$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: 0pid2OkrMOQmTY7c8r81qqSleWGhZl+BLtCT/PHwACc= Subject key identifier: FD:2E:2B:91:1A:A6:F9:D8:9B:26:58:90:44:2C:6A:DD:CB:DC:90:E4 Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 3E09EAB7C2C0F9FEEB734E58EC104ED625E9A4AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:53:45 +0000 Manifest this update: Mon 20 Jul 2026 13:48:45 +0000 Manifest next update: Tue 21 Jul 2026 16:28:45 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) 2: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) 3: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: JzfQAJB0VJ0jbs7p2pemsE5TiAaK/Ugxz6EG4Jh9foI=) 4: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) 5: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:09:ea:b7:c2:c0:f9:fe:eb:73:4e:58:ec:10:4e:d6:25:e9:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: Jul 20 13:48:45 2026 GMT Not After : Jul 21 16:28:45 2026 GMT Subject: CN=FD2E2B911AA6F9D89B265890442C6ADDCBDC90E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:f8:5d:c7:a5:75:a7:e2:29:b5:47:9f:3d: e9:dc:fa:14:a3:1e:fc:49:77:74:99:71:50:b2:85: fc:0b:1f:49:bb:00:47:4c:c0:20:cf:76:8b:0c:3e: d9:f3:e5:f3:e0:66:4a:dc:b2:80:a1:6f:b7:bd:00: 2d:ef:cd:48:a2:2f:41:30:fa:9b:a6:d1:eb:33:38: f9:f4:a3:dd:e1:57:96:f6:ad:b5:0a:6e:cd:cf:94: 07:0d:e3:99:8e:89:1b:1d:ae:95:df:9e:17:84:5d: b7:ef:f6:a1:b0:53:33:72:c3:32:82:6c:ce:30:f6: db:ea:27:9f:80:6b:ee:3b:65:b4:e3:8e:ca:08:39: a4:e5:41:d4:2d:d9:91:eb:1d:5c:bf:99:4c:11:93: 05:cb:11:10:08:2c:71:ef:8f:c0:2a:ee:92:d1:e7: 37:3e:d6:e3:57:6c:eb:4b:ae:99:94:e2:5f:01:d5: 23:ef:34:83:02:2e:d3:bd:c0:69:e8:84:cb:55:08: c4:d8:4d:f6:0a:19:6e:3f:c0:21:87:11:c9:3f:76: d4:27:aa:0c:ff:cc:69:e6:a5:d3:87:9f:df:5a:1b: 9a:8b:3e:63:61:ff:52:fb:a9:68:ae:66:a7:55:dc: 1f:b1:44:18:16:f6:a2:c4:7e:47:05:35:ec:db:80: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2E:2B:91:1A:A6:F9:D8:9B:26:58:90:44:2C:6A:DD:CB:DC:90:E4 X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:21:10:80:30:be:f9:04:4c:fd:a4:be:8a:ab:14:19:c7:0d: 94:2e:8c:be:9a:f0:16:81:c3:07:1b:de:e4:b1:ae:2a:2c:27: 3b:81:91:83:3c:ab:d7:9e:c8:49:3f:0e:a4:5d:3b:0f:5f:3d: 68:5a:6e:63:41:dc:30:3a:56:e2:47:ab:2b:d9:b9:1c:bf:e3: db:8e:cf:96:15:10:70:34:0f:61:4c:62:ac:c2:96:4f:01:97: 41:a0:f2:74:5b:2b:cf:8c:5b:a3:78:72:8d:77:9c:3e:d2:7b: 70:05:d6:19:56:82:f4:a8:7c:e9:56:f7:42:11:3d:06:27:af: 81:3b:4c:90:0f:d2:b3:7b:1a:55:bd:22:ad:c4:bf:44:27:ee: da:3f:71:64:51:a2:30:88:f7:64:38:ef:2b:4a:a2:d4:6a:dd: 6b:34:f6:2b:be:5a:49:54:ec:71:2c:e8:59:db:1d:ca:63:66: cc:be:d8:5b:d9:e7:be:f7:bb:f6:9c:e7:18:b8:e4:e8:0a:83: 39:eb:64:67:47:e8:b3:7c:c4:f3:05:1c:de:b9:a6:54:eb:9d: 85:bd:f4:f1:96:ec:ab:09:53:65:dd:c3:84:eb:39:37:fd:af: b1:eb:15:af:25:d4:03:8d:fc:5e:7d:ce:3d:79:e6:fb:be:60: d5:5b:60:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgnqt8LA+f7rc05Y7BBO1iXppKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA3MjAxMzQ4NDVaFw0yNjA3MjExNjI4NDVaMDMxMTAvBgNV BAMTKEZEMkUyQjkxMUFBNkY5RDg5QjI2NTg5MDQ0MkM2QUREQ0JEQzkwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjfhdx6V1p+IptUefPenc+hSj HvxJd3SZcVCyhfwLH0m7AEdMwCDPdosMPtnz5fPgZkrcsoChb7e9AC3vzUiiL0Ew +pum0eszOPn0o93hV5b2rbUKbs3PlAcN45mOiRsdrpXfnheEXbfv9qGwUzNywzKC bM4w9tvqJ5+Aa+47ZbTjjsoIOaTlQdQt2ZHrHVy/mUwRkwXLERAILHHvj8Aq7pLR 5zc+1uNXbOtLrpmU4l8B1SPvNIMCLtO9wGnohMtVCMTYTfYKGW4/wCGHEck/dtQn qgz/zGnmpdOHn99aG5qLPmNh/1L7qWiuZqdV3B+xRBgW9qLEfkcFNezbgOohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/S4rkRqm+dibJliQRCxq3cvckOQwHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkhEIAwvvkETP2kvoqrFBnHDZQujL6a8BaB wwcb3uSxriosJzuBkYM8q9eeyEk/DqRdOw9fPWhabmNB3DA6VuJHqyvZuRy/49uO z5YVEHA0D2FMYqzClk8Bl0Gg8nRbK8+MW6N4co13nD7Se3AF1hlWgvSofOlW90IR PQYnr4E7TJAP0rN7GlW9Iq3Ev0Qn7to/cWRRojCI92Q47ytKotRq3Ws09iu+WklU 7HEs6FnbHcpjZsy+2FvZ5773u/ac5xi45OgKgznrZGdH6LN8xPMFHN65plTrnYW9 9PGW7KsJU2Xdw4TrOTf9r7HrFa8l1AON/F59zj155vu+YNVbYB8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:15:58 2026 by rpki-client