$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json) Hash identifier: lX6X6I+KpLg1P+vUkdJGl7wBtRGL9aO0RDt6pep6Y7s= Subject key identifier: 1E:8A:EF:7B:C1:73:75:31:C6:8D:10:F4:D9:28:EE:FD:70:E3:0A:57 Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Certificate serial: 172817FA377AED29E19B1E435C15C8B3C1B44C0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:17:03 +0000 Manifest this update: Thu 23 Jul 2026 22:12:03 +0000 Manifest next update: Sat 25 Jul 2026 01:40:03 +0000 Files and hashes: 1: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: 1GRj0MdHmbnTv6MFkcJBa5ONVEDnAJXIrEbKy+cousY=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:28:17:fa:37:7a:ed:29:e1:9b:1e:43:5c:15:c8:b3:c1:b4:4c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Validity Not Before: Jul 23 22:12:03 2026 GMT Not After : Jul 25 01:40:03 2026 GMT Subject: CN=1E8AEF7BC1737531C68D10F4D928EEFD70E30A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:f5:62:83:b9:c4:53:54:6a:2f:24:2e:37: b1:21:5b:08:f1:39:50:71:5e:d0:d5:9a:fb:57:d6: 7f:b1:53:00:23:82:df:4c:fb:28:e3:32:3c:15:0e: 87:53:24:36:9f:f8:4f:a5:27:9b:cd:39:13:74:89: 8c:2c:40:28:49:24:d9:d9:13:0b:d7:37:88:65:a0: d4:8b:80:e0:29:64:39:ae:bf:86:f0:0e:bf:2f:f2: 8b:f7:b6:93:74:cc:af:38:74:42:ae:4b:fb:36:cf: 80:f4:9b:52:75:97:d6:8e:33:db:d6:25:d5:55:ad: 19:6c:22:08:52:ed:4b:5e:8c:a8:d5:55:0b:ec:11: 7b:0b:3b:2d:b5:a9:8f:f8:3b:e0:53:97:bb:94:48: 70:62:50:8c:ce:7c:8a:d5:d2:72:d8:83:9f:ea:96: 71:27:fb:07:d6:23:29:83:70:ae:7d:9a:3e:4c:de: 2a:51:54:bb:ab:54:e8:df:87:da:76:ae:7d:c0:3f: 5d:61:f5:38:9e:70:61:2a:3a:88:5f:ba:7c:83:d4: 4a:38:8c:08:ef:24:f3:5c:8b:b6:bf:1c:14:90:79: ef:6e:a7:16:bf:4e:d8:a7:bf:bd:9e:14:b7:5d:d7: 57:fd:22:ae:02:ee:5f:ff:9c:f7:e6:ed:a0:12:9d: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8A:EF:7B:C1:73:75:31:C6:8D:10:F4:D9:28:EE:FD:70:E3:0A:57 X509v3 Authority Key Identifier: keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:71:96:a9:bc:43:35:ae:b8:09:f8:2d:60:9c:de:dc:95:55: 5b:51:88:a7:b4:a1:f8:3d:d4:f1:c7:18:a9:0f:a5:92:b5:61: bc:5d:02:05:dd:08:2c:78:c6:ba:fb:80:48:ce:a8:b5:02:ad: 9a:c2:60:c1:00:21:7f:62:e1:7b:ef:74:15:40:a6:fd:f7:ca: 14:c8:4c:2b:d0:e9:f4:82:81:6d:c8:66:65:4a:0e:16:3e:f6: a9:0e:fc:37:d0:79:16:5e:b3:b8:9f:d0:9d:50:9c:36:7f:c4: fd:1f:7f:38:4d:a4:e7:63:a9:a4:1e:37:f5:e1:32:fb:78:af: db:94:ba:f7:87:58:5a:e7:e9:1f:7c:73:89:60:a0:2d:3f:78: 7c:6c:ba:07:17:3b:31:73:82:66:02:76:a1:b5:33:fa:6a:b7: 1f:b8:0c:bc:2e:db:20:e8:11:66:c4:f7:40:bc:9b:40:1e:7a: 20:28:c2:23:4f:f4:a3:20:8a:92:03:4c:29:97:be:46:1f:7d: d2:18:7e:da:f0:c0:bf:37:36:21:85:9e:27:35:f9:87:77:81: 66:59:06:ec:cb:10:eb:db:6e:b7:20:02:18:29:20:af:b4:51: b5:aa:5b:a8:c8:1e:53:6a:c2:c1:cf:5e:d9:6e:26:78:22:0d: 0b:3a:7b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFygX+jd67Snhmx5DXBXIs8G0TAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFE MjY2QTkxNTAeFw0yNjA3MjMyMjEyMDNaFw0yNjA3MjUwMTQwMDNaMDMxMTAvBgNV BAMTKDFFOEFFRjdCQzE3Mzc1MzFDNjhEMTBGNEQ5MjhFRUZENzBFMzBBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1vVig7nEU1RqLyQuN7EhWwjx OVBxXtDVmvtX1n+xUwAjgt9M+yjjMjwVDodTJDaf+E+lJ5vNORN0iYwsQChJJNnZ EwvXN4hloNSLgOApZDmuv4bwDr8v8ov3tpN0zK84dEKuS/s2z4D0m1J1l9aOM9vW JdVVrRlsIghS7UtejKjVVQvsEXsLOy21qY/4O+BTl7uUSHBiUIzOfIrV0nLYg5/q lnEn+wfWIymDcK59mj5M3ipRVLurVOjfh9p2rn3AP11h9TiecGEqOohfunyD1Eo4 jAjvJPNci7a/HBSQee9upxa/Ttinv72eFLdd11f9Iq4C7l//nPfm7aASnXqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHorve8FzdTHGjRD02Sju/XDjClcwHwYDVR0j BBgwFoAU1PrtCrXpCja129y86GuI6tJmqRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFC NUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFEMjY2QTkxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBRUQwQUI1RTkwQTM2QjVEQkRDQkNFODZCODhFQUQyNjZB OTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4 RUFEMjY2QTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxxlqm8QzWuuAn4LWCc3tyVVVtRiKe0ofg9 1PHHGKkPpZK1YbxdAgXdCCx4xrr7gEjOqLUCrZrCYMEAIX9i4XvvdBVApv33yhTI TCvQ6fSCgW3IZmVKDhY+9qkO/DfQeRZes7if0J1QnDZ/xP0ffzhNpOdjqaQeN/Xh Mvt4r9uUuveHWFrn6R98c4lgoC0/eHxsugcXOzFzgmYCdqG1M/pqtx+4DLwu2yDo EWbE90C8m0AeeiAowiNP9KMgipIDTCmXvkYffdIYftrwwL83NiGFnic1+Yd3gWZZ BuzLEOvbbrcgAhgpIK+0UbWqW6jIHlNqwsHPXtluJngiDQs6e7Q= -----END CERTIFICATE-----Generated at Fri Jul 24 03:11:10 2026 by rpki-client