$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json) Hash identifier: rJnFLypRj0FbudM2dzaoYrldprEGKCWbWeIOOQCI7XI= Subject key identifier: 38:5F:D7:9F:62:05:B2:1A:7D:85:28:82:82:05:33:8F:56:D6:95:A6 Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 285E8049A0F0C952CD676F89FB3F85C992F65D2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:33:00 +0000 Manifest this update: Thu 23 Jul 2026 10:28:00 +0000 Manifest next update: Fri 24 Jul 2026 14:24:00 +0000 Files and hashes: 1: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: Z9NFMQdK8Tw3JrUk6XIrR627nzhiwFIwsPhj6BFIZ30=) 2: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=) 3: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=) 4: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5e:80:49:a0:f0:c9:52:cd:67:6f:89:fb:3f:85:c9:92:f6:5d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: Jul 23 10:28:00 2026 GMT Not After : Jul 24 14:24:00 2026 GMT Subject: CN=385FD79F6205B21A7D8528828205338F56D695A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:91:95:df:05:55:18:4f:90:56:bb:b7:44: 62:2e:8d:e5:18:97:08:2a:1b:dc:0b:1f:f2:72:c0: 5e:25:7b:ce:4e:e6:30:f8:e4:23:b9:a2:f3:9d:03: ca:bc:d1:c7:22:76:53:f6:3d:f9:b1:57:58:27:56: 9a:75:04:a5:c5:c2:dd:3e:e7:0a:06:b1:58:2b:c0: 30:7a:25:3b:14:5d:8f:d9:f3:63:a7:ba:f7:3f:30: 7e:22:59:94:65:ef:e8:dc:6c:45:75:75:28:5f:bb: 94:e5:90:cb:30:12:d2:41:fb:f0:6f:d1:e1:77:c5: 34:e9:fa:ff:27:35:e8:e5:fd:a0:bf:0e:15:32:bb: 7a:80:c8:2e:3a:28:6b:7a:41:02:bc:48:ec:86:c8: a1:93:6d:a1:0d:ca:d5:bf:5a:92:69:37:a7:cb:0c: 09:cd:33:19:86:4b:24:1f:82:40:21:e9:60:68:e0: 19:37:4f:3d:e9:0b:4e:bc:fe:41:b7:f1:e6:92:a3: 1f:27:39:20:b3:e6:0c:30:02:f7:79:b1:64:9b:8e: 59:bd:5b:a9:55:2d:a3:62:c7:4a:3e:b4:bb:f1:c4: 67:9f:d7:73:b3:bf:13:8c:bf:bb:65:db:0a:4d:37: 3e:39:31:7c:bc:cc:bb:a7:89:fa:13:6f:7a:2e:f5: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:D7:9F:62:05:B2:1A:7D:85:28:82:82:05:33:8F:56:D6:95:A6 X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c9:0f:df:0d:aa:e5:ef:0a:ac:92:14:6c:49:a0:7e:dc:13: 63:61:4c:7e:8f:4a:12:26:7e:ff:c6:2a:8c:43:9d:e5:ea:23: 9b:aa:01:11:3e:c8:4f:3e:61:a2:dc:11:ff:49:88:1e:db:84: 02:4e:37:8b:1f:93:26:27:1f:c0:58:33:6c:b2:0a:c1:ad:7c: ef:04:97:60:bd:d0:d7:06:73:d0:39:ce:59:df:6d:04:91:bc: 20:9b:a0:9d:3f:ef:9f:b2:ea:85:a3:54:44:b7:d8:a7:ce:ef: ce:60:4c:31:26:34:58:81:aa:ef:86:25:94:14:c9:1d:9d:0f: 56:2f:19:56:c7:3d:25:82:18:e0:d2:5c:51:05:a2:99:f8:4b: da:96:3d:04:3e:25:2a:04:3d:b9:f0:4b:60:d6:89:70:8a:88: aa:c3:73:d9:cf:dc:23:76:50:16:fd:8f:96:17:f9:df:1b:fd: e3:1e:98:13:f3:b2:64:9a:40:61:e3:8a:68:a0:cf:bd:ee:17: db:b7:8d:4f:40:2d:c7:c6:e1:d8:a3:69:01:2d:95:09:d6:e7: 70:0e:2c:bf:02:c4:c9:11:1d:e3:86:63:0c:aa:84:dd:48:62: 09:e3:90:d3:73:4d:d1:59:5e:04:29:50:6a:bf:65:d8:a1:81: 5f:fa:87:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKF6ASaDwyVLNZ2+J+z+FyZL2XS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy Q0U2RUZGNjAeFw0yNjA3MjMxMDI4MDBaFw0yNjA3MjQxNDI0MDBaMDMxMTAvBgNV BAMTKDM4NUZENzlGNjIwNUIyMUE3RDg1Mjg4MjgyMDUzMzhGNTZENjk1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxZGV3wVVGE+QVru3RGIujeUY lwgqG9wLH/JywF4le85O5jD45CO5ovOdA8q80ccidlP2PfmxV1gnVpp1BKXFwt0+ 5woGsVgrwDB6JTsUXY/Z82Onuvc/MH4iWZRl7+jcbEV1dShfu5TlkMswEtJB+/Bv 0eF3xTTp+v8nNejl/aC/DhUyu3qAyC46KGt6QQK8SOyGyKGTbaENytW/WpJpN6fL DAnNMxmGSyQfgkAh6WBo4Bk3Tz3pC068/kG38eaSox8nOSCz5gwwAvd5sWSbjlm9 W6lVLaNix0o+tLvxxGef13OzvxOMv7tl2wpNNz45MXy8zLunifoTb3ou9bRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOF/Xn2IFshp9hSiCggUzj1bWlaYwHwYDVR0j BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2 MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1 OEYyQ0U2RUZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3JD98NquXvCqySFGxJoH7cE2NhTH6PShIm fv/GKoxDneXqI5uqARE+yE8+YaLcEf9JiB7bhAJON4sfkyYnH8BYM2yyCsGtfO8E l2C90NcGc9A5zlnfbQSRvCCboJ0/75+y6oWjVES32KfO785gTDEmNFiBqu+GJZQU yR2dD1YvGVbHPSWCGODSXFEFopn4S9qWPQQ+JSoEPbnwS2DWiXCKiKrDc9nP3CN2 UBb9j5YX+d8b/eMemBPzsmSaQGHjimigz73uF9u3jU9ALcfG4dijaQEtlQnW53AO LL8CxMkRHeOGYwyqhN1IYgnjkNNzTdFZXgQpUGq/ZdihgV/6hxo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:14 2026 by rpki-client