$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: WCSXS9LN+9X1VJkoqtRqMkh4ew+Pimw7S9Pfrq7tSig= Subject key identifier: 75:49:92:57:3D:08:33:3C:96:4F:9C:75:54:54:EA:5C:6E:A5:EE:43 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 3F7316B9072C2BE1E27923551471B90F5D595034 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:10:34 +0000 Manifest this update: Fri 24 Jul 2026 01:05:34 +0000 Manifest next update: Sat 25 Jul 2026 01:39:34 +0000 Files and hashes: 1: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 2: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 3: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 4: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: xaaWPeaBglEnf6dO2lj1qU5OEm0kdMsBVxeZgXq88j4=) 5: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 6: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 7: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 8: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:73:16:b9:07:2c:2b:e1:e2:79:23:55:14:71:b9:0f:5d:59:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Jul 24 01:05:34 2026 GMT Not After : Jul 25 01:39:34 2026 GMT Subject: CN=754992573D08333C964F9C755454EA5C6EA5EE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:fa:65:36:14:6d:37:a8:fb:80:e5:06:88: a0:ad:5a:16:d2:86:77:34:c8:ea:1c:05:26:a1:a2: 81:9f:57:9f:fc:71:d8:9e:5d:e7:11:41:5d:5e:cc: 05:f3:56:b3:07:d7:63:dd:87:b1:9e:07:81:02:13: 1a:78:24:ee:4d:d2:54:86:c0:0f:dd:58:03:ca:3e: d0:14:4e:de:88:48:c1:0d:82:96:e2:42:73:e2:99: 23:fe:5e:95:2c:e8:8f:91:79:de:ba:cf:54:d9:06: 8d:93:1a:de:0c:bf:f9:22:7c:63:a4:4f:e3:3c:26: c3:8c:c4:99:87:5b:38:3c:4e:7b:e3:7f:0a:40:51: e4:61:a1:d8:3b:62:6f:ae:32:b4:80:a4:33:65:13: ed:4a:90:0b:c7:97:5f:ce:80:8f:ac:02:80:fd:04: 88:16:25:c0:70:a9:53:ac:e5:e7:2e:6a:61:4e:05: a8:40:61:e0:09:78:6f:e1:14:40:94:4f:52:09:f5: 9a:43:00:78:27:fd:06:3e:aa:e6:9e:d5:e2:7e:de: fa:c8:03:9a:4c:d7:16:3d:50:a4:f4:d7:cc:ef:74: 47:69:d2:b3:4b:95:2b:b7:1c:cc:b5:d2:2a:6f:1c: c1:1b:5e:38:38:af:38:25:d5:17:94:95:87:db:5e: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:92:57:3D:08:33:3C:96:4F:9C:75:54:54:EA:5C:6E:A5:EE:43 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0b:28:78:39:cc:be:f9:3b:27:ee:f9:45:48:18:b5:89:35: dc:80:d0:58:5a:0c:73:7a:c5:07:83:17:5d:b6:33:98:fd:1a: aa:6d:59:2a:97:4d:01:03:4a:19:68:16:9d:cb:ef:ee:af:bf: 1a:a4:e3:a9:d1:a5:66:5d:eb:b1:88:c8:b6:97:5f:40:64:1d: dc:51:6d:b8:06:5f:19:7b:44:91:4c:b1:81:22:81:7c:b4:3e: e1:bb:79:1d:a4:0b:3f:b9:fa:c5:a4:4c:9c:54:88:9e:08:06: bc:b1:a0:ec:47:d5:01:b8:28:37:8e:bd:61:47:45:7a:96:8c: 67:ff:80:80:01:4d:5d:16:b3:d6:73:01:46:44:82:4d:dc:cf: 8d:8b:db:84:4d:a6:63:3b:c2:93:b3:4d:1a:f4:9c:a4:67:98: d4:ac:2a:01:ce:d2:44:d6:10:46:ec:f2:8c:5e:73:da:df:b5: f7:52:d0:5d:81:c9:32:80:cc:18:38:9f:12:13:9d:ec:64:6f: 62:5f:78:06:e5:dd:f5:dc:0a:ff:f4:dd:ad:41:83:32:98:bd: ee:64:02:c7:8b:c3:88:7a:19:b0:1c:5a:43:54:c8:62:22:af: eb:33:10:ab:36:af:f0:2c:47:ca:66:b1:25:e2:dc:ad:25:77: 5d:d9:8e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3MWuQcsK+HieSNVFHG5D11ZUDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA3MjQwMTA1MzRaFw0yNjA3MjUwMTM5MzRaMDMxMTAvBgNV BAMTKDc1NDk5MjU3M0QwODMzM0M5NjRGOUM3NTU0NTRFQTVDNkVBNUVFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tvplNhRtN6j7gOUGiKCtWhbS hnc0yOocBSahooGfV5/8cdieXecRQV1ezAXzVrMH12Pdh7GeB4ECExp4JO5N0lSG wA/dWAPKPtAUTt6ISMENgpbiQnPimSP+XpUs6I+Red66z1TZBo2TGt4Mv/kifGOk T+M8JsOMxJmHWzg8TnvjfwpAUeRhodg7Ym+uMrSApDNlE+1KkAvHl1/OgI+sAoD9 BIgWJcBwqVOs5ecuamFOBahAYeAJeG/hFECUT1IJ9ZpDAHgn/QY+quae1eJ+3vrI A5pM1xY9UKT018zvdEdp0rNLlSu3HMy10ipvHMEbXjg4rzgl1ReUlYfbXjxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUmSVz0IMzyWT5x1VFTqXG6l7kMwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoLKHg5zL75Oyfu+UVIGLWJNdyA0FhaDHN6 xQeDF122M5j9GqptWSqXTQEDShloFp3L7+6vvxqk46nRpWZd67GIyLaXX0BkHdxR bbgGXxl7RJFMsYEigXy0PuG7eR2kCz+5+sWkTJxUiJ4IBryxoOxH1QG4KDeOvWFH RXqWjGf/gIABTV0Ws9ZzAUZEgk3cz42L24RNpmM7wpOzTRr0nKRnmNSsKgHO0kTW EEbs8oxec9rftfdS0F2ByTKAzBg4nxITnexkb2JfeAbl3fXcCv/03a1BgzKYve5k AseLw4h6GbAcWkNUyGIir+szEKs2r/AsR8pmsSXi3K0ld13Zjgg= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:16 2026 by rpki-client