$ rpki-client -vvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: BaLM2iNmtv373Djz8Pf73H9vVQ9uf+MNS/4BH0R8JwU= Subject key identifier: 6C:7E:61:2C:BF:EB:C6:33:F5:AF:7C:C6:0E:6C:EE:C5:B2:FE:1D:26 Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 7A9747270363AE6D19107AE9070515C4ECDDEB38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:00:45 +0000 Manifest this update: Thu 23 Jul 2026 16:55:45 +0000 Manifest next update: Fri 24 Jul 2026 19:38:45 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) 2: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: 0jrLOiJUBKTyRY7nVnJI9o+Rf2ulkGjvDd+59Kf+/sY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:97:47:27:03:63:ae:6d:19:10:7a:e9:07:05:15:c4:ec:dd:eb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Jul 23 16:55:45 2026 GMT Not After : Jul 24 19:38:45 2026 GMT Subject: CN=6C7E612CBFEBC633F5AF7CC60E6CEEC5B2FE1D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:df:96:f2:72:31:f1:a9:d6:36:fe:fc:48: 85:ae:02:c7:9c:d2:18:8d:ce:8c:a4:89:dd:31:1b: 1b:39:b1:62:8e:59:39:6e:4e:7e:b8:cb:e7:f9:a7: 19:90:4d:7a:23:35:76:5a:f4:ca:14:06:48:19:20: fc:9e:47:29:20:7c:9f:3e:46:05:8c:e5:82:9e:e5: 7d:3e:ed:e0:7f:43:78:1f:b6:39:02:7a:88:ff:7e: 04:db:3f:a8:e4:b3:14:f3:48:e9:07:fb:0c:db:59: 52:e3:52:62:61:c7:39:9e:d2:7a:db:ce:49:af:76: d6:e9:84:b5:a8:10:de:9e:ac:ab:e2:ee:e7:36:25: 87:22:e1:98:2b:f4:55:93:2f:cc:09:44:fe:0c:91: 7a:5f:2e:48:bb:4c:80:34:51:f2:24:51:91:8b:e7: 34:ff:a6:db:a8:3d:bf:a4:f1:5a:58:b7:fc:ce:8b: 9d:6f:6f:6d:3d:f4:60:af:3f:ce:f6:0d:29:fc:35: ea:d5:6b:2c:64:6f:83:a9:22:87:f2:6c:6b:cf:06: 95:76:55:5e:5f:d1:6c:42:b6:5e:3c:cb:92:ff:7e: a9:cb:de:c2:dd:18:c6:be:5f:68:b0:84:6c:e2:19: 5b:26:4f:62:fc:42:24:a0:6c:3d:bf:6e:4e:fa:6a: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7E:61:2C:BF:EB:C6:33:F5:AF:7C:C6:0E:6C:EE:C5:B2:FE:1D:26 X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:b2:ec:16:97:ee:20:a7:ad:0f:e6:43:d4:17:24:b5:4f: 93:22:45:05:81:cd:72:61:73:78:93:2f:ac:40:df:05:c4:94: 80:32:bc:f2:e2:1b:ef:2a:6e:59:74:85:35:ce:91:f1:e9:f6: 3a:22:c1:e0:46:61:8c:be:61:54:36:a3:dc:4e:06:86:48:c7: b0:8a:4e:46:09:2b:ec:cc:f8:c0:fb:c0:95:03:f1:df:7e:a8: cc:22:7f:bf:a2:21:4e:5c:a5:60:fc:14:e3:b8:1c:44:ef:71: 46:c3:39:c3:64:9e:7b:07:e9:32:d0:49:85:f8:6d:05:43:ba: 54:16:16:1d:aa:30:7d:0b:05:29:3e:df:a2:f3:98:93:15:1f: f3:26:08:31:84:a0:be:0d:88:b5:27:ba:6b:59:e3:0b:dd:f4: 4f:9b:93:08:f1:a8:a4:39:fa:1c:ca:01:15:8a:25:89:2e:da: 4a:7d:65:55:70:e8:ac:1c:99:6d:c6:8b:7e:49:c8:96:63:2f: 1a:d4:e0:b7:05:1a:d2:51:3c:62:f9:90:f8:9b:8b:5c:93:12: ba:6f:3a:da:01:c6:1e:d7:fe:3a:8d:a7:f2:7a:53:29:91:d6: 51:b3:f5:53:ba:e1:2b:0e:a5:4a:8f:f9:c9:43:ba:11:21:36: 02:4a:56:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepdHJwNjrm0ZEHrpBwUVxOzd6zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA3MjMxNjU1NDVaFw0yNjA3MjQxOTM4NDVaMDMxMTAvBgNV BAMTKDZDN0U2MTJDQkZFQkM2MzNGNUFGN0NDNjBFNkNFRUM1QjJGRTFEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWt+W8nIx8anWNv78SIWuAsec 0hiNzoykid0xGxs5sWKOWTluTn64y+f5pxmQTXojNXZa9MoUBkgZIPyeRykgfJ8+ RgWM5YKe5X0+7eB/Q3gftjkCeoj/fgTbP6jksxTzSOkH+wzbWVLjUmJhxzme0nrb zkmvdtbphLWoEN6erKvi7uc2JYci4Zgr9FWTL8wJRP4MkXpfLki7TIA0UfIkUZGL 5zT/ptuoPb+k8VpYt/zOi51vb2099GCvP872DSn8NerVayxkb4OpIofybGvPBpV2 VV5f0WxCtl48y5L/fqnL3sLdGMa+X2iwhGziGVsmT2L8QiSgbD2/bk76au/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbH5hLL/rxjP1r3zGDmzuxbL+HSYwHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9AsuwWl+4gp60P5kPUFyS1T5MiRQWBzXJh c3iTL6xA3wXElIAyvPLiG+8qbll0hTXOkfHp9joiweBGYYy+YVQ2o9xOBoZIx7CK TkYJK+zM+MD7wJUD8d9+qMwif7+iIU5cpWD8FOO4HETvcUbDOcNknnsH6TLQSYX4 bQVDulQWFh2qMH0LBSk+36LzmJMVH/MmCDGEoL4NiLUnumtZ4wvd9E+bkwjxqKQ5 +hzKARWKJYku2kp9ZVVw6KwcmW3Gi35JyJZjLxrU4LcFGtJRPGL5kPibi1yTErpv OtoBxh7X/jqNp/J6UymR1lGz9VO64SsOpUqP+clDuhEhNgJKVv0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:53 2026 by rpki-client