$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: 4blTtZiH/L8zlFIFQ1uFjHJy29BEVguvmqzglVG1M98= Subject key identifier: B2:3A:6F:01:3E:5F:F7:9B:90:40:A8:F9:83:DF:20:1B:13:2A:EC:9A Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 6AA910E3EF0A08ED54E757C927B495E06D9ADED3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:53:12 +0000 Manifest this update: Thu 23 Jul 2026 18:48:12 +0000 Manifest next update: Fri 24 Jul 2026 19:29:12 +0000 Files and hashes: 1: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 3: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: vfzz/KEPBsZyZeqyw4Xg1PYQQuiKCPK9LVkf6HrWcbs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a9:10:e3:ef:0a:08:ed:54:e7:57:c9:27:b4:95:e0:6d:9a:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Jul 23 18:48:12 2026 GMT Not After : Jul 24 19:29:12 2026 GMT Subject: CN=B23A6F013E5FF79B9040A8F983DF201B132AEC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:20:b9:ce:11:64:5c:f1:2a:0a:01:5b:b1: 7f:46:23:77:a1:bf:ec:3a:57:7f:35:a3:64:e0:29: d6:6e:b6:83:9a:0c:fe:d9:37:c0:e8:74:1e:3b:e2: 70:a3:e6:17:a6:e8:ba:1c:25:39:ef:1e:26:17:d3: cb:42:3a:83:e6:ae:ad:72:1e:73:3e:82:e8:41:f2: 81:5f:43:ea:ec:fa:c1:58:9e:23:19:bf:2d:ff:d8: 13:9a:88:1e:08:4b:e0:a7:3c:25:21:e9:a2:fd:ae: 6c:3c:31:4b:e4:d1:1b:68:e5:71:33:99:4a:b9:22: 4d:5e:18:60:70:5c:c9:9b:72:a1:90:d3:c3:ba:aa: e3:5b:ab:2a:04:a3:e8:11:5f:85:d1:20:08:26:e0: 88:92:8a:16:6b:7f:ed:3c:35:c2:f7:d3:32:d5:f2: f8:da:5f:5b:98:3d:b2:5e:19:74:d2:07:d2:3a:d9: 79:e5:85:4d:da:a8:ee:e8:87:d8:29:e9:86:d3:fa: a8:22:db:66:2c:22:96:d0:d3:3a:49:4f:6b:8d:ac: 9e:7c:85:be:6f:79:e2:d9:52:14:4f:48:6b:ed:28: 71:a4:02:3e:a8:9b:e5:b3:d3:09:0b:17:59:77:6a: 4c:e2:16:c9:62:b1:6d:f6:f1:1a:44:98:b0:0a:a7: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:6F:01:3E:5F:F7:9B:90:40:A8:F9:83:DF:20:1B:13:2A:EC:9A X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d9:35:06:7b:da:e9:d9:59:66:28:40:7d:0b:81:0c:88:fb: de:2a:70:8d:83:92:01:8c:00:0f:56:6b:3e:8d:0b:52:e4:5c: 40:38:bd:9a:ac:8e:d4:ec:74:6a:dd:8f:62:3f:40:a5:6f:19: 63:9e:72:f9:93:a0:58:71:01:28:66:60:20:74:ad:74:7a:ef: 39:6f:40:82:47:e8:ed:b4:56:ab:8f:e3:3b:67:db:2c:1b:4b: 0b:0c:6b:c2:c9:72:b0:fc:c4:4e:c5:48:e8:41:11:f1:90:33: 48:e4:a0:8b:17:ab:01:1b:bc:48:29:14:30:19:4f:4e:24:0d: 16:6c:3b:36:08:0b:e2:73:ad:ed:e2:47:6c:ff:c9:d8:2d:a2: da:9d:c5:d5:c2:6c:c0:60:e3:2e:fe:2c:20:ff:b6:46:e5:16: 7a:1c:32:82:02:7b:f5:30:f5:0f:94:b1:51:50:29:7e:61:d4: dc:3b:d4:50:74:75:63:c1:99:89:3e:13:f6:dd:90:c2:19:39: 27:59:6b:56:f9:21:cf:a8:0b:ea:ed:1b:b8:3f:66:cf:75:0c: 35:ff:7a:eb:5f:df:60:20:01:94:5c:1b:a9:5b:a9:75:95:17: 4c:79:81:38:30:51:a4:ba:a6:d9:8e:1c:58:e2:03:9e:47:0c: 63:96:c8:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqkQ4+8KCO1U51fJJ7SV4G2a3tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA3MjMxODQ4MTJaFw0yNjA3MjQxOTI5MTJaMDMxMTAvBgNV BAMTKEIyM0E2RjAxM0U1RkY3OUI5MDQwQThGOTgzREYyMDFCMTMyQUVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OCC5zhFkXPEqCgFbsX9GI3eh v+w6V381o2TgKdZutoOaDP7ZN8DodB474nCj5hem6LocJTnvHiYX08tCOoPmrq1y HnM+guhB8oFfQ+rs+sFYniMZvy3/2BOaiB4IS+CnPCUh6aL9rmw8MUvk0Rto5XEz mUq5Ik1eGGBwXMmbcqGQ08O6quNbqyoEo+gRX4XRIAgm4IiSihZrf+08NcL30zLV 8vjaX1uYPbJeGXTSB9I62XnlhU3aqO7oh9gp6YbT+qgi22YsIpbQ0zpJT2uNrJ58 hb5veeLZUhRPSGvtKHGkAj6om+Wz0wkLF1l3akziFslisW328RpEmLAKp3ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjpvAT5f95uQQKj5g98gGxMq7JowHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLZNQZ72unZWWYoQH0LgQyI+94qcI2DkgGM AA9Waz6NC1LkXEA4vZqsjtTsdGrdj2I/QKVvGWOecvmToFhxAShmYCB0rXR67zlv QIJH6O20VquP4ztn2ywbSwsMa8LJcrD8xE7FSOhBEfGQM0jkoIsXqwEbvEgpFDAZ T04kDRZsOzYIC+Jzre3iR2z/ydgtotqdxdXCbMBg4y7+LCD/tkblFnocMoICe/Uw 9Q+UsVFQKX5h1Nw71FB0dWPBmYk+E/bdkMIZOSdZa1b5Ic+oC+rtG7g/Zs91DDX/ eutf32AgAZRcG6lbqXWVF0x5gTgwUaS6ptmOHFjiA55HDGOWyBk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:56 2026 by rpki-client