$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: XfqsHY0erqZZA++DqMKuWDue5GoZ+eGmXVlXFWoVvJI= Subject key identifier: 4D:AA:6D:80:C0:06:77:BB:49:C0:AD:4F:A4:37:5E:63:61:99:C6:B6 Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 735063319A9EE0B4CA7554F0B834450A7B1E8598 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:11:04 +0000 Manifest this update: Thu 23 Jul 2026 17:06:04 +0000 Manifest next update: Fri 24 Jul 2026 17:32:04 +0000 Files and hashes: 1: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=) 2: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: ucqhSMZGeGr/1wYoQDAAFZFZ9upcEuZMnQm/T/K0l44=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=) 4: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=) 5: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:50:63:31:9a:9e:e0:b4:ca:75:54:f0:b8:34:45:0a:7b:1e:85:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Jul 23 17:06:04 2026 GMT Not After : Jul 24 17:32:04 2026 GMT Subject: CN=4DAA6D80C00677BB49C0AD4FA4375E636199C6B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:ff:d9:7b:37:83:e7:e4:fc:6c:6e:cc:a5: 9a:28:80:d0:1d:be:a3:a7:05:84:e6:93:70:e5:cd: eb:b3:6a:67:cc:26:f6:65:fc:65:7a:57:a0:10:f0: e9:76:3a:ab:75:1c:d4:5a:85:67:8f:b9:c7:5a:15: b9:97:e7:a4:1d:eb:e2:d1:d9:73:49:9c:c6:10:5e: 18:83:04:14:9d:03:53:14:f1:d2:8d:e8:56:da:35: eb:fb:e2:64:74:ea:07:7f:78:c8:19:5d:c6:7e:87: 43:2e:e6:15:8a:f2:1c:11:cb:51:d6:29:12:34:6a: 21:17:95:9b:41:18:be:19:11:33:75:36:d5:f3:76: c7:d0:cf:74:93:e6:a1:16:cb:1e:78:fd:7d:1d:45: c5:bd:8d:24:60:d7:c8:c6:10:03:52:51:aa:23:0d: 7b:11:81:6f:ce:b6:a9:47:f1:78:ea:50:9a:6b:55: 9d:82:1d:ad:e8:19:da:9e:d4:46:52:ba:3b:65:3b: ac:e4:1a:19:09:8e:bd:5a:e2:4a:da:f8:19:11:2d: a1:ac:f9:38:a7:82:92:26:39:c3:7b:5d:c0:76:44: 3b:6c:ad:77:6c:f1:2a:2d:d3:59:8b:02:da:ad:52: d2:5b:26:33:98:fc:08:5f:3a:84:a6:6b:c3:bf:2d: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AA:6D:80:C0:06:77:BB:49:C0:AD:4F:A4:37:5E:63:61:99:C6:B6 X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b0:bc:35:7b:58:3b:a6:ae:98:19:85:15:a0:e4:f1:11:fd: 74:4e:09:9f:24:8b:94:02:36:79:b6:41:82:a5:bc:4a:f9:20: 98:bf:87:60:1f:be:ff:76:89:34:cf:4e:d9:85:f6:13:a7:e8: 61:85:f8:e0:a0:44:14:d5:8b:fe:46:f8:1c:33:96:f3:ff:07: d3:da:85:2c:cc:91:64:fe:bd:7e:df:cc:00:b1:e4:83:a3:0f: bb:50:2e:42:b4:d1:e9:b9:4c:c1:6a:37:76:4b:93:41:0b:41: 6c:09:36:5b:e1:99:da:56:09:eb:b0:39:94:b8:d9:7f:98:dc: 48:e3:8f:5a:a9:7a:af:1e:d0:5c:b1:87:27:c2:31:22:75:08: 32:24:04:30:02:50:d4:77:53:59:9c:72:2f:81:f6:82:9b:06: a3:59:6e:eb:df:78:74:d0:31:2e:ca:8f:b2:5c:bb:15:ff:1a: c6:38:c1:45:14:a7:19:8a:45:dd:b6:73:6d:21:6e:08:9d:12: 6c:a9:43:3c:4a:31:d6:5a:91:b0:01:7f:07:33:45:4c:98:aa: 6d:b4:11:16:6c:50:84:09:0a:5b:9c:29:e5:a3:67:c3:49:8c: 39:78:06:3a:85:bb:6a:60:49:3c:33:25:d4:31:ca:af:b6:3e: 3a:4b:98:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1BjMZqe4LTKdVTwuDRFCnsehZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA3MjMxNzA2MDRaFw0yNjA3MjQxNzMyMDRaMDMxMTAvBgNV BAMTKDREQUE2RDgwQzAwNjc3QkI0OUMwQUQ0RkE0Mzc1RTYzNjE5OUM2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2a//ZezeD5+T8bG7MpZoogNAd vqOnBYTmk3DlzeuzamfMJvZl/GV6V6AQ8Ol2Oqt1HNRahWePucdaFbmX56Qd6+LR 2XNJnMYQXhiDBBSdA1MU8dKN6FbaNev74mR06gd/eMgZXcZ+h0Mu5hWK8hwRy1HW KRI0aiEXlZtBGL4ZETN1NtXzdsfQz3ST5qEWyx54/X0dRcW9jSRg18jGEANSUaoj DXsRgW/OtqlH8XjqUJprVZ2CHa3oGdqe1EZSujtlO6zkGhkJjr1a4kra+BkRLaGs +TingpImOcN7XcB2RDtsrXds8Sot01mLAtqtUtJbJjOY/AhfOoSma8O/LbVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaptgMAGd7tJwK1PpDdeY2GZxrYwHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKwvDV7WDumrpgZhRWg5PER/XROCZ8ki5QC Nnm2QYKlvEr5IJi/h2Afvv92iTTPTtmF9hOn6GGF+OCgRBTVi/5G+BwzlvP/B9Pa hSzMkWT+vX7fzACx5IOjD7tQLkK00em5TMFqN3ZLk0ELQWwJNlvhmdpWCeuwOZS4 2X+Y3Ejjj1qpeq8e0FyxhyfCMSJ1CDIkBDACUNR3U1mcci+B9oKbBqNZbuvfeHTQ MS7Kj7JcuxX/GsY4wUUUpxmKRd22c20hbgidEmypQzxKMdZakbABfwczRUyYqm20 ERZsUIQJClucKeWjZ8NJjDl4BjqFu2pgSTwzJdQxyq+2PjpLmLQ= -----END CERTIFICATE-----Generated at Fri Jul 24 06:17:19 2026 by rpki-client