$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: hVA+MCwuDqqP6A1jcaU3N8zDcB0aUX2ozjXuFVpBKNI= Subject key identifier: 68:D8:B7:48:C9:E3:83:48:00:1C:15:9C:30:51:0A:53:83:BE:34:69 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 52301E321C3C04AF3EEB0A73BB59F5285CA47071 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 16:37:24 +0000 Manifest this update: Sun 19 Jul 2026 16:32:24 +0000 Manifest next update: Mon 20 Jul 2026 18:10:24 +0000 Files and hashes: 1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: 6sRDwRx5+M5QnbF+PTRRKuGcrVzyyulX7QkMMdqwkeQ=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:1e:32:1c:3c:04:af:3e:eb:0a:73:bb:59:f5:28:5c:a4:70:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Jul 19 16:32:24 2026 GMT Not After : Jul 20 18:10:24 2026 GMT Subject: CN=68D8B748C9E38348001C159C30510A5383BE3469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:0f:8c:0d:99:40:78:0e:67:d4:7e:e8:42: ff:2f:1b:f8:8c:b6:7a:bc:d2:b8:6b:9a:5f:69:c6: 57:4c:e8:f1:e9:b1:05:54:82:87:34:5d:6d:ac:6d: 7d:a4:0f:ae:2b:57:56:15:a0:70:39:2b:79:64:0e: 39:22:65:83:ea:86:a8:a9:25:10:68:3b:01:ff:44: 70:ab:28:d9:de:90:89:93:89:e4:06:18:90:7f:0d: 6a:04:39:2c:2e:31:dd:8f:c5:bd:cd:c0:52:ba:d1: 1d:53:51:33:8e:d2:0b:70:77:b4:88:16:85:a1:b7: 54:77:d4:0b:0e:91:66:f7:09:d4:db:85:f2:93:06: 00:1b:0f:fc:c9:04:a8:21:27:df:19:bb:2b:d3:05: 2e:95:ad:b8:de:49:26:ec:a2:8b:f1:4c:5d:e3:4e: 76:6e:2f:8b:55:8b:dc:fa:29:f1:7b:3e:bf:be:c1: 2d:4e:db:99:50:0c:42:6d:61:f9:79:a5:57:24:9d: 46:82:2d:cc:5b:85:e0:ac:b6:94:ef:aa:7f:2b:be: 36:4b:e3:24:ee:2e:36:cf:1a:68:6c:b9:0f:7c:0e: 79:48:16:1f:54:15:76:51:f6:f7:ff:62:27:41:36: 52:b4:89:13:0d:70:f5:91:54:88:33:fe:7f:77:8a: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:B7:48:C9:E3:83:48:00:1C:15:9C:30:51:0A:53:83:BE:34:69 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1c:0c:d5:b7:c0:cd:6c:64:0a:bb:28:2f:60:43:a6:53:48: b2:58:bc:b9:7c:ea:3f:26:c1:39:c9:6d:8b:34:8f:a3:fa:d2: 0a:33:51:54:f6:e4:a3:69:6e:37:79:41:35:ee:02:78:b2:36: 00:98:94:9a:92:fb:c2:d9:8e:5e:4a:59:d7:35:c9:3f:e1:61: 1e:a4:bf:fa:b0:15:65:85:5b:a6:36:2b:b1:c3:4d:8b:14:1c: 99:21:af:31:ab:4d:c9:63:f6:4e:37:86:55:a6:25:de:20:d6: 7f:f8:6f:51:5a:51:32:36:d2:73:46:b6:4d:14:d0:56:8d:10: 43:a0:83:a2:8c:6c:f5:6a:2c:37:3f:01:2c:36:53:d6:29:70: 37:26:71:64:5b:0e:25:d4:45:fc:48:b2:6d:44:69:19:52:2c: 93:0c:92:e4:c2:14:b4:6f:46:09:77:fd:d8:54:d7:8f:60:34: 4c:3d:6f:19:a8:37:11:f1:6b:03:ff:eb:41:20:7c:92:05:41: 07:cb:38:2a:4e:02:bd:f0:27:7e:1a:f7:7e:c2:69:08:ea:52: bc:3b:84:50:78:4c:da:a4:6b:00:60:2d:63:b6:64:13:0a:85: 69:0c:78:ce:16:5d:aa:2b:c0:f0:a4:90:cf:23:0b:b1:c4:20: 3b:f5:2a:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjAeMhw8BK8+6wpzu1n1KFykcHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjA3MTkxNjMyMjRaFw0yNjA3MjAxODEwMjRaMDMxMTAvBgNV BAMTKDY4RDhCNzQ4QzlFMzgzNDgwMDFDMTU5QzMwNTEwQTUzODNCRTM0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmw+MDZlAeA5n1H7oQv8vG/iM tnq80rhrml9pxldM6PHpsQVUgoc0XW2sbX2kD64rV1YVoHA5K3lkDjkiZYPqhqip JRBoOwH/RHCrKNnekImTieQGGJB/DWoEOSwuMd2Pxb3NwFK60R1TUTOO0gtwd7SI FoWht1R31AsOkWb3CdTbhfKTBgAbD/zJBKghJ98ZuyvTBS6VrbjeSSbsoovxTF3j TnZuL4tVi9z6KfF7Pr++wS1O25lQDEJtYfl5pVcknUaCLcxbheCstpTvqn8rvjZL 4yTuLjbPGmhsuQ98DnlIFh9UFXZR9vf/YidBNlK0iRMNcPWRVIgz/n93iuBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNi3SMnjg0gAHBWcMFEKU4O+NGkwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYcDNW3wM1sZAq7KC9gQ6ZTSLJYvLl86j8m wTnJbYs0j6P60gozUVT25KNpbjd5QTXuAniyNgCYlJqS+8LZjl5KWdc1yT/hYR6k v/qwFWWFW6Y2K7HDTYsUHJkhrzGrTclj9k43hlWmJd4g1n/4b1FaUTI20nNGtk0U 0FaNEEOgg6KMbPVqLDc/ASw2U9YpcDcmcWRbDiXURfxIsm1EaRlSLJMMkuTCFLRv Rgl3/dhU149gNEw9bxmoNxHxawP/60EgfJIFQQfLOCpOAr3wJ34a937CaQjqUrw7 hFB4TNqkawBgLWO2ZBMKhWkMeM4WXaorwPCkkM8jC7HEIDv1Kt8= -----END CERTIFICATE-----Generated at Mon Jul 20 00:02:40 2026 by rpki-client