$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft File: C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft (raw, json) Hash identifier: 4FLrrl9MGNviID8QWIUK6SYoHNaTOA3/9qV/vd+n1Mw= Subject key identifier: 2B:18:8E:47:DC:10:FD:3F:95:4A:B9:F4:96:28:D6:63:DD:77:D3:74 Authority key identifier: C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 Certificate issuer: /CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Certificate serial: 21FD60C70ECE34B0044204589886D87A221CEADE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:58:18 +0000 Manifest this update: Thu 23 Jul 2026 18:53:18 +0000 Manifest next update: Fri 24 Jul 2026 21:59:18 +0000 Files and hashes: 1: C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl (hash: NMV/jhICo1UaJ9jrHntE2J3ZxfYx8poo1M50Y9Nx/Qo=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: ac6CyTfBjiQzVpb4Xi4EMazJXA+5euh8xSCepgGjjfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fd:60:c7:0e:ce:34:b0:04:42:04:58:98:86:d8:7a:22:1c:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Validity Not Before: Jul 23 18:53:18 2026 GMT Not After : Jul 24 21:59:18 2026 GMT Subject: CN=2B188E47DC10FD3F954AB9F49628D663DD77D374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:1e:22:21:99:5a:a8:6b:b7:24:aa:75:1c: f7:f0:af:18:03:e9:2a:f4:b8:71:e0:b7:cc:17:26: c5:74:3c:b5:ff:2b:7a:10:a8:eb:f5:e0:98:7e:66: 48:04:7c:cd:a6:d0:0b:56:38:0d:26:73:33:7d:81: a3:09:3f:72:91:fd:a0:9a:76:4b:5a:88:a6:4e:af: d7:3d:cb:66:31:3d:1c:e2:6c:72:d4:29:ea:d0:68: 29:39:a6:61:82:b3:e2:71:c3:82:36:8f:fd:f0:09: 83:f6:36:8a:f9:24:9f:41:5f:29:b2:d3:c6:ab:fe: b1:24:e7:8c:24:5f:20:9a:0c:21:df:b8:9e:ac:e7: df:c5:d2:49:75:13:7b:5b:80:c0:76:75:04:64:12: ff:2c:ce:f7:0b:b4:fc:8b:bc:7a:5e:c9:9d:94:92: bf:48:a6:2a:66:2c:ed:bc:67:0b:b3:ab:24:0d:9b: bf:11:2a:3a:7d:27:f4:86:d1:a9:c1:f6:57:25:a2: a7:d4:e8:67:b0:a6:ae:f2:02:41:9d:7a:c9:af:7a: 0e:3d:84:9c:33:eb:22:68:9e:d7:38:39:23:4c:5c: f6:71:82:be:12:1c:f0:15:5d:6b:bf:f8:76:b0:6d: 4b:f5:ba:a0:c8:ca:ad:18:a7:f3:d9:2c:71:0e:a9: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:8E:47:DC:10:FD:3F:95:4A:B9:F4:96:28:D6:63:DD:77:D3:74 X509v3 Authority Key Identifier: keyid:C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ed:d7:59:ce:ff:9d:72:b6:27:5a:ff:7e:7d:e7:1a:99:e9: 7d:af:56:14:4c:17:11:bd:d5:8a:58:a6:7e:48:fb:44:21:19: 3c:0c:c4:69:63:96:86:8d:1b:81:18:79:fd:c1:80:d6:2c:52: ad:1b:99:4d:15:44:22:26:e8:ef:85:8b:14:ba:73:fb:8d:58: 97:72:f0:66:60:71:16:0a:60:61:7f:96:30:7c:b0:f5:57:05: a1:92:82:03:f7:da:99:e7:95:8d:d7:92:45:1c:04:34:34:b5: 75:00:b2:72:ba:59:c9:27:8f:38:4b:71:1d:f8:b4:d7:e2:11: 74:41:6c:56:cc:f4:fb:fb:33:76:16:f1:e0:d6:2a:b8:0a:eb: d5:b8:64:9f:3a:1d:2e:00:eb:45:f0:ea:76:2c:e5:76:b1:e9: 9a:9a:37:dc:10:03:8e:00:2d:dd:40:4a:13:84:81:33:83:e8: 41:43:9f:4b:13:55:50:9b:10:49:bb:36:c2:6e:b3:41:0b:ed: c6:f0:7d:d8:42:ec:1c:87:e6:97:00:65:52:83:32:a6:65:42: 6c:c2:62:d7:59:58:7f:fb:bd:c3:3a:20:b1:5f:2c:36:f3:78: 33:cd:36:1b:cf:21:c8:f2:42:74:c5:b6:7c:5e:27:85:d8:32: dc:a4:81:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIf1gxw7ONLAEQgRYmIbYeiIc6t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyNzA1NTNBODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFB Q0QwQzIyNTAeFw0yNjA3MjMxODUzMThaFw0yNjA3MjQyMTU5MThaMDMxMTAvBgNV BAMTKDJCMTg4RTQ3REMxMEZEM0Y5NTRBQjlGNDk2MjhENjYzREQ3N0QzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPR4iIZlaqGu3JKp1HPfwrxgD 6Sr0uHHgt8wXJsV0PLX/K3oQqOv14Jh+ZkgEfM2m0AtWOA0mczN9gaMJP3KR/aCa dktaiKZOr9c9y2YxPRzibHLUKerQaCk5pmGCs+Jxw4I2j/3wCYP2Nor5JJ9BXymy 08ar/rEk54wkXyCaDCHfuJ6s59/F0kl1E3tbgMB2dQRkEv8szvcLtPyLvHpeyZ2U kr9IpipmLO28ZwuzqyQNm78RKjp9J/SG0anB9lcloqfU6Gewpq7yAkGdesmveg49 hJwz6yJontc4OSNMXPZxgr4SHPAVXWu/+HawbUv1uqDIyq0Yp/PZLHEOqWTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxiOR9wQ/T+VSrn0lijWY91303QwHwYDVR0j BBgwFoAUxicFU6iBpWyTbmrhPKrr4azQwiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM5OTFmN2EtMGE3MS00ZjBkLTkzM2YtZWNmODEzNTMwMjc0LzAvQzYyNzA1NTNB ODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFBQ0QwQzIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNjI3MDU1M0E4ODFBNTZDOTM2RTZBRTEzQ0FBRUJFMUFDRDBD MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQzYyNzA1NTNBODgxQTU2QzkzNkU2QUUxM0NBQUVC RTFBQ0QwQzIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjt11nO/51ytida/3595xqZ6X2vVhRMFxG9 1YpYpn5I+0QhGTwMxGljloaNG4EYef3BgNYsUq0bmU0VRCIm6O+FixS6c/uNWJdy 8GZgcRYKYGF/ljB8sPVXBaGSggP32pnnlY3XkkUcBDQ0tXUAsnK6WcknjzhLcR34 tNfiEXRBbFbM9Pv7M3YW8eDWKrgK69W4ZJ86HS4A60Xw6nYs5Xax6ZqaN9wQA44A Ld1AShOEgTOD6EFDn0sTVVCbEEm7NsJus0EL7cbwfdhC7ByH5pcAZVKDMqZlQmzC YtdZWH/7vcM6ILFfLDbzeDPNNhvPIcjyQnTFtnxeJ4XYMtykgc0= -----END CERTIFICATE-----Generated at Fri Jul 24 06:39:43 2026 by rpki-client