$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json) Hash identifier: Dli0oXISQTKXoLWpCQC9jQbSVbybqoM4MF4WQvWtZTs= Subject key identifier: 95:4A:57:C5:0D:62:87:58:D4:D5:F0:09:C3:BE:40:77:CD:3D:20:0D Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Certificate serial: 2D46C44B506563EDA7A12AC1684EFB7736EB0912 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 11:36:07 +0000 Manifest this update: Sun 19 Jul 2026 11:31:07 +0000 Manifest next update: Mon 20 Jul 2026 11:54:07 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=) 2: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: YYz1YFOpKAAx2WDxeVTBBLkre2bt2b/z8nx/2lqJPqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 11:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:46:c4:4b:50:65:63:ed:a7:a1:2a:c1:68:4e:fb:77:36:eb:09:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Validity Not Before: Jul 19 11:31:07 2026 GMT Not After : Jul 20 11:54:07 2026 GMT Subject: CN=954A57C50D628758D4D5F009C3BE4077CD3D200D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:9d:52:f5:7f:b3:cf:bf:0e:7b:2b:e9:29: 90:9b:e4:d1:e9:b5:37:ef:55:c8:f2:7b:65:0c:d1: 92:50:a5:43:f3:e7:32:d6:6e:fc:96:0f:bb:83:e4: dc:2a:07:da:dc:73:78:91:33:e6:79:8e:46:1b:43: 54:65:d1:4f:62:cb:96:d8:50:52:a9:22:bc:0c:23: 48:65:74:e8:7d:6a:35:86:8e:43:c1:07:56:44:0d: 03:e3:e4:20:fd:f0:97:ad:1c:b7:76:35:a3:04:55: db:8e:d2:b4:c6:78:a6:97:98:b3:c5:6e:cd:61:41: e7:88:d5:a3:67:4a:58:0a:48:71:06:13:7d:05:04: 46:eb:9f:ca:b9:1b:8d:df:87:34:5b:3a:a9:e9:25: 20:17:d7:5e:b8:20:f7:35:fd:06:9b:91:51:c8:06: cd:6c:e8:a8:c7:70:69:5d:33:a5:0d:2a:1c:67:9c: 03:cf:76:fe:01:8e:b5:be:8c:a9:4c:7b:9d:03:d1: 81:69:6f:f6:43:da:9b:a6:23:4b:f2:33:92:6c:f3: 6d:4f:fe:84:36:98:53:74:e5:95:a0:e4:c6:eb:0e: f8:20:17:83:9c:76:21:f0:b4:b2:b4:0f:f4:96:72: 09:35:e5:09:73:80:93:57:36:21:22:e1:e7:6a:04: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:57:C5:0D:62:87:58:D4:D5:F0:09:C3:BE:40:77:CD:3D:20:0D X509v3 Authority Key Identifier: keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:24:22:f2:60:25:69:3d:a7:96:17:17:5c:e7:ca:ac:30:f9: 3f:17:05:54:3c:d7:8d:3b:cb:5d:5d:79:3c:92:e5:fc:c0:02: bb:4e:95:9e:b0:f1:96:65:90:df:02:31:03:a8:77:fd:49:0a: 7e:1f:37:26:c4:52:da:d9:c9:66:82:6a:47:86:3d:3c:c7:ed: 3e:20:19:74:fa:32:07:c1:6c:4c:55:27:09:fd:84:a6:8f:94: d9:24:96:20:d6:08:43:c1:51:87:ea:d0:61:ff:25:17:7a:1b: 21:dd:8b:6b:75:e4:8a:da:19:46:a5:30:fc:bd:92:65:b4:8b: 8f:a7:33:d9:ff:1a:b5:cd:4e:ad:a0:c6:f9:be:61:3a:d2:68: 12:4e:b6:c8:1b:cf:75:65:84:18:51:b0:89:bf:c4:b1:d7:90: 37:60:fd:61:34:11:a7:a4:f2:89:90:d3:c5:14:d9:46:6b:03: 7f:a2:66:59:89:eb:1a:56:46:56:98:1a:f6:b6:a6:49:89:f5: 20:8b:df:87:01:71:72:e1:90:2b:bd:0c:43:7f:e3:47:e6:0f: b2:f5:3a:88:90:4e:3f:bc:4e:14:ac:6f:25:37:6f:9e:eb:25: ca:b4:77:fd:e3:6c:0b:c3:c6:7e:d1:48:ae:3f:7f:c7:9e:ea: d0:fc:e6:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUbES1BlY+2noSrBaE77dzbrCRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw NkYxMTc4OTAeFw0yNjA3MTkxMTMxMDdaFw0yNjA3MjAxMTU0MDdaMDMxMTAvBgNV BAMTKDk1NEE1N0M1MEQ2Mjg3NThENEQ1RjAwOUMzQkU0MDc3Q0QzRDIwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAp1S9X+zz78OeyvpKZCb5NHp tTfvVcjye2UM0ZJQpUPz5zLWbvyWD7uD5NwqB9rcc3iRM+Z5jkYbQ1Rl0U9iy5bY UFKpIrwMI0hldOh9ajWGjkPBB1ZEDQPj5CD98JetHLd2NaMEVduO0rTGeKaXmLPF bs1hQeeI1aNnSlgKSHEGE30FBEbrn8q5G43fhzRbOqnpJSAX1164IPc1/QabkVHI Bs1s6KjHcGldM6UNKhxnnAPPdv4BjrW+jKlMe50D0YFpb/ZD2pumI0vyM5Js821P /oQ2mFN05ZWg5MbrDvggF4OcdiHwtLK0D/SWcgk15QlzgJNXNiEi4edqBOfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlUpXxQ1ih1jU1fAJw75Ad809IA0wHwYDVR0j BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0 MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkkIvJgJWk9p5YXF1znyqww+T8XBVQ81407 y11deTyS5fzAArtOlZ6w8ZZlkN8CMQOod/1JCn4fNybEUtrZyWaCakeGPTzH7T4g GXT6MgfBbExVJwn9hKaPlNkkliDWCEPBUYfq0GH/JRd6GyHdi2t15IraGUalMPy9 kmW0i4+nM9n/GrXNTq2gxvm+YTrSaBJOtsgbz3VlhBhRsIm/xLHXkDdg/WE0Eaek 8omQ08UU2UZrA3+iZlmJ6xpWRlaYGva2pkmJ9SCL34cBcXLhkCu9DEN/40fmD7L1 OoiQTj+8ThSsbyU3b57rJcq0d/3jbAvDxn7RSK4/f8ee6tD85gU= -----END CERTIFICATE-----Generated at Mon Jul 20 04:44:17 2026 by rpki-client