$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: vCZpiWuI94N/ZW8vdx8Eb2WhBdCWcg+fV1PBL+YN9Ps= Subject key identifier: 95:1B:DE:F2:F8:23:B8:58:F3:67:82:B0:22:2B:3D:DC:7D:96:96:C9 Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 213028F72CBF41E646230C7264993001E9C731A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:52:09 +0000 Manifest this update: Thu 23 Jul 2026 09:47:09 +0000 Manifest next update: Fri 24 Jul 2026 12:28:09 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) 3: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: qjnhRtYSecNBuUawWgTUR3SiNeUTQcRDVZnCGoqYgN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:30:28:f7:2c:bf:41:e6:46:23:0c:72:64:99:30:01:e9:c7:31:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Jul 23 09:47:09 2026 GMT Not After : Jul 24 12:28:09 2026 GMT Subject: CN=951BDEF2F823B858F36782B0222B3DDC7D9696C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:42:7b:ac:55:50:d9:91:14:92:30:7d:2b: ef:2c:07:02:3d:72:b6:3b:20:0a:6b:3c:90:d3:39: 1e:a1:9f:82:e7:c3:4b:0b:cb:c5:50:45:ce:60:16: ee:1a:4d:a6:d6:42:17:ba:4c:0c:81:99:9c:10:73: c8:a7:17:33:71:3e:a5:49:b1:d8:48:51:df:8b:13: f9:61:91:1f:f7:9f:a2:49:7f:42:4c:ba:73:a5:8f: b8:d1:d0:21:82:55:80:99:50:05:27:44:fc:64:4b: b3:f6:78:25:f2:9a:09:48:f0:d2:cf:32:37:95:b9: 17:5f:b1:1b:f7:84:16:10:cc:28:04:12:f8:19:5e: 29:88:6e:ce:53:0d:cf:b0:4f:7c:34:71:2c:d4:89: bd:5d:22:1d:9c:2c:f5:cc:d8:cd:9a:33:fd:56:5b: 4e:7b:d5:3f:3f:48:a2:66:b3:1b:73:49:56:3e:ce: 1f:b3:e5:59:13:ce:02:85:c7:d4:97:a4:2e:7d:20: fc:c8:46:38:00:ea:42:a4:b6:31:d4:ca:4d:ed:7e: 04:0e:74:bb:5f:f9:09:82:34:f7:30:dc:0b:ba:13: 2b:f5:53:a1:00:1c:d9:a5:9e:66:6a:8a:12:4e:d8: 2c:ed:8e:09:72:53:75:81:00:71:6d:9e:24:11:4a: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:DE:F2:F8:23:B8:58:F3:67:82:B0:22:2B:3D:DC:7D:96:96:C9 X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7a:58:6b:55:83:f4:32:90:ec:81:49:9b:05:e4:35:75:2c: 3e:66:31:97:df:10:aa:0d:e2:3a:2b:31:9e:a1:e7:5d:07:e0: 06:47:a7:ff:97:af:e1:98:78:7f:d5:3d:4a:65:aa:6f:ec:ba: 12:d3:5a:ba:e0:e3:1d:c1:6a:d2:df:6e:51:43:1e:b9:55:8d: d6:e8:c5:3e:4c:58:c0:da:b1:83:7d:7a:57:12:d2:21:0f:dc: 75:a9:ef:22:0a:ea:11:f6:15:23:63:fa:3c:48:a4:d0:33:14: 07:e8:5a:00:29:1e:70:b6:fb:50:54:8e:ac:87:d7:1b:6c:e0: 1b:ec:9a:5d:86:27:db:2b:33:d2:29:8e:34:da:a3:07:e8:ea: 82:a9:94:e0:af:79:b1:a8:93:2a:0a:ba:f2:5c:ea:2a:6f:dd: ab:a5:31:75:97:19:c3:7e:0b:e2:6f:72:17:22:56:bc:73:5c: f3:25:e9:65:14:ab:de:01:5d:6c:a5:18:bb:a2:b9:6a:bf:25: a6:d0:4f:24:3d:69:76:15:de:bc:85:48:64:f6:15:b1:d8:7b: 0e:08:f0:8c:f7:4f:26:d7:b6:38:8c:e3:9f:08:62:d8:be:e2: 87:98:55:46:44:11:97:2a:17:e8:65:6a:e1:50:2d:d0:d8:83: d1:93:15:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITAo9yy/QeZGIwxyZJkwAenHMaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjA3MjMwOTQ3MDlaFw0yNjA3MjQxMjI4MDlaMDMxMTAvBgNV BAMTKDk1MUJERUYyRjgyM0I4NThGMzY3ODJCMDIyMkIzRERDN0Q5Njk2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehUJ7rFVQ2ZEUkjB9K+8sBwI9 crY7IAprPJDTOR6hn4Lnw0sLy8VQRc5gFu4aTabWQhe6TAyBmZwQc8inFzNxPqVJ sdhIUd+LE/lhkR/3n6JJf0JMunOlj7jR0CGCVYCZUAUnRPxkS7P2eCXymglI8NLP MjeVuRdfsRv3hBYQzCgEEvgZXimIbs5TDc+wT3w0cSzUib1dIh2cLPXM2M2aM/1W W0571T8/SKJmsxtzSVY+zh+z5VkTzgKFx9SXpC59IPzIRjgA6kKktjHUyk3tfgQO dLtf+QmCNPcw3Au6Eyv1U6EAHNmlnmZqihJO2CztjglyU3WBAHFtniQRSnYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRve8vgjuFjzZ4KwIis93H2WlskwHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ6WGtVg/QykOyBSZsF5DV1LD5mMZffEKoN 4jorMZ6h510H4AZHp/+Xr+GYeH/VPUplqm/suhLTWrrg4x3BatLfblFDHrlVjdbo xT5MWMDasYN9elcS0iEP3HWp7yIK6hH2FSNj+jxIpNAzFAfoWgApHnC2+1BUjqyH 1xts4Bvsml2GJ9srM9IpjjTaowfo6oKplOCvebGokyoKuvJc6ipv3aulMXWXGcN+ C+JvchciVrxzXPMl6WUUq94BXWylGLuiuWq/JabQTyQ9aXYV3ryFSGT2FbHYew4I 8Iz3TybXtjiM458IYti+4oeYVUZEEZcqF+hlauFQLdDYg9GTFU0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:40 2026 by rpki-client