$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: gLWpJaz9BG46lkHakb7KtT1DpNTfpHXaOtO5NIm+Bkw= Subject key identifier: AF:66:EE:0A:30:B4:7A:54:7B:05:4C:46:07:CD:80:79:F7:C7:D9:60 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 42C83603E271FF0958D4F7EDAB8AC5C1E44EE45B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:03:01 +0000 Manifest this update: Fri 24 Jul 2026 02:58:01 +0000 Manifest next update: Sat 25 Jul 2026 03:36:01 +0000 Files and hashes: 1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: fV/50OiPa65BP/hlvWDk3nBPzDS7BrekDpPa10eHMLI=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c8:36:03:e2:71:ff:09:58:d4:f7:ed:ab:8a:c5:c1:e4:4e:e4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Jul 24 02:58:01 2026 GMT Not After : Jul 25 03:36:01 2026 GMT Subject: CN=AF66EE0A30B47A547B054C4607CD8079F7C7D960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:67:8f:e0:42:04:de:d4:42:6e:0e:87:b6: 3a:68:d1:aa:cd:fe:d2:01:58:b3:cf:bf:30:f3:2a: aa:97:d8:69:e3:90:8e:18:01:b6:a7:6d:a8:bb:54: 0e:5f:12:6d:b6:f8:08:93:16:e5:3b:3b:6e:f7:11: 4a:57:17:7c:82:c1:a1:34:d0:c7:f7:ec:c6:25:8a: 0e:bf:ac:f7:a4:90:b7:c7:8b:37:fd:9d:72:d1:c5: 1f:9a:6a:89:47:2c:3b:1f:47:37:63:0d:f2:be:ac: c5:47:e5:4d:8f:22:9f:18:fa:f7:e7:be:02:07:98: 5a:a7:14:e2:f3:28:61:58:3e:93:ac:83:a9:32:bf: c8:bd:bd:e0:bf:a8:fc:d0:4d:0c:33:40:e9:3e:63: 65:c2:3c:20:d1:b0:49:7b:5a:5c:66:05:ca:96:35: 9a:0b:f1:5a:eb:cc:4c:c1:c7:aa:b9:07:11:04:9b: 90:8a:ef:65:da:44:a7:9f:2e:b3:03:fe:60:87:c6: 95:04:b2:b9:1f:cc:74:de:25:54:5d:08:4c:3d:42: 5d:5e:47:6f:b5:39:98:e3:3d:27:2d:ba:6d:aa:d0: 61:cc:c5:e2:1c:16:bd:e9:43:44:9b:4b:28:cc:a5: 48:c3:8c:ae:ad:98:ca:7d:c5:75:c6:bb:b7:03:f1: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:EE:0A:30:B4:7A:54:7B:05:4C:46:07:CD:80:79:F7:C7:D9:60 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0c:cd:f7:63:2d:b8:ea:c2:37:03:80:a5:a3:0f:50:a6:e3: 45:ea:49:63:25:36:e2:d8:f9:7b:bb:8b:fd:58:25:24:1a:ab: 82:00:bf:66:2c:36:df:ea:6a:5d:dd:da:54:b3:ed:ea:9e:24: c9:98:5c:5e:cc:49:b9:b9:e3:e1:34:93:07:4e:ce:3f:51:83: 52:9f:29:dc:e6:b5:72:72:32:e2:68:0b:71:f0:f2:c6:4f:33: 90:e8:07:e9:f3:df:ec:19:8d:f5:ad:02:02:20:84:df:26:20: db:6f:19:8e:79:6d:9e:7a:ca:83:8f:b1:f8:7b:4e:fb:7b:26: 5d:c5:91:fd:4a:97:8e:91:df:9b:02:1a:54:31:2e:32:a5:22: 22:4d:42:50:fc:e9:72:dd:a9:a9:3c:02:4e:91:09:1e:ec:61: b8:b7:28:18:21:a1:09:b9:41:70:54:31:96:81:ad:3c:48:2a: 28:88:cd:76:97:70:bf:a5:cc:78:1c:99:91:25:d7:9c:df:6d: cf:af:1f:38:ae:64:b4:07:ed:4a:d3:bd:ac:b6:78:76:ac:b5: 9a:1f:de:f7:82:2c:dc:bc:25:86:1d:78:c6:29:2d:28:da:b6: ba:88:a7:41:29:b3:c5:9b:aa:92:93:55:4a:9f:b4:2f:a9:9c: 44:ae:25:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsg2A+Jx/wlY1Pftq4rFweRO5FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA3MjQwMjU4MDFaFw0yNjA3MjUwMzM2MDFaMDMxMTAvBgNV BAMTKEFGNjZFRTBBMzBCNDdBNTQ3QjA1NEM0NjA3Q0Q4MDc5RjdDN0Q5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rGeP4EIE3tRCbg6Htjpo0arN /tIBWLPPvzDzKqqX2GnjkI4YAbanbai7VA5fEm22+AiTFuU7O273EUpXF3yCwaE0 0Mf37MYlig6/rPekkLfHizf9nXLRxR+aaolHLDsfRzdjDfK+rMVH5U2PIp8Y+vfn vgIHmFqnFOLzKGFYPpOsg6kyv8i9veC/qPzQTQwzQOk+Y2XCPCDRsEl7WlxmBcqW NZoL8VrrzEzBx6q5BxEEm5CK72XaRKefLrMD/mCHxpUEsrkfzHTeJVRdCEw9Ql1e R2+1OZjjPSctum2q0GHMxeIcFr3pQ0SbSyjMpUjDjK6tmMp9xXXGu7cD8cDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2buCjC0elR7BUxGB82AeffH2WAwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4MzfdjLbjqwjcDgKWjD1Cm40XqSWMlNuLY +Xu7i/1YJSQaq4IAv2YsNt/qal3d2lSz7eqeJMmYXF7MSbm54+E0kwdOzj9Rg1Kf KdzmtXJyMuJoC3Hw8sZPM5DoB+nz3+wZjfWtAgIghN8mINtvGY55bZ56yoOPsfh7 Tvt7Jl3Fkf1Kl46R35sCGlQxLjKlIiJNQlD86XLdqak8Ak6RCR7sYbi3KBghoQm5 QXBUMZaBrTxIKiiIzXaXcL+lzHgcmZEl15zfbc+vHziuZLQH7UrTvay2eHastZof 3veCLNy8JYYdeMYpLSjatrqIp0Eps8WbqpKTVUqftC+pnESuJS0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:46 2026 by rpki-client