$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json) Hash identifier: JZ4K4C7LONMI3Ufoqbn7ogF5eNJLk2FXU7ZTTp+dFJs= Subject key identifier: 70:C1:39:75:FA:DD:D0:5B:36:13:F3:AA:94:C1:32:C3:51:55:D3:63 Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Certificate serial: 1CED5A1643EBA21C10721927D63D7EEAFD977DF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:35:25 +0000 Manifest this update: Thu 23 Jul 2026 12:30:25 +0000 Manifest next update: Fri 24 Jul 2026 14:27:25 +0000 Files and hashes: 1: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: s80dULQMYp7ioQ5MB8losqyLSoHY8OcmJXN0LpJr/7M=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ed:5a:16:43:eb:a2:1c:10:72:19:27:d6:3d:7e:ea:fd:97:7d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Validity Not Before: Jul 23 12:30:25 2026 GMT Not After : Jul 24 14:27:25 2026 GMT Subject: CN=70C13975FADDD05B3613F3AA94C132C35155D363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:94:90:0b:c5:bd:60:2c:b3:db:f9:37:2d: 65:25:21:cb:f9:ec:d2:ee:74:11:5a:32:b3:70:e2: 82:2a:11:c0:19:9a:88:83:8f:94:37:47:a5:da:ea: c2:38:5d:6d:b3:97:84:57:e3:d0:30:4a:0c:41:cc: 77:1d:3d:67:4d:2b:ad:7a:61:5c:91:e9:81:87:9d: b1:30:fe:4d:83:fa:df:63:6e:e0:16:41:fd:4a:4e: 40:da:fe:b9:8d:08:be:e0:c5:60:17:66:9b:b0:62: 55:8a:1d:db:56:fe:dd:09:46:64:6d:82:7e:a6:8a: 75:da:bb:c4:58:9d:67:51:67:6e:d9:2d:47:56:25: fe:56:61:44:a4:c5:ee:fc:95:cd:d6:ee:8f:22:ba: b8:73:c7:a4:25:e6:bd:f3:11:35:47:91:d1:9b:f0: c0:49:be:17:4d:80:ce:55:86:2a:78:f5:72:fc:64: bc:0e:af:be:17:d6:65:3f:ff:ec:35:55:49:51:3c: 39:f7:6b:21:83:1b:92:1d:d6:11:ee:b8:fb:39:75: 2b:a0:2c:c3:1f:76:70:9e:bc:7b:25:7d:1b:a5:e5: f9:99:06:ef:01:49:56:e9:12:7b:7e:c3:97:ae:e5: d7:2f:44:2b:ba:70:2c:66:ee:f3:5d:12:dc:9e:f3: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C1:39:75:FA:DD:D0:5B:36:13:F3:AA:94:C1:32:C3:51:55:D3:63 X509v3 Authority Key Identifier: keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:41:d7:44:00:56:f8:6a:84:80:e6:b2:ca:bc:59:34:52:5e: ea:04:10:6e:f2:71:0b:b4:d8:38:35:1e:78:b4:7c:54:25:93: 35:4a:79:ae:c7:82:8a:a9:e8:8f:26:a7:a6:ac:ce:b8:41:7b: 19:73:63:8a:57:23:18:f1:eb:26:2f:ea:5c:63:9e:c7:05:3d: 89:38:1e:08:81:e5:c5:4b:87:79:20:a6:ad:55:f7:18:75:98: 17:44:2d:70:9b:43:2e:9f:3d:cc:ec:1b:a2:0a:37:05:72:c5: e5:24:4f:32:99:c9:28:a0:e0:27:63:d0:fc:f8:51:80:81:9b: 84:c7:52:83:5d:07:ce:2d:30:83:0b:57:f9:08:01:2c:d1:2c: 8f:a7:53:30:fc:9d:4a:e8:69:18:2b:a2:2c:61:a3:98:5c:24: 52:87:06:ce:89:44:eb:ee:0f:89:fa:50:5e:3d:01:77:fb:d0: b4:42:57:a0:fd:18:3d:71:32:22:45:de:f0:11:4c:17:c1:1b: cd:5d:52:6e:eb:a6:30:a2:1f:ac:49:ee:24:0f:13:8f:ef:b8: 3a:cb:2c:44:fd:a9:13:ac:a6:26:56:a5:71:65:44:31:d5:f1: a6:55:ba:76:a0:bb:05:ba:85:c2:71:e1:eb:da:4e:08:a1:8f: 24:16:40:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHO1aFkProhwQchkn1j1+6v2XffgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE QjYyQzI0MjAeFw0yNjA3MjMxMjMwMjVaFw0yNjA3MjQxNDI3MjVaMDMxMTAvBgNV BAMTKDcwQzEzOTc1RkFEREQwNUIzNjEzRjNBQTk0QzEzMkMzNTE1NUQzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/JSQC8W9YCyz2/k3LWUlIcv5 7NLudBFaMrNw4oIqEcAZmoiDj5Q3R6Xa6sI4XW2zl4RX49AwSgxBzHcdPWdNK616 YVyR6YGHnbEw/k2D+t9jbuAWQf1KTkDa/rmNCL7gxWAXZpuwYlWKHdtW/t0JRmRt gn6minXau8RYnWdRZ27ZLUdWJf5WYUSkxe78lc3W7o8iurhzx6Ql5r3zETVHkdGb 8MBJvhdNgM5Vhip49XL8ZLwOr74X1mU//+w1VUlRPDn3ayGDG5Id1hHuuPs5dSug LMMfdnCevHslfRul5fmZBu8BSVbpEnt+w5eu5dcvRCu6cCxm7vNdEtye83CvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcME5dfrd0Fs2E/OqlMEyw1FV02MwHwYDVR0j BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpB10QAVvhqhIDmssq8WTRSXuoEEG7ycQu0 2Dg1Hni0fFQlkzVKea7Hgoqp6I8mp6aszrhBexlzY4pXIxjx6yYv6lxjnscFPYk4 HgiB5cVLh3kgpq1V9xh1mBdELXCbQy6fPczsG6IKNwVyxeUkTzKZySig4Cdj0Pz4 UYCBm4THUoNdB84tMIMLV/kIASzRLI+nUzD8nUroaRgroixho5hcJFKHBs6JROvu D4n6UF49AXf70LRCV6D9GD1xMiJF3vARTBfBG81dUm7rpjCiH6xJ7iQPE4/vuDrL LET9qROspiZWpXFlRDHV8aZVunaguwW6hcJx4evaTgihjyQWQL0= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:51 2026 by rpki-client