$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: dltYwWHs2S/q9FY4/phFgD8fWgs8RuMlkErvOkTdHTA= Subject key identifier: 2A:8F:20:2D:42:7C:DB:C2:EF:33:2B:47:D9:6A:47:28:C2:1D:CD:E5 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 324AC559C11C4273CD488E0B27C9C4DCDBE60CCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:48:04 +0000 Manifest this update: Thu 23 Jul 2026 14:43:04 +0000 Manifest next update: Fri 24 Jul 2026 17:39:04 +0000 Files and hashes: 1: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: 6ELwsZhWRmRCB/gRLr07A2qtlm8l2ywhkuFSKoQQQMs=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 4: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4a:c5:59:c1:1c:42:73:cd:48:8e:0b:27:c9:c4:dc:db:e6:0c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Jul 23 14:43:04 2026 GMT Not After : Jul 24 17:39:04 2026 GMT Subject: CN=2A8F202D427CDBC2EF332B47D96A4728C21DCDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:7f:17:05:e1:d3:19:7f:ec:3f:dd:bb:f4: 49:d3:c0:e6:32:9b:1c:f8:ab:e5:16:fd:9d:81:08: 2a:07:b5:3a:98:b2:a8:a9:59:84:90:c7:83:15:bb: a1:b6:ca:f7:d5:79:e6:29:ba:3a:db:5e:cd:56:a6: 4d:4a:24:7f:db:6a:37:93:1b:e2:3d:de:ea:41:ee: e3:7d:6e:25:64:26:25:c5:e3:e8:98:24:12:62:a8: 22:5e:c1:93:89:0f:a6:01:92:86:78:ba:bf:30:90: a8:68:0b:53:f2:dd:30:51:ab:2c:e8:84:dc:a5:a1: 7b:6d:1f:09:f0:20:85:10:f5:00:f8:e7:ef:66:68: ab:9a:aa:ae:0b:1f:2c:e9:49:30:90:f6:ad:76:11: 5b:09:7d:c6:65:65:ab:b1:5c:3b:b5:f8:ed:39:02: 14:21:aa:29:02:48:1d:7a:56:f3:69:24:8e:0b:fe: a7:5d:29:1f:55:9d:39:97:dc:8e:40:f6:d3:a0:d4: ca:5a:24:91:fb:a9:d1:9d:3f:b7:0a:e5:cc:c4:43: cd:4e:14:ac:66:6d:36:98:31:f7:cc:ea:93:5f:a9: fa:66:ac:27:a5:80:1f:d0:c8:36:9e:6c:1f:c3:22: 68:37:b3:52:f5:f8:9f:a8:dd:c9:c9:4a:49:a5:c7: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:20:2D:42:7C:DB:C2:EF:33:2B:47:D9:6A:47:28:C2:1D:CD:E5 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e3:14:f5:a4:3f:9d:7c:63:7a:32:9e:cd:ca:52:81:c6:f3: de:f6:d2:33:47:ff:be:5d:71:2e:de:bc:e8:41:18:ec:71:40: 01:78:f4:24:3f:ac:38:24:b8:45:35:28:0e:5d:5a:7a:15:28: 09:3d:13:e8:c7:25:f1:5f:4e:2c:5b:b7:4a:44:07:16:c5:2c: 33:aa:28:e4:fe:1a:bf:95:3d:2b:36:9c:a8:de:8f:bc:3b:27: e7:5f:e2:0c:de:32:07:16:f4:da:41:4d:fa:a9:44:b7:cd:92: c1:68:6a:10:8d:3b:9a:a2:6a:37:09:ea:4a:31:5e:c3:7e:3e: 73:1f:5d:55:87:62:21:c1:6d:4b:35:24:2a:dd:19:26:97:e6: 7b:a8:c7:87:a7:3d:a0:29:2c:d0:fb:dd:97:1e:3a:48:77:26: 32:90:42:26:aa:c7:5a:66:92:6d:a3:6d:85:bd:69:45:d3:51: 68:a1:24:b1:e8:80:4a:9a:80:69:6c:68:5c:0a:f5:2d:1d:2d: f9:86:d3:9b:b5:38:d7:2b:89:c8:9e:ee:37:28:28:84:9f:fc: 25:76:dd:65:0e:93:18:49:af:75:56:02:00:84:2f:21:55:26: b8:77:f4:34:3e:a9:f5:a0:fe:f7:d3:77:51:a5:34:41:83:ca: 8d:88:de:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkrFWcEcQnPNSI4LJ8nE3NvmDMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA3MjMxNDQzMDRaFw0yNjA3MjQxNzM5MDRaMDMxMTAvBgNV BAMTKDJBOEYyMDJENDI3Q0RCQzJFRjMzMkI0N0Q5NkE0NzI4QzIxRENERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjX8XBeHTGX/sP9279EnTwOYy mxz4q+UW/Z2BCCoHtTqYsqipWYSQx4MVu6G2yvfVeeYpujrbXs1Wpk1KJH/bajeT G+I93upB7uN9biVkJiXF4+iYJBJiqCJewZOJD6YBkoZ4ur8wkKhoC1Py3TBRqyzo hNyloXttHwnwIIUQ9QD45+9maKuaqq4LHyzpSTCQ9q12EVsJfcZlZauxXDu1+O05 AhQhqikCSB16VvNpJI4L/qddKR9VnTmX3I5A9tOg1MpaJJH7qdGdP7cK5czEQ81O FKxmbTaYMffM6pNfqfpmrCelgB/QyDaebB/DImg3s1L1+J+o3cnJSkmlx841AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKo8gLUJ828LvMytH2WpHKMIdzeUwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvjFPWkP518Y3oyns3KUoHG89720jNH/75d cS7evOhBGOxxQAF49CQ/rDgkuEU1KA5dWnoVKAk9E+jHJfFfTixbt0pEBxbFLDOq KOT+Gr+VPSs2nKjej7w7J+df4gzeMgcW9NpBTfqpRLfNksFoahCNO5qiajcJ6kox XsN+PnMfXVWHYiHBbUs1JCrdGSaX5nuox4enPaApLND73ZceOkh3JjKQQiaqx1pm km2jbYW9aUXTUWihJLHogEqagGlsaFwK9S0dLfmG05u1ONcricie7jcoKISf/CV2 3WUOkxhJr3VWAgCELyFVJrh39DQ+qfWg/vfTd1GlNEGDyo2I3kc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:15 2026 by rpki-client