$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft File: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft (raw, json) Hash identifier: FdUjqj5kCxP+vILsvNutos1hIHCt3WXYM5G5RF5dP+4= Subject key identifier: D9:4F:95:0C:59:5C:8E:B3:F5:D2:27:89:6D:B0:D2:EC:11:E3:80:95 Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC Certificate issuer: /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Certificate serial: 3D54C1DC41ED31F4D35EB2797EF7B92CAC2B15BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:36:21 +0000 Manifest this update: Fri 24 Jul 2026 05:31:21 +0000 Manifest next update: Sat 25 Jul 2026 06:53:21 +0000 Files and hashes: 1: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl (hash: x6TS21aNyUPPARvt6mNWlFrfCeMoeZ5ob5NgRSHlx00=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:54:c1:dc:41:ed:31:f4:d3:5e:b2:79:7e:f7:b9:2c:ac:2b:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Validity Not Before: Jul 24 05:31:21 2026 GMT Not After : Jul 25 06:53:21 2026 GMT Subject: CN=D94F950C595C8EB3F5D227896DB0D2EC11E38095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:43:1c:13:ee:7a:0b:f6:69:56:99:06:32: 9f:39:f5:8a:4b:e9:b2:4f:70:f3:11:03:5c:b3:4e: 8b:72:aa:f7:4a:b2:0f:f4:dc:98:74:d7:b8:62:09: b9:00:54:74:2f:7f:11:dd:77:99:53:b3:35:1a:43: 0f:c8:69:e9:59:cb:aa:31:e4:8c:ef:c1:30:98:1e: b2:01:0b:c4:12:93:07:2e:c3:3c:c8:95:99:d9:fb: 22:79:ad:fc:01:10:32:d0:08:44:00:c7:e7:92:56: c4:ac:7f:4b:88:12:c7:04:bb:b4:55:2a:5c:f2:83: 77:e1:1b:4b:89:c7:be:58:45:5a:bb:67:d4:4d:42: da:ca:be:c4:14:2a:4e:0b:3a:64:e7:ce:bc:2a:f2: 5f:56:be:3c:69:70:2f:c1:88:ca:b1:e5:f4:da:15: 36:a1:ae:06:3c:a0:de:87:be:be:fb:82:2a:8d:33: 0f:3a:a3:86:0e:02:62:35:47:0c:2d:da:86:5b:35: 02:22:c4:4e:2d:fe:c7:75:4d:52:52:bd:57:ba:14: b9:90:9f:06:f6:70:fd:c7:c3:d3:1a:67:72:24:fd: 78:10:9d:1b:12:5a:11:e7:ab:d8:b8:7a:8d:c5:06: dd:e4:8b:61:c5:4f:96:43:8d:0b:be:1b:04:e5:f0: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:95:0C:59:5C:8E:B3:F5:D2:27:89:6D:B0:D2:EC:11:E3:80:95 X509v3 Authority Key Identifier: keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ae:3e:04:ea:69:96:35:a3:4f:f6:12:b7:aa:69:c0:73:a1: dd:d8:05:96:64:f1:12:59:46:a2:35:0b:9a:2b:a6:79:db:9f: 6f:f5:41:3b:94:dd:de:be:4f:6c:3d:1b:7f:68:0b:bd:01:01: 26:6c:b0:b3:e9:1c:98:6c:e5:ef:34:84:9c:44:ba:c4:8f:2a: 37:3d:2e:19:20:63:a0:5c:7b:df:c0:7d:05:2d:87:93:25:f2: 98:e8:cb:58:ab:85:11:2a:ec:50:ef:ec:a4:52:47:23:f0:11: 99:e4:7d:b3:5f:60:36:e5:ef:2f:89:09:ff:62:ab:d8:49:f3: 61:d3:1f:4f:f4:9c:40:c5:95:0b:f6:cf:66:56:f7:9e:56:33: a7:be:28:ed:55:c9:10:12:6d:f7:f1:c5:af:33:7b:48:a6:54: 1d:4c:5f:62:b7:15:ec:be:d0:b7:d1:07:32:1c:58:1a:da:8b: 1c:58:4f:d5:1f:7a:03:af:d0:69:11:3b:11:cd:c8:cb:0c:eb: 79:a0:3e:8b:07:ef:b3:a9:27:17:cc:d4:48:b8:18:36:2e:e0: 9e:0f:11:7d:ef:4d:f2:46:96:17:d9:f1:27:43:1b:3e:4a:9e: 98:ec:c2:27:8a:59:71:3f:54:11:b5:a0:49:06:2d:15:70:d9: 58:26:e6:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVTB3EHtMfTTXrJ5fve5LKwrFbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5 NTIyNzNGQzAeFw0yNjA3MjQwNTMxMjFaFw0yNjA3MjUwNjUzMjFaMDMxMTAvBgNV BAMTKEQ5NEY5NTBDNTk1QzhFQjNGNUQyMjc4OTZEQjBEMkVDMTFFMzgwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLkMcE+56C/ZpVpkGMp859YpL 6bJPcPMRA1yzTotyqvdKsg/03Jh017hiCbkAVHQvfxHdd5lTszUaQw/IaelZy6ox 5IzvwTCYHrIBC8QSkwcuwzzIlZnZ+yJ5rfwBEDLQCEQAx+eSVsSsf0uIEscEu7RV Klzyg3fhG0uJx75YRVq7Z9RNQtrKvsQUKk4LOmTnzrwq8l9WvjxpcC/BiMqx5fTa FTahrgY8oN6Hvr77giqNMw86o4YOAmI1Rwwt2oZbNQIixE4t/sd1TVJSvVe6FLmQ nwb2cP3Hw9MaZ3Ik/XgQnRsSWhHnq9i4eo3FBt3ki2HFT5ZDjQu+GwTl8Oa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2U+VDFlcjrP10ieJbbDS7BHjgJUwHwYDVR0j BBgwFoAUeFAk23pvwu6eTUpAl2jXmpUic/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhMjkyOWMtNjA4OC00Y2I1LTgzYzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3 QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5NTIyNzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODUwMjREQjdBNkZDMkVFOUU0RDRBNDA5NzY4RDc5QTk1MjI3 M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3 OUE5NTIyNzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOuPgTqaZY1o0/2EreqacBzod3YBZZk8RJZ RqI1C5orpnnbn2/1QTuU3d6+T2w9G39oC70BASZssLPpHJhs5e80hJxEusSPKjc9 LhkgY6Bce9/AfQUth5Ml8pjoy1irhREq7FDv7KRSRyPwEZnkfbNfYDbl7y+JCf9i q9hJ82HTH0/0nEDFlQv2z2ZW955WM6e+KO1VyRASbffxxa8ze0imVB1MX2K3Fey+ 0LfRBzIcWBraixxYT9UfegOv0GkROxHNyMsM63mgPosH77OpJxfM1Ei4GDYu4J4P EX3vTfJGlhfZ8SdDGz5KnpjswieKWXE/VBG1oEkGLRVw2Vgm5pg= -----END CERTIFICATE-----Generated at Fri Jul 24 16:40:25 2026 by rpki-client