$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft File: DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft (raw, json) Hash identifier: kvdAYqptVDtUJaEo0bx41x9meq24Zn/fWngpfCRs9ZY= Subject key identifier: 70:A0:FA:A0:31:C3:D0:C1:9D:EA:17:39:35:F5:94:35:8D:FD:1D:B7 Authority key identifier: DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 Certificate issuer: /CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Certificate serial: 1B949D9AD202711C5F257EF54109A235319572C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:48:04 +0000 Manifest this update: Thu 23 Jul 2026 18:43:04 +0000 Manifest next update: Fri 24 Jul 2026 19:24:04 +0000 Files and hashes: 1: DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl (hash: xFDQYorbxxiwbLwluuT5TUr4gbtFWtGgeyf5TS2APyE=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: /NpblNWeDyruUPm/IDhGAws5AddnYBZqkNeH/J3r+Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:94:9d:9a:d2:02:71:1c:5f:25:7e:f5:41:09:a2:35:31:95:72:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Validity Not Before: Jul 23 18:43:04 2026 GMT Not After : Jul 24 19:24:04 2026 GMT Subject: CN=70A0FAA031C3D0C19DEA173935F594358DFD1DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:d3:e1:a9:61:5a:de:02:20:1c:2c:65:fe: 25:b7:96:60:e5:b9:91:91:09:a7:e3:f3:ba:3f:b0: a2:3a:95:4d:cb:7e:96:b2:09:6e:9e:48:59:ab:5f: 27:52:69:66:f3:12:45:73:b2:26:90:62:0e:9c:1e: 50:5a:65:c8:c0:ca:4e:41:9d:91:ed:64:74:fe:cf: 28:11:4e:b8:5e:03:d8:8c:13:c3:37:90:d2:83:cf: 29:2d:4d:b7:1f:d2:34:cd:41:5c:3b:2e:c0:99:ba: 1f:25:e2:7f:31:97:f1:59:ef:3a:8f:49:75:ce:82: ae:2d:d3:2c:ab:56:e8:40:0a:9b:54:f4:4f:92:ce: bc:54:bf:db:c5:a6:13:4f:15:80:2d:75:d4:63:96: c2:23:26:00:e3:68:27:65:53:2c:ff:f0:69:fc:70: 26:30:5e:54:d6:ed:59:8f:34:cc:ce:6a:00:4f:75: af:0e:6c:0d:f6:b6:ff:07:82:77:4b:c4:20:96:0d: 5b:dc:57:75:90:cb:0c:73:0e:ab:a9:fe:53:75:fd: 23:05:47:c0:0d:d0:56:a1:0b:e4:6b:ea:af:1d:7d: f7:4b:8d:44:dd:be:64:4a:c3:97:33:43:e7:da:7b: a3:4e:9f:3d:b6:b6:33:ae:71:b6:c3:d3:e6:12:b0: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:FA:A0:31:C3:D0:C1:9D:EA:17:39:35:F5:94:35:8D:FD:1D:B7 X509v3 Authority Key Identifier: keyid:DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8e:2b:3a:12:79:ce:1a:92:82:fc:bf:f5:2d:ff:92:0e:e6: d8:9a:0e:9c:36:58:da:ce:fa:52:7a:41:c4:fc:14:6b:22:54: 48:54:04:c6:e5:51:91:24:45:06:8c:1c:1b:90:cf:5d:dd:25: eb:4e:85:35:b5:d0:ad:59:2a:f6:c2:31:51:cd:63:a1:07:0f: ba:c0:9b:2a:34:44:66:c3:85:a0:f5:e4:67:05:66:c7:e5:f3: 10:ab:1a:85:db:dc:71:81:70:9e:ba:59:6f:bc:1e:11:c8:ef: 11:2c:82:2a:5c:b5:a0:f0:1d:a3:db:7c:da:c1:64:bd:c0:72: d3:c7:4d:30:50:a5:cb:77:25:54:cb:01:74:23:b1:9d:78:fd: 85:b0:dd:04:c8:5b:f8:73:68:45:3f:6b:97:6e:37:79:b3:c0: ad:20:61:ca:ab:f5:ae:96:82:8e:cc:ee:02:73:3e:b9:68:d1: a3:68:4b:90:af:51:5d:ea:d0:a7:3a:87:5e:c5:f6:e2:05:06: fb:67:84:b4:60:be:33:67:1d:d9:49:bb:cf:61:e0:f7:14:1d: c0:4e:50:38:76:20:22:15:95:f2:10:2f:0d:56:07:a5:ec:03: 0a:28:54:81:94:0b:0a:21:fa:b2:7e:b4:5d:a3:fc:5e:ff:36: 84:37:ac:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5SdmtICcRxfJX71QQmiNTGVcsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2 NzIzMDQ1NjAeFw0yNjA3MjMxODQzMDRaFw0yNjA3MjQxOTI0MDRaMDMxMTAvBgNV BAMTKDcwQTBGQUEwMzFDM0QwQzE5REVBMTczOTM1RjU5NDM1OERGRDFEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupNPhqWFa3gIgHCxl/iW3lmDl uZGRCafj87o/sKI6lU3LfpayCW6eSFmrXydSaWbzEkVzsiaQYg6cHlBaZcjAyk5B nZHtZHT+zygRTrheA9iME8M3kNKDzyktTbcf0jTNQVw7LsCZuh8l4n8xl/FZ7zqP SXXOgq4t0yyrVuhACptU9E+SzrxUv9vFphNPFYAtddRjlsIjJgDjaCdlUyz/8Gn8 cCYwXlTW7VmPNMzOagBPda8ObA32tv8HgndLxCCWDVvcV3WQywxzDqup/lN1/SMF R8AN0FahC+Rr6q8dffdLjUTdvmRKw5czQ+fae6NOnz22tjOucbbD0+YSsOcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKD6oDHD0MGd6hc5NfWUNY39HbcwHwYDVR0j BBgwFoAU372Ec75VFrEJtaF5HZ3L32cjBFYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjNjOTczZDUtZmU5NC00MDBkLWJjYmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNC RTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2NzIzMDQ1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkJEODQ3M0JFNTUxNkIxMDlCNUExNzkxRDlEQ0JERjY3MjMw NDU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENC REY2NzIzMDQ1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+OKzoSec4akoL8v/Ut/5IO5tiaDpw2WNrO +lJ6QcT8FGsiVEhUBMblUZEkRQaMHBuQz13dJetOhTW10K1ZKvbCMVHNY6EHD7rA myo0RGbDhaD15GcFZsfl8xCrGoXb3HGBcJ66WW+8HhHI7xEsgipctaDwHaPbfNrB ZL3ActPHTTBQpct3JVTLAXQjsZ14/YWw3QTIW/hzaEU/a5duN3mzwK0gYcqr9a6W go7M7gJzPrlo0aNoS5CvUV3q0Kc6h17F9uIFBvtnhLRgvjNnHdlJu89h4PcUHcBO UDh2ICIVlfIQLw1WB6XsAwooVIGUCwoh+rJ+tF2j/F7/NoQ3rIM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:34 2026 by rpki-client