$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft File: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json) Hash identifier: A0ml8a+ZVoG+kf3lxq9ZBwFvwigpJtCdYHnuBusXw6g= Subject key identifier: F5:21:B2:D0:99:C8:E6:7A:A4:47:C7:12:E5:86:AF:79:1B:D3:62:9A Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E Certificate serial: 29D5CD84FD04B3DC796B9D20F59C87BF5DF9F47C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:57:55 +0000 Manifest this update: Thu 23 Jul 2026 22:52:55 +0000 Manifest next update: Sat 25 Jul 2026 00:04:55 +0000 Files and hashes: 1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=) 2: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: xp0SG5zqVUDS4GKiELhFt1ujgrnU+y2SN9I1slB9afI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d5:cd:84:fd:04:b3:dc:79:6b:9d:20:f5:9c:87:bf:5d:f9:f4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E Validity Not Before: Jul 23 22:52:55 2026 GMT Not After : Jul 25 00:04:55 2026 GMT Subject: CN=F521B2D099C8E67AA447C712E586AF791BD3629A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:6b:86:63:a1:7a:5d:5c:59:a7:cb:63:f6: 02:c0:e8:c0:b2:9e:a9:06:02:c7:62:e9:89:86:d8: 6d:8a:b4:7c:0a:4e:61:36:44:2e:91:96:36:c1:ca: 54:c0:66:2e:3d:d6:8d:1f:af:dc:c9:5d:06:50:45: 61:46:d9:75:1b:dc:e1:35:de:18:b8:81:25:1a:8f: ae:4e:3d:48:6c:ab:12:41:11:b6:a9:0f:1b:e3:76: 7f:33:3f:f1:1e:a9:0f:e1:83:92:54:88:58:82:01: 56:c0:d1:bc:c5:3a:75:8e:25:49:6b:62:1d:7d:eb: cf:25:83:cb:a0:46:20:5a:8d:cd:e6:c8:5f:00:04: 89:e6:7a:25:64:04:75:e2:84:f6:f2:e5:8f:d1:c3: bb:b7:0a:7f:83:b1:af:a7:3a:9c:de:8d:d2:f4:bd: a2:0b:b0:f4:9c:36:b9:ba:aa:1e:7d:8e:e6:d8:62: 0e:c8:64:98:99:8a:77:5b:d7:fa:06:00:6f:81:8b: 6e:05:d9:4b:d2:d7:90:3b:e4:07:3e:c2:01:15:01: dc:c2:9c:d0:37:9a:ce:eb:db:f5:7d:e4:d4:cf:6f: 32:74:69:d9:56:5d:73:6d:02:c3:ad:24:d3:d9:4d: 5a:a5:5f:68:ba:91:49:7e:80:0d:e4:b4:ba:8c:fa: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:21:B2:D0:99:C8:E6:7A:A4:47:C7:12:E5:86:AF:79:1B:D3:62:9A X509v3 Authority Key Identifier: keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:40:74:b0:6e:b9:a2:eb:0d:dd:af:a2:04:c5:2a:6b:ea:17: dc:06:c0:27:f8:f0:24:bc:d7:42:5b:d7:0c:62:6a:20:e8:b6: 1a:aa:b0:94:89:bb:db:bc:9f:54:6c:d8:03:92:0d:4a:de:a7: f9:4a:89:bd:61:73:7e:23:d9:3e:6b:8e:12:76:1c:fd:3d:33: 3f:19:e7:6f:a6:23:15:f9:ce:89:bd:7c:1d:5e:8b:78:b8:3c: 26:15:a5:ef:1c:f8:ef:82:62:3a:14:2b:cc:80:b2:22:4c:ef: bd:18:ba:c8:4b:02:36:0f:21:6c:f7:62:ad:43:dd:73:00:cf: 8a:25:b1:31:e4:6f:0c:c1:4d:04:03:d7:b8:d5:0f:90:bb:06: eb:9a:c9:0b:d4:ce:ef:e1:8e:4a:fe:24:09:b2:46:7a:2a:6f: a7:2a:a0:db:6c:e3:23:d7:b5:fa:ad:6e:e3:eb:0f:e3:b8:1b: c4:6e:85:b0:87:b8:0e:27:12:11:9a:fc:c1:12:e0:9d:26:8b: bc:89:d5:50:90:5e:8d:ce:b6:fa:14:1f:10:a5:90:92:60:48: d8:06:ff:92:0f:ce:43:8c:02:61:32:4e:a5:1e:aa:8f:16:45: d1:09:f8:43:1b:d3:28:6f:41:e2:27:59:f8:2e:aa:92:08:32: 6d:bd:32:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdXNhP0Es9x5a50g9ZyHv1359HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZE NDUwREU4RTAeFw0yNjA3MjMyMjUyNTVaFw0yNjA3MjUwMDA0NTVaMDMxMTAvBgNV BAMTKEY1MjFCMkQwOTlDOEU2N0FBNDQ3QzcxMkU1ODZBRjc5MUJEMzYyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEmuGY6F6XVxZp8tj9gLA6MCy nqkGAsdi6YmG2G2KtHwKTmE2RC6RljbBylTAZi491o0fr9zJXQZQRWFG2XUb3OE1 3hi4gSUaj65OPUhsqxJBEbapDxvjdn8zP/EeqQ/hg5JUiFiCAVbA0bzFOnWOJUlr Yh19688lg8ugRiBajc3myF8ABInmeiVkBHXihPby5Y/Rw7u3Cn+Dsa+nOpzejdL0 vaILsPScNrm6qh59jubYYg7IZJiZindb1/oGAG+Bi24F2UvS15A75Ac+wgEVAdzC nNA3ms7r2/V95NTPbzJ0adlWXXNtAsOtJNPZTVqlX2i6kUl+gA3ktLqM+kGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9SGy0JnI5nqkR8cS5YaveRvTYpowHwYDVR0j BBgwFoAUHU4htbBv6aBGQ6cCxyuWFtRQ3o4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVC MDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZENDUwREU4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDRFMjFCNUIwNkZFOUEwNDY0M0E3MDJDNzJCOTYxNkQ0NTBE RThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2 MTZENDUwREU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRAdLBuuaLrDd2vogTFKmvqF9wGwCf48CS8 10Jb1wxiaiDothqqsJSJu9u8n1Rs2AOSDUrep/lKib1hc34j2T5rjhJ2HP09Mz8Z 52+mIxX5zom9fB1ei3i4PCYVpe8c+O+CYjoUK8yAsiJM770YushLAjYPIWz3Yq1D 3XMAz4olsTHkbwzBTQQD17jVD5C7BuuayQvUzu/hjkr+JAmyRnoqb6cqoNts4yPX tfqtbuPrD+O4G8RuhbCHuA4nEhGa/MES4J0mi7yJ1VCQXo3OtvoUHxClkJJgSNgG /5IPzkOMAmEyTqUeqo8WRdEJ+EMb0yhvQeInWfguqpIIMm29MnY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:19:38 2026 by rpki-client