$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: FGtnYA4quIfoXJ03v2lhoSt23fBk6TCwaZPPntME1ys= Subject key identifier: 0F:B2:38:25:27:79:AC:4F:DB:C6:6A:B8:E3:7E:18:76:CC:68:81:C3 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 20C822E50E372AEB7C2D9473FB1F1B9654467A59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:26:21 +0000 Manifest this update: Thu 23 Jul 2026 17:21:21 +0000 Manifest next update: Fri 24 Jul 2026 20:12:21 +0000 Files and hashes: 1: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: yP2tjVWyp0XvMy/tJTJX6W06AnUse5V2Wl8ZlaNHj8U=) 2: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) 3: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 4: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c8:22:e5:0e:37:2a:eb:7c:2d:94:73:fb:1f:1b:96:54:46:7a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Jul 23 17:21:21 2026 GMT Not After : Jul 24 20:12:21 2026 GMT Subject: CN=0FB238252779AC4FDBC66AB8E37E1876CC6881C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:ad:64:a9:26:5f:7b:a8:35:4c:47:73:95: a2:e8:f9:d5:80:59:db:aa:79:ff:42:f7:0a:a4:b4: 7f:d1:20:53:82:15:52:7f:1f:34:92:3d:d6:9e:2b: 0b:d7:f3:1d:e1:79:87:7d:04:82:2c:4b:8e:82:8e: fa:23:b6:0b:fa:2e:40:0f:1a:21:23:b3:8f:48:20: 2d:77:6a:15:c1:84:db:f6:89:e3:a3:2f:4c:53:fb: 19:0f:ab:a5:82:ac:d4:08:fd:ca:77:ba:e7:6f:90: f6:bc:41:21:40:26:3a:4c:79:e3:f5:02:b5:44:52: 37:9c:66:06:1b:df:f9:08:c0:f6:dd:27:be:d6:c0: d4:24:d2:c2:bc:e6:e1:24:64:c6:16:32:f7:0a:3e: 12:7f:a7:1d:74:df:39:97:e2:7c:37:2f:dd:fa:d7: 30:4b:60:5b:d0:17:0c:c0:18:e8:38:6a:a3:ab:3c: c0:d2:c1:0f:24:c4:f6:67:33:5f:4b:cc:a4:e4:86: cb:cf:ac:67:c7:33:ea:49:d1:ca:4f:e9:42:11:ec: a8:1d:fa:05:00:1f:d9:bd:af:89:ae:fd:55:5b:ac: 67:ba:75:f8:f2:5a:5e:c4:87:1e:26:68:1e:13:4d: 1b:4d:e5:6e:54:0d:37:dc:61:9f:30:d4:5c:b9:22: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B2:38:25:27:79:AC:4F:DB:C6:6A:B8:E3:7E:18:76:CC:68:81:C3 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2c:73:77:96:7d:76:e4:4e:aa:53:b7:49:5f:c1:a8:eb:a4: aa:38:a6:28:63:31:a6:67:9e:0f:a9:e0:18:f6:0d:d8:26:9a: 86:0d:af:f9:b4:c1:14:d5:08:40:52:95:03:23:9e:5f:18:5b: 1a:61:65:a8:cd:44:47:2c:e6:01:f2:92:59:3f:c0:e1:91:6a: 59:34:d8:24:cf:9d:71:96:32:43:d7:27:e8:52:4f:9a:b4:f0: 9d:1f:90:1c:74:2a:90:d9:67:97:df:29:87:34:36:ac:30:31: b3:df:94:6b:93:63:ef:d2:cd:8e:4e:0c:cf:54:cf:59:c6:41: 5a:a0:8e:a5:f8:67:35:72:a7:e4:8c:a8:37:32:76:f8:fa:12: aa:7d:ab:57:46:84:d0:dd:c5:46:7b:af:ee:1f:4d:5b:9d:60: b1:77:7e:f8:2a:b0:e9:ee:2c:96:16:c5:af:42:66:4f:62:9d: a4:9f:0d:67:90:71:fa:27:3b:fa:44:cd:93:a5:c9:f3:1e:3a: 26:fd:1a:fd:a3:98:bf:fa:a7:2b:21:aa:58:f1:85:d1:00:bc: 11:1f:3d:c2:79:f6:e5:6e:92:26:c7:cf:80:7b:0a:23:69:7b: 1b:d1:80:e7:1a:9b:f3:f9:fd:53:27:05:ff:42:2a:60:d7:74: 7e:be:64:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMgi5Q43Kut8LZRz+x8bllRGelkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA3MjMxNzIxMjFaFw0yNjA3MjQyMDEyMjFaMDMxMTAvBgNV BAMTKDBGQjIzODI1Mjc3OUFDNEZEQkM2NkFCOEUzN0UxODc2Q0M2ODgxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdL61kqSZfe6g1TEdzlaLo+dWA Wduqef9C9wqktH/RIFOCFVJ/HzSSPdaeKwvX8x3heYd9BIIsS46Cjvojtgv6LkAP GiEjs49IIC13ahXBhNv2ieOjL0xT+xkPq6WCrNQI/cp3uudvkPa8QSFAJjpMeeP1 ArVEUjecZgYb3/kIwPbdJ77WwNQk0sK85uEkZMYWMvcKPhJ/px103zmX4nw3L936 1zBLYFvQFwzAGOg4aqOrPMDSwQ8kxPZnM19LzKTkhsvPrGfHM+pJ0cpP6UIR7Kgd +gUAH9m9r4mu/VVbrGe6dfjyWl7Ehx4maB4TTRtN5W5UDTfcYZ8w1Fy5Il1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD7I4JSd5rE/bxmq4434YdsxogcMwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8sc3eWfXbkTqpTt0lfwajrpKo4pihjMaZn ng+p4Bj2DdgmmoYNr/m0wRTVCEBSlQMjnl8YWxphZajNREcs5gHyklk/wOGRalk0 2CTPnXGWMkPXJ+hST5q08J0fkBx0KpDZZ5ffKYc0NqwwMbPflGuTY+/SzY5ODM9U z1nGQVqgjqX4ZzVyp+SMqDcydvj6Eqp9q1dGhNDdxUZ7r+4fTVudYLF3fvgqsOnu LJYWxa9CZk9inaSfDWeQcfonO/pEzZOlyfMeOib9Gv2jmL/6pyshqljxhdEAvBEf PcJ59uVukibHz4B7CiNpexvRgOcam/P5/VMnBf9CKmDXdH6+ZAU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:00:16 2026 by rpki-client