$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json) Hash identifier: z+4gldcWspVJNGePTWPIMRzKvnFQZWKgbkJQHiOdGGU= Subject key identifier: 31:A5:72:E9:D9:4A:7C:45:3C:C3:4B:4D:CF:3E:D8:BF:E7:2C:A9:3D Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 38B615E0E674EB4C251213A6658CD487EB4C16B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:03:38 +0000 Manifest this update: Thu 23 Jul 2026 10:58:38 +0000 Manifest next update: Fri 24 Jul 2026 11:48:38 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=) 2: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=) 3: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: 16sAoxGzKLJEh3EcznfIYDdH/ErU39Wz9MwthyOcU/U=) 4: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b6:15:e0:e6:74:eb:4c:25:12:13:a6:65:8c:d4:87:eb:4c:16:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: Jul 23 10:58:38 2026 GMT Not After : Jul 24 11:48:38 2026 GMT Subject: CN=31A572E9D94A7C453CC34B4DCF3ED8BFE72CA93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:ce:ce:bf:de:8f:b2:0b:b1:02:68:1f:3f: e1:b4:2e:2c:7b:5c:a9:f9:93:78:af:82:da:67:86: 7f:13:3f:9e:89:df:0d:cb:d7:16:e3:f3:39:9d:29: a3:6a:10:c2:33:36:4c:d5:b0:c0:ea:5e:f6:b6:ea: 22:64:91:bb:3a:5f:52:9d:ec:9c:ea:6e:34:66:d9: 93:3c:d5:28:91:db:85:f5:b8:2d:43:2a:2b:7d:14: 4f:da:f6:00:ef:0e:e1:10:4b:b3:6a:94:ee:6f:94: 19:d7:1e:ee:fb:c5:e2:19:bb:2e:f5:ff:23:48:61: 73:e5:db:00:88:80:5e:12:aa:11:22:9e:77:1d:6f: 0f:ff:05:2e:b3:77:0f:c2:e5:8b:86:64:24:b1:1e: cc:bb:1d:30:24:b0:be:42:4e:7a:48:18:58:d9:d6: 61:a0:15:f3:21:34:b8:bb:da:bb:c5:8d:e8:7f:d9: 06:14:7c:88:51:f2:0e:c6:6c:17:bc:c2:3a:15:0a: dd:bb:7e:98:48:0e:b7:07:a6:a1:f5:28:4c:b2:75: 74:89:4d:72:72:5f:47:df:7d:05:22:48:b1:ae:36: 6a:bc:02:ee:88:3e:da:df:5b:52:12:38:44:ec:a7: b5:e2:5f:fe:c4:66:fe:e0:74:e5:7a:3c:ae:51:a5: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A5:72:E9:D9:4A:7C:45:3C:C3:4B:4D:CF:3E:D8:BF:E7:2C:A9:3D X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:03:d5:43:e1:c3:55:e5:85:37:44:2a:7b:85:72:65:92: 86:11:41:8a:44:3a:5c:d9:89:25:f6:00:56:7b:ab:42:d9:5a: 4c:fb:88:9c:7a:d4:00:74:ec:a4:c2:42:7c:1c:84:31:6d:45: 74:db:17:93:20:37:52:96:9e:4a:fe:10:bb:b6:5f:a8:ed:ee: d1:fe:08:9c:aa:16:d6:5e:b9:e2:b9:20:c0:5e:04:b4:77:99: 02:9b:6a:2f:3d:b4:a4:e8:06:c7:e7:e6:a3:93:62:99:ae:d8: 94:82:1f:56:85:4e:eb:f0:70:f1:6f:7c:44:37:fb:c6:58:3d: 0e:7b:7a:fe:b2:8b:2c:46:70:eb:d2:58:71:dd:3b:29:5a:73: 0f:b1:e0:2b:d4:50:e1:ac:29:3c:05:86:6d:5e:03:91:59:de: 2d:d6:dc:ab:af:05:e3:aa:9f:ba:71:53:cb:65:48:b9:40:4c: 65:1a:8f:ac:ef:e4:2f:85:19:26:4d:46:4a:9a:98:d9:bf:ba: e0:ab:e7:6c:5a:87:2e:30:81:3e:4f:6e:bd:96:02:cd:90:e1: ce:fe:54:98:25:a5:bb:ff:b3:e1:7a:28:36:27:0f:0d:da:01: 04:76:eb:d2:13:4f:09:4d:09:b2:6c:c3:b0:78:07:9b:b5:f8: e0:e9:43:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLYV4OZ060wlEhOmZYzUh+tMFrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA3MjMxMDU4MzhaFw0yNjA3MjQxMTQ4MzhaMDMxMTAvBgNV BAMTKDMxQTU3MkU5RDk0QTdDNDUzQ0MzNEI0RENGM0VEOEJGRTcyQ0E5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuM7Ov96PsguxAmgfP+G0Lix7 XKn5k3ivgtpnhn8TP56J3w3L1xbj8zmdKaNqEMIzNkzVsMDqXva26iJkkbs6X1Kd 7JzqbjRm2ZM81SiR24X1uC1DKit9FE/a9gDvDuEQS7NqlO5vlBnXHu77xeIZuy71 /yNIYXPl2wCIgF4SqhEinncdbw//BS6zdw/C5YuGZCSxHsy7HTAksL5CTnpIGFjZ 1mGgFfMhNLi72rvFjeh/2QYUfIhR8g7GbBe8wjoVCt27fphIDrcHpqH1KEyydXSJ TXJyX0fffQUiSLGuNmq8Au6IPtrfW1ISOETsp7XiX/7EZv7gdOV6PK5RpTHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMaVy6dlKfEU8w0tNzz7Yv+csqT0wHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuZA9VD4cNV5YU3RCp7hXJlkoYRQYpEOlzZ iSX2AFZ7q0LZWkz7iJx61AB07KTCQnwchDFtRXTbF5MgN1KWnkr+ELu2X6jt7tH+ CJyqFtZeueK5IMBeBLR3mQKbai89tKToBsfn5qOTYpmu2JSCH1aFTuvwcPFvfEQ3 +8ZYPQ57ev6yiyxGcOvSWHHdOylacw+x4CvUUOGsKTwFhm1eA5FZ3i3W3KuvBeOq n7pxU8tlSLlATGUaj6zv5C+FGSZNRkqamNm/uuCr52xahy4wgT5Pbr2WAs2Q4c7+ VJglpbv/s+F6KDYnDw3aAQR269ITTwlNCbJsw7B4B5u1+ODpQyY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:22 2026 by rpki-client