$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: yjUyXPu3kIxZDpvc2oXhI6dvlhmmvQtmZ92u7q8y1E0= Subject key identifier: 25:8C:65:19:1C:80:E7:D5:60:3B:14:D4:8C:9A:33:81:84:6C:86:55 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 2E6F596A746689588F2528DAF45E4997EB3A2512 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:41:52 +0000 Manifest this update: Mon 20 Jul 2026 20:36:52 +0000 Manifest next update: Tue 21 Jul 2026 22:15:52 +0000 Files and hashes: 1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: 4kp9Kc3b4J2+U6hQiiTVeU9/qN0uiR9hRDibZjGASSM=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:59:6a:74:66:89:58:8f:25:28:da:f4:5e:49:97:eb:3a:25:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Jul 20 20:36:52 2026 GMT Not After : Jul 21 22:15:52 2026 GMT Subject: CN=258C65191C80E7D5603B14D48C9A3381846C8655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:70:f6:fe:ff:7a:97:76:9a:e3:e0:98:50: d4:52:9f:e1:51:e8:d7:6c:b5:58:2c:9f:1b:9e:ee: 0b:32:30:cd:6f:24:83:95:d2:56:98:03:a5:55:0d: 26:ce:3f:b2:5c:50:ef:4b:88:58:6f:87:39:25:cc: 9e:75:64:c3:8e:8e:cb:97:db:f9:49:7a:f4:87:7f: b9:d9:b5:fb:b3:59:2f:94:26:a6:c4:f7:92:b8:2e: 61:9c:04:eb:97:98:bd:c9:f7:5f:6e:15:c5:7a:ec: b3:7f:a5:7a:0c:98:7e:f2:d5:7a:2b:18:6a:0c:ed: 21:7c:3d:c5:2d:b2:2e:5e:98:da:f3:0a:4e:a2:7f: 9b:7d:20:4f:e5:bf:ee:d2:b4:2d:31:1e:1b:2e:55: f0:b5:ab:08:35:45:44:39:fe:76:f9:10:1c:0c:e4: d0:6e:d5:2c:95:47:a3:df:54:b8:d9:a6:2c:c8:30: e0:a1:2d:1a:67:e4:15:a1:99:c4:bd:c6:a5:05:11: 26:9e:f7:83:67:08:61:10:2a:29:2b:d9:bb:bd:5d: 29:5d:55:de:69:a6:be:f9:05:a5:5b:9e:b3:31:9d: 27:97:25:a2:ae:29:bc:c4:24:83:12:07:d6:1a:c9: 6c:ae:fa:04:4b:56:25:fe:9b:e9:fc:6d:25:92:46: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8C:65:19:1C:80:E7:D5:60:3B:14:D4:8C:9A:33:81:84:6C:86:55 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:3f:65:c0:84:b9:2d:c3:15:1e:d6:b2:a9:ae:e9:cc:27: e3:5d:ce:0a:d6:d6:5c:00:29:99:29:e8:e1:f7:0d:d4:3a:0a: 45:7d:73:d2:01:95:2f:94:02:54:2b:04:a3:03:52:28:1f:3a: ce:ff:21:bb:15:dc:6b:9f:5b:f1:1b:4f:1c:54:d1:a5:8b:1a: 08:58:35:07:71:4b:04:41:eb:25:f5:2b:f0:81:b2:07:17:8a: 2d:fb:f6:59:92:23:02:01:41:02:76:fc:59:b7:08:7d:99:e4: 21:5b:a7:dd:b8:9a:16:0f:c1:25:41:7b:7e:c1:6e:4a:2d:91: 3b:4e:6a:02:c2:05:ff:51:2e:61:39:6b:3e:67:d8:4c:c8:08: 85:e0:b5:14:23:aa:d0:5c:6f:b2:2d:cf:34:04:c1:05:4b:9c: e8:20:cf:0f:39:ae:0d:16:ee:84:68:49:8c:cf:86:fc:21:b5: 79:84:59:3a:66:01:de:43:28:98:c8:65:47:b5:69:1e:6c:17: cc:1a:70:d1:9f:fe:8e:67:42:6a:50:e2:06:7f:09:21:f4:d3: 48:15:c0:62:ee:98:38:47:58:8d:46:17:93:aa:ad:dc:d4:78: cc:82:27:d4:de:a0:e0:4b:84:72:a3:ed:19:4a:fa:68:3d:29: 41:88:4d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm9ZanRmiViPJSja9F5Jl+s6JRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA3MjAyMDM2NTJaFw0yNjA3MjEyMjE1NTJaMDMxMTAvBgNV BAMTKDI1OEM2NTE5MUM4MEU3RDU2MDNCMTRENDhDOUEzMzgxODQ2Qzg2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrXD2/v96l3aa4+CYUNRSn+FR 6NdstVgsnxue7gsyMM1vJIOV0laYA6VVDSbOP7JcUO9LiFhvhzklzJ51ZMOOjsuX 2/lJevSHf7nZtfuzWS+UJqbE95K4LmGcBOuXmL3J919uFcV67LN/pXoMmH7y1Xor GGoM7SF8PcUtsi5emNrzCk6if5t9IE/lv+7StC0xHhsuVfC1qwg1RUQ5/nb5EBwM 5NBu1SyVR6PfVLjZpizIMOChLRpn5BWhmcS9xqUFESae94NnCGEQKikr2bu9XSld Vd5ppr75BaVbnrMxnSeXJaKuKbzEJIMSB9YayWyu+gRLViX+m+n8bSWSRgg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYxlGRyA59VgOxTUjJozgYRshlUwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwFP2XAhLktwxUe1rKprunMJ+NdzgrW1lwA KZkp6OH3DdQ6CkV9c9IBlS+UAlQrBKMDUigfOs7/IbsV3GufW/EbTxxU0aWLGghY NQdxSwRB6yX1K/CBsgcXii379lmSIwIBQQJ2/Fm3CH2Z5CFbp924mhYPwSVBe37B bkotkTtOagLCBf9RLmE5az5n2EzICIXgtRQjqtBcb7ItzzQEwQVLnOggzw85rg0W 7oRoSYzPhvwhtXmEWTpmAd5DKJjIZUe1aR5sF8wacNGf/o5nQmpQ4gZ/CSH000gV wGLumDhHWI1GF5OqrdzUeMyCJ9TeoOBLhHKj7RlK+mg9KUGITf8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:36 2026 by rpki-client