$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json) Hash identifier: BkmEuOB00Cb1wH3gDJ/B67uVQgbcYWl9DQ9Aod19jec= Subject key identifier: 7C:BA:29:B2:CC:93:29:9B:00:D7:10:D4:A0:C9:A9:87:F3:F3:F6:CA Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Certificate serial: 7D9F2EC908E77079E92CBAF18B57316774285A5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:40:34 +0000 Manifest this update: Thu 23 Jul 2026 12:35:34 +0000 Manifest next update: Fri 24 Jul 2026 16:20:34 +0000 Files and hashes: 1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=) 2: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=) 3: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: 5G71W4ZZTEOixvjrsjcWf9WilRxnaig/z9tl6EPKHuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9f:2e:c9:08:e7:70:79:e9:2c:ba:f1:8b:57:31:67:74:28:5a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC Validity Not Before: Jul 23 12:35:34 2026 GMT Not After : Jul 24 16:20:34 2026 GMT Subject: CN=7CBA29B2CC93299B00D710D4A0C9A987F3F3F6CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:e1:85:16:f4:a1:8d:61:50:0c:54:e5:5e: 8a:f9:48:37:ba:06:15:97:76:4a:30:41:67:68:02: aa:7e:19:8c:9b:a0:3c:82:d3:69:27:d0:32:27:02: b7:02:53:e4:7a:f9:d2:40:52:a3:45:52:df:fb:c6: aa:2c:38:8e:56:63:fb:31:dd:23:42:0b:2d:4d:fe: 52:de:23:6e:d0:54:76:74:4d:46:e5:59:84:17:6c: 9b:9d:9d:d5:24:3d:a2:35:b6:f7:e2:6b:bb:13:03: b6:fc:4c:4e:92:e7:0c:27:01:aa:1f:01:8c:63:18: a1:55:34:d3:5b:6e:bb:e1:3a:aa:0c:58:67:86:5d: d7:02:cb:8f:04:13:ec:d4:95:d9:92:bf:84:92:d3: c6:af:c3:3f:96:ef:19:bb:ca:9f:93:07:ac:e0:c5: f2:1a:5f:4f:b8:ad:f6:84:02:85:36:5a:bb:27:aa: 42:e1:72:b1:e8:53:18:9f:d6:f0:8e:1c:0f:21:57: 62:4b:14:57:24:a4:ce:f7:21:26:1c:ae:0e:e5:12: 8a:b5:a8:74:35:24:1b:86:7e:a8:4f:47:c1:77:fc: 94:44:23:a1:c4:91:63:76:ce:11:c1:3b:c7:a1:14: db:c9:0a:dc:37:de:1d:e4:a6:bf:5e:ec:3a:aa:d0: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BA:29:B2:CC:93:29:9B:00:D7:10:D4:A0:C9:A9:87:F3:F3:F6:CA X509v3 Authority Key Identifier: keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:82:0a:df:8d:bc:0f:39:bc:2b:c2:52:52:49:80:33:b1: 34:ed:83:63:9d:c6:eb:94:bf:08:d8:c5:00:88:1c:63:b2:7e: 77:16:fa:47:fd:38:35:14:4e:5c:54:f3:9e:9c:c5:9c:81:a1: 38:7b:1b:48:6e:dd:b6:bb:7f:07:9b:b9:94:c0:7e:cc:20:fb: c9:fc:a8:43:28:86:8f:1a:3b:2f:fa:ea:32:69:c7:79:7f:11: fa:a8:44:8e:fe:31:49:64:44:eb:cf:74:da:e3:eb:fb:2a:67: fd:cb:0d:09:69:e6:92:aa:a2:e2:d9:86:ed:ce:fe:6c:55:68: 21:f8:26:d5:d4:bf:a6:41:05:0d:e5:d2:03:88:b9:32:d8:ee: 0e:60:39:cf:af:8b:49:e9:9a:e6:66:97:e9:45:60:51:a9:73: c6:d7:14:69:5d:82:d6:9e:14:d8:d2:55:95:17:f7:20:57:42: b7:d7:6e:0c:c1:f5:cb:84:08:24:91:e7:3d:1b:be:df:52:da: 06:50:24:8b:58:8c:37:20:aa:81:dd:e0:56:e6:92:7b:25:0c: b8:a1:09:40:45:12:fd:23:b4:8d:ea:ad:57:0b:5c:2f:e6:05: 8c:84:c8:23:e2:a6:34:9d:5a:ca:27:45:f9:09:75:07:13:b6: 60:c5:b7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZ8uyQjncHnpLLrxi1cxZ3QoWl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZC N0ZBMTBCQzAeFw0yNjA3MjMxMjM1MzRaFw0yNjA3MjQxNjIwMzRaMDMxMTAvBgNV BAMTKDdDQkEyOUIyQ0M5MzI5OUIwMEQ3MTBENEEwQzlBOTg3RjNGM0Y2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxuGFFvShjWFQDFTlXor5SDe6 BhWXdkowQWdoAqp+GYyboDyC02kn0DInArcCU+R6+dJAUqNFUt/7xqosOI5WY/sx 3SNCCy1N/lLeI27QVHZ0TUblWYQXbJudndUkPaI1tvfia7sTA7b8TE6S5wwnAaof AYxjGKFVNNNbbrvhOqoMWGeGXdcCy48EE+zUldmSv4SS08avwz+W7xm7yp+TB6zg xfIaX0+4rfaEAoU2WrsnqkLhcrHoUxif1vCOHA8hV2JLFFckpM73ISYcrg7lEoq1 qHQ1JBuGfqhPR8F3/JREI6HEkWN2zhHBO8ehFNvJCtw33h3kpr9e7Dqq0A1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLopssyTKZsA1xDUoMmph/Pz9sowHwYDVR0j BBgwFoAUbt0nblgPQBOeCvpKH6snVrf6ELwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0YjIwZDgtNTkxYi00MTUyLTk3NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1 ODBGNDAxMzlFMEFGQTRBMUZBQjI3NTZCN0ZBMTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RUREMjc2RTU4MEY0MDEzOUUwQUZBNEExRkFCMjc1NkI3RkEx MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNkVERDI3NkU1ODBGNDAxMzlFMEFGQTRBMUZBQjI3 NTZCN0ZBMTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK56ggrfjbwPObwrwlJSSYAzsTTtg2OdxuuU vwjYxQCIHGOyfncW+kf9ODUUTlxU856cxZyBoTh7G0hu3ba7fwebuZTAfswg+8n8 qEMoho8aOy/66jJpx3l/EfqoRI7+MUlkROvPdNrj6/sqZ/3LDQlp5pKqouLZhu3O /mxVaCH4JtXUv6ZBBQ3l0gOIuTLY7g5gOc+vi0npmuZml+lFYFGpc8bXFGldgtae FNjSVZUX9yBXQrfXbgzB9cuECCSR5z0bvt9S2gZQJItYjDcgqoHd4FbmknslDLih CUBFEv0jtI3qrVcLXC/mBYyEyCPipjSdWsonRfkJdQcTtmDFt1o= -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:22 2026 by rpki-client