$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json) Hash identifier: l/BUZhfXnfNbdriJuvey/nsPiIEVHsa/x+/kgpApDO0= Subject key identifier: DA:64:27:9D:1F:13:AA:90:F8:5C:99:2B:DB:04:09:DE:21:4C:85:13 Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Certificate serial: 3EC917592F09358A4A5B2D6E428CE7093FA6F261 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:22:39 +0000 Manifest this update: Mon 20 Jul 2026 21:17:39 +0000 Manifest next update: Tue 21 Jul 2026 23:52:39 +0000 Files and hashes: 1: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: ywjtgHU9X/mfxWyTi6CGq2Zq1koiZNSjiIa6Ep4vuxg=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=) 3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=) 4: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c9:17:59:2f:09:35:8a:4a:5b:2d:6e:42:8c:e7:09:3f:a6:f2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Validity Not Before: Jul 20 21:17:39 2026 GMT Not After : Jul 21 23:52:39 2026 GMT Subject: CN=DA64279D1F13AA90F85C992BDB0409DE214C8513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:69:ff:e5:2e:59:0d:9d:e1:45:d2:8d:29: cb:a8:a3:07:a0:21:49:a2:ab:28:36:dc:0f:24:61: 8b:e2:e7:dd:ff:98:d8:ca:9c:0b:e9:3d:22:15:9b: 9a:cd:6e:f6:2d:a3:a0:a1:3b:f7:1b:1e:c8:66:4c: 0a:fa:d7:28:ed:a4:a3:67:5c:92:f8:f7:5c:d4:63: 9b:64:23:f9:b8:27:e6:11:0a:ba:32:96:52:36:f9: cc:be:22:57:1e:fd:e1:14:c7:d4:ac:db:3b:29:96: 7e:ad:ea:f8:92:12:1e:c6:3a:89:84:68:29:1a:88: 78:ab:63:21:e8:46:96:94:b2:e6:2a:88:9b:99:43: d3:a7:b3:de:70:da:a9:b4:0b:06:69:9a:53:cc:d2: 81:c2:b7:61:80:3b:2c:e1:65:ca:75:38:07:6a:0d: aa:39:7c:87:64:51:26:ce:21:ec:a3:ed:c5:db:96: cb:57:e9:a9:49:57:ee:84:b5:d2:83:43:86:9f:63: 50:25:44:e2:88:f2:b2:4b:c7:51:9d:20:57:1e:44: 76:42:01:14:7a:b2:b0:65:d3:86:f4:4f:40:9b:fe: ba:8c:03:e9:55:9a:69:13:76:a8:93:6c:34:1f:e7: 00:76:41:44:b4:de:ed:32:c6:3a:3c:93:1c:ef:11: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:27:9D:1F:13:AA:90:F8:5C:99:2B:DB:04:09:DE:21:4C:85:13 X509v3 Authority Key Identifier: keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9f:06:db:b7:74:f5:f0:d3:e9:b0:13:bd:b8:fb:c5:2f:60: 5a:b1:36:5e:d9:47:31:e6:69:95:53:ab:33:ce:72:b7:e5:f9: 11:d4:16:b5:9c:ae:96:94:ec:fb:7d:83:7c:19:8e:8c:c6:20: 23:b5:a4:19:f3:e8:2a:e9:55:a3:14:28:5d:7d:93:dd:05:90: 0a:fd:61:55:0a:89:ab:c2:9c:3f:b4:7c:d5:d1:66:1e:73:44: 2d:a1:5a:63:44:8f:b4:14:b4:02:cb:cb:7f:09:c3:2e:96:53: 97:6f:13:4a:df:7a:30:a6:ad:33:3d:1f:d9:dd:1b:fc:b6:27: 41:18:3c:3e:e4:de:45:ce:84:e3:88:0d:5a:8a:64:9c:63:21: 26:a9:6a:6d:24:9a:63:aa:3e:da:0e:a6:05:62:a7:45:8a:39: 45:3e:3f:eb:34:70:c4:06:3d:2d:32:fe:fd:d8:8a:0b:ff:c7: e3:cf:19:84:0b:2e:e9:b2:e3:00:2c:fe:d2:40:d4:7b:86:98: 60:0b:59:73:55:49:d9:34:72:e2:d0:74:90:91:f4:69:12:ce: 58:b4:45:d5:b7:be:49:59:68:3c:4b:99:ee:57:53:fb:38:88: 3e:51:13:2a:a1:76:d7:1b:a6:77:5b:df:7b:67:45:45:9a:33: d4:0f:84:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPskXWS8JNYpKWy1uQoznCT+m8mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky NUE5RDNCMzAeFw0yNjA3MjAyMTE3MzlaFw0yNjA3MjEyMzUyMzlaMDMxMTAvBgNV BAMTKERBNjQyNzlEMUYxM0FBOTBGODVDOTkyQkRCMDQwOURFMjE0Qzg1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Gn/5S5ZDZ3hRdKNKcuooweg IUmiqyg23A8kYYvi593/mNjKnAvpPSIVm5rNbvYto6ChO/cbHshmTAr61yjtpKNn XJL491zUY5tkI/m4J+YRCroyllI2+cy+Ilce/eEUx9Ss2zspln6t6viSEh7GOomE aCkaiHirYyHoRpaUsuYqiJuZQ9Ons95w2qm0CwZpmlPM0oHCt2GAOyzhZcp1OAdq Dao5fIdkUSbOIeyj7cXblstX6alJV+6EtdKDQ4afY1AlROKI8rJLx1GdIFceRHZC ARR6srBl04b0T0Cb/rqMA+lVmmkTdqiTbDQf5wB2QUS03u0yxjo8kxzvEf71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mQnnR8TqpD4XJkr2wQJ3iFMhRMwHwYDVR0j BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0 MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIy MjkyNUE5RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCfBtu3dPXw0+mwE724+8UvYFqxNl7ZRzHm aZVTqzPOcrfl+RHUFrWcrpaU7Pt9g3wZjozGICO1pBnz6CrpVaMUKF19k90FkAr9 YVUKiavCnD+0fNXRZh5zRC2hWmNEj7QUtALLy38Jwy6WU5dvE0rfejCmrTM9H9nd G/y2J0EYPD7k3kXOhOOIDVqKZJxjISapam0kmmOqPtoOpgVip0WKOUU+P+s0cMQG PS0y/v3Yigv/x+PPGYQLLumy4wAs/tJA1HuGmGALWXNVSdk0cuLQdJCR9GkSzli0 RdW3vklZaDxLme5XU/s4iD5REyqhdtcbpndb33tnRUWaM9QPhKY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:35 2026 by rpki-client