0:55:88: 76:fe:81:cc:79:ed:87:e0:e1:7d:35:94:cb:a4:92:3d:77:2e: 37:e8:bf:39:1b:50:3b:aa:72:85:cb:0a:85:e3:d0:b5:e8:53: 59:b1:24:0c:da:31:d0:87:2c:46:22:8d:74:93:71:e8:fa:76: 33:c5:79:e4:a8:c3:48:b1:eb:16:9f:f9:8e:29:c9:ba:ec:12: 9e:20:46:60:cf:59:89:41:65:26:4d:9b:85:7d:bf:8e:0a:25: 9d:72:2f:f7:c9:1b:ae:31:b1:db:ab:fe:69:b9:1f:1f:c6:da: 21:bc:0b:69:0d:15:7e:cc:f7:cd:21:f1:bb:23:7e:f2:74:eb: 41:f9:c8:b1:df:24:9c:41:a3:55:fb:b1:9f:dd:28:1f:9a:04: 85:39:2b:05:84:9a:2b:ff:0c:33:8c:db:4f:35:00:70:d3:96: b9:9c:02:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBILSG8GX6AEvDS6dRzKBGPXdPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA3MjMwOTQ3MDdaFw0yNjA3MjQxMzI0MDdaMDMxMTAvBgNV BAMTKDFFRTMyNjFCMkQ3RjVDMEREMDlBMDY4NkUwMEYxQ0NCNzRFQTdCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8JBaPraOZc2C6+GnBqppkXFe mCziVcJ5k0ZB53YeS3UJ2M+/B8NBEbvV4uyFxgMCqqRpAeCrzCbRrRa9DJldjugr wsfph0V6eq6bhk8IEt3cdwCdHgA9E7HGLbVBx0t57Y7FwJObGz9kJwxevAy+FBts cQnPi7tjNSEfWkEu0hp6wat7l8tNltUc49cKZrxClTmW+PljZvD0uYC6g2hhqcCq deZTYvZAxhA1G5CRSVkmIK1Ox4Z52UFxl87h3lH0un0zKm/Mp58MYascDCP5yoix qTA3orkR3lJdqTcPKtaN7ecLzdBqcLBPzgpA6g6fYeZVumzEHjrv5T8MA9PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHuMmGy1/XA3QmgaG4A8cy3Tqe2IwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMc3DJDO1LJMpUUPx/rFBRk6KB/IyAndLOzg D3iEJr8Ck5BMQas91nlXyRiGlGMFPcIh0pKtzwRDL5D+uQxQ50ySQPfxcSDUp8A4 l8dPuaZaa5y1vrqMF6BViHb+gcx57Yfg4X01lMukkj13LjfovzkbUDuqcoXLCoXj 0LXoU1mxJAzaMdCHLEYijXSTcej6djPFeeSow0ix6xaf+Y4pybrsEp4gRmDPWYlB ZSZNm4V9v44KJZ1yL/fJG64xsdur/mm5Hx/G2iG8C2kNFX7M980h8bsjfvJ060H5 yLHfJJxBo1X7sZ/dKB+aBIU5KwWEmiv/DDOM2081AHDTlrmcAgQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:53 2026 by rpki-client