$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: zri1kZlzmJRgcodwqduSTZrJYEoUtJ2eoh0Ucmgmdes= Subject key identifier: 28:B5:BE:77:FA:01:B4:C4:24:4A:D2:8F:C7:79:39:F3:2D:B5:9E:6E Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 3AC75F562485BEEB018DB1A14B69C582E3D640EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 14:14:31 +0000 Manifest this update: Sun 19 Jul 2026 14:09:31 +0000 Manifest next update: Mon 20 Jul 2026 14:49:31 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: GAJ+lESvr0spIxscc67lwnJDmVEHK+wpw16z/IXwmkM=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c7:5f:56:24:85:be:eb:01:8d:b1:a1:4b:69:c5:82:e3:d6:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Jul 19 14:09:31 2026 GMT Not After : Jul 20 14:49:31 2026 GMT Subject: CN=28B5BE77FA01B4C4244AD28FC77939F32DB59E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:33:68:9b:d9:71:bf:e6:96:26:84:c3:a9:fd: a2:eb:b5:3f:16:fd:21:79:a8:d8:9f:cb:0a:c4:85: d2:9d:63:9e:5b:88:52:d0:45:14:73:08:5d:9c:0d: 3a:8c:45:cd:2b:17:83:d6:37:c2:71:38:d7:94:d4: 86:ab:8a:ab:b4:ea:84:6d:7d:2e:e2:27:a9:87:5a: 60:70:1b:49:47:4f:2a:a2:de:59:7c:2e:ea:28:3c: 70:2d:35:97:da:32:7a:c9:14:b4:bb:d9:26:27:ee: 0d:63:59:81:40:89:27:74:3a:db:5a:53:f1:67:64: 68:73:41:8b:3c:56:1f:b2:26:9a:d3:39:9a:5f:5d: 8e:c8:cb:2a:f4:5a:3b:d3:33:23:ea:16:2f:0d:93: 8b:4d:72:70:0c:42:03:ef:1b:9b:fb:a8:1f:8e:a2: 60:89:fd:85:b8:d1:bc:fb:4c:f6:10:f3:e1:14:12: 48:e9:fd:34:20:89:65:d6:ff:ae:37:7d:d5:11:32: b9:2b:2d:8d:09:b9:aa:e6:7c:5e:3b:c4:5b:5c:50: 11:1a:0a:2c:73:ff:b7:91:35:82:e5:9e:3a:18:0a: 2c:6a:ee:8b:26:a6:b3:d0:40:a2:d3:01:35:f8:91: 9e:46:54:98:fe:bb:18:17:67:4e:ee:20:a4:9d:22: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:BE:77:FA:01:B4:C4:24:4A:D2:8F:C7:79:39:F3:2D:B5:9E:6E X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a5:1b:29:6e:a3:7b:c9:40:12:85:96:83:48:90:5d:89:cc: f1:ca:38:80:ee:24:5c:39:0e:cc:99:9e:b9:04:45:0e:a4:e2: 07:73:d3:2c:1c:66:23:14:df:b8:c2:81:f5:bf:ab:3d:bb:43: ff:c5:d8:28:ab:1c:65:a9:a6:d8:e4:7f:f5:be:31:a4:dc:e5: 9b:67:fe:7a:86:f8:a8:f2:21:2d:72:6d:1d:35:13:65:9f:9b: e3:a0:75:43:0f:ae:88:67:40:c4:ec:ae:a6:5d:59:54:21:03: d1:9a:4d:cf:15:ba:15:f4:78:7f:ca:cf:ad:8b:26:6e:90:ad: ce:31:88:b8:5c:3c:b0:65:ae:bb:d7:44:f7:af:e2:fb:25:bb: 42:02:9d:7c:5f:16:75:e8:9a:ee:c5:b6:aa:26:16:70:5d:f5: d7:51:cc:1a:5b:cc:a9:01:f8:3a:14:1f:56:77:1c:29:be:43: b2:45:1e:b6:aa:b9:06:8a:fe:ed:95:68:a8:56:4f:f3:b1:e9: 92:b5:51:15:41:f4:4c:09:7d:2d:96:94:49:70:3d:af:03:4a: 4a:70:04:48:43:b5:db:c4:6b:f1:78:1c:cb:f6:b4:a6:8f:b9: 9c:fa:e6:a5:10:b8:8c:26:8d:50:43:8e:fe:9e:ab:94:3d:4d: f1:ab:23:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsdfViSFvusBjbGhS2nFguPWQOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjA3MTkxNDA5MzFaFw0yNjA3MjAxNDQ5MzFaMDMxMTAvBgNV BAMTKDI4QjVCRTc3RkEwMUI0QzQyNDRBRDI4RkM3NzkzOUYzMkRCNTlFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyM2ib2XG/5pYmhMOp/aLrtT8W /SF5qNifywrEhdKdY55biFLQRRRzCF2cDTqMRc0rF4PWN8JxONeU1Iariqu06oRt fS7iJ6mHWmBwG0lHTyqi3ll8LuooPHAtNZfaMnrJFLS72SYn7g1jWYFAiSd0Otta U/FnZGhzQYs8Vh+yJprTOZpfXY7Iyyr0WjvTMyPqFi8Nk4tNcnAMQgPvG5v7qB+O omCJ/YW40bz7TPYQ8+EUEkjp/TQgiWXW/643fdURMrkrLY0JuarmfF47xFtcUBEa Cixz/7eRNYLlnjoYCixq7osmprPQQKLTATX4kZ5GVJj+uxgXZ07uIKSdImpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLW+d/oBtMQkStKPx3k58y21nm4wHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKlGyluo3vJQBKFloNIkF2JzPHKOIDuJFw5 DsyZnrkERQ6k4gdz0ywcZiMU37jCgfW/qz27Q//F2CirHGWpptjkf/W+MaTc5Ztn /nqG+KjyIS1ybR01E2Wfm+OgdUMProhnQMTsrqZdWVQhA9GaTc8VuhX0eH/Kz62L Jm6Qrc4xiLhcPLBlrrvXRPev4vslu0ICnXxfFnXomu7FtqomFnBd9ddRzBpbzKkB +DoUH1Z3HCm+Q7JFHraquQaK/u2VaKhWT/Ox6ZK1URVB9EwJfS2WlElwPa8DSkpw BEhDtdvEa/F4HMv2tKaPuZz65qUQuIwmjVBDjv6eq5Q9TfGrI7A= -----END CERTIFICATE-----Generated at Sun Jul 19 23:50:51 2026 by rpki-client