$ rpki-client -vvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: FlOBKRR5nUVt9LHcZhpRq9JyWI5Lr3bfg8BLrq4Er08= Subject key identifier: C1:9B:37:35:62:05:EF:D5:58:76:F1:A4:59:10:E1:BC:55:AF:E8:A3 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 3E71DB46701EA393F3E6DAEB47A47195EF539F45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:59:31 +0000 Manifest this update: Tue 21 Jul 2026 02:54:31 +0000 Manifest next update: Wed 22 Jul 2026 04:16:31 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 2: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: obfOyXvcMtskgupxZWmSeA94SbEH/VZsqFdzhJcqjiw=) 3: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) 4: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) 5: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:71:db:46:70:1e:a3:93:f3:e6:da:eb:47:a4:71:95:ef:53:9f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Jul 21 02:54:31 2026 GMT Not After : Jul 22 04:16:31 2026 GMT Subject: CN=C19B37356205EFD55876F1A45910E1BC55AFE8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:ce:b1:2e:bd:99:70:70:36:ab:49:bf:89: e5:a4:14:4a:59:d2:9d:9e:d6:ff:27:4e:a9:99:e8: cf:97:16:9b:2c:c6:e8:07:06:c6:77:45:b3:23:91: f3:9f:f5:32:ec:1c:34:00:82:7b:28:98:a9:df:22: b5:52:7b:41:6c:1b:83:c3:bc:83:08:91:dd:4e:5e: d4:94:aa:5c:8c:93:5d:29:e5:4e:83:35:c0:8f:3d: 26:eb:04:9c:81:c9:88:cc:d5:65:63:28:d3:0f:dc: 61:64:f3:25:c2:57:a5:36:dc:9c:a5:75:dc:f4:9b: 81:a4:fd:52:29:11:be:13:d6:40:df:37:16:2c:84: 4f:87:13:3f:bc:34:c0:d8:4d:6f:37:fb:fb:45:79: fa:1d:ce:41:98:de:71:e3:01:48:6f:dd:41:79:e0: b3:f1:0e:0b:19:2d:fc:16:51:8a:78:71:c1:59:78: 9c:93:21:eb:f1:8d:91:e4:52:3c:a6:02:d0:43:5a: 37:0c:35:d0:0a:10:72:93:7f:d1:3e:3e:69:ca:8d: 8a:38:14:87:c8:35:97:2e:2a:57:56:13:37:99:d4: a6:b1:81:3f:63:93:20:cd:18:f9:78:6b:04:15:a3: 6a:19:b0:b3:04:82:44:88:a5:b2:c1:92:ac:c9:e9: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9B:37:35:62:05:EF:D5:58:76:F1:A4:59:10:E1:BC:55:AF:E8:A3 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:3f:d1:4d:ea:84:cc:9d:20:15:dd:02:73:6b:16:16:4a: 47:0b:9e:3f:44:ee:8b:e3:dd:62:64:56:36:25:54:d5:08:2f: 59:c7:42:6c:ce:f4:5e:9b:14:b9:1c:82:3f:9b:1b:dd:9c:42: 53:5c:57:80:76:80:cd:16:d5:1f:8d:63:72:58:c4:58:3e:d1: ef:f1:25:7d:e0:a5:c7:86:8e:a5:44:7b:c9:6b:7d:ec:8e:c9: e0:01:94:0e:37:cc:5f:db:92:6d:22:b7:be:0f:1f:32:10:48: bd:51:2d:21:ab:be:fc:68:58:5a:83:7b:fb:fb:ad:f4:b7:e9: a5:28:4e:f5:14:91:8c:a2:6d:dd:3f:6c:92:39:c3:79:47:26: c5:3c:2e:be:dc:c0:8d:7a:fe:5b:d5:02:c1:d9:83:f1:46:6c: 15:a7:b7:0b:20:6d:e5:22:e6:57:b8:05:62:62:e7:bd:b2:f8: 63:31:70:c7:d7:a4:03:66:ec:8e:39:a0:0e:a2:4a:4d:6a:d8: 5c:49:71:a7:d4:49:21:3e:2b:4d:a2:b9:69:d0:f1:75:4e:ae: 6b:87:eb:0a:81:17:d6:4e:3c:2c:83:bd:ac:a3:c8:19:e0:f5: 97:a1:54:b2:cd:fd:c1:b9:0d:23:98:82:3c:4c:b4:c1:22:e5: b1:49:8e:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnHbRnAeo5Pz5trrR6Rxle9Tn0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA3MjEwMjU0MzFaFw0yNjA3MjIwNDE2MzFaMDMxMTAvBgNV BAMTKEMxOUIzNzM1NjIwNUVGRDU1ODc2RjFBNDU5MTBFMUJDNTVBRkU4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27s6xLr2ZcHA2q0m/ieWkFEpZ 0p2e1v8nTqmZ6M+XFpssxugHBsZ3RbMjkfOf9TLsHDQAgnsomKnfIrVSe0FsG4PD vIMIkd1OXtSUqlyMk10p5U6DNcCPPSbrBJyByYjM1WVjKNMP3GFk8yXCV6U23Jyl ddz0m4Gk/VIpEb4T1kDfNxYshE+HEz+8NMDYTW83+/tFefodzkGY3nHjAUhv3UF5 4LPxDgsZLfwWUYp4ccFZeJyTIevxjZHkUjymAtBDWjcMNdAKEHKTf9E+PmnKjYo4 FIfINZcuKldWEzeZ1KaxgT9jkyDNGPl4awQVo2oZsLMEgkSIpbLBkqzJ6eT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZs3NWIF79VYdvGkWRDhvFWv6KMwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGPP9FN6oTMnSAV3QJzaxYWSkcLnj9E7ovj 3WJkVjYlVNUIL1nHQmzO9F6bFLkcgj+bG92cQlNcV4B2gM0W1R+NY3JYxFg+0e/x JX3gpceGjqVEe8lrfeyOyeABlA43zF/bkm0it74PHzIQSL1RLSGrvvxoWFqDe/v7 rfS36aUoTvUUkYyibd0/bJI5w3lHJsU8Lr7cwI16/lvVAsHZg/FGbBWntwsgbeUi 5le4BWJi572y+GMxcMfXpANm7I45oA6iSk1q2FxJcafUSSE+K02iuWnQ8XVOrmuH 6wqBF9ZOPCyDvayjyBng9ZehVLLN/cG5DSOYgjxMtMEi5bFJjqo= -----END CERTIFICATE-----Generated at Tue Jul 21 07:55:39 2026 by rpki-client