$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: oP3aj1dF41jnjRyxhmw3KnCnhnoALgInisRfUdzbIV8= Subject key identifier: 01:B9:99:37:D2:0D:33:E9:DE:3F:44:08:B9:3C:C1:02:E0:0C:F9:38 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 45095B8F47A90E0E398CAD97379BB29665525A3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:17:04 +0000 Manifest this update: Fri 24 Jul 2026 02:12:04 +0000 Manifest next update: Sat 25 Jul 2026 04:56:04 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 2: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: JreYphgPXeiM+cOuXqNNh1OpMVg7p5tDERFec6InZr0=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:09:5b:8f:47:a9:0e:0e:39:8c:ad:97:37:9b:b2:96:65:52:5a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Jul 24 02:12:04 2026 GMT Not After : Jul 25 04:56:04 2026 GMT Subject: CN=01B99937D20D33E9DE3F4408B93CC102E00CF938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:4a:96:a4:7e:b0:12:49:7b:f2:ad:4e:60: b5:02:12:00:3d:80:a4:92:35:12:6e:f2:94:f9:e1: b6:d8:8b:52:a2:50:dd:87:5b:09:b9:31:92:15:d7: fc:17:57:c7:26:ef:5f:b9:30:14:7f:d9:ed:32:f1: 5b:9a:e9:e4:a6:b5:82:c0:bc:ae:29:4a:2a:86:fe: 76:8a:e7:9e:7e:50:68:48:e0:a4:d5:39:5f:54:f9: ce:1d:54:23:45:e2:a5:ec:8c:03:84:09:a1:97:7f: 28:5e:70:94:37:df:3c:1c:74:51:1a:fe:49:de:9d: 4c:84:88:7c:f8:07:3b:ef:c4:3d:1f:74:43:2d:19: 16:c6:fa:d6:14:81:34:33:d6:67:7c:9d:b2:11:63: ca:ba:90:ec:82:d4:90:6d:2e:ed:43:04:d4:9f:53: ef:11:f7:bf:58:aa:e6:ad:2f:f4:40:c2:9d:28:7e: 1b:21:71:ae:97:a0:4b:7b:64:4e:32:fc:01:c0:5f: f8:db:69:69:85:3e:3d:33:49:cb:f3:fe:af:77:5f: f3:81:86:54:da:fc:2d:56:68:dc:33:03:8f:9f:96: 0e:90:40:d1:ed:6f:54:c9:9c:c2:fb:8b:44:54:76: ed:e4:b6:8f:64:0e:f0:fb:54:2d:79:b4:0a:fb:f0: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B9:99:37:D2:0D:33:E9:DE:3F:44:08:B9:3C:C1:02:E0:0C:F9:38 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d1:a0:d4:14:64:19:ba:bd:51:69:00:1e:cc:f9:90:df:b4: a6:34:31:d3:7e:2a:dd:41:44:55:20:ac:06:0c:27:8c:f9:27: 4d:f8:9c:8f:ce:13:5f:c1:5c:03:8a:06:fe:0a:c8:f0:45:95: 5a:ba:30:07:c4:f7:82:15:a2:3c:66:52:0b:04:3f:1b:b2:e0: cc:e7:ec:32:91:48:07:bf:20:36:aa:a2:b5:26:3f:7a:d3:b1: 90:c3:dc:4d:e6:4e:59:25:fe:35:5f:14:ab:ba:90:fd:ed:60: b8:e1:89:fb:48:55:a0:da:43:75:58:c0:b9:cf:dc:9c:d1:9a: 20:98:d5:6d:52:76:96:93:da:25:da:de:a5:93:ed:c5:75:23: fc:97:a2:39:00:e1:81:47:1f:0d:83:63:8a:c6:01:75:cb:1a: a1:bf:d2:09:2f:a4:3a:f1:33:e8:27:d2:8f:9d:29:99:ea:45: 67:89:a6:59:e2:60:53:14:2e:be:86:c2:7a:f8:e3:1c:64:f3: 0f:b5:51:8a:fa:ad:e0:32:c7:60:43:19:eb:df:0a:ba:60:d8: c1:0a:bc:64:55:48:f4:93:18:38:51:f3:6d:38:a0:bc:62:3c: 15:e4:d6:2b:25:f4:ac:52:cd:0f:cd:65:47:59:ff:17:53:8f: 16:60:87:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQlbj0epDg45jK2XN5uylmVSWj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA3MjQwMjEyMDRaFw0yNjA3MjUwNDU2MDRaMDMxMTAvBgNV BAMTKDAxQjk5OTM3RDIwRDMzRTlERTNGNDQwOEI5M0NDMTAyRTAwQ0Y5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd30qWpH6wEkl78q1OYLUCEgA9 gKSSNRJu8pT54bbYi1KiUN2HWwm5MZIV1/wXV8cm71+5MBR/2e0y8Vua6eSmtYLA vK4pSiqG/naK555+UGhI4KTVOV9U+c4dVCNF4qXsjAOECaGXfyhecJQ33zwcdFEa /knenUyEiHz4BzvvxD0fdEMtGRbG+tYUgTQz1md8nbIRY8q6kOyC1JBtLu1DBNSf U+8R979YquatL/RAwp0ofhshca6XoEt7ZE4y/AHAX/jbaWmFPj0zScvz/q93X/OB hlTa/C1WaNwzA4+flg6QQNHtb1TJnML7i0RUdu3kto9kDvD7VC15tAr78GqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbmZN9INM+neP0QIuTzBAuAM+TgwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALRoNQUZBm6vVFpAB7M+ZDftKY0MdN+Kt1B RFUgrAYMJ4z5J034nI/OE1/BXAOKBv4KyPBFlVq6MAfE94IVojxmUgsEPxuy4Mzn 7DKRSAe/IDaqorUmP3rTsZDD3E3mTlkl/jVfFKu6kP3tYLjhiftIVaDaQ3VYwLnP 3JzRmiCY1W1SdpaT2iXa3qWT7cV1I/yXojkA4YFHHw2DY4rGAXXLGqG/0gkvpDrx M+gn0o+dKZnqRWeJplniYFMULr6Gwnr44xxk8w+1UYr6reAyx2BDGevfCrpg2MEK vGRVSPSTGDhR8204oLxiPBXk1isl9KxSzQ/NZUdZ/xdTjxZghwI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:41 2026 by rpki-client