$ rpki-client -vvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: CZihiwWBBFAsoNcpkfngGzOZME6Dnk+Aw6XxLRljXvI= Subject key identifier: 4B:F6:A6:D4:F5:D1:8A:35:D4:4C:D3:0A:6F:2D:7F:4F:9E:C8:3F:D5 Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 4C1CE4F637B70F52EC5E3A5F7C0DA2DFFE292E4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 05:12:15 +0000 Manifest this update: Tue 21 Jul 2026 05:07:15 +0000 Manifest next update: Wed 22 Jul 2026 05:40:15 +0000 Files and hashes: 1: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: Q0vAU+BJSyyI5wpBaXDTe2epd0revDrNXFFTPd3RzMk=) 2: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 3: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 4: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1c:e4:f6:37:b7:0f:52:ec:5e:3a:5f:7c:0d:a2:df:fe:29:2e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Jul 21 05:07:15 2026 GMT Not After : Jul 22 05:40:15 2026 GMT Subject: CN=4BF6A6D4F5D18A35D44CD30A6F2D7F4F9EC83FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:bc:de:e5:81:9f:3a:2c:39:cd:45:6e:a0: e7:59:5a:41:7f:0a:25:ee:ea:aa:25:66:bd:7e:f3: 63:4c:84:56:be:d6:d9:9b:5e:3e:78:31:4e:f0:08: 06:39:32:2a:3a:f7:71:19:08:09:5a:52:dc:3d:37: e6:38:6d:5f:3b:50:5b:ab:4f:4f:49:37:2e:4c:64: b0:b9:4f:04:ee:c4:42:5e:8e:7e:28:8d:39:3f:4d: e7:5c:3b:7c:d8:1d:63:96:07:99:94:e2:c2:4c:24: 00:c2:cb:be:41:53:b4:69:40:b5:eb:1e:5e:e0:23: 07:b0:39:99:f1:15:9b:d9:5a:c0:c2:fe:fc:27:c2: a0:17:09:f6:b6:23:bc:10:8b:61:c6:5e:dd:b3:41: 56:3f:36:04:3e:8f:ca:ae:2c:1c:e6:b4:f5:0d:fa: e5:c0:c4:e3:e4:18:83:9b:50:70:87:ba:fc:66:70: 95:5f:c2:d9:62:fe:f4:62:d6:1a:94:5c:eb:d7:0f: 7b:96:45:8a:d8:06:24:51:d0:2c:df:b6:c6:45:be: eb:3d:f3:12:d9:cc:0c:c8:62:9d:3a:03:b5:5e:5d: ae:e3:4a:26:18:0e:b0:8d:1c:02:2b:1f:de:5e:84: 79:8e:0c:d1:f4:de:94:b5:f2:5f:31:3e:16:43:19: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F6:A6:D4:F5:D1:8A:35:D4:4C:D3:0A:6F:2D:7F:4F:9E:C8:3F:D5 X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:c4:ed:36:8c:7c:12:b9:c7:0b:74:89:35:d6:91:6f:e1: 6e:22:62:f0:36:4c:ed:1f:a1:d1:ff:35:45:bb:dd:51:89:47: cb:c4:c8:c9:dc:a2:87:e6:16:bc:83:40:ab:05:b4:f8:ff:c3: 54:9d:98:18:36:78:6c:04:3c:25:3a:33:27:3a:53:62:fb:52: 35:6f:87:85:22:1c:cc:a9:75:bb:91:1c:4a:79:2e:b9:89:ff: 1f:ad:98:63:ac:6a:f7:b9:7e:a7:53:fd:0d:c7:58:c4:ce:7e: 58:11:cc:e6:cd:2c:17:11:57:8b:92:73:cb:a6:e1:fe:d7:44: b5:7c:58:54:10:90:47:39:af:16:3e:50:a0:fd:ea:cd:a4:ef: b4:d1:b0:00:c8:ff:d2:91:98:b4:e7:b0:d5:78:19:12:d1:97: 1c:a1:ae:68:2a:91:07:a8:47:47:79:3a:7c:6c:cb:7e:06:2b: 06:4d:7b:b3:94:4b:8c:d4:5d:7f:3f:e7:12:4d:32:61:ab:f3: 20:cf:4a:27:d7:df:7f:9f:4d:fa:1f:09:d8:e5:3d:a6:07:e1: 49:ca:40:61:d4:ba:ff:d7:52:c0:23:0b:48:50:96:fb:91:9d: 0d:dc:9a:6d:02:1e:a5:0a:d9:29:d8:56:32:e8:79:fd:b4:05: b7:18:41:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBzk9je3D1LsXjpffA2i3/4pLkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA3MjEwNTA3MTVaFw0yNjA3MjIwNTQwMTVaMDMxMTAvBgNV BAMTKDRCRjZBNkQ0RjVEMThBMzVENDRDRDMwQTZGMkQ3RjRGOUVDODNGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcLze5YGfOiw5zUVuoOdZWkF/ CiXu6qolZr1+82NMhFa+1tmbXj54MU7wCAY5Mio693EZCAlaUtw9N+Y4bV87UFur T09JNy5MZLC5TwTuxEJejn4ojTk/TedcO3zYHWOWB5mU4sJMJADCy75BU7RpQLXr Hl7gIwewOZnxFZvZWsDC/vwnwqAXCfa2I7wQi2HGXt2zQVY/NgQ+j8quLBzmtPUN +uXAxOPkGIObUHCHuvxmcJVfwtli/vRi1hqUXOvXD3uWRYrYBiRR0CzftsZFvus9 8xLZzAzIYp06A7VeXa7jSiYYDrCNHAIrH95ehHmODNH03pS18l8xPhZDGSiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/am1PXRijXUTNMKby1/T57IP9UwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx8xO02jHwSuccLdIk11pFv4W4iYvA2TO0f odH/NUW73VGJR8vEyMncoofmFryDQKsFtPj/w1SdmBg2eGwEPCU6Myc6U2L7UjVv h4UiHMypdbuRHEp5LrmJ/x+tmGOsave5fqdT/Q3HWMTOflgRzObNLBcRV4uSc8um 4f7XRLV8WFQQkEc5rxY+UKD96s2k77TRsADI/9KRmLTnsNV4GRLRlxyhrmgqkQeo R0d5Onxsy34GKwZNe7OUS4zUXX8/5xJNMmGr8yDPSifX33+fTfofCdjlPaYH4UnK QGHUuv/XUsAjC0hQlvuRnQ3cmm0CHqUK2SnYVjLoef20BbcYQVs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:24 2026 by rpki-client