$ rpki-client -vvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: BKVHdp7IW6+m60zs6YbnZ/f1pudYcxKseaK1AzmcLa4= Subject key identifier: 7A:0A:1E:D3:AD:3C:20:12:32:A1:E1:9C:08:B4:6C:65:E0:C2:A4:51 Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 7ECE196082DAE37F0122BBC8F110E0BCD58CC193 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:19:12 +0000 Manifest this update: Mon 20 Jul 2026 18:14:12 +0000 Manifest next update: Tue 21 Jul 2026 19:24:12 +0000 Files and hashes: 1: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) 2: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: OdKd/LEPCqkTP/UlnR72v4KowqTWhoZpwpIZJwlZsR8=) 3: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 4: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ce:19:60:82:da:e3:7f:01:22:bb:c8:f1:10:e0:bc:d5:8c:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Jul 20 18:14:12 2026 GMT Not After : Jul 21 19:24:12 2026 GMT Subject: CN=7A0A1ED3AD3C201232A1E19C08B46C65E0C2A451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:67:1f:58:fc:13:b5:d7:d2:51:a5:89:97: fd:35:45:3c:cf:88:53:c6:06:77:3c:99:18:f3:de: 16:39:42:2d:b2:38:a5:f3:9d:fc:92:28:76:9f:9e: f6:f8:0e:c2:a0:aa:47:43:76:f3:c5:e3:77:6d:95: 24:bf:37:60:77:b9:dc:ab:24:91:ac:4e:43:77:66: b1:d3:72:2f:56:6d:db:23:cd:ce:a9:04:10:70:f1: 49:3a:ba:6e:5d:5c:76:f0:6b:5a:7c:a0:9b:f2:3c: c9:50:e9:cc:cc:ce:75:a7:85:01:b9:ea:f6:9b:55: e5:f4:d6:03:07:73:7a:9b:79:d9:30:c1:d9:01:c3: 86:3c:de:60:4b:77:64:cc:07:5f:bb:2d:84:a8:f9: f7:25:21:30:d4:fc:fa:e1:be:05:f4:91:a4:85:6b: 3b:1b:b0:9e:99:3f:73:1e:da:c2:c1:27:c2:8e:be: 34:24:18:84:a0:cb:a6:8e:cb:d2:96:92:d1:c4:f0: aa:b4:05:af:db:f9:31:44:b9:4b:9e:67:21:95:f5: 5d:18:d1:ce:c1:90:4e:6c:30:8a:5f:a0:e6:98:6c: e0:a4:81:40:e1:80:24:dd:02:4b:4a:8b:44:22:cb: 69:8a:13:37:74:07:15:5e:24:6d:60:eb:32:e6:00: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0A:1E:D3:AD:3C:20:12:32:A1:E1:9C:08:B4:6C:65:E0:C2:A4:51 X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:8a:bd:c0:78:32:de:a8:91:0a:f9:d3:8c:9e:9e:52:84: a2:d2:96:90:82:3e:02:4a:a2:10:10:8b:e3:fc:19:05:64:63: 56:3b:85:08:71:85:51:96:6f:3a:bf:64:30:71:f4:81:6f:68: 57:3f:11:1d:ce:04:2c:52:64:e0:57:17:56:07:3b:25:c7:7b: d7:b3:1c:6c:ae:52:4e:51:c1:f3:0a:2a:3e:47:bb:79:0c:e6: 81:ba:75:ad:db:cb:6f:7f:78:5c:da:47:59:ea:14:37:4f:36: 0a:34:94:b7:80:40:c0:fa:2e:e1:dd:ee:51:5a:d7:d1:09:d2: 0a:20:fe:ba:d7:ea:48:ca:e2:cb:3e:00:79:e2:9e:ff:f8:18: bf:90:ab:e8:ac:4a:a0:85:d7:f3:4f:7a:f4:7c:89:e5:d3:4f: 7f:05:99:b3:dc:44:9d:b7:5a:d4:82:a8:02:df:7f:ff:d5:12: cf:52:02:e0:20:7e:d7:34:34:ca:0a:e4:02:92:3a:95:77:88: e6:fe:23:eb:45:02:52:4e:97:57:db:b8:ba:3a:34:02:8f:91: 15:0e:59:84:67:10:48:30:0e:64:5d:6b:52:04:47:35:4b:c4: 89:56:e2:c3:7e:f2:ce:c2:d2:2e:90:1a:8b:cf:ce:de:1e:7a: 6f:34:44:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfs4ZYILa438BIrvI8RDgvNWMwZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA3MjAxODE0MTJaFw0yNjA3MjExOTI0MTJaMDMxMTAvBgNV BAMTKDdBMEExRUQzQUQzQzIwMTIzMkExRTE5QzA4QjQ2QzY1RTBDMkE0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGx2cfWPwTtdfSUaWJl/01RTzP iFPGBnc8mRjz3hY5Qi2yOKXznfySKHafnvb4DsKgqkdDdvPF43dtlSS/N2B3udyr JJGsTkN3ZrHTci9Wbdsjzc6pBBBw8Uk6um5dXHbwa1p8oJvyPMlQ6czMznWnhQG5 6vabVeX01gMHc3qbedkwwdkBw4Y83mBLd2TMB1+7LYSo+fclITDU/PrhvgX0kaSF azsbsJ6ZP3Me2sLBJ8KOvjQkGISgy6aOy9KWktHE8Kq0Ba/b+TFEuUueZyGV9V0Y 0c7BkE5sMIpfoOaYbOCkgUDhgCTdAktKi0Qiy2mKEzd0BxVeJG1g6zLmAJ2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUegoe0608IBIyoeGcCLRsZeDCpFEwHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5xir3AeDLeqJEK+dOMnp5ShKLSlpCCPgJK ohAQi+P8GQVkY1Y7hQhxhVGWbzq/ZDBx9IFvaFc/ER3OBCxSZOBXF1YHOyXHe9ez HGyuUk5RwfMKKj5Hu3kM5oG6da3by29/eFzaR1nqFDdPNgo0lLeAQMD6LuHd7lFa 19EJ0gog/rrX6kjK4ss+AHninv/4GL+Qq+isSqCF1/NPevR8ieXTT38FmbPcRJ23 WtSCqALff//VEs9SAuAgftc0NMoK5AKSOpV3iOb+I+tFAlJOl1fbuLo6NAKPkRUO WYRnEEgwDmRda1IERzVLxIlW4sN+8s7C0i6QGovPzt4eem80ROI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:59 2026 by rpki-client