$ rpki-client -vvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft File: 993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json) Hash identifier: Jk0S0gkx1op+Yx68022nYXlBJEPNt8UkQsHTeo6h0Cc= Subject key identifier: AD:22:80:80:25:CA:E6:B1:7A:6F:BA:0F:3D:94:42:EF:9F:13:53:86 Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 Certificate issuer: /CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Certificate serial: 40A455C9A58B886C4CABA8CFB7A4EEBE3D52657F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:42:13 +0000 Manifest this update: Mon 20 Jul 2026 16:37:13 +0000 Manifest next update: Tue 21 Jul 2026 18:35:13 +0000 Files and hashes: 1: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: aL6Go6klg5g380UEWsBmgpiW/POhVCiQE02uLHRMWm8=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=) 3: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:55:c9:a5:8b:88:6c:4c:ab:a8:cf:b7:a4:ee:be:3d:52:65:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Validity Not Before: Jul 20 16:37:13 2026 GMT Not After : Jul 21 18:35:13 2026 GMT Subject: CN=AD22808025CAE6B17A6FBA0F3D9442EF9F135386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:e5:2d:fb:35:2d:b1:8c:f7:c7:40:a9:61: 60:a2:8b:20:71:15:4e:3f:cc:89:2e:dd:88:6b:d8: a9:a8:29:a0:18:04:10:8b:b7:8a:d7:32:68:f4:4c: 05:03:95:85:30:0e:07:3c:e6:04:6a:98:cb:be:9e: 78:2b:ae:88:69:89:b9:9d:06:21:6b:34:65:2e:38: d7:da:39:57:f1:1a:70:1b:64:c2:55:2b:e2:e0:19: 89:05:d9:9b:ce:33:a4:a7:0c:ad:81:a8:a3:d6:17: e9:97:30:98:f9:7e:73:e7:5a:7c:77:95:cd:2a:35: 0e:8a:e4:2a:cc:1a:27:ad:c2:0d:f1:61:65:d1:88: 71:26:eb:98:f1:eb:c4:1b:85:bf:9b:31:9c:33:e0: 13:05:88:af:9a:47:08:e1:fb:34:ff:af:a3:78:81: 78:3e:a3:f4:a8:d4:9c:4e:79:91:f3:93:f3:8e:0a: e6:42:03:e8:aa:85:13:64:5e:65:49:23:9f:56:6c: 67:6c:e8:58:3c:2c:32:74:45:36:d2:59:86:47:6d: 60:f6:42:f2:53:78:80:e6:7c:31:45:08:ee:e4:89: 06:92:b7:b4:8c:d8:cd:e9:72:73:ce:4a:3f:07:70: e2:38:a7:37:28:b9:81:35:67:c0:59:5d:a1:b0:b4: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:22:80:80:25:CA:E6:B1:7A:6F:BA:0F:3D:94:42:EF:9F:13:53:86 X509v3 Authority Key Identifier: keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:b0:93:ff:3b:77:de:4d:cf:1e:2b:31:30:11:e1:f5:94: 51:4a:00:7a:4e:25:28:48:c2:46:99:5a:8f:37:57:9f:bb:0f: 0d:53:b2:02:53:1c:3a:98:18:78:1a:59:ed:3f:12:36:73:1d: 88:a5:a0:d5:0a:57:7b:55:61:bf:f8:3b:17:8e:37:91:f3:e6: 9a:ed:fb:3c:ef:f7:46:57:ec:a5:c0:4d:78:a6:da:43:4c:6a: 04:95:99:06:04:89:63:a0:bd:d1:55:ab:35:84:cf:27:d7:ed: 22:4f:df:53:7a:bb:8b:11:60:3c:c4:e8:98:a6:4b:40:3c:cf: 74:43:59:a9:b8:78:ec:13:1b:db:0b:ac:8a:08:d4:dd:74:0b: 84:4e:2a:75:78:da:c9:a7:e8:33:68:5a:bc:f5:9a:f2:8f:43: 0c:02:08:29:d2:ea:ad:65:1f:16:55:80:e4:9d:b4:5a:a6:03: d0:03:c0:fe:7b:92:bc:3d:9c:76:9e:4c:11:44:63:23:c6:01: 35:ac:e5:40:fc:98:9a:86:7c:95:91:08:ed:14:de:2e:b3:4e: eb:ae:ec:5c:c3:e9:fe:c1:e3:c9:a3:e7:1b:af:b9:41:f6:82: a9:17:ef:18:cc:96:5b:bb:9b:2b:59:e7:3c:9b:9f:9b:96:cd: f5:22:92:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKRVyaWLiGxMq6jPt6Tuvj1SZX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENB QzBEMjg4NTAeFw0yNjA3MjAxNjM3MTNaFw0yNjA3MjExODM1MTNaMDMxMTAvBgNV BAMTKEFEMjI4MDgwMjVDQUU2QjE3QTZGQkEwRjNEOTQ0MkVGOUYxMzUzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/A+Ut+zUtsYz3x0CpYWCiiyBx FU4/zIku3Yhr2KmoKaAYBBCLt4rXMmj0TAUDlYUwDgc85gRqmMu+nngrrohpibmd BiFrNGUuONfaOVfxGnAbZMJVK+LgGYkF2ZvOM6SnDK2BqKPWF+mXMJj5fnPnWnx3 lc0qNQ6K5CrMGietwg3xYWXRiHEm65jx68Qbhb+bMZwz4BMFiK+aRwjh+zT/r6N4 gXg+o/So1JxOeZHzk/OOCuZCA+iqhRNkXmVJI59WbGds6Fg8LDJ0RTbSWYZHbWD2 QvJTeIDmfDFFCO7kiQaSt7SM2M3pcnPOSj8HcOI4pzcouYE1Z8BZXaGwtFpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrSKAgCXK5rF6b7oPPZRC758TU4YwHwYDVR0j BBgwFoAUmT6ToGZKnZAtl481lpKa3KwNKIUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBlODg3NzQtODQ0Zi00NjE2LThiZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2 NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENBQzBEMjg4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTNFOTNBMDY2NEE5RDkwMkQ5NzhGMzU5NjkyOUFEQ0FDMEQy ODg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlB RENBQzBEMjg4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwjsJP/O3feTc8eKzEwEeH1lFFKAHpOJShI wkaZWo83V5+7Dw1TsgJTHDqYGHgaWe0/EjZzHYiloNUKV3tVYb/4OxeON5Hz5prt +zzv90ZX7KXATXim2kNMagSVmQYEiWOgvdFVqzWEzyfX7SJP31N6u4sRYDzE6Jim S0A8z3RDWam4eOwTG9sLrIoI1N10C4ROKnV42smn6DNoWrz1mvKPQwwCCCnS6q1l HxZVgOSdtFqmA9ADwP57krw9nHaeTBFEYyPGATWs5UD8mJqGfJWRCO0U3i6zTuuu 7FzD6f7B48mj5xuvuUH2gqkX7xjMllu7mytZ5zybn5uWzfUiktQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:49 2026 by rpki-client