$ rpki-client -vvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: +xoZyXYemC2iq0zgI7VaW3Y97htIAUYJo6sR3qSRuhI= Subject key identifier: 28:C4:F7:B2:CD:15:14:80:81:6E:30:71:21:F4:52:53:A6:0A:7B:85 Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 6DF0D72363D41348AAFED410D58EBB8DC45A7D49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 06:47:42 +0000 Manifest this update: Fri 24 Jul 2026 06:42:42 +0000 Manifest next update: Sat 25 Jul 2026 07:00:42 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) 2: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: NNVwCirV8ppXPR5H527qvKQYjWVxqJr5iF6VuqVM3A4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f0:d7:23:63:d4:13:48:aa:fe:d4:10:d5:8e:bb:8d:c4:5a:7d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Jul 24 06:42:42 2026 GMT Not After : Jul 25 07:00:42 2026 GMT Subject: CN=28C4F7B2CD151480816E307121F45253A60A7B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:1a:21:9b:12:a6:31:41:bc:19:fe:c9:cb: a4:6b:a5:32:5e:26:bc:f3:b8:bb:4b:9b:c0:71:87: 1b:96:05:2c:6b:fb:fd:1c:7b:79:d6:8b:1f:89:b7: a8:26:04:88:f0:32:18:fb:4a:e5:18:41:19:05:1a: 20:20:fe:b2:a0:45:f0:c6:18:15:c2:b5:56:c8:4b: 73:12:6c:bf:3d:00:92:c7:4f:2d:67:dc:13:0b:63: d6:7c:54:a3:7a:5c:22:88:01:00:ad:27:4a:5b:c0: 45:d9:f2:c5:06:d6:e1:e4:99:55:81:64:59:85:12: 07:2f:db:a3:2b:d3:1a:e3:32:88:03:98:20:30:3c: 9a:ee:e0:10:67:8b:39:e1:be:12:dd:3d:f5:7d:ef: cf:2c:c4:e1:cc:5c:80:84:03:fe:91:a3:c7:dc:a7: 5e:8d:d6:b0:19:bf:85:2c:73:98:85:47:b4:a8:75: 76:c1:54:3e:76:cb:a1:6c:f3:ac:a0:8f:77:db:72: a6:52:46:72:59:0f:fa:c5:99:cf:5e:bd:b5:06:5f: 2e:0c:28:f5:1d:99:33:51:2f:02:8e:84:b5:5a:4b: dc:27:92:8e:2a:9d:04:ce:c0:ce:a9:e0:54:a8:f2: 84:e8:9d:0e:b1:ce:62:be:19:d3:30:fa:cd:ea:c8: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C4:F7:B2:CD:15:14:80:81:6E:30:71:21:F4:52:53:A6:0A:7B:85 X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7e:49:40:ea:5a:d6:36:68:8a:ac:a0:96:eb:09:e0:c5:44: e9:56:5d:39:f1:fc:12:2e:71:63:39:09:2b:81:4f:6a:73:1a: e7:32:16:52:f1:e6:9e:b9:2e:da:cb:5e:25:ab:a1:0b:2d:c7: 74:e3:09:26:0f:f9:cd:a7:a4:2d:e7:49:59:b2:5e:24:18:14: c1:fe:b1:09:72:36:ce:1a:1e:67:2f:a8:37:15:29:44:44:7b: 12:19:d2:a5:3c:a9:1e:f8:e7:3d:e2:d9:f2:7e:77:a5:f8:d5: 12:99:94:8b:fe:55:e8:67:da:55:4b:a6:3e:e0:34:81:e6:68: 10:08:ee:fc:63:e3:fe:2c:44:3a:73:1a:ed:cd:a3:2f:f3:04: 48:c1:5e:72:42:c2:5f:46:8b:c9:10:72:36:ec:dc:80:2e:f6: 20:f0:13:1c:fd:8c:c7:90:9f:74:ce:27:ab:d4:13:a3:7e:34: b7:36:12:69:4c:e5:66:3a:50:ef:98:e8:3e:e8:e6:0a:44:7d: a0:76:af:8d:94:08:e4:4b:bb:6e:b3:f1:a8:b7:13:4c:1a:cd: c5:e8:78:6e:28:d0:91:5d:35:ed:ac:7f:44:03:79:90:a9:81: b0:c6:b2:c1:31:c9:3f:6e:74:81:63:92:5b:4f:0e:71:a4:ec: 7c:6a:f8:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfDXI2PUE0iq/tQQ1Y67jcRafUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA3MjQwNjQyNDJaFw0yNjA3MjUwNzAwNDJaMDMxMTAvBgNV BAMTKDI4QzRGN0IyQ0QxNTE0ODA4MTZFMzA3MTIxRjQ1MjUzQTYwQTdCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEhohmxKmMUG8Gf7Jy6RrpTJe JrzzuLtLm8BxhxuWBSxr+/0ce3nWix+Jt6gmBIjwMhj7SuUYQRkFGiAg/rKgRfDG GBXCtVbIS3MSbL89AJLHTy1n3BMLY9Z8VKN6XCKIAQCtJ0pbwEXZ8sUG1uHkmVWB ZFmFEgcv26Mr0xrjMogDmCAwPJru4BBniznhvhLdPfV9788sxOHMXICEA/6Ro8fc p16N1rAZv4Usc5iFR7SodXbBVD52y6Fs86ygj3fbcqZSRnJZD/rFmc9evbUGXy4M KPUdmTNRLwKOhLVaS9wnko4qnQTOwM6p4FSo8oTonQ6xzmK+GdMw+s3qyMMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMT3ss0VFICBbjBxIfRSU6YKe4UwHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt+SUDqWtY2aIqsoJbrCeDFROlWXTnx/BIu cWM5CSuBT2pzGucyFlLx5p65LtrLXiWroQstx3TjCSYP+c2npC3nSVmyXiQYFMH+ sQlyNs4aHmcvqDcVKUREexIZ0qU8qR745z3i2fJ+d6X41RKZlIv+Vehn2lVLpj7g NIHmaBAI7vxj4/4sRDpzGu3Noy/zBEjBXnJCwl9Gi8kQcjbs3IAu9iDwExz9jMeQ n3TOJ6vUE6N+NLc2EmlM5WY6UO+Y6D7o5gpEfaB2r42UCORLu26z8ai3E0wazcXo eG4o0JFdNe2sf0QDeZCpgbDGssExyT9udIFjkltPDnGk7Hxq+LY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:14 2026 by rpki-client