$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: xN/8mR/c49S/QMvTwk6G1THonRMSOVyHxxoxbf8zK+g= Subject key identifier: DC:2A:41:33:C4:09:00:5D:D8:AF:43:7C:15:9A:8E:6E:D9:68:03:46 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 537292F57EC1BA464FBC3FD5FA1BE16BB97ED83A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:17:05 +0000 Manifest this update: Thu 23 Jul 2026 22:12:05 +0000 Manifest next update: Fri 24 Jul 2026 22:42:05 +0000 Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: wW7kIBcaEHDcYwL7upFZv3B4OKiLM50DzwcMPcprHX8=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:72:92:f5:7e:c1:ba:46:4f:bc:3f:d5:fa:1b:e1:6b:b9:7e:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Jul 23 22:12:05 2026 GMT Not After : Jul 24 22:42:05 2026 GMT Subject: CN=DC2A4133C409005DD8AF437C159A8E6ED9680346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:17:3d:bf:98:4c:f4:23:8c:ba:89:2f:3f: 18:80:df:46:a9:c1:54:7b:2d:42:cf:5b:51:ea:37: 48:58:9d:51:1d:48:74:c4:a6:5a:bb:3a:74:bf:7e: 00:a3:7a:de:cd:25:7e:a3:49:a7:3f:74:90:2e:24: 97:ed:96:9c:a7:e8:3c:66:bb:40:08:42:a1:23:84: 2a:e8:be:87:11:7f:73:95:e6:62:0e:2c:66:23:fb: 50:af:9d:83:75:ca:89:aa:8a:97:f8:f6:b3:78:4e: d0:b5:c5:38:a2:ca:35:61:60:4b:e4:00:13:c6:25: 46:4a:8c:30:36:8d:e0:0b:5f:01:08:45:ab:7d:99: 71:19:23:d3:77:4d:46:eb:96:c6:d2:99:25:66:28: e7:51:ee:57:b4:60:f5:0a:d4:30:67:d7:1a:63:bd: ce:74:ca:72:e6:16:5d:fb:d4:d6:93:d4:71:cb:51: c1:f8:23:c9:c6:8a:ad:b6:ab:ca:d6:36:dd:ee:da: 1e:22:f6:22:f9:69:99:36:00:c4:73:93:6f:0f:94: 0e:b3:19:ff:e1:9f:11:ab:43:47:eb:45:f7:10:12: 61:2d:ae:86:89:11:f6:70:4a:9b:8a:88:9f:e6:4f: 51:dc:b2:f5:0b:94:c9:9e:9a:18:8c:f4:bc:f2:ca: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2A:41:33:C4:09:00:5D:D8:AF:43:7C:15:9A:8E:6E:D9:68:03:46 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ed:1b:ca:dc:9c:b3:b4:7e:b7:1e:ed:ff:38:86:47:11:6b: ea:89:a5:00:37:72:93:fd:29:c4:88:40:2a:8f:22:7f:fc:37: a6:d2:f3:0f:14:56:62:14:c6:a8:df:ed:fd:96:77:57:41:f5: 4a:11:c7:43:e9:2d:71:89:0e:29:c8:41:2c:04:ba:85:ed:70: f8:f3:c7:99:06:c3:4e:98:29:5d:7d:2b:79:13:b5:b1:cc:60: 87:ff:2d:92:8f:d7:f3:ba:db:c6:72:74:2a:b3:78:cd:14:7f: b7:6a:ae:b3:69:fd:66:c3:69:0e:42:40:ef:a7:dc:1a:d1:9f: d5:00:f5:01:ed:e5:4f:1b:b0:26:3f:32:14:d4:18:9a:8c:8d: 1e:d3:2f:01:ac:5b:5f:c9:73:cc:de:bb:b4:ef:48:e9:19:87: 53:b5:52:ec:3d:dd:2e:6e:c0:9f:af:2b:92:f7:3f:f2:97:b6: e0:37:cc:a3:3f:69:d9:29:36:0e:c4:e9:b1:ae:89:3a:21:38: e9:61:39:48:38:7f:49:39:2b:46:76:9c:14:52:91:5c:d0:1a: 70:88:34:6f:f4:b7:cc:5e:70:0e:c2:ad:1b:50:e1:80:5c:66: 1e:5b:6c:9d:13:7a:58:13:fa:3f:3d:5b:72:f3:92:d0:fb:2e: e4:68:a1:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3KS9X7BukZPvD/V+hvha7l+2DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA3MjMyMjEyMDVaFw0yNjA3MjQyMjQyMDVaMDMxMTAvBgNV BAMTKERDMkE0MTMzQzQwOTAwNUREOEFGNDM3QzE1OUE4RTZFRDk2ODAzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXRc9v5hM9COMuokvPxiA30ap wVR7LULPW1HqN0hYnVEdSHTEplq7OnS/fgCjet7NJX6jSac/dJAuJJftlpyn6Dxm u0AIQqEjhCrovocRf3OV5mIOLGYj+1CvnYN1yomqipf49rN4TtC1xTiiyjVhYEvk ABPGJUZKjDA2jeALXwEIRat9mXEZI9N3TUbrlsbSmSVmKOdR7le0YPUK1DBn1xpj vc50ynLmFl371NaT1HHLUcH4I8nGiq22q8rWNt3u2h4i9iL5aZk2AMRzk28PlA6z Gf/hnxGrQ0frRfcQEmEtroaJEfZwSpuKiJ/mT1HcsvULlMmemhiM9LzyyhHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3CpBM8QJAF3Yr0N8FZqObtloA0YwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXtG8rcnLO0frce7f84hkcRa+qJpQA3cpP9 KcSIQCqPIn/8N6bS8w8UVmIUxqjf7f2Wd1dB9UoRx0PpLXGJDinIQSwEuoXtcPjz x5kGw06YKV19K3kTtbHMYIf/LZKP1/O628ZydCqzeM0Uf7dqrrNp/WbDaQ5CQO+n 3BrRn9UA9QHt5U8bsCY/MhTUGJqMjR7TLwGsW1/Jc8zeu7TvSOkZh1O1Uuw93S5u wJ+vK5L3P/KXtuA3zKM/adkpNg7E6bGuiTohOOlhOUg4f0k5K0Z2nBRSkVzQGnCI NG/0t8xecA7CrRtQ4YBcZh5bbJ0TelgT+j89W3LzktD7LuRooTY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:20 2026 by rpki-client