$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json) Hash identifier: Kdqqm4L1cfilGzJLA4qtm3erO95u5fdzMmQxQZk+scw= Subject key identifier: B5:93:14:42:ED:A1:D9:B8:61:34:1D:6B:58:64:53:17:3B:DE:C6:C3 Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Certificate serial: 6BC519FAF4CA5A0B929832259C2418211F56BDC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:17:57 +0000 Manifest this update: Mon 20 Jul 2026 13:12:57 +0000 Manifest next update: Tue 21 Jul 2026 15:15:57 +0000 Files and hashes: 1: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=) 3: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=) 4: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=) 5: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=) 6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=) 7: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: 6a2aLqYaS4/yci7ozFMCQMTEZv1SNqx8fxfbiMxG1EE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c5:19:fa:f4:ca:5a:0b:92:98:32:25:9c:24:18:21:1f:56:bd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Validity Not Before: Jul 20 13:12:57 2026 GMT Not After : Jul 21 15:15:57 2026 GMT Subject: CN=B5931442EDA1D9B861341D6B586453173BDEC6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:33:b3:a4:c7:24:11:1d:98:d1:6f:21:1a: 5f:93:a7:61:7b:29:e6:08:54:09:12:76:4d:d9:fb: 77:18:63:6f:fb:db:b6:9f:7a:b8:60:a7:9b:82:e6: 52:47:5b:c7:3b:d7:a6:f3:d5:96:01:ee:42:56:45: 64:64:19:c4:1b:f9:9b:fd:f1:cf:c4:87:44:56:8b: 31:cb:bb:2b:60:84:35:89:8d:0d:03:fc:d9:b6:50: cd:f9:cd:b7:2a:dc:31:5c:c9:24:ec:b3:e9:3e:9c: d4:e6:55:95:77:b8:fb:41:48:74:72:3e:39:47:6a: fc:49:4a:c1:f5:aa:5c:bc:ae:43:93:ed:e4:7f:95: 51:3c:a6:f3:cc:4a:01:b8:a1:f9:d7:cc:8b:09:c1: f7:03:f8:a7:b6:4d:ef:44:bd:46:c8:99:e1:fc:5e: 98:dd:bb:02:46:e7:58:3e:48:15:8f:e9:65:cb:ee: 6a:b2:42:f8:13:b9:60:12:43:cb:6a:54:f1:bb:b7: 3f:92:80:51:90:74:8e:95:11:bb:b7:2e:bf:91:de: 87:17:13:cf:6f:c4:bf:cb:a4:6e:1e:22:f0:fb:1b: ec:5e:8c:83:72:c8:c3:7c:85:25:06:9d:6e:c3:8f: 76:51:8f:2b:6c:e4:ed:ce:a7:1d:93:84:31:e3:f6: a4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:93:14:42:ED:A1:D9:B8:61:34:1D:6B:58:64:53:17:3B:DE:C6:C3 X509v3 Authority Key Identifier: keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:31:57:69:b4:b1:35:cd:00:5d:49:1f:53:ea:36:52:28:91: c6:31:47:18:28:9a:c2:c1:41:9e:4c:74:7b:03:87:69:10:1b: f5:e8:35:f7:c9:e5:52:b9:23:90:ca:0a:7c:05:04:b4:49:f5: ce:37:7b:f9:43:8e:9c:11:72:c6:2c:22:f0:a0:74:52:f0:40: 4b:20:0e:09:77:0d:cf:58:11:e4:01:33:99:96:20:05:29:60: b7:ad:12:a3:ba:b8:7e:cd:99:4f:40:62:ac:bd:1e:ff:2a:46: 28:c8:cc:6d:bb:02:ef:a2:2a:4c:40:49:80:64:cf:61:d4:22: 1e:cb:e0:d9:10:d0:b7:68:a1:b7:86:5b:65:42:ac:dc:e7:ef: 26:0d:71:d9:20:23:ef:3f:20:ce:c8:e0:33:b4:42:32:4a:b6: 35:af:38:a8:7c:09:09:77:a1:0b:ce:5a:b9:01:e4:30:66:45: 45:c2:0b:12:3a:c5:9d:71:9e:5a:5e:bc:ce:9a:67:71:24:22: 15:5e:70:f7:90:2e:9d:80:8e:7a:fe:bd:74:46:87:58:e6:d8: 64:f1:5d:97:93:ca:47:15:39:32:dc:c0:c7:ef:e9:8e:a0:21: a0:1a:31:2d:12:20:c6:75:de:28:dc:6d:0a:1f:7e:66:45:d3: b1:2b:06:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8UZ+vTKWguSmDIlnCQYIR9WvcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB NzEwRTA0MDAeFw0yNjA3MjAxMzEyNTdaFw0yNjA3MjExNTE1NTdaMDMxMTAvBgNV BAMTKEI1OTMxNDQyRURBMUQ5Qjg2MTM0MUQ2QjU4NjQ1MzE3M0JERUM2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/zOzpMckER2Y0W8hGl+Tp2F7 KeYIVAkSdk3Z+3cYY2/727aferhgp5uC5lJHW8c716bz1ZYB7kJWRWRkGcQb+Zv9 8c/Eh0RWizHLuytghDWJjQ0D/Nm2UM35zbcq3DFcySTss+k+nNTmVZV3uPtBSHRy PjlHavxJSsH1qly8rkOT7eR/lVE8pvPMSgG4ofnXzIsJwfcD+Ke2Te9EvUbImeH8 XpjduwJG51g+SBWP6WXL7mqyQvgTuWASQ8tqVPG7tz+SgFGQdI6VEbu3Lr+R3ocX E89vxL/LpG4eIvD7G+xejINyyMN8hSUGnW7Dj3ZRjyts5O3Opx2ThDHj9qRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZMUQu2h2bhhNB1rWGRTFzvexsMwHwYDVR0j BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5 NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUy QzNBNzEwRTA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoxV2m0sTXNAF1JH1PqNlIokcYxRxgomsLB QZ5MdHsDh2kQG/XoNffJ5VK5I5DKCnwFBLRJ9c43e/lDjpwRcsYsIvCgdFLwQEsg Dgl3Dc9YEeQBM5mWIAUpYLetEqO6uH7NmU9AYqy9Hv8qRijIzG27Au+iKkxASYBk z2HUIh7L4NkQ0LdoobeGW2VCrNzn7yYNcdkgI+8/IM7I4DO0QjJKtjWvOKh8CQl3 oQvOWrkB5DBmRUXCCxI6xZ1xnlpevM6aZ3EkIhVecPeQLp2Ajnr+vXRGh1jm2GTx XZeTykcVOTLcwMfv6Y6gIaAaMS0SIMZ13ijcbQoffmZF07ErBtQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:36 2026 by rpki-client