$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json) Hash identifier: CH/OSw7I2M3OaqouyC2rpkhfgRDFCdWC9VxJSTl+L4Q= Subject key identifier: AF:C1:A3:99:D8:D2:1A:CE:13:3B:1B:69:A7:C0:DA:E2:47:45:09:EF Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Certificate serial: 1DE6AEC325AFC532CED66FF5A9B7E7A0128DA393 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:46:56 +0000 Manifest this update: Thu 23 Jul 2026 13:41:56 +0000 Manifest next update: Fri 24 Jul 2026 16:00:56 +0000 Files and hashes: 1: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: PWLTfI/zEPcxCSi/f5TVIEwVKayK9YFttS0brCZiJTE=) 2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e6:ae:c3:25:af:c5:32:ce:d6:6f:f5:a9:b7:e7:a0:12:8d:a3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Validity Not Before: Jul 23 13:41:56 2026 GMT Not After : Jul 24 16:00:56 2026 GMT Subject: CN=AFC1A399D8D21ACE133B1B69A7C0DAE2474509EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:66:5e:1e:be:55:12:38:fc:97:21:5c:9b: f6:51:86:1d:cd:41:ee:7b:57:ab:ac:b6:2b:84:68: 14:e4:1c:ad:1d:cd:ee:26:08:4f:40:39:f8:39:8d: 45:5b:1a:8e:37:03:13:7d:f5:e7:7d:57:fc:f9:c0: 77:38:bf:af:2f:b0:98:25:9d:5d:56:13:cc:d3:ac: 9b:f0:e9:46:3f:8e:df:48:c0:08:db:76:0b:0e:dd: 2f:aa:d9:d9:af:20:46:57:6d:1d:73:be:02:0f:55: bc:64:eb:65:27:6e:c5:37:05:e4:bf:36:be:8c:a0: 2b:37:cc:5c:06:d6:9e:88:cc:a3:ae:7a:31:3c:08: 50:1d:26:06:d1:99:64:49:97:8d:db:d8:b4:93:27: 9a:44:ee:eb:85:f7:ab:0f:d3:3b:c4:bd:d4:00:35: 35:84:e5:35:3e:25:47:e1:ba:85:c0:18:1f:40:74: 7f:2c:f0:a5:18:f5:0d:f2:8c:e9:68:e1:c9:45:0c: 1c:83:6a:88:50:3d:1d:53:52:8c:8a:78:21:54:e7: 9b:88:68:a3:18:e8:b1:39:bd:b7:14:48:27:39:61: e5:1a:ff:db:7d:b9:bd:46:22:7a:3d:fb:5b:d3:c1: c8:a7:64:46:6b:9a:0e:4e:66:40:b5:b8:0f:59:ff: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C1:A3:99:D8:D2:1A:CE:13:3B:1B:69:A7:C0:DA:E2:47:45:09:EF X509v3 Authority Key Identifier: keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5b:b1:a0:e6:e7:d5:1c:51:ac:07:17:a1:ff:e4:08:fd:63: d2:40:4e:d4:10:6f:6f:11:92:21:e2:c6:4e:1a:bb:b6:6b:5b: 33:79:8e:4a:79:a7:6d:66:ee:d9:34:83:cd:06:ba:44:e0:df: 49:24:07:0b:c7:70:6e:6f:82:a0:5a:06:b1:50:88:19:86:95: cb:20:9e:5d:75:ca:81:21:4c:23:81:14:d4:5d:6a:c6:ab:a1: f6:c1:8f:c3:12:85:55:a8:3a:2a:ce:b5:07:4a:bf:59:22:62: c3:db:5a:2c:40:34:a4:22:ab:b7:d9:a5:e2:6c:a6:0c:ee:c1: d5:7c:14:0a:c9:c2:66:c3:01:de:36:aa:00:a3:bb:e2:cd:f8: d0:85:73:4d:d0:67:f6:ac:a6:3d:85:ff:41:ab:ba:8b:0e:9c: 79:8c:f8:34:9b:d0:a7:d7:af:39:64:f4:ed:18:65:94:ed:bb: 69:70:3a:f2:f4:95:b1:c1:0d:c3:b5:2e:77:97:25:66:79:d5: df:88:7b:9a:a9:b9:b6:7f:b7:9e:4a:81:38:e9:ef:b9:89:16: a1:58:76:d8:95:bf:06:54:d2:b6:66:9d:e2:0c:c7:b1:9d:6d: dd:6a:8b:ee:13:c8:62:60:35:0b:c2:6e:a6:65:3c:bf:d2:b2: 11:20:a4:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeauwyWvxTLO1m/1qbfnoBKNo5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF OTZCOEJDNjAeFw0yNjA3MjMxMzQxNTZaFw0yNjA3MjQxNjAwNTZaMDMxMTAvBgNV BAMTKEFGQzFBMzk5RDhEMjFBQ0UxMzNCMUI2OUE3QzBEQUUyNDc0NTA5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7WZeHr5VEjj8lyFcm/ZRhh3N Qe57V6ustiuEaBTkHK0dze4mCE9AOfg5jUVbGo43AxN99ed9V/z5wHc4v68vsJgl nV1WE8zTrJvw6UY/jt9IwAjbdgsO3S+q2dmvIEZXbR1zvgIPVbxk62UnbsU3BeS/ Nr6MoCs3zFwG1p6IzKOuejE8CFAdJgbRmWRJl43b2LSTJ5pE7uuF96sP0zvEvdQA NTWE5TU+JUfhuoXAGB9AdH8s8KUY9Q3yjOlo4clFDByDaohQPR1TUoyKeCFU55uI aKMY6LE5vbcUSCc5YeUa/9t9ub1GIno9+1vTwcinZEZrmg5OZkC1uA9Z/3dhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8GjmdjSGs4TOxtpp8Da4kdFCe8wHwYDVR0j BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4 QkM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYw ODVFOTZCOEJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5bsaDm59UcUawHF6H/5Aj9Y9JATtQQb28R kiHixk4au7ZrWzN5jkp5p21m7tk0g80GukTg30kkBwvHcG5vgqBaBrFQiBmGlcsg nl11yoEhTCOBFNRdasarofbBj8MShVWoOirOtQdKv1kiYsPbWixANKQiq7fZpeJs pgzuwdV8FArJwmbDAd42qgCju+LN+NCFc03QZ/aspj2F/0GruosOnHmM+DSb0KfX rzlk9O0YZZTtu2lwOvL0lbHBDcO1LneXJWZ51d+Ie5qpubZ/t55KgTjp77mJFqFY dtiVvwZU0rZmneIMx7Gdbd1qi+4TyGJgNQvCbqZlPL/SshEgpAE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:39 2026 by rpki-client