$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: Mv+bMW/lgsXem5ry2zenGFEHUYuq/QMV23TVFRiQIUw= Subject key identifier: 30:5A:F0:31:EE:4D:79:C8:07:35:95:F5:5C:A5:A8:14:91:CD:FC:E8 Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 2FB79F59795C4AB76D34BF65CB434DF8FD201F8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:31:34 +0000 Manifest this update: Thu 23 Jul 2026 09:26:34 +0000 Manifest next update: Fri 24 Jul 2026 13:08:34 +0000 Files and hashes: 1: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: QdRYbhxIU+ZYIapd4tu4V3MqUYttaVzcToMp6kvRw9M=) 2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) 3: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 4: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b7:9f:59:79:5c:4a:b7:6d:34:bf:65:cb:43:4d:f8:fd:20:1f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Jul 23 09:26:34 2026 GMT Not After : Jul 24 13:08:34 2026 GMT Subject: CN=305AF031EE4D79C8073595F55CA5A81491CDFCE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:ba:dc:65:ee:8d:bb:b5:e3:ed:ee:52:5a: 39:47:27:3b:69:73:80:53:30:71:03:b5:03:68:3c: c9:44:6c:be:97:a4:a4:72:95:3c:75:f9:91:d5:7f: 51:55:44:a4:24:bb:04:e2:de:08:df:6c:1d:60:87: cc:2e:25:29:59:36:cd:e0:1c:bc:23:60:19:f0:56: f9:4d:fa:bb:f2:e4:8e:98:81:75:91:6b:21:c6:38: 07:18:1f:97:e7:a6:cd:65:11:ef:85:5d:17:5e:8d: eb:20:e2:9c:22:f0:aa:c5:a8:c9:da:bb:76:70:68: fc:ce:07:7d:e2:42:74:45:21:6c:a2:3f:4a:ed:8f: 10:6b:9f:e6:49:51:00:07:47:94:f5:23:77:00:46: 40:f7:dc:4e:61:f7:0c:9a:49:02:7a:0b:91:a8:e3: a6:ca:e0:09:09:f7:b8:eb:65:74:e6:54:ce:ab:e3: 9b:e6:b6:fd:d8:03:36:b1:9f:b6:80:18:47:b0:45: d0:9f:e3:57:de:0d:2f:19:be:1e:0f:d5:55:5f:b6: 06:4c:a3:ad:18:60:a8:75:31:05:87:f4:70:c1:04: 81:51:09:b5:1f:86:12:e7:c0:30:d4:39:db:1c:32: 0d:32:4c:b2:6e:b6:29:9f:97:94:56:74:38:f3:81: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5A:F0:31:EE:4D:79:C8:07:35:95:F5:5C:A5:A8:14:91:CD:FC:E8 X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:32:ce:59:c8:6e:e9:c5:91:94:62:2d:df:a5:f0:93:5e:77: 8f:1b:34:4a:d7:42:73:68:80:80:1a:0e:8a:a4:da:c5:81:53: fc:50:86:24:09:6b:40:bd:1d:06:25:ad:8e:30:6e:0c:59:be: 09:6c:cb:04:5b:4b:7e:2e:85:59:d0:d2:78:4d:f2:7f:3b:6f: 60:a1:e5:31:ea:4e:2f:fc:35:97:f1:34:35:6a:15:b5:ef:d4: 91:28:46:9e:6c:a8:b1:1f:e5:6e:b4:7c:18:4c:45:a4:a6:48: 63:e7:b5:73:ee:e4:ea:3d:40:d8:99:c1:a3:d0:f3:47:ef:ff: 11:57:3f:51:da:62:ab:92:9f:74:fa:37:a7:4b:ea:af:ef:0d: f0:22:d5:d4:64:56:f8:20:a4:04:7f:0e:cd:b0:e5:47:f5:72: c2:a6:2d:95:88:af:6e:6a:25:fc:45:0d:d4:0b:c1:a3:4c:c0: ff:3d:f6:82:30:89:77:3b:6e:8d:9a:13:94:2b:6c:2c:46:b6: 81:9d:d3:af:ef:b4:45:d0:0e:60:43:38:26:49:3c:64:c6:a3: 6c:16:34:f9:0a:3b:0c:3b:43:bc:43:f9:b6:0e:b0:70:78:48: cd:c5:36:0b:6b:c8:78:6d:97:dc:64:28:c5:5d:a2:c6:f1:46: ae:d3:30:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7efWXlcSrdtNL9ly0NN+P0gH40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA3MjMwOTI2MzRaFw0yNjA3MjQxMzA4MzRaMDMxMTAvBgNV BAMTKDMwNUFGMDMxRUU0RDc5QzgwNzM1OTVGNTVDQTVBODE0OTFDREZDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu37rcZe6Nu7Xj7e5SWjlHJztp c4BTMHEDtQNoPMlEbL6XpKRylTx1+ZHVf1FVRKQkuwTi3gjfbB1gh8wuJSlZNs3g HLwjYBnwVvlN+rvy5I6YgXWRayHGOAcYH5fnps1lEe+FXRdejesg4pwi8KrFqMna u3ZwaPzOB33iQnRFIWyiP0rtjxBrn+ZJUQAHR5T1I3cARkD33E5h9wyaSQJ6C5Go 46bK4AkJ97jrZXTmVM6r45vmtv3YAzaxn7aAGEewRdCf41feDS8Zvh4P1VVftgZM o60YYKh1MQWH9HDBBIFRCbUfhhLnwDDUOdscMg0yTLJutimfl5RWdDjzgbMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFrwMe5NecgHNZX1XKWoFJHN/OgwHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsyzlnIbunFkZRiLd+l8JNed48bNErXQnNo gIAaDoqk2sWBU/xQhiQJa0C9HQYlrY4wbgxZvglsywRbS34uhVnQ0nhN8n87b2Ch 5THqTi/8NZfxNDVqFbXv1JEoRp5sqLEf5W60fBhMRaSmSGPntXPu5Oo9QNiZwaPQ 80fv/xFXP1HaYquSn3T6N6dL6q/vDfAi1dRkVvggpAR/Ds2w5Uf1csKmLZWIr25q JfxFDdQLwaNMwP899oIwiXc7bo2aE5QrbCxGtoGd06/vtEXQDmBDOCZJPGTGo2wW NPkKOww7Q7xD+bYOsHB4SM3FNgtryHhtl9xkKMVdosbxRq7TMGI= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:59 2026 by rpki-client