$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: UnyFQ6hFlEj0EpaoSLjbklJaQ7COPKrqYdhO0mlQ4w4= Subject key identifier: E4:E9:0B:80:42:50:2D:EE:1A:CF:BB:B5:51:4C:F4:FA:7F:05:51:C6 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 7C2D5B4C0BF0F8437A27729B41DAD3D014D07CAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:46:23 +0000 Manifest this update: Fri 24 Jul 2026 01:41:23 +0000 Manifest next update: Sat 25 Jul 2026 02:38:23 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 2: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: yw2UXgQsBFLNf8X2ZXChGvkBt1F4g2dA2LxwWUuw8o0=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2d:5b:4c:0b:f0:f8:43:7a:27:72:9b:41:da:d3:d0:14:d0:7c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Jul 24 01:41:23 2026 GMT Not After : Jul 25 02:38:23 2026 GMT Subject: CN=E4E90B8042502DEE1ACFBBB5514CF4FA7F0551C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:7c:11:d9:4c:28:ff:df:70:5f:ec:a2:3e: f4:1e:0e:8a:7c:14:24:8e:19:35:b5:bd:22:81:12: 70:c7:7d:52:a8:df:fd:48:ff:41:55:e6:1b:cc:b5: 36:9c:f8:4d:3f:8b:38:21:2a:ea:8c:1a:d5:bc:00: 95:ad:93:eb:72:ce:90:dd:8d:30:d5:4d:f2:37:e6: c4:3f:17:82:fb:d4:02:54:ee:83:03:22:3a:90:e7: b9:75:92:8f:3f:13:c5:34:1a:ac:c7:44:01:2c:86: a0:6e:0d:9a:a1:0b:1f:2f:f3:a9:40:94:82:55:40: f5:88:34:97:55:64:79:2d:0d:b9:74:7b:e2:6f:a8: d8:3f:ac:bb:3a:fa:87:9f:6c:c0:0f:65:77:9d:db: 8f:bb:5a:08:93:c7:fa:2e:12:b5:c7:b6:54:72:98: 04:52:b1:58:b2:a6:03:cd:76:85:9e:43:85:dd:c7: a0:43:1a:55:42:78:73:9a:bb:c9:49:17:67:3a:50: 53:2f:f8:e3:5a:41:16:f4:2c:92:af:98:f5:05:0f: 80:c6:06:8f:fe:10:06:b6:f7:19:90:d4:a9:6e:5e: 70:fc:75:24:1e:45:c9:42:dd:15:82:8c:74:a4:c8: 09:13:5f:fc:36:a1:2e:ff:a4:7c:5d:ba:47:25:96: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:0B:80:42:50:2D:EE:1A:CF:BB:B5:51:4C:F4:FA:7F:05:51:C6 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:45:da:01:38:41:08:70:f5:15:86:96:fa:c7:a4:a1:a1:ba: a1:97:1e:7b:b0:a5:d8:c5:bc:d7:43:94:89:57:af:24:e8:0f: 88:48:ca:43:b0:50:c7:66:70:f0:c6:44:e3:92:a0:f1:8f:f7: 9f:b2:10:a3:0f:54:d2:6b:2b:63:c8:07:0e:ae:a6:0e:a4:41: 1b:b6:2e:3c:de:11:00:7a:2b:2f:a6:71:62:4b:f3:f4:91:1a: f0:fa:f8:d4:b1:7a:39:0d:20:5f:62:ba:c1:42:39:87:96:05: 8a:68:7e:f4:5e:41:42:75:52:e7:84:37:ef:22:33:13:68:f0: 1d:32:3b:d2:f0:68:9d:2f:9c:94:0a:51:ad:e3:a7:3a:32:b8: 0d:e8:8a:fc:c2:7d:0f:0a:da:73:15:50:58:48:7d:1b:92:70: 6a:3c:47:de:4e:e7:a1:c5:c3:b0:c5:ec:56:5a:9a:19:fc:56: 41:0d:54:08:8a:78:de:ea:18:22:f4:a7:25:84:1a:cc:46:74: 5c:e0:80:87:38:b9:84:dc:3c:ef:3b:b0:38:cc:31:15:7c:81: c1:7f:70:94:42:31:27:cf:fc:cb:d6:c4:b5:1d:59:62:a8:aa: 35:96:38:24:e7:e2:c3:fb:11:a9:f6:e5:d2:a5:4b:2f:bc:db: c7:b7:13:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfC1bTAvw+EN6J3KbQdrT0BTQfKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA3MjQwMTQxMjNaFw0yNjA3MjUwMjM4MjNaMDMxMTAvBgNV BAMTKEU0RTkwQjgwNDI1MDJERUUxQUNGQkJCNTUxNENGNEZBN0YwNTUxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmLHwR2Uwo/99wX+yiPvQeDop8 FCSOGTW1vSKBEnDHfVKo3/1I/0FV5hvMtTac+E0/izghKuqMGtW8AJWtk+tyzpDd jTDVTfI35sQ/F4L71AJU7oMDIjqQ57l1ko8/E8U0GqzHRAEshqBuDZqhCx8v86lA lIJVQPWINJdVZHktDbl0e+JvqNg/rLs6+oefbMAPZXed24+7WgiTx/ouErXHtlRy mARSsViypgPNdoWeQ4Xdx6BDGlVCeHOau8lJF2c6UFMv+ONaQRb0LJKvmPUFD4DG Bo/+EAa29xmQ1KluXnD8dSQeRclC3RWCjHSkyAkTX/w2oS7/pHxdukcllquZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OkLgEJQLe4az7u1UUz0+n8FUcYwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFF2gE4QQhw9RWGlvrHpKGhuqGXHnuwpdjF vNdDlIlXryToD4hIykOwUMdmcPDGROOSoPGP95+yEKMPVNJrK2PIBw6upg6kQRu2 LjzeEQB6Ky+mcWJL8/SRGvD6+NSxejkNIF9iusFCOYeWBYpofvReQUJ1UueEN+8i MxNo8B0yO9LwaJ0vnJQKUa3jpzoyuA3oivzCfQ8K2nMVUFhIfRuScGo8R95O56HF w7DF7FZamhn8VkENVAiKeN7qGCL0pyWEGsxGdFzggIc4uYTcPO87sDjMMRV8gcF/ cJRCMSfP/MvWxLUdWWKoqjWWOCTn4sP7Ean25dKlSy+828e3E+k= -----END CERTIFICATE-----Generated at Fri Jul 24 15:29:56 2026 by rpki-client