$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: Z8YM5AtgBFw7Bk5BQZjS0pjAi+bUMJQIgBnzUBSPyFQ= Subject key identifier: BD:65:C7:1F:CC:C9:32:88:9C:8B:FF:86:93:41:C0:75:79:E3:FC:70 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 652C7997C18A79FEE1D3AE6A7E811B0F9DA94841 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 05:16:12 +0000 Manifest this update: Thu 23 Jul 2026 05:11:12 +0000 Manifest next update: Fri 24 Jul 2026 09:11:12 +0000 Files and hashes: 1: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: TPks3B07qE2fzon6Wyu2U9qXnTR6jaMwUWc18OVzXNE=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2c:79:97:c1:8a:79:fe:e1:d3:ae:6a:7e:81:1b:0f:9d:a9:48:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Jul 23 05:11:12 2026 GMT Not After : Jul 24 09:11:12 2026 GMT Subject: CN=BD65C71FCCC932889C8BFF869341C07579E3FC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:f7:a6:aa:3c:41:63:89:6e:84:be:9e:30: ca:7d:f7:a7:84:77:be:6f:ae:e1:55:a7:07:18:e0: fe:97:97:79:8d:76:6a:47:f2:e9:2d:b5:90:92:c7: 10:42:6b:0d:de:89:4d:28:de:bd:10:49:45:c5:ab: 67:45:2e:70:3f:d1:e1:58:23:27:fc:2d:a1:14:fe: 70:7c:a9:ed:62:2d:50:6c:fd:c7:1a:23:38:1c:8e: 54:e9:7c:05:52:58:86:85:77:52:f9:f6:30:d6:30: ed:e5:ae:94:d6:b1:bd:61:03:3e:85:4a:c4:19:4b: db:5e:2c:d4:0b:1b:dd:ad:11:3b:8e:6f:58:1a:dd: b3:2c:a1:92:1b:ae:ae:4a:e6:69:76:50:c8:6b:17: 00:cc:1a:87:b7:10:05:e5:e1:4f:0e:80:50:8d:4b: 2f:76:f8:12:d4:4b:ad:bd:bd:a4:6a:44:59:bd:c9: d5:95:e1:21:aa:7b:a8:b4:73:40:ba:93:02:cd:c5: 4f:2f:88:6e:e7:8f:cb:85:94:ad:db:14:33:85:7e: 08:91:29:7d:9f:01:57:20:d1:6c:60:c6:bc:e8:af: 2f:7e:28:1f:e9:7b:96:0a:cb:52:b4:da:42:d8:09: dd:8b:b9:ab:48:da:aa:42:47:d0:85:41:62:d0:c3: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:C7:1F:CC:C9:32:88:9C:8B:FF:86:93:41:C0:75:79:E3:FC:70 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:58:f0:48:d9:22:f3:c9:10:5b:c0:7b:97:9f:ad:01:20: 68:45:17:47:fb:17:b5:7b:31:2d:f2:46:e8:16:64:b6:21:db: 6a:9e:77:ac:bb:3d:29:06:ea:48:ea:38:84:53:dd:e5:89:08: cb:c2:fa:69:71:e2:73:65:02:b6:75:dc:53:61:19:86:91:91: b4:14:df:64:3c:21:d8:ec:58:d5:59:5b:d3:16:8c:d5:51:a6: e6:90:00:6b:81:af:33:02:60:85:2c:7c:e2:5d:1a:0f:4f:e3: 0a:b5:71:5a:f1:a4:e5:05:9e:8c:a8:d0:f9:da:2f:cf:4d:3c: 2e:f8:8c:60:a0:d0:37:dc:f0:5c:03:c6:7f:e7:80:c8:c9:99: 85:6b:e8:e7:95:39:6a:d2:42:f3:1f:c3:80:b2:dd:a1:46:37: 25:91:25:13:22:5d:47:bf:d9:cc:45:3a:18:07:af:bc:74:e8: 6e:cb:cb:12:d6:d6:6d:71:0b:bd:1d:25:cc:19:43:ff:01:b7: 28:2f:63:6a:95:a3:f3:10:53:bb:4c:f3:f9:7b:5a:9b:aa:9b: 66:fc:a0:1e:50:99:11:83:45:30:96:dc:b2:c1:cd:1f:44:89: 6a:30:1e:90:ad:72:fb:4c:3c:73:f3:93:f0:ec:48:4c:fb:f7: 19:2a:4d:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSx5l8GKef7h065qfoEbD52pSEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA3MjMwNTExMTJaFw0yNjA3MjQwOTExMTJaMDMxMTAvBgNV BAMTKEJENjVDNzFGQ0NDOTMyODg5QzhCRkY4NjkzNDFDMDc1NzlFM0ZDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVPemqjxBY4luhL6eMMp996eE d75vruFVpwcY4P6Xl3mNdmpH8ukttZCSxxBCaw3eiU0o3r0QSUXFq2dFLnA/0eFY Iyf8LaEU/nB8qe1iLVBs/ccaIzgcjlTpfAVSWIaFd1L59jDWMO3lrpTWsb1hAz6F SsQZS9teLNQLG92tETuOb1ga3bMsoZIbrq5K5ml2UMhrFwDMGoe3EAXl4U8OgFCN Sy92+BLUS629vaRqRFm9ydWV4SGqe6i0c0C6kwLNxU8viG7nj8uFlK3bFDOFfgiR KX2fAVcg0Wxgxrzory9+KB/pe5YKy1K02kLYCd2LuatI2qpCR9CFQWLQw/1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWXHH8zJMoici/+Gk0HAdXnj/HAwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDgWPBI2SLzyRBbwHuXn60BIGhFF0f7F7V7 MS3yRugWZLYh22qed6y7PSkG6kjqOIRT3eWJCMvC+mlx4nNlArZ13FNhGYaRkbQU 32Q8IdjsWNVZW9MWjNVRpuaQAGuBrzMCYIUsfOJdGg9P4wq1cVrxpOUFnoyo0Pna L89NPC74jGCg0Dfc8FwDxn/ngMjJmYVr6OeVOWrSQvMfw4Cy3aFGNyWRJRMiXUe/ 2cxFOhgHr7x06G7LyxLW1m1xC70dJcwZQ/8BtygvY2qVo/MQU7tM8/l7Wpuqm2b8 oB5QmRGDRTCW3LLBzR9EiWowHpCtcvtMPHPzk/DsSEz79xkqTVo= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:52 2026 by rpki-client