$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: enot93mtEJudX8ll67gpYdWoLufGXh3JEcMW8kIhTYM= Subject key identifier: 3E:6A:79:F1:4A:28:28:8D:A8:EB:1E:88:EF:19:23:9A:B6:6B:68:E5 Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 27D621BF24A333FB2B338B900FC0883135D2BEB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 17:48:53 +0000 Manifest this update: Sun 19 Jul 2026 17:43:53 +0000 Manifest next update: Mon 20 Jul 2026 18:36:53 +0000 Files and hashes: 1: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: xEqCT0sU4xdneGt0CujfZmVD7GYSyAMZaaf7/v8D398=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d6:21:bf:24:a3:33:fb:2b:33:8b:90:0f:c0:88:31:35:d2:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Jul 19 17:43:53 2026 GMT Not After : Jul 20 18:36:53 2026 GMT Subject: CN=3E6A79F14A28288DA8EB1E88EF19239AB66B68E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:a1:77:12:c1:89:4e:a6:d3:57:56:1b:35: 49:3d:60:51:56:b9:a4:c5:77:8d:3a:54:d5:11:5b: 85:e9:a5:59:bc:9d:a5:02:1b:da:56:54:87:5f:0d: 07:d8:06:25:12:17:b1:aa:4d:4a:d3:dc:ba:0d:35: 1d:be:df:1d:b8:75:f7:60:29:18:c1:99:f7:e4:36: 68:31:15:9f:9f:13:2a:77:91:0b:a7:c4:f2:62:1a: db:fc:6f:57:89:6b:e1:4a:b8:b1:49:08:bd:e0:38: ff:f7:2c:d4:7b:37:61:78:8b:66:a0:92:01:65:28: 09:6a:1d:92:dc:5a:c7:9c:81:0d:ac:85:04:cd:2d: bc:12:a3:cd:07:fa:3a:ec:99:2f:4b:7f:d3:cc:57: 3d:3d:96:94:e1:21:20:7a:25:ad:0a:89:db:35:ea: ff:78:ad:63:82:69:d0:95:7d:5f:18:a5:7e:c5:67: 47:97:54:22:7b:19:af:6f:5c:8a:f5:ea:d1:36:13: bc:b3:64:a6:0a:c3:50:1b:a0:7b:89:0a:0d:d7:af: 89:65:d4:5b:2a:67:a4:ef:1d:4c:4a:c3:82:d2:f5: 08:ae:00:25:25:52:fd:08:80:7d:d8:75:e6:39:42: 1a:cf:4f:e7:2f:85:86:86:f9:f4:1f:96:58:ca:cf: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:79:F1:4A:28:28:8D:A8:EB:1E:88:EF:19:23:9A:B6:6B:68:E5 X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:10:30:33:5c:90:b9:9e:6e:a7:bb:a1:47:cc:75:e1:42:8d: 9b:60:06:f8:11:b0:62:fa:9e:39:23:81:fe:4b:4d:57:d3:f8: d3:01:c1:e5:6e:07:83:7a:88:ac:fe:c2:ac:29:5a:c9:15:c9: 83:de:1b:22:72:29:f6:93:63:aa:33:1c:0c:7a:8e:a7:a5:b6: 91:60:bf:86:eb:a9:12:a5:c3:5d:69:3c:28:b1:e0:79:6c:33: c8:33:c3:c4:4c:a8:ee:f0:75:d5:5e:4c:db:37:2e:98:f2:c8: 25:13:8f:83:2e:31:d9:1a:a8:03:fa:c1:14:34:46:37:46:0b: 54:55:72:5f:86:a8:16:6e:c7:50:f7:81:d3:1a:e4:3b:7e:13: 6d:9e:b2:f4:f7:ad:5c:f0:c5:7c:61:19:66:d6:dc:44:e0:ad: e9:3f:a7:b2:a4:b5:83:93:fb:9a:ce:63:63:c4:4e:b3:15:dc: fa:aa:3d:ff:1b:6f:c4:89:55:54:c0:a2:89:3c:45:d6:6d:bf: 0b:e7:42:41:f0:10:cf:45:8d:92:36:64:ec:6d:31:46:d9:ba: dc:f9:3d:2d:d5:e4:44:bd:ce:82:55:fe:8d:26:58:53:b7:91: 26:ac:ae:36:ae:7f:17:f1:5b:8b:d0:08:87:ec:b3:97:68:b9: f4:06:0e:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9YhvySjM/srM4uQD8CIMTXSvrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA3MTkxNzQzNTNaFw0yNjA3MjAxODM2NTNaMDMxMTAvBgNV BAMTKDNFNkE3OUYxNEEyODI4OERBOEVCMUU4OEVGMTkyMzlBQjY2QjY4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnKF3EsGJTqbTV1YbNUk9YFFW uaTFd406VNURW4XppVm8naUCG9pWVIdfDQfYBiUSF7GqTUrT3LoNNR2+3x24dfdg KRjBmffkNmgxFZ+fEyp3kQunxPJiGtv8b1eJa+FKuLFJCL3gOP/3LNR7N2F4i2ag kgFlKAlqHZLcWsecgQ2shQTNLbwSo80H+jrsmS9Lf9PMVz09lpThISB6Ja0Kids1 6v94rWOCadCVfV8YpX7FZ0eXVCJ7Ga9vXIr16tE2E7yzZKYKw1AboHuJCg3Xr4ll 1FsqZ6TvHUxKw4LS9QiuACUlUv0IgH3YdeY5QhrPT+cvhYaG+fQflljKz4h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmp58UooKI2o6x6I7xkjmrZraOUwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoQMDNckLmebqe7oUfMdeFCjZtgBvgRsGL6 njkjgf5LTVfT+NMBweVuB4N6iKz+wqwpWskVyYPeGyJyKfaTY6ozHAx6jqeltpFg v4brqRKlw11pPCix4HlsM8gzw8RMqO7wddVeTNs3LpjyyCUTj4MuMdkaqAP6wRQ0 RjdGC1RVcl+GqBZux1D3gdMa5Dt+E22esvT3rVzwxXxhGWbW3ETgrek/p7KktYOT +5rOY2PETrMV3PqqPf8bb8SJVVTAook8RdZtvwvnQkHwEM9FjZI2ZOxtMUbZutz5 PS3V5ES9zoJV/o0mWFO3kSasrjaufxfxW4vQCIfss5doufQGDm4= -----END CERTIFICATE-----Generated at Sun Jul 19 23:00:41 2026 by rpki-client