$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: P4XQ7lhTo0Kdo/OHRCRV21dNjBswjNwkiVuIAI5+kps= Subject key identifier: 9E:B0:F0:89:71:71:32:D6:0C:01:F4:C7:51:0C:9F:C7:18:3E:A0:03 Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 176C64F770BED370D80405D3B583EA23ADF8C65B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:01:50 +0000 Manifest this update: Thu 23 Jul 2026 21:56:50 +0000 Manifest next update: Fri 24 Jul 2026 22:46:50 +0000 Files and hashes: 1: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: nMAnWBNNo0B8tAhhr2+1bybRY490SW+WYPhMHMAc8Hw=) 2: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) 3: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6c:64:f7:70:be:d3:70:d8:04:05:d3:b5:83:ea:23:ad:f8:c6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: Jul 23 21:56:50 2026 GMT Not After : Jul 24 22:46:50 2026 GMT Subject: CN=9EB0F089717132D60C01F4C7510C9FC7183EA003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:bf:ff:5f:c0:da:6c:39:ba:5b:2c:08:da: 1d:18:68:19:73:0a:9b:58:64:ca:25:f7:40:68:66: 85:7d:b9:59:4e:16:58:08:57:6a:1a:6b:ff:f0:2e: ad:57:20:11:31:67:39:aa:d4:f0:70:b1:87:43:87: 58:32:5f:44:f8:da:46:15:fc:7a:38:18:30:04:36: 35:e2:d0:77:dd:60:92:6e:86:7e:c7:30:8f:2b:48: f7:16:36:ed:44:51:69:52:95:66:74:93:f1:21:37: 2a:d4:99:75:f2:3d:4e:67:2c:34:6f:a5:cb:2f:b0: ed:e3:55:b4:61:ef:45:7b:9a:d4:9e:3f:82:12:01: b9:6c:11:db:85:6c:41:4a:c8:af:d9:dd:38:30:30: e0:d1:c9:da:7c:28:94:a2:74:42:f0:6a:2e:96:d4: 6c:9c:31:dd:64:e5:a8:41:35:1d:9f:9f:05:51:9e: 90:a6:cb:25:b5:7b:4f:f1:f6:a9:01:00:54:b7:e0: db:9e:3c:e6:37:08:00:fd:6c:dd:ae:2f:03:9f:09: 5a:0d:d5:8f:f7:e0:0b:cd:29:9f:49:a5:62:bd:0c: 30:c6:3f:86:c7:88:ba:a1:b3:91:4c:be:8a:66:65: 88:52:a3:45:70:83:d5:8c:47:a5:db:87:9a:2e:9a: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B0:F0:89:71:71:32:D6:0C:01:F4:C7:51:0C:9F:C7:18:3E:A0:03 X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f0:d7:73:ad:43:10:b7:d3:af:69:bf:c1:bf:ce:8e:07:59: 99:8a:e7:d2:80:09:62:f0:c2:33:fb:a1:84:6c:77:a7:a0:59: 24:5b:60:06:f1:eb:29:03:8a:00:82:bd:02:8d:f3:4b:a7:24: b9:50:4b:31:af:82:f5:66:66:bd:72:7d:1e:9d:39:8a:60:fa: 56:df:1f:80:42:67:a2:47:f8:8f:ae:40:c0:f5:0b:2c:1d:6b: 44:22:fa:15:5e:42:31:91:cc:b2:81:e1:62:19:2a:8f:5e:b1: 88:2e:13:64:cc:28:4d:f1:ba:ab:76:26:41:fc:91:c6:27:da: 02:ef:3e:09:d9:72:88:05:d0:27:71:46:ee:38:f6:9b:cd:cc: 15:be:39:94:d0:97:f2:1c:78:8e:9b:a3:20:d5:03:0c:77:8e: ab:34:f8:b6:00:c8:0b:80:3c:71:6a:93:f0:c5:40:61:23:96: 99:ac:d8:f4:27:22:83:5f:98:f7:92:53:16:d6:66:f0:02:34: 5b:29:e2:e5:e5:93:e0:1e:38:96:e1:ed:d4:44:33:95:7d:d0: 3b:31:b9:63:a5:8f:2b:71:18:ba:c3:92:87:ca:84:65:c6:66: c5:ce:ef:95:2c:68:67:5b:85:fc:38:34:ae:5b:8f:a6:6f:d9: 69:f7:e4:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2xk93C+03DYBAXTtYPqI634xlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA3MjMyMTU2NTBaFw0yNjA3MjQyMjQ2NTBaMDMxMTAvBgNV BAMTKDlFQjBGMDg5NzE3MTMyRDYwQzAxRjRDNzUxMEM5RkM3MTgzRUEwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdb//X8DabDm6WywI2h0YaBlz CptYZMol90BoZoV9uVlOFlgIV2oaa//wLq1XIBExZzmq1PBwsYdDh1gyX0T42kYV /Ho4GDAENjXi0HfdYJJuhn7HMI8rSPcWNu1EUWlSlWZ0k/EhNyrUmXXyPU5nLDRv pcsvsO3jVbRh70V7mtSeP4ISAblsEduFbEFKyK/Z3TgwMODRydp8KJSidELwai6W 1GycMd1k5ahBNR2fnwVRnpCmyyW1e0/x9qkBAFS34NuePOY3CAD9bN2uLwOfCVoN 1Y/34AvNKZ9JpWK9DDDGP4bHiLqhs5FMvopmZYhSo0Vwg9WMR6Xbh5oumt+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrDwiXFxMtYMAfTHUQyfxxg+oAMwHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjw13OtQxC3069pv8G/zo4HWZmK59KACWLw wjP7oYRsd6egWSRbYAbx6ykDigCCvQKN80unJLlQSzGvgvVmZr1yfR6dOYpg+lbf H4BCZ6JH+I+uQMD1Cywda0Qi+hVeQjGRzLKB4WIZKo9esYguE2TMKE3xuqt2JkH8 kcYn2gLvPgnZcogF0CdxRu449pvNzBW+OZTQl/IceI6boyDVAwx3jqs0+LYAyAuA PHFqk/DFQGEjlpms2PQnIoNfmPeSUxbWZvACNFsp4uXlk+AeOJbh7dREM5V90Dsx uWOljytxGLrDkofKhGXGZsXO75UsaGdbhfw4NK5bj6Zv2Wn35H4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:15 2026 by rpki-client