$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft File: E66029B9A162C470EEC1DFA42227448C5628C7C0.mft (raw, json) Hash identifier: 279p92BRopgHRRfR5l/R2Kb4GtuHs/dW2JYL/Q9B1X0= Subject key identifier: 4C:6D:E9:80:3B:F9:CB:13:92:93:5A:F9:FA:2C:57:F0:F6:22:2D:E5 Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 Certificate issuer: /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Certificate serial: 7A7CEB26B36872163EFFC0D3AB924B5307069AFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:18:17 +0000 Manifest this update: Fri 24 Jul 2026 11:13:17 +0000 Manifest next update: Sat 25 Jul 2026 12:49:17 +0000 Files and hashes: 1: E66029B9A162C470EEC1DFA42227448C5628C7C0.crl (hash: nJUsi7X2ZmlIgVviLgo2cos/MFOJyOVuFsmYAmq5A7w=) 2: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: JZURZX2DPzG8sUm6gWajmDbIZlI3PcawCAcX3o9QYgk=) 3: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: /DI2LBlO0iN+GBCylD6NdAgnYz8xW3+cA1gyspDRqj4=) 4: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: j2kFk/YVfgNkgWhXwbYb7FWRSsZvQgR1cjJdN6Wj8Os=) 5: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hA+ZmrATAmvRq+AW4JB/hKKoTjrXINAaVyYkBOTFDh0=) 6: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: 1O/1u/y7bw8tPk+iQAFMKxGZw0TRRYTTjU36vawpg/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7c:eb:26:b3:68:72:16:3e:ff:c0:d3:ab:92:4b:53:07:06:9a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Validity Not Before: Jul 24 11:13:17 2026 GMT Not After : Jul 25 12:49:17 2026 GMT Subject: CN=4C6DE9803BF9CB1392935AF9FA2C57F0F6222DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:15:56:c7:d1:c2:8f:96:06:ae:c3:cd:a5: 11:c5:88:88:19:16:ba:83:d2:94:9f:29:b5:6b:9a: 79:64:03:9b:c2:5c:06:0c:05:e7:4b:1b:20:86:63: 0c:b0:cf:b1:00:92:1a:18:d2:f6:04:40:fa:97:57: 98:9e:bf:5c:be:5c:36:30:c0:12:92:06:17:a1:a8: 5f:77:11:51:8d:bd:f5:81:53:b2:01:30:49:b2:9c: 41:c1:7b:76:c9:63:48:12:1d:4a:1c:c3:6d:31:6b: 4b:88:2f:18:ec:58:1b:1a:09:53:9a:46:67:b1:a4: 57:c5:f1:b4:74:24:6e:c9:43:3b:9a:75:5c:0e:d1: aa:64:0b:b6:d0:36:4f:78:31:3c:f5:39:49:9f:31: b1:5c:4d:d9:58:8c:71:48:b6:0c:de:4f:81:72:62: d9:34:fb:64:a6:6f:eb:8f:e9:a1:73:81:0b:e0:51: e2:1d:3c:47:65:93:4d:b2:e9:48:94:8d:52:0d:bc: 26:7e:a6:74:8a:1e:07:79:50:c5:22:0c:ba:04:ee: 65:0b:fd:d9:8c:e1:d3:0c:ed:e7:6e:d1:71:1e:95: 24:f2:ef:d0:27:d6:ec:05:7a:4f:79:86:b6:98:e5: 12:95:43:70:8a:64:db:0f:af:ad:53:b4:ec:be:d8: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:E9:80:3B:F9:CB:13:92:93:5A:F9:FA:2C:57:F0:F6:22:2D:E5 X509v3 Authority Key Identifier: keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c5:4e:6f:5e:90:41:f4:75:79:79:34:fc:10:4f:0a:7c:1a: 84:da:0f:40:02:40:dd:5f:0a:ca:8b:79:cb:85:5c:ff:a0:aa: bf:95:1d:5b:0c:d2:a4:3a:ae:57:b1:e7:4e:3a:2c:a3:d6:1e: d1:8e:38:5c:99:28:fa:e6:eb:97:5b:48:0d:ed:96:2d:a1:27: e8:54:89:2f:03:c4:43:39:2f:b4:1a:f2:63:35:45:7a:9b:e4: c0:4b:2d:9f:5a:58:4a:27:5e:fd:0c:b1:13:79:71:c8:4f:b6: 07:87:a1:90:0c:8e:2a:ac:7a:c8:5f:05:eb:9c:f0:ea:8d:b7: 60:76:31:e6:4e:e4:0d:f3:ad:f8:03:d9:bc:0c:6b:0a:0d:b4: 2a:03:a8:58:27:42:53:5f:b1:5f:22:67:bb:00:5d:9c:77:80: 3b:04:78:56:52:82:0e:87:3b:9e:fc:56:d7:76:36:a1:68:b0: 75:d0:21:8f:eb:0c:60:9a:84:8e:71:5f:94:0b:f8:49:b4:fb: 0c:36:a0:85:86:e3:a8:39:16:77:41:00:21:1f:68:3a:4e:63: 35:77:d7:4e:22:a3:c8:55:de:c6:78:fa:2c:2e:98:d2:d7:b0: 6b:7d:71:11:6e:54:a5:73:3f:b5:04:5f:9b:55:87:e8:da:03: 5c:05:0b:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenzrJrNochY+/8DTq5JLUwcGmvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1 NjI4QzdDMDAeFw0yNjA3MjQxMTEzMTdaFw0yNjA3MjUxMjQ5MTdaMDMxMTAvBgNV BAMTKDRDNkRFOTgwM0JGOUNCMTM5MjkzNUFGOUZBMkM1N0YwRjYyMjJERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6RVWx9HCj5YGrsPNpRHFiIgZ FrqD0pSfKbVrmnlkA5vCXAYMBedLGyCGYwywz7EAkhoY0vYEQPqXV5iev1y+XDYw wBKSBhehqF93EVGNvfWBU7IBMEmynEHBe3bJY0gSHUocw20xa0uILxjsWBsaCVOa RmexpFfF8bR0JG7JQzuadVwO0apkC7bQNk94MTz1OUmfMbFcTdlYjHFItgzeT4Fy Ytk0+2Smb+uP6aFzgQvgUeIdPEdlk02y6UiUjVINvCZ+pnSKHgd5UMUiDLoE7mUL /dmM4dMM7edu0XEelSTy79An1uwFek95hraY5RKVQ3CKZNsPr61TtOy+2HGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTG3pgDv5yxOSk1r5+ixX8PYiLeUwHwYDVR0j BBgwFoAU5mApuaFixHDuwd+kIidEjFYox8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQwZjFhNmUtODNiNi00NTM0LTk2N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlB MTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1NjI4QzdDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjYwMjlCOUExNjJDNDcwRUVDMURGQTQyMjI3NDQ4QzU2MjhD N0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0 OEM1NjI4QzdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbFTm9ekEH0dXl5NPwQTwp8GoTaD0ACQN1f CsqLecuFXP+gqr+VHVsM0qQ6rlex5046LKPWHtGOOFyZKPrm65dbSA3tli2hJ+hU iS8DxEM5L7Qa8mM1RXqb5MBLLZ9aWEonXv0MsRN5cchPtgeHoZAMjiqseshfBeuc 8OqNt2B2MeZO5A3zrfgD2bwMawoNtCoDqFgnQlNfsV8iZ7sAXZx3gDsEeFZSgg6H O578Vtd2NqFosHXQIY/rDGCahI5xX5QL+Em0+ww2oIWG46g5FndBACEfaDpOYzV3 104io8hV3sZ4+iwumNLXsGt9cRFuVKVzP7UEX5tVh+jaA1wFC/I= -----END CERTIFICATE-----Generated at Fri Jul 24 15:12:53 2026 by rpki-client