$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: qQJ39yRVscN5QsD7XwSDEJofj/RDIyp95S+54EfR2NE= Subject key identifier: E9:C2:8B:0C:3B:A5:12:61:69:BE:3B:64:F1:E7:67:A3:90:54:61:63 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 633C72418031FD833374440F0D4A60D7A5755FD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:43:51 +0000 Manifest this update: Thu 23 Jul 2026 23:38:51 +0000 Manifest next update: Sat 25 Jul 2026 02:09:51 +0000 Files and hashes: 1: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 3: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: Q80gmY76n3SiQHeyKXnVTRBJw2QDUVs63vZkbiIzVQ8=) 4: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 5: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) 6: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3c:72:41:80:31:fd:83:33:74:44:0f:0d:4a:60:d7:a5:75:5f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Jul 23 23:38:51 2026 GMT Not After : Jul 25 02:09:51 2026 GMT Subject: CN=E9C28B0C3BA5126169BE3B64F1E767A390546163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:be:01:30:44:06:c8:8a:26:36:a6:d2:3b: c8:b3:18:d0:ed:06:d2:ec:fc:33:55:a0:eb:cc:18: 99:a4:ea:37:57:12:0a:92:b1:b1:bd:e8:70:14:26: c9:65:4a:69:e2:b0:ae:dd:1b:a1:6e:26:03:af:4f: d5:21:3f:12:b9:7c:d4:f8:16:f9:db:58:06:8f:1d: 63:7a:1f:ee:cf:87:23:93:2f:2d:c6:19:4c:1f:c7: 95:84:7c:bf:57:1d:0f:e4:4f:eb:a4:39:69:d2:35: 49:bf:ea:a3:47:68:9e:66:3e:e4:03:f0:64:35:e1: 69:39:e1:e7:92:d2:a4:76:ad:51:37:84:18:4e:76: 61:ed:55:96:eb:2b:f6:6b:a3:b2:58:8b:82:b7:58: cc:a9:35:f9:ef:d6:5c:2d:03:93:db:43:96:f2:9c: ef:30:3f:31:70:36:15:1d:c2:66:40:f9:8b:02:b9: 23:c9:db:6b:a8:b7:a4:6c:5d:78:46:ed:6f:42:1d: eb:55:02:f9:e6:40:25:c1:41:74:83:8f:66:61:7d: 7a:6c:32:c9:02:7a:5c:f5:dd:19:85:45:eb:27:47: 58:5d:06:6b:cc:2a:73:71:9b:c1:3c:bf:b9:33:6a: b3:66:88:02:40:dc:2c:8e:48:40:bc:e6:fc:1f:bc: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C2:8B:0C:3B:A5:12:61:69:BE:3B:64:F1:E7:67:A3:90:54:61:63 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b0:01:bb:8d:53:0d:6b:a4:23:cf:9d:f6:a4:71:55:ab:d2: 9c:86:55:82:ab:1c:59:3f:bf:cd:21:81:c8:f5:cf:4b:54:2e: 5a:49:aa:b9:26:fe:8c:26:bd:24:21:1b:ed:14:b0:98:f6:51: 18:3b:b2:9a:05:62:fe:8c:1d:df:e4:3e:c6:37:dd:e6:b7:7f: ee:5d:6c:fa:47:a2:bf:d0:6b:c2:cf:6a:de:b2:5c:51:41:79: 64:ec:59:6f:47:ff:cc:0d:42:25:76:81:a8:c6:29:c8:dd:75: be:c7:4f:2b:9e:e8:ca:d8:a9:05:c7:b4:f3:17:78:18:b7:68: c1:cf:81:2d:54:2a:c8:32:02:d8:1c:d4:49:b1:07:f3:58:8f: 9e:a7:27:f0:01:f1:98:bf:54:c2:97:a9:83:f7:fa:81:7e:9a: 6a:af:12:ae:0f:02:7d:8d:2c:ae:23:cf:dd:bc:4d:b8:52:1f: c8:6e:2f:92:d8:bc:96:56:dc:7f:30:8c:ea:3f:0d:7b:0f:73: 58:24:a0:6a:79:d2:bb:c0:8f:d3:11:ab:69:53:0e:a1:36:34: 72:21:c9:fc:03:3d:aa:65:6e:66:f4:96:74:88:76:a4:ef:6f: 9a:9a:60:bc:8f:6a:29:0c:0a:09:75:89:9a:63:58:1a:98:91: e2:ea:de:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzxyQYAx/YMzdEQPDUpg16V1X9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA3MjMyMzM4NTFaFw0yNjA3MjUwMjA5NTFaMDMxMTAvBgNV BAMTKEU5QzI4QjBDM0JBNTEyNjE2OUJFM0I2NEYxRTc2N0EzOTA1NDYxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlr4BMEQGyIomNqbSO8izGNDt BtLs/DNVoOvMGJmk6jdXEgqSsbG96HAUJsllSmnisK7dG6FuJgOvT9UhPxK5fNT4 FvnbWAaPHWN6H+7PhyOTLy3GGUwfx5WEfL9XHQ/kT+ukOWnSNUm/6qNHaJ5mPuQD 8GQ14Wk54eeS0qR2rVE3hBhOdmHtVZbrK/Zro7JYi4K3WMypNfnv1lwtA5PbQ5by nO8wPzFwNhUdwmZA+YsCuSPJ22uot6RsXXhG7W9CHetVAvnmQCXBQXSDj2ZhfXps MskCelz13RmFResnR1hdBmvMKnNxm8E8v7kzarNmiAJA3CyOSEC85vwfvCklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6cKLDDulEmFpvjtk8edno5BUYWMwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGwAbuNUw1rpCPPnfakcVWr0pyGVYKrHFk/ v80hgcj1z0tULlpJqrkm/owmvSQhG+0UsJj2URg7spoFYv6MHd/kPsY33ea3f+5d bPpHor/Qa8LPat6yXFFBeWTsWW9H/8wNQiV2gajGKcjddb7HTyue6MrYqQXHtPMX eBi3aMHPgS1UKsgyAtgc1EmxB/NYj56nJ/AB8Zi/VMKXqYP3+oF+mmqvEq4PAn2N LK4jz928TbhSH8huL5LYvJZW3H8wjOo/DXsPc1gkoGp50rvAj9MRq2lTDqE2NHIh yfwDPaplbmb0lnSIdqTvb5qaYLyPaikMCgl1iZpjWBqYkeLq3tY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:07 2026 by rpki-client