$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: vb7LP4+e+KFCBnoXjAodl9M3s4+Tt+yEu28PWvgW3g0= Subject key identifier: 8D:86:86:96:6E:C4:F2:E6:D1:EF:66:BC:86:21:14:40:C8:F7:21:FE Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 1973BB00FD41FACF98EC8147B8857AA1EDC871E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:22:31 +0000 Manifest this update: Thu 23 Jul 2026 14:17:31 +0000 Manifest next update: Fri 24 Jul 2026 15:12:31 +0000 Files and hashes: 1: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 2: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 3: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 4: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: Xa3ovGHYRXQIOHC/txaEWybWX31qdvVRmjz1mzSuOxM=) 5: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:bb:00:fd:41:fa:cf:98:ec:81:47:b8:85:7a:a1:ed:c8:71:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Jul 23 14:17:31 2026 GMT Not After : Jul 24 15:12:31 2026 GMT Subject: CN=8D8686966EC4F2E6D1EF66BC86211440C8F721FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:fb:7f:8b:4c:f9:34:80:e2:9e:63:42:ce: 05:d1:3c:47:0c:b6:52:d2:e9:f6:f1:25:a4:29:2c: d2:6b:6f:93:3b:48:63:23:85:7a:7c:ea:b8:c7:7a: b2:83:05:08:4d:6f:77:30:7d:60:08:ab:80:73:27: 4c:0e:ac:3d:af:1e:06:88:08:31:a1:48:21:6c:4b: a7:56:3f:5e:8d:ff:eb:65:ef:ca:51:a7:e3:5a:44: a4:ab:99:22:bd:09:4b:ce:98:a9:f4:ff:a2:87:4a: b3:42:60:10:f4:7f:5d:17:18:7c:65:98:f8:07:44: 34:2e:b8:1c:46:a9:76:19:5f:9a:b9:e6:ca:fe:95: 96:12:be:aa:65:60:a0:b6:e3:51:15:67:11:dd:2f: d8:78:a4:11:b8:9e:f7:86:f8:41:ae:88:1a:d3:13: d0:74:f0:8b:dd:f3:1f:01:b9:28:74:b2:4b:3b:f3: 1d:c6:c4:2d:63:e3:02:38:50:ed:c1:57:e2:99:df: 32:7c:64:af:54:69:8a:07:14:8b:c9:08:0a:7a:b1: 10:91:ef:81:4a:dc:60:95:e5:21:97:06:d5:92:26: ea:99:1c:11:0d:eb:bf:96:a9:22:4a:c4:be:cb:0e: 0d:97:71:00:0d:20:fc:6f:1f:de:d6:e2:a5:04:b1: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:86:96:6E:C4:F2:E6:D1:EF:66:BC:86:21:14:40:C8:F7:21:FE X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:89:6e:2e:ff:8a:d4:7c:c2:c6:03:17:ae:e9:89:14:9b:10: 89:fa:fb:4c:4d:e9:5b:25:c6:af:8d:fb:58:e8:b7:cc:c5:22: ee:35:27:e2:ac:cd:6d:30:cc:2e:ac:41:4f:ad:ab:29:9c:79: 6f:78:de:f8:e2:4d:e6:ce:55:0c:2f:69:92:d3:33:1a:1d:5d: 62:ec:80:04:01:14:2c:44:86:40:3d:0f:50:f6:ee:90:36:9b: e4:18:e9:76:c8:96:7b:e6:65:da:d7:8b:e7:c0:34:2f:f0:53: 64:ff:70:05:39:ee:21:3e:8c:8f:fe:ac:f8:26:8c:db:8b:b7: 59:d3:ee:ea:04:76:f2:7c:d1:2b:e6:60:08:e9:9c:62:3c:72: 7c:7b:95:89:84:01:b0:2c:8b:00:62:0a:16:f8:88:f0:5b:67: d8:4b:21:6e:27:bb:d7:14:b0:ae:6c:af:e4:0f:75:46:a5:55: b0:81:96:49:87:4e:cc:1d:83:c7:24:28:57:64:47:65:c1:0d: 2c:f7:57:a2:3e:95:6a:c6:99:c1:de:ef:26:e8:5c:ec:e9:01: 2a:7c:62:fe:48:41:c0:a7:a2:c5:c6:f9:cd:ae:01:18:6d:f1: 5d:2d:ea:bc:88:2a:09:d8:92:3f:9c:3a:0d:97:8a:9e:40:60: 4c:ed:a4:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXO7AP1B+s+Y7IFHuIV6oe3IceQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA3MjMxNDE3MzFaFw0yNjA3MjQxNTEyMzFaMDMxMTAvBgNV BAMTKDhEODY4Njk2NkVDNEYyRTZEMUVGNjZCQzg2MjExNDQwQzhGNzIxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTPt/i0z5NIDinmNCzgXRPEcM tlLS6fbxJaQpLNJrb5M7SGMjhXp86rjHerKDBQhNb3cwfWAIq4BzJ0wOrD2vHgaI CDGhSCFsS6dWP16N/+tl78pRp+NaRKSrmSK9CUvOmKn0/6KHSrNCYBD0f10XGHxl mPgHRDQuuBxGqXYZX5q55sr+lZYSvqplYKC241EVZxHdL9h4pBG4nveG+EGuiBrT E9B08Ivd8x8BuSh0sks78x3GxC1j4wI4UO3BV+KZ3zJ8ZK9UaYoHFIvJCAp6sRCR 74FK3GCV5SGXBtWSJuqZHBEN67+WqSJKxL7LDg2XcQANIPxvH97W4qUEsXWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYaGlm7E8ubR72a8hiEUQMj3If4wHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKJbi7/itR8wsYDF67piRSbEIn6+0xN6Vsl xq+N+1jot8zFIu41J+KszW0wzC6sQU+tqymceW943vjiTebOVQwvaZLTMxodXWLs gAQBFCxEhkA9D1D27pA2m+QY6XbIlnvmZdrXi+fANC/wU2T/cAU57iE+jI/+rPgm jNuLt1nT7uoEdvJ80SvmYAjpnGI8cnx7lYmEAbAsiwBiChb4iPBbZ9hLIW4nu9cU sK5sr+QPdUalVbCBlkmHTswdg8ckKFdkR2XBDSz3V6I+lWrGmcHe7yboXOzpASp8 Yv5IQcCnosXG+c2uARht8V0t6ryIKgnYkj+cOg2Xip5AYEztpME= -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:15 2026 by rpki-client