$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: 6/EyD0Xn0hGkuST1HBB4B9DBUgSL4FSW/v6vhiQnYgE= Subject key identifier: 2F:0F:FB:A6:8C:67:60:08:78:3F:09:8E:0E:AE:DC:19:7A:78:A3:A1 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 3E49FB79F83AB52AF3D186FF04C909E91B1E0563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:31:22 +0000 Manifest this update: Tue 21 Jul 2026 04:26:22 +0000 Manifest next update: Wed 22 Jul 2026 07:38:22 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) 2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) 3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) 4: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) 5: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: kOYbl6QimE5KHRGXfp7sF2/LodvQ3TblglYktR/4k3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:49:fb:79:f8:3a:b5:2a:f3:d1:86:ff:04:c9:09:e9:1b:1e:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: Jul 21 04:26:22 2026 GMT Not After : Jul 22 07:38:22 2026 GMT Subject: CN=2F0FFBA68C676008783F098E0EAEDC197A78A3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:21:96:21:d6:e7:9b:81:17:27:f5:22:78: 8c:77:e7:d0:1d:c4:87:87:e5:38:45:e6:4e:ac:00: bc:01:5c:13:50:48:e9:fa:ea:f9:36:93:93:3b:3d: fd:44:89:dc:72:a2:56:1d:fc:1d:93:79:2e:f4:8a: 5c:6c:7d:51:a5:1e:eb:1a:26:c7:2b:8d:be:a6:59: f4:43:fb:68:bb:9d:aa:f4:87:51:73:38:5b:4a:76: 74:e8:ab:07:95:7e:94:aa:cf:0c:02:ed:c4:87:46: 1a:19:dc:2f:bb:85:c8:6f:75:6b:a8:53:92:91:c3: 55:7f:11:42:a6:60:c8:e5:92:6f:8c:10:52:7c:12: da:67:79:57:e9:81:6f:99:77:ea:f0:47:86:f7:01: 09:7e:8b:65:6b:e5:da:d4:7f:e8:21:4a:a5:7f:a8: d2:a9:09:8d:b6:8b:f6:bd:6f:0d:37:9d:20:ea:ae: ba:4a:03:65:35:9b:0c:02:7b:28:49:34:4d:b1:e4: 34:7e:40:a3:87:59:3b:71:35:b9:aa:5a:26:e0:4b: 02:a4:7d:26:a8:e5:ad:2f:45:c2:81:b5:6f:e0:92: 3b:ac:7c:ae:af:19:ff:fe:98:9b:fe:47:57:72:24: 3a:cc:e1:bf:34:0c:f1:7b:1b:44:e1:43:70:67:b1: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:FB:A6:8C:67:60:08:78:3F:09:8E:0E:AE:DC:19:7A:78:A3:A1 X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:5d:b0:e6:27:9e:c9:be:14:4c:1d:a5:ee:af:0c:20:2a: 72:0f:0b:d6:6d:54:04:df:f1:c6:a9:84:00:32:19:6d:c9:71: 7a:04:88:c3:12:c0:44:49:e0:b4:1e:ff:08:e2:78:ff:61:21: 74:cd:0b:ca:8d:96:05:e8:39:f5:13:8c:86:c6:fd:1d:e2:92: 4e:4a:05:0b:0a:2c:4f:55:e0:85:8b:53:63:e9:2b:95:9e:18: d4:a5:01:f7:7f:8c:6d:a5:55:ac:c9:66:41:42:47:01:a8:89: e7:9d:0c:eb:b0:33:bf:e4:29:28:2f:be:47:13:6d:ef:61:9f: 79:d9:13:91:b7:bb:0e:13:2c:0f:c6:5a:60:c9:9b:29:49:1a: 8a:a1:d0:f2:be:66:c2:ca:92:e8:9d:29:ee:98:f0:b7:d6:ac: de:15:8d:a6:c5:65:00:55:d8:e3:19:44:39:b9:d4:b4:e2:1b: c1:bc:e5:86:02:e3:be:33:a6:80:2e:df:90:ba:34:ad:05:96: 53:9a:aa:67:6f:a1:b6:bd:50:e0:cc:55:64:fb:54:c3:a7:b7: d9:44:a7:79:b8:72:f5:d2:2f:33:e6:45:0c:3a:36:72:c1:9a: 97:36:52:ce:aa:b9:9a:82:3f:67:78:c6:c0:e5:63:d6:49:48: b8:9b:c4:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkn7efg6tSrz0Yb/BMkJ6RseBWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA3MjEwNDI2MjJaFw0yNjA3MjIwNzM4MjJaMDMxMTAvBgNV BAMTKDJGMEZGQkE2OEM2NzYwMDg3ODNGMDk4RTBFQUVEQzE5N0E3OEEzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtCGWIdbnm4EXJ/UieIx359Ad xIeH5ThF5k6sALwBXBNQSOn66vk2k5M7Pf1EidxyolYd/B2TeS70ilxsfVGlHusa Jscrjb6mWfRD+2i7nar0h1FzOFtKdnToqweVfpSqzwwC7cSHRhoZ3C+7hchvdWuo U5KRw1V/EUKmYMjlkm+MEFJ8EtpneVfpgW+Zd+rwR4b3AQl+i2Vr5drUf+ghSqV/ qNKpCY22i/a9bw03nSDqrrpKA2U1mwwCeyhJNE2x5DR+QKOHWTtxNbmqWibgSwKk fSao5a0vRcKBtW/gkjusfK6vGf/+mJv+R1dyJDrM4b80DPF7G0ThQ3BnseXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULw/7poxnYAh4PwmODq7cGXp4o6EwHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw0XbDmJ57JvhRMHaXurwwgKnIPC9ZtVATf 8caphAAyGW3JcXoEiMMSwERJ4LQe/wjieP9hIXTNC8qNlgXoOfUTjIbG/R3ikk5K BQsKLE9V4IWLU2PpK5WeGNSlAfd/jG2lVazJZkFCRwGoieedDOuwM7/kKSgvvkcT be9hn3nZE5G3uw4TLA/GWmDJmylJGoqh0PK+ZsLKkuidKe6Y8LfWrN4VjabFZQBV 2OMZRDm51LTiG8G85YYC474zpoAu35C6NK0FllOaqmdvoba9UODMVWT7VMOnt9lE p3m4cvXSLzPmRQw6NnLBmpc2Us6quZqCP2d4xsDlY9ZJSLibxN8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:19:14 2026 by rpki-client