$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: gP35JW6zIuG48PeXfdoub1NnIwTYp8uL2//Ypqt4ugw= Subject key identifier: 34:14:9D:33:89:FE:28:2B:FA:02:B5:F7:43:1D:93:DB:53:CF:4E:21 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 14B18495456BC8C518A159DC58838C20B64BA960 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:27:17 +0000 Manifest this update: Thu 23 Jul 2026 22:22:17 +0000 Manifest next update: Sat 25 Jul 2026 01:42:17 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) 2: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: MiNWnLbvY5B8LQNuuMC119lOGreLo+6nPXnZebDNmHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b1:84:95:45:6b:c8:c5:18:a1:59:dc:58:83:8c:20:b6:4b:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Jul 23 22:22:17 2026 GMT Not After : Jul 25 01:42:17 2026 GMT Subject: CN=34149D3389FE282BFA02B5F7431D93DB53CF4E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:3b:72:32:63:30:af:9d:a9:5d:cb:13:33: 2f:fd:52:b0:18:69:10:81:d0:63:66:ec:92:26:c0: d5:13:3e:5f:8c:5c:19:a5:d6:bf:5f:62:aa:75:5a: bb:81:ad:26:42:ca:87:8b:cc:24:48:30:86:77:2a: 30:d1:41:77:b0:f4:49:4a:dd:af:1b:1e:7f:7a:72: 5e:ac:ab:0b:92:0f:14:8d:2e:39:0f:1c:81:2c:e2: e6:5f:94:c8:d4:9b:ee:45:b0:2f:cb:07:aa:d7:27: a2:24:b3:78:25:24:8f:38:0c:38:bc:97:20:db:1f: 47:e2:0f:10:ed:e5:f8:a7:f2:33:f5:d5:b4:5b:c0: 11:9f:99:51:23:4a:88:37:d6:ae:52:c8:a1:51:28: b2:c7:5c:74:ef:b9:16:ca:b1:a0:f3:a3:65:df:6d: 28:87:df:51:00:ca:f9:c1:04:56:7f:b8:44:04:67: 3c:5c:36:f6:2b:62:c1:0b:7a:31:f4:c8:66:df:da: 1b:46:18:66:2a:73:ce:e6:3d:41:af:30:2b:7b:f6: e9:5a:15:d6:cc:0a:6f:fd:39:7f:2c:70:81:78:0c: 9e:c4:0d:ef:1a:5f:7e:b0:bf:df:53:bd:b5:fd:56: 65:fb:1f:a3:95:15:ef:27:07:ae:ca:97:8c:ed:40: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:9D:33:89:FE:28:2B:FA:02:B5:F7:43:1D:93:DB:53:CF:4E:21 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:26:c8:97:5d:c0:bf:61:a0:fb:85:8c:eb:c5:39:49:43:92: 9c:28:9f:c4:42:9e:e9:ac:fe:af:66:46:c4:84:e4:71:00:18: ad:bc:53:96:16:c9:d2:fe:a6:2e:ec:60:6d:b3:c1:c1:c3:cb: bc:6f:26:4b:66:34:88:34:6d:a2:fa:0b:2d:f1:43:69:06:a2: 60:12:b2:f0:47:67:77:3b:f6:53:bd:56:c0:37:03:14:27:55: f3:d5:a9:9f:ed:19:cb:23:57:ed:87:77:a5:f0:0f:0c:ec:8e: 7f:a2:98:64:87:6c:97:c1:80:d3:29:ff:20:1e:e4:99:6d:55: bd:4b:20:27:1c:c0:d0:91:11:ef:0e:33:e6:8b:f6:19:d8:36: 51:c8:93:46:16:e1:1b:34:ae:8c:ad:d6:9e:c5:2b:d6:b1:a0: 80:ba:a9:2f:11:f4:93:81:1a:57:12:71:04:f3:51:55:ec:c1: 58:7d:d1:61:91:33:f0:7b:bc:e5:49:4c:4f:d7:35:68:c6:6e: f1:9f:48:2d:3d:c6:08:38:8c:6a:bb:ca:fe:df:c8:62:8c:d9: 69:f8:14:b6:08:5d:2a:f0:6a:0a:99:00:72:ac:4d:89:4a:2f: 89:d5:b3:1e:9f:c1:61:43:92:ec:b7:81:66:db:ec:da:91:cc: e9:87:79:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLGElUVryMUYoVncWIOMILZLqWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA3MjMyMjIyMTdaFw0yNjA3MjUwMTQyMTdaMDMxMTAvBgNV BAMTKDM0MTQ5RDMzODlGRTI4MkJGQTAyQjVGNzQzMUQ5M0RCNTNDRjRFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlTtyMmMwr52pXcsTMy/9UrAY aRCB0GNm7JImwNUTPl+MXBml1r9fYqp1WruBrSZCyoeLzCRIMIZ3KjDRQXew9ElK 3a8bHn96cl6sqwuSDxSNLjkPHIEs4uZflMjUm+5FsC/LB6rXJ6Iks3glJI84DDi8 lyDbH0fiDxDt5fin8jP11bRbwBGfmVEjSog31q5SyKFRKLLHXHTvuRbKsaDzo2Xf bSiH31EAyvnBBFZ/uEQEZzxcNvYrYsELejH0yGbf2htGGGYqc87mPUGvMCt79ula FdbMCm/9OX8scIF4DJ7EDe8aX36wv99TvbX9VmX7H6OVFe8nB67Kl4ztQNVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBSdM4n+KCv6ArX3Qx2T21PPTiEwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgmyJddwL9hoPuFjOvFOUlDkpwon8RCnums /q9mRsSE5HEAGK28U5YWydL+pi7sYG2zwcHDy7xvJktmNIg0baL6Cy3xQ2kGomAS svBHZ3c79lO9VsA3AxQnVfPVqZ/tGcsjV+2Hd6XwDwzsjn+imGSHbJfBgNMp/yAe 5JltVb1LICccwNCREe8OM+aL9hnYNlHIk0YW4Rs0royt1p7FK9axoIC6qS8R9JOB GlcScQTzUVXswVh90WGRM/B7vOVJTE/XNWjGbvGfSC09xgg4jGq7yv7fyGKM2Wn4 FLYIXSrwagqZAHKsTYlKL4nVsx6fwWFDkuy3gWbb7NqRzOmHeVE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:26 2026 by rpki-client