$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft File: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft (raw, json) Hash identifier: cQmFC4XrPEGE8HeQTZb64iOaQLSXUdmWL0imwIWyMZ8= Subject key identifier: BA:B3:55:32:A7:1E:89:49:EE:01:56:C5:B9:2A:62:F3:69:1F:B2:F1 Authority key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA Certificate issuer: /CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Certificate serial: 1A9FE6FF0E4FE372A3B8AA20028B56BB8EBD2D21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:35:11 +0000 Manifest this update: Mon 20 Jul 2026 23:30:11 +0000 Manifest next update: Wed 22 Jul 2026 01:27:11 +0000 Files and hashes: 1: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl (hash: 3WH6kWtceo7l2uuKpFvErkppecFR1IkZ59/VoVIYh+8=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: BZY0+bJnzvWTGl0me+IsT0sdxq8LsPOVFzv3Xd1pRAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9f:e6:ff:0e:4f:e3:72:a3:b8:aa:20:02:8b:56:bb:8e:bd:2d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Validity Not Before: Jul 20 23:30:11 2026 GMT Not After : Jul 22 01:27:11 2026 GMT Subject: CN=BAB35532A71E8949EE0156C5B92A62F3691FB2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:16:e5:56:26:f5:73:a8:1c:92:67:11:01: fa:5b:1d:44:05:96:04:21:fa:6e:33:68:72:fd:49: 2b:5f:46:57:3b:7d:ca:cf:7c:6b:9c:ea:1d:3a:c8: 34:83:f6:35:af:4c:da:5b:c7:a4:47:79:e4:5d:00: f6:c6:b9:5a:05:da:57:1b:5b:8e:b3:3e:9e:25:08: 8b:3e:ab:90:30:e1:11:56:d6:5d:06:f6:6d:04:5b: 0f:27:12:d0:a4:48:15:7e:fa:65:93:0c:82:9f:bc: f7:9b:eb:c0:25:33:98:df:17:cb:d2:92:e4:af:00: 18:f4:33:9a:d3:01:bb:cd:52:1e:42:a8:5d:67:d0: dc:b0:a4:fb:53:63:05:15:b2:fb:da:2e:7d:8a:6f: 8f:de:ba:b6:20:88:24:0d:79:8e:aa:78:df:a4:dd: 4d:09:73:5d:49:18:05:16:a6:3c:49:ed:e8:72:a1: f6:cc:44:0c:14:68:79:30:17:02:d1:3c:79:fe:56: 2e:ff:c3:14:60:85:0f:9d:c8:05:e7:43:29:e7:65: ee:a4:d5:28:cd:c0:3a:25:d0:73:d6:a5:b7:e0:db: 22:b4:4b:9f:75:69:88:cf:13:ef:87:a3:11:df:3f: 11:c5:60:54:ac:90:67:67:aa:2e:9d:c1:81:6c:f3: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:55:32:A7:1E:89:49:EE:01:56:C5:B9:2A:62:F3:69:1F:B2:F1 X509v3 Authority Key Identifier: keyid:F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1b:0f:39:6e:ad:2a:a7:0d:e2:d9:b2:6e:55:fa:40:65:9c: db:0a:60:ef:5d:50:06:4f:4f:43:a6:50:75:fb:0f:63:72:df: 35:77:aa:8e:08:e1:71:4d:66:9a:d2:9a:4f:98:2b:94:4b:bc: ff:eb:2d:7a:57:6c:87:8f:df:e4:ab:bf:a1:ca:58:1c:98:45: 39:d0:28:10:ae:f8:25:b8:c3:b6:c0:1b:d9:93:55:48:0b:74: dc:4c:b7:ff:1e:a6:f5:7a:6d:b2:e8:46:73:e3:91:42:45:bc: c9:fd:19:31:52:ef:e9:28:84:f6:aa:eb:0e:5a:6d:7b:91:61: e2:b3:f0:76:0b:50:16:aa:7f:1c:52:ee:e7:48:15:79:f8:3c: 5b:10:8c:1d:a4:0e:29:0a:4d:e6:75:9d:bb:75:8f:02:e9:d0: 27:94:19:3f:4c:97:12:7d:c9:96:50:a7:fc:cd:02:ce:26:27: 95:9d:ea:91:0c:72:46:c9:40:43:12:38:27:1a:0c:8f:b1:56: f1:69:2f:bf:b0:83:6d:2a:59:d9:4c:8b:ed:bc:c5:06:09:68: 20:7f:aa:10:db:e9:98:c2:0b:07:f1:75:95:01:39:0e:6f:73: 48:54:ce:9b:3b:f2:0e:e3:e9:a9:43:ab:41:7c:eb:64:6a:16: a7:5b:8a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGp/m/w5P43KjuKogAotWu469LSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZD QzlEM0JDQTAeFw0yNjA3MjAyMzMwMTFaFw0yNjA3MjIwMTI3MTFaMDMxMTAvBgNV BAMTKEJBQjM1NTMyQTcxRTg5NDlFRTAxNTZDNUI5MkE2MkYzNjkxRkIyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoxblVib1c6gckmcRAfpbHUQF lgQh+m4zaHL9SStfRlc7fcrPfGuc6h06yDSD9jWvTNpbx6RHeeRdAPbGuVoF2lcb W46zPp4lCIs+q5Aw4RFW1l0G9m0EWw8nEtCkSBV++mWTDIKfvPeb68AlM5jfF8vS kuSvABj0M5rTAbvNUh5CqF1n0NywpPtTYwUVsvvaLn2Kb4/eurYgiCQNeY6qeN+k 3U0Jc11JGAUWpjxJ7ehyofbMRAwUaHkwFwLRPHn+Vi7/wxRghQ+dyAXnQynnZe6k 1SjNwDol0HPWpbfg2yK0S591aYjPE++HoxHfPxHFYFSskGdnqi6dwYFs8wwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUurNVMqceiUnuAVbFuSpi82kfsvEwHwYDVR0j BBgwFoAU9k0G+yndfGP9EuDSgx0Az8ydO8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlOGRkNDAtYmI5NC00ZDQzLWI4ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIy OUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZDQzlEM0JDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjREMDZGQjI5REQ3QzYzRkQxMkUwRDI4MzFEMDBDRkNDOUQz QkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAw Q0ZDQzlEM0JDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8bDzlurSqnDeLZsm5V+kBlnNsKYO9dUAZP T0OmUHX7D2Ny3zV3qo4I4XFNZprSmk+YK5RLvP/rLXpXbIeP3+Srv6HKWByYRTnQ KBCu+CW4w7bAG9mTVUgLdNxMt/8epvV6bbLoRnPjkUJFvMn9GTFS7+kohPaq6w5a bXuRYeKz8HYLUBaqfxxS7udIFXn4PFsQjB2kDikKTeZ1nbt1jwLp0CeUGT9MlxJ9 yZZQp/zNAs4mJ5Wd6pEMckbJQEMSOCcaDI+xVvFpL7+wg20qWdlMi+28xQYJaCB/ qhDb6ZjCCwfxdZUBOQ5vc0hUzps78g7j6alDq0F862RqFqdbikI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:09 2026 by rpki-client