$ rpki-client -vvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: LSiBOylQFNNllep6H0/YTZLNC7jRYYehgeCXGWKnJ6s= Subject key identifier: 55:61:64:37:46:0E:85:89:E3:0F:4F:CE:42:AB:4E:71:ED:EB:3E:04 Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 03E5DDCD1472563098E28B032C20E6C229713728 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:30:04 +0000 Manifest this update: Thu 23 Jul 2026 16:25:04 +0000 Manifest next update: Fri 24 Jul 2026 17:37:04 +0000 Files and hashes: 1: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: dtRnrUxNXeK3VtiwGwL0kQoLoDbch4PEGh2heceTqGo=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e5:dd:cd:14:72:56:30:98:e2:8b:03:2c:20:e6:c2:29:71:37:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Jul 23 16:25:04 2026 GMT Not After : Jul 24 17:37:04 2026 GMT Subject: CN=55616437460E8589E30F4FCE42AB4E71EDEB3E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:38:13:f7:7f:5c:4d:9f:7e:49:4f:67:27: 42:7d:fa:f8:52:43:20:e5:3d:55:69:5b:d1:de:a4: 02:28:02:b5:d5:a2:e5:52:af:16:dd:04:69:90:8f: 92:ce:5d:72:14:64:07:d5:ed:61:d1:81:ff:a1:d5: 9b:1c:7d:ec:f3:8e:95:61:74:32:84:46:38:73:b9: 5b:dd:ae:57:cf:4d:15:36:c4:d0:51:74:6e:a7:fe: 3f:47:87:c5:12:4d:9f:2a:86:ca:0e:64:d0:bd:b7: 51:a7:57:13:87:31:0b:c3:1f:91:a5:3e:57:bc:91: 5b:a4:e7:ae:d1:f0:dd:af:18:c1:37:f4:14:d4:24: c5:bb:6e:a0:b5:55:d6:ee:35:a8:6b:e9:f8:49:0a: 1b:89:b4:3e:fe:d5:1d:43:71:8f:15:53:12:d0:4e: 28:08:e1:9c:59:5c:44:7f:3b:8a:90:b5:b5:1d:5b: 9d:23:b6:ba:d4:e0:10:5d:fa:04:50:ee:62:e0:d6: 40:ba:44:3b:ce:f5:ff:20:96:f9:d1:19:89:55:35: 0b:a2:41:cc:20:7a:6b:af:56:8b:b9:00:9d:e3:ef: a2:20:63:7d:f1:09:eb:82:1e:6e:49:f9:b3:20:1d: 50:4e:c3:40:63:96:48:84:21:0d:f0:a3:53:f4:72: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:64:37:46:0E:85:89:E3:0F:4F:CE:42:AB:4E:71:ED:EB:3E:04 X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:73:16:97:2a:af:fe:3c:ba:92:5e:ef:fb:81:4c:7c:7a:3d: da:a5:f9:54:51:3a:d9:ed:9d:5e:ff:b8:fc:7f:a9:68:f3:d4: cc:92:55:a7:ea:34:e0:ef:6f:d6:b8:2e:ed:b5:e4:43:02:37: 49:08:29:52:b9:28:c7:d2:56:93:51:cb:00:d9:4c:e8:f7:12: 52:83:82:84:fe:c1:05:ef:d4:fe:64:e8:45:fc:51:af:ae:f8: 5a:bf:f8:25:83:14:00:0b:c8:8d:ac:4f:f7:cb:c2:17:e5:f1: 6c:ad:a6:9b:60:5d:cc:8b:95:20:5d:c0:bc:67:99:25:3a:b2: 42:cb:a0:e5:04:f5:64:db:4a:51:80:2b:77:e8:7f:7a:3a:8f: 15:e1:32:95:a6:0e:e6:2f:db:15:4d:5d:a9:db:5d:0b:72:2f: 3d:67:4c:f3:f3:60:b0:a7:9b:c6:27:36:89:af:4f:8d:55:d8: 81:65:4f:45:b6:23:5b:0b:59:23:b6:9a:51:33:a8:66:22:6f: 37:94:07:72:98:f7:82:0f:d9:a8:0f:2e:28:ce:c9:c7:14:c7: 56:74:61:13:b6:74:bd:65:96:d7:58:c2:bf:c7:75:86:a1:2e: 3d:e5:e0:d9:39:9a:d7:65:70:5f:0c:f4:9e:82:22:30:a2:e8: 5b:ee:0a:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+XdzRRyVjCY4osDLCDmwilxNygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA3MjMxNjI1MDRaFw0yNjA3MjQxNzM3MDRaMDMxMTAvBgNV BAMTKDU1NjE2NDM3NDYwRTg1ODlFMzBGNEZDRTQyQUI0RTcxRURFQjNFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHTgT939cTZ9+SU9nJ0J9+vhS QyDlPVVpW9HepAIoArXVouVSrxbdBGmQj5LOXXIUZAfV7WHRgf+h1ZscfezzjpVh dDKERjhzuVvdrlfPTRU2xNBRdG6n/j9Hh8USTZ8qhsoOZNC9t1GnVxOHMQvDH5Gl Ple8kVuk567R8N2vGME39BTUJMW7bqC1VdbuNahr6fhJChuJtD7+1R1DcY8VUxLQ TigI4ZxZXER/O4qQtbUdW50jtrrU4BBd+gRQ7mLg1kC6RDvO9f8glvnRGYlVNQui QcwgemuvVou5AJ3j76IgY33xCeuCHm5J+bMgHVBOw0BjlkiEIQ3wo1P0cirTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWFkN0YOhYnjD0/OQqtOce3rPgQwHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlzFpcqr/48upJe7/uBTHx6Pdql+VRROtnt nV7/uPx/qWjz1MySVafqNODvb9a4Lu215EMCN0kIKVK5KMfSVpNRywDZTOj3ElKD goT+wQXv1P5k6EX8Ua+u+Fq/+CWDFAALyI2sT/fLwhfl8WytpptgXcyLlSBdwLxn mSU6skLLoOUE9WTbSlGAK3fof3o6jxXhMpWmDuYv2xVNXanbXQtyLz1nTPPzYLCn m8YnNomvT41V2IFlT0W2I1sLWSO2mlEzqGYibzeUB3KY94IP2agPLijOyccUx1Z0 YRO2dL1lltdYwr/HdYahLj3l4Nk5mtdlcF8M9J6CIjCi6FvuCiA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:10 2026 by rpki-client