$ rpki-client -vvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: WC1QDL76q81hxggzskxHduEaTFtpR3I7lTcQa42Bi9w= Subject key identifier: 55:F9:0B:F8:B9:8F:61:F8:FA:F2:D7:C1:82:93:91:D0:CE:54:06:70 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 7F30E19E94DE3B9960378EFC8B0E81A766080E3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:34:15 +0000 Manifest this update: Thu 23 Jul 2026 11:29:15 +0000 Manifest next update: Fri 24 Jul 2026 15:18:15 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 3: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: EoZ5PXNc9SRmE8+FvN0ST0HxjtFyMFWd3pHT2fiwY2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:30:e1:9e:94:de:3b:99:60:37:8e:fc:8b:0e:81:a7:66:08:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Jul 23 11:29:15 2026 GMT Not After : Jul 24 15:18:15 2026 GMT Subject: CN=55F90BF8B98F61F8FAF2D7C1829391D0CE540670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:c9:f5:04:91:6e:b1:e1:99:aa:d5:1f:75: ad:75:02:dd:c3:31:76:57:55:a4:63:44:dd:e3:90: ad:01:04:de:06:6f:bb:d6:d4:4f:ee:80:41:3c:8e: ac:f7:a6:4f:6f:ef:c0:61:99:80:2c:7f:75:f4:e0: 6d:14:81:45:a0:5b:bb:48:2f:c9:44:35:8a:30:16: 53:71:e9:3d:a5:bb:26:d7:5d:fe:5a:67:d3:fa:fc: f1:cb:0e:9d:60:9e:cc:45:fe:34:cb:ea:5c:76:3b: 3d:d3:ca:b8:5f:60:5c:11:a6:8d:e8:12:01:d7:f7: 47:0e:03:d2:d8:0c:41:7b:8c:52:67:2e:0f:68:bb: 7f:8e:d3:be:21:21:d0:16:cf:de:e2:6c:d2:31:c1: 64:6e:52:21:8c:fa:b8:ed:74:d8:d0:ed:c9:dd:ea: 5e:e6:d0:88:20:28:ac:8b:e1:1c:03:24:ba:e0:d8: 59:a7:60:a0:b4:bf:61:a0:78:5e:8e:a3:b6:15:67: 52:0e:9a:0c:4a:41:4e:b7:b7:37:fb:c7:bc:2b:95: e5:7e:86:a1:f7:8f:3f:71:b5:8a:20:8b:02:95:7d: df:14:3a:e5:0c:9a:ff:0b:4c:56:f8:72:ec:f2:35: f0:4e:4b:02:48:e9:75:df:a7:79:b6:9f:47:6e:bf: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:0B:F8:B9:8F:61:F8:FA:F2:D7:C1:82:93:91:D0:CE:54:06:70 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b6:e9:c4:fc:f0:ba:cb:2d:20:3b:fe:39:91:78:ea:14:1b: 45:71:69:4c:92:78:5e:93:12:a9:bf:43:be:43:ea:11:12:1d: f2:87:16:67:6d:d0:89:47:e2:9f:55:47:d5:67:fa:c9:68:a4: ae:a6:80:8f:4e:61:71:4f:ff:d0:b5:5d:88:6d:54:ea:8c:8d: 3f:d9:65:e2:08:40:67:9f:2d:24:e9:27:db:c4:af:80:01:da: 3f:de:9c:72:5a:56:2d:f0:27:33:78:89:66:b5:e3:84:d2:05: 14:c3:3c:29:3a:75:95:eb:11:25:b7:e5:a2:79:69:0c:75:71: 0c:88:56:b3:6f:1b:ae:4f:ae:85:61:5c:97:97:d2:77:62:ba: 44:7f:73:f6:c1:16:ff:0b:49:68:e2:b1:17:67:3b:5a:88:33: df:46:85:86:58:0b:c9:79:cd:45:b2:6b:b6:d8:51:e2:45:6c: 8a:98:a1:52:b8:99:3a:20:09:2e:55:ef:33:71:48:8b:86:ac: 30:33:84:96:ef:d6:34:4a:3b:f1:28:9c:5c:da:be:6e:c1:ea: 6a:09:7f:0e:6f:e3:ab:7d:f0:04:70:be:09:78:3c:fb:c2:63: bb:a9:cd:32:d9:32:3f:1d:e9:f4:88:2c:8c:95:d3:a1:c3:f8: 21:1b:09:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzDhnpTeO5lgN478iw6Bp2YIDjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA3MjMxMTI5MTVaFw0yNjA3MjQxNTE4MTVaMDMxMTAvBgNV BAMTKDU1RjkwQkY4Qjk4RjYxRjhGQUYyRDdDMTgyOTM5MUQwQ0U1NDA2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqssn1BJFuseGZqtUfda11At3D MXZXVaRjRN3jkK0BBN4Gb7vW1E/ugEE8jqz3pk9v78BhmYAsf3X04G0UgUWgW7tI L8lENYowFlNx6T2luybXXf5aZ9P6/PHLDp1gnsxF/jTL6lx2Oz3TyrhfYFwRpo3o EgHX90cOA9LYDEF7jFJnLg9ou3+O074hIdAWz97ibNIxwWRuUiGM+rjtdNjQ7cnd 6l7m0IggKKyL4RwDJLrg2FmnYKC0v2GgeF6Oo7YVZ1IOmgxKQU63tzf7x7wrleV+ hqH3jz9xtYogiwKVfd8UOuUMmv8LTFb4cuzyNfBOSwJI6XXfp3m2n0duv2LNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfkL+LmPYfj68tfBgpOR0M5UBnAwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy26cT88LrLLSA7/jmReOoUG0VxaUySeF6T Eqm/Q75D6hESHfKHFmdt0IlH4p9VR9Vn+slopK6mgI9OYXFP/9C1XYhtVOqMjT/Z ZeIIQGefLSTpJ9vEr4AB2j/enHJaVi3wJzN4iWa144TSBRTDPCk6dZXrESW35aJ5 aQx1cQyIVrNvG65ProVhXJeX0ndiukR/c/bBFv8LSWjisRdnO1qIM99GhYZYC8l5 zUWya7bYUeJFbIqYoVK4mTogCS5V7zNxSIuGrDAzhJbv1jRKO/EonFzavm7B6moJ fw5v46t98ARwvgl4PPvCY7upzTLZMj8d6fSILIyV06HD+CEbCdI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:04 2026 by rpki-client