$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: /9rRVwzaJEwdKNJXFqjZoHptf1+01+J8yGqLfDZWgb8= Subject key identifier: 9B:87:17:A0:A6:7E:CE:64:EF:D9:8A:CF:4E:0C:01:69:4F:60:C1:91 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 4F9B70504C602D7A99BD1B7CFFCEE566670CED29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: 54 Signing time: Sat 04 Jul 2026 04:43:30 +0000 Manifest this update: Sat 04 Jul 2026 04:38:30 +0000 Manifest next update: Sun 05 Jul 2026 05:17:30 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=) 2: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: sMrA9xaaREKQYJRNY2yPkd1BKZsJaKDR02Dg0UtN6EU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:70:50:4c:60:2d:7a:99:bd:1b:7c:ff:ce:e5:66:67:0c:ed:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Jul 4 04:38:30 2026 GMT Not After : Jul 5 05:17:30 2026 GMT Subject: CN=9B8717A0A67ECE64EFD98ACF4E0C01694F60C191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:41:3b:b9:90:12:17:df:d3:3d:84:81:10: 93:bb:52:1d:5b:9e:40:88:b2:21:4f:30:59:8c:3c: 9a:72:cf:a5:88:b5:29:53:8e:3c:69:92:cf:47:f6: 40:06:19:56:74:9b:ff:31:df:3d:86:1f:9f:c7:53: 13:52:ca:b5:cc:d3:1d:78:54:a4:3c:a4:6d:67:79: ff:03:02:84:08:ff:50:55:1d:f5:cc:37:70:9d:3b: d6:9a:5e:d2:7d:ef:88:d2:93:ff:bb:09:0b:a9:4d: 63:86:3a:8c:10:cd:df:eb:b0:ae:bf:8d:aa:55:c4: 80:01:4e:9e:3f:b2:2b:e8:9f:a5:fd:33:b8:64:ff: 92:3e:0d:0a:59:f0:42:3f:87:fa:5a:e1:81:b5:19: 3c:e5:ff:ae:7e:08:e8:8a:89:6e:56:56:ff:c8:03: 88:47:b6:7f:4f:64:ce:7b:db:8b:fa:bc:34:1c:5e: 29:e6:95:4f:ee:ed:f8:44:b3:3c:da:64:07:0e:d8: 8c:4c:89:c8:4f:82:f7:25:ae:8c:7a:57:03:fb:1d: c9:a8:3b:e1:11:8a:cb:78:c4:6a:e0:47:04:bb:13: 26:03:68:96:6c:d1:c5:0f:d3:63:0c:78:9e:7f:71: 62:1a:7b:e8:db:c3:67:cb:e7:cf:9d:55:5b:94:96: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:87:17:A0:A6:7E:CE:64:EF:D9:8A:CF:4E:0C:01:69:4F:60:C1:91 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:db:47:b2:f0:0d:82:9f:a0:66:8b:d3:f4:67:3a:0a:9a:54: 30:37:77:38:01:cf:07:c6:d0:4c:fe:14:16:65:ed:4d:50:58: 97:fa:a7:59:10:81:96:56:28:3f:8d:08:f8:a8:49:99:98:21: cf:f0:9b:ff:3f:91:21:35:9e:cc:79:44:85:c4:e6:04:81:0d: eb:f1:a7:d0:c2:aa:c2:9c:18:e8:39:84:89:26:a3:43:85:d0: 35:bb:bc:eb:47:83:0f:a1:19:a3:57:65:f4:c9:46:c6:0b:c5: fd:99:1d:92:14:ef:52:f4:75:bf:6d:c5:b1:47:5b:21:a6:c4: a8:e3:f2:9e:b8:b9:fb:b8:93:5f:dc:07:15:d7:2a:1e:03:6c: 43:d1:53:e9:b3:54:0e:f0:67:43:46:41:7b:91:2a:2e:bf:b4: a8:49:e5:c1:0a:36:35:09:94:e6:b3:39:5c:b3:e4:01:b8:3a: 83:60:24:1e:85:6a:3b:ab:90:75:c9:b5:52:5d:47:5e:e7:2d: 33:d7:df:19:07:fd:4c:6c:7a:0d:2d:a0:09:90:a5:4f:0c:a7: db:e9:39:c2:11:ff:db:ca:51:4a:c7:8e:96:21:21:e8:84:04: ea:bc:5b:47:0d:d8:81:52:12:3d:70:a2:12:f3:f4:ef:cf:15: 31:cb:a1:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5twUExgLXqZvRt8/87lZmcM7SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA3MDQwNDM4MzBaFw0yNjA3MDUwNTE3MzBaMDMxMTAvBgNV BAMTKDlCODcxN0EwQTY3RUNFNjRFRkQ5OEFDRjRFMEMwMTY5NEY2MEMxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGEE7uZASF9/TPYSBEJO7Uh1b nkCIsiFPMFmMPJpyz6WItSlTjjxpks9H9kAGGVZ0m/8x3z2GH5/HUxNSyrXM0x14 VKQ8pG1nef8DAoQI/1BVHfXMN3CdO9aaXtJ974jSk/+7CQupTWOGOowQzd/rsK6/ japVxIABTp4/sivon6X9M7hk/5I+DQpZ8EI/h/pa4YG1GTzl/65+COiKiW5WVv/I A4hHtn9PZM5724v6vDQcXinmlU/u7fhEszzaZAcO2IxMichPgvclrox6VwP7Hcmo O+ERist4xGrgRwS7EyYDaJZs0cUP02MMeJ5/cWIae+jbw2fL58+dVVuUlvPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4cXoKZ+zmTv2YrPTgwBaU9gwZEwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPbR7LwDYKfoGaL0/RnOgqaVDA3dzgBzwfG 0Ez+FBZl7U1QWJf6p1kQgZZWKD+NCPioSZmYIc/wm/8/kSE1nsx5RIXE5gSBDevx p9DCqsKcGOg5hIkmo0OF0DW7vOtHgw+hGaNXZfTJRsYLxf2ZHZIU71L0db9txbFH WyGmxKjj8p64ufu4k1/cBxXXKh4DbEPRU+mzVA7wZ0NGQXuRKi6/tKhJ5cEKNjUJ lOazOVyz5AG4OoNgJB6FajurkHXJtVJdR17nLTPX3xkH/Uxseg0toAmQpU8Mp9vp OcIR/9vKUUrHjpYhIeiEBOq8W0cN2IFSEj1wohLz9O/PFTHLoZw= -----END CERTIFICATE-----Generated at Sat Jul 4 14:59:23 2026 by rpki-client