$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json) Hash identifier: VM7yZBfHO3pxbmJ1LoxYcHFsgIrLr4N4aFlRzCrjI2Q= Subject key identifier: D4:83:7A:10:54:9A:4A:5D:66:F5:77:46:94:66:10:DB:0E:32:96:6E Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43 Certificate serial: 3EA7E7DD61AF4AB4EBF40FF699990B38982BF3BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:53:42 +0000 Manifest this update: Mon 20 Jul 2026 13:48:42 +0000 Manifest next update: Tue 21 Jul 2026 17:25:42 +0000 Files and hashes: 1: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: cDI+bqQp6NL5BzfQnvNvj24im2aGzpaqDP2Vy4wyR/s=) 2: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=) 3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=) 4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a7:e7:dd:61:af:4a:b4:eb:f4:0f:f6:99:99:0b:38:98:2b:f3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43 Validity Not Before: Jul 20 13:48:42 2026 GMT Not After : Jul 21 17:25:42 2026 GMT Subject: CN=D4837A10549A4A5D66F57746946610DB0E32966E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:2d:0f:9c:74:95:43:2a:d0:8b:44:d0:75: 7c:01:8b:d7:94:87:6a:0b:a6:38:ec:b1:4d:d6:ea: 2d:63:26:76:92:24:a9:a3:b0:8a:fc:4e:89:45:26: 1c:4b:7f:55:0c:23:8a:c5:49:0b:63:dd:e3:82:5a: 26:59:a9:0a:f6:a0:87:4f:10:55:c5:4f:b8:5a:5d: af:5e:08:17:15:73:96:7a:d4:80:d4:97:1f:54:3f: a6:1c:72:ad:bc:1b:e2:4c:b0:9b:bf:6a:23:45:52: 0e:50:d5:eb:bb:38:e8:b7:be:f5:d7:56:08:2f:c4: 94:4d:8d:01:e4:c4:80:ae:6d:47:c2:b1:9d:d8:cc: d2:ff:61:01:f7:8e:7a:83:2f:3e:fb:b4:73:e8:56: c9:4a:f2:00:a2:2b:b5:a4:20:da:ae:fd:08:b6:4c: 9d:ae:fb:ff:4f:9d:6b:07:b9:7c:d5:35:96:2a:f8: 59:18:63:bc:5c:94:55:42:48:ea:af:db:ec:10:0a: e0:82:f5:b8:64:39:ad:93:8f:d2:d1:df:29:26:28: fe:a9:53:4e:65:2f:fd:de:d4:67:04:b5:a0:00:cd: 11:29:19:cf:26:c5:97:3d:65:81:62:3a:61:39:1a: 99:ea:b9:17:d5:58:a0:ce:fc:c6:d6:01:03:e2:36: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:83:7A:10:54:9A:4A:5D:66:F5:77:46:94:66:10:DB:0E:32:96:6E X509v3 Authority Key Identifier: keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:84:ef:99:a7:a9:8f:5e:a5:8c:28:29:11:33:83:7e:17:c5: f7:26:3d:dd:e8:c8:3e:7f:e4:20:37:6b:d2:56:09:d5:f6:44: 6d:c0:fd:0f:fd:c5:f6:13:c5:f6:47:32:1a:3e:ce:ce:55:4f: 5f:c0:ea:0e:2f:8b:66:65:e5:6c:6c:9d:31:f8:40:ab:8c:e1: 19:2f:79:e6:c4:72:0b:00:c7:3a:a8:1d:ea:f4:64:1f:79:b2: 76:1a:c3:a6:a6:ff:41:86:87:d8:e7:cd:7e:dc:be:00:e2:d3: 4d:7d:f1:db:b5:69:b4:ee:d8:8b:4e:8f:67:91:2e:61:76:f5: 44:a1:c2:f5:d4:0d:94:d7:d0:31:8b:b7:87:64:9a:d9:de:09: d9:91:b6:3d:19:e3:74:91:b0:1b:97:ab:7d:e2:ea:17:49:1e: dc:e4:69:12:b6:74:f4:42:19:ee:07:15:63:11:5d:07:ce:ea: 33:56:ce:37:64:53:b5:c0:8d:5a:84:e6:9b:64:a3:2e:6f:06: 0a:9f:1c:df:63:b3:88:3f:2f:cc:66:11:1a:7a:e5:27:e7:0c: 4d:1c:4f:08:e2:1e:a3:27:ac:de:67:08:23:d2:3d:e8:8f:cd: ff:cd:06:47:28:76:1d:c2:32:f4:96:f2:97:9d:12:a4:8a:c7: 52:2f:c4:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqfn3WGvSrTr9A/2mZkLOJgr87owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRC OUQwRkM0MzAeFw0yNjA3MjAxMzQ4NDJaFw0yNjA3MjExNzI1NDJaMDMxMTAvBgNV BAMTKEQ0ODM3QTEwNTQ5QTRBNUQ2NkY1Nzc0Njk0NjYxMERCMEUzMjk2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qS0PnHSVQyrQi0TQdXwBi9eU h2oLpjjssU3W6i1jJnaSJKmjsIr8TolFJhxLf1UMI4rFSQtj3eOCWiZZqQr2oIdP EFXFT7haXa9eCBcVc5Z61IDUlx9UP6Yccq28G+JMsJu/aiNFUg5Q1eu7OOi3vvXX VggvxJRNjQHkxICubUfCsZ3YzNL/YQH3jnqDLz77tHPoVslK8gCiK7WkINqu/Qi2 TJ2u+/9PnWsHuXzVNZYq+FkYY7xclFVCSOqv2+wQCuCC9bhkOa2Tj9LR3ykmKP6p U05lL/3e1GcEtaAAzREpGc8mxZc9ZYFiOmE5GpnquRfVWKDO/MbWAQPiNgedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IN6EFSaSl1m9XdGlGYQ2w4ylm4wHwYDVR0j BBgwFoAUJndYFkWknYKzaqgwSEhl9LnQ/EMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGFmMzE1OTktOGIwOC00ZmZkLWEwNTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0 NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRCOUQwRkM0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjc3NTgxNjQ1QTQ5RDgyQjM2QUE4MzA0ODQ4NjVGNEI5RDBG QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1 RjRCOUQwRkM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGE75mnqY9epYwoKREzg34XxfcmPd3oyD5/ 5CA3a9JWCdX2RG3A/Q/9xfYTxfZHMho+zs5VT1/A6g4vi2Zl5WxsnTH4QKuM4Rkv eebEcgsAxzqoHer0ZB95snYaw6am/0GGh9jnzX7cvgDi00198du1abTu2ItOj2eR LmF29UShwvXUDZTX0DGLt4dkmtneCdmRtj0Z43SRsBuXq33i6hdJHtzkaRK2dPRC Ge4HFWMRXQfO6jNWzjdkU7XAjVqE5ptkoy5vBgqfHN9js4g/L8xmERp65SfnDE0c TwjiHqMnrN5nCCPSPeiPzf/NBkcodh3CMvSW8pedEqSKx1IvxFs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:40 2026 by rpki-client