$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft File: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft (raw, json) Hash identifier: k8gcFbMmmFmEm62jyE5Wda8XhSyQu7t6WLwaXP7bHyU= Subject key identifier: 5F:1F:01:73:BF:AB:DF:B7:47:96:98:35:7D:72:46:D4:6A:4E:77:5E Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Certificate serial: 1AE4444DD42EAC1608B8ECB2028885C32AC0D012 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:21:03 +0000 Manifest this update: Thu 23 Jul 2026 21:16:03 +0000 Manifest next update: Sat 25 Jul 2026 00:14:03 +0000 Files and hashes: 1: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: XrQbHF8ES5i2bpLQRbTUE7Wl3M4ZUVmyaoRlPolZS6Y=) 2: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Lw1DMZ5kJp5ICeFivj5ZZ60njB9OoQuGFsGq8+auMdU=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=) 5: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl (hash: J8cafM9aeEucgDjL3/HEtJVUuWhjYWV9b23i7abhGNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e4:44:4d:d4:2e:ac:16:08:b8:ec:b2:02:88:85:c3:2a:c0:d0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Validity Not Before: Jul 23 21:16:03 2026 GMT Not After : Jul 25 00:14:03 2026 GMT Subject: CN=5F1F0173BFABDFB7479698357D7246D46A4E775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:48:4d:12:1b:6e:89:46:a9:a1:df:0d:0f: 34:d7:40:2f:ac:5b:86:fa:78:da:c6:ca:bb:73:5c: 92:e0:b2:3e:01:89:76:94:b2:36:64:1d:dd:88:f9: 6f:e1:e9:ba:bf:7b:02:3a:bd:31:f8:69:47:65:35: c2:86:ef:40:92:15:35:08:14:94:f8:c3:99:f2:f8: 15:7d:48:90:4d:46:0b:70:41:cf:0f:f6:32:c2:27: ee:e0:77:00:29:79:9f:90:4b:22:fc:85:73:16:23: 94:a7:02:ec:16:26:7e:29:b2:7b:c6:ba:8f:a0:dc: 2b:ad:13:9c:1d:49:0a:0e:7c:b4:75:06:3d:59:e9: 4b:15:85:6b:77:a9:ad:bb:c9:66:47:f3:76:59:4c: da:94:e6:7f:cc:ec:82:38:1d:24:04:2a:9f:53:6e: d0:bb:8d:cc:21:61:26:e6:a9:2e:98:a9:53:15:3e: 38:dd:4a:aa:3f:65:f5:ef:c0:f4:58:20:02:9c:6b: 94:8d:54:a4:27:fe:be:83:8b:3b:a8:2f:3d:6a:8d: 8c:6e:b9:e1:a2:08:33:e4:1b:67:b9:af:8d:b1:27: d4:bf:c7:f5:34:c9:5a:01:25:eb:1e:43:87:95:91: a2:69:be:49:e6:95:d2:d0:88:69:12:3d:36:4b:2f: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:01:73:BF:AB:DF:B7:47:96:98:35:7D:72:46:D4:6A:4E:77:5E X509v3 Authority Key Identifier: keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:60:60:b3:04:04:c3:6f:b7:de:a9:f8:2f:dd:83:79:91:44: bd:93:8b:e2:94:9e:66:8c:02:e4:db:10:52:6b:cc:f1:65:7a: d9:4f:3a:f3:47:3e:67:9b:fc:32:e2:09:81:d6:eb:43:92:f5: a9:27:91:34:f4:90:90:6f:36:05:1f:23:d8:92:77:aa:fd:c9: 66:e8:3f:12:97:94:d3:0c:4f:08:52:02:10:d4:7d:72:93:30: 09:8b:8c:4c:54:b2:1c:1e:42:84:64:28:cb:aa:1a:82:c2:fb: 16:00:7b:ef:f4:f9:e9:6f:1f:a7:f6:2c:37:67:d3:78:ad:2a: d2:f9:04:9e:4d:f4:73:24:21:8e:08:08:40:1e:34:de:1a:30: c2:53:4b:b3:b0:34:0c:fd:9b:ac:a3:3a:eb:34:cd:49:28:75: fc:c6:38:8f:c3:52:99:02:19:30:c5:ba:10:23:12:86:ca:4e: b2:d6:eb:af:05:cc:7a:e7:65:f6:38:23:9e:d1:54:f0:1b:b1: 4e:4f:be:ef:3e:a3:f8:05:92:2a:a6:ea:53:cf:48:0e:97:f9: 5a:54:28:42:c7:17:b4:1e:ab:f6:ee:36:9b:74:ae:31:43:a8: f1:a6:33:b0:48:fd:7c:48:31:d5:98:96:1c:f3:69:3f:a4:41: db:8f:ba:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuRETdQurBYIuOyyAoiFwyrA0BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5 RjQxNTlBMjAeFw0yNjA3MjMyMTE2MDNaFw0yNjA3MjUwMDE0MDNaMDMxMTAvBgNV BAMTKDVGMUYwMTczQkZBQkRGQjc0Nzk2OTgzNTdENzI0NkQ0NkE0RTc3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgc0hNEhtuiUapod8NDzTXQC+s W4b6eNrGyrtzXJLgsj4BiXaUsjZkHd2I+W/h6bq/ewI6vTH4aUdlNcKG70CSFTUI FJT4w5ny+BV9SJBNRgtwQc8P9jLCJ+7gdwApeZ+QSyL8hXMWI5SnAuwWJn4psnvG uo+g3CutE5wdSQoOfLR1Bj1Z6UsVhWt3qa27yWZH83ZZTNqU5n/M7II4HSQEKp9T btC7jcwhYSbmqS6YqVMVPjjdSqo/ZfXvwPRYIAKca5SNVKQn/r6DizuoLz1qjYxu ueGiCDPkG2e5r42xJ9S/x/U0yVoBJeseQ4eVkaJpvknmldLQiGkSPTZLL4GJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXx8Bc7+r37dHlpg1fXJG1GpOd14wHwYDVR0j BBgwFoAU1n3ctGz0C1JkH3G/d1bfop9BWaIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3ZTgwODEtNjNhZi00OWU3LTk2NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2 Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5RjQxNTlBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjdERENCNDZDRjQwQjUyNjQxRjcxQkY3NzU2REZBMjlGNDE1 OUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRG QTI5RjQxNTlBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZgYLMEBMNvt96p+C/dg3mRRL2Ti+KUnmaM AuTbEFJrzPFletlPOvNHPmeb/DLiCYHW60OS9aknkTT0kJBvNgUfI9iSd6r9yWbo PxKXlNMMTwhSAhDUfXKTMAmLjExUshweQoRkKMuqGoLC+xYAe+/0+elvH6f2LDdn 03itKtL5BJ5N9HMkIY4ICEAeNN4aMMJTS7OwNAz9m6yjOus0zUkodfzGOI/DUpkC GTDFuhAjEobKTrLW668FzHrnZfY4I57RVPAbsU5Pvu8+o/gFkiqm6lPPSA6X+VpU KELHF7Qeq/buNpt0rjFDqPGmM7BI/XxIMdWYlhzzaT+kQduPuio= -----END CERTIFICATE-----Generated at Fri Jul 24 05:12:28 2026 by rpki-client