$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: 8yJjRS6iZgy9CTJvHIXk8aucAe+n+VBkGkHNB+lJXZA= Subject key identifier: 7E:3A:52:E4:42:01:6C:21:6D:1A:63:C5:D2:B6:C9:AD:FB:B7:20:FE Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 6BB704AB859A88D65895DDB167358A72CE0D1466 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 06:49:16 +0000 Manifest this update: Tue 21 Jul 2026 06:44:16 +0000 Manifest next update: Wed 22 Jul 2026 10:24:16 +0000 Files and hashes: 1: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) 2: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: kpU8sFeZGdtwk6STwljc0m/NmPT+7znLDcDfjuwXnTE=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) 5: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) 6: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b7:04:ab:85:9a:88:d6:58:95:dd:b1:67:35:8a:72:ce:0d:14:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Jul 21 06:44:16 2026 GMT Not After : Jul 22 10:24:16 2026 GMT Subject: CN=7E3A52E442016C216D1A63C5D2B6C9ADFBB720FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:1b:9c:15:1b:be:80:db:9e:16:3d:74:4c: 84:e6:ff:ff:29:5c:8e:0d:fa:92:f4:0b:9c:d9:0e: f8:c9:a2:e4:a3:0c:65:4b:76:63:ca:96:ee:d2:48: 76:b2:c5:ed:50:2b:df:38:48:32:d6:74:23:64:5d: 9e:af:95:6d:df:d3:5a:a5:93:85:ce:8c:aa:85:b7: e9:30:05:96:52:41:99:dd:cc:f4:a5:c1:4a:d4:4c: 6e:92:01:e8:7e:d2:98:63:d0:12:a8:92:be:1a:1e: f3:bc:d7:e4:ec:e4:17:d9:f2:46:34:59:73:4a:30: d7:db:35:85:5b:ef:b8:61:c3:35:1d:a8:af:8b:e0: 1d:7c:50:36:f6:74:94:f5:44:0b:75:e9:46:d1:61: f7:bc:7e:14:e2:5f:77:e8:49:4a:9b:b8:6d:11:72: 19:ac:ec:55:6b:93:3c:a7:43:42:67:5d:f8:57:96: a6:cb:07:2c:6a:3b:c2:f6:18:5e:57:16:18:ec:d5: 62:4d:94:85:e7:0f:59:ef:5c:00:fc:8c:bb:b7:a8: 3a:af:f0:48:15:61:dc:05:97:ef:a1:b4:53:2c:cc: a6:d4:2f:63:b6:93:ed:ec:43:70:0a:3a:74:8e:2e: 10:7b:07:02:63:01:0b:df:db:5a:10:74:55:33:b5: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3A:52:E4:42:01:6C:21:6D:1A:63:C5:D2:B6:C9:AD:FB:B7:20:FE X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d6:34:b3:93:d7:68:6a:5c:f7:95:bc:80:d0:fd:74:81:ff: 8f:05:7e:de:5a:9b:74:76:bd:6a:90:9a:61:fa:15:13:e8:86: 17:f7:27:34:49:87:4d:43:19:21:da:6e:ee:20:7b:f4:69:72: e8:64:7c:bc:35:b4:8c:32:e3:07:11:f7:b0:3e:7a:9a:5e:50: 1a:b4:08:c4:a1:21:8d:14:ee:5a:e9:16:c4:d8:06:b4:58:6b: 26:d7:eb:18:4e:6c:5e:97:75:94:cd:5d:96:33:15:26:70:82: cc:32:0b:f4:0f:9e:46:bc:1c:8a:cd:bb:0f:56:c9:e7:c5:04: 86:8a:e1:43:fc:3a:33:b5:86:4f:2e:3a:69:39:0c:db:67:10: 2e:c3:8a:01:98:55:06:1a:aa:3f:72:04:cf:ac:83:8c:88:cc: c3:f3:97:55:e5:24:ea:c6:13:a3:7e:a5:0d:89:cf:73:27:3e: 71:cc:5e:44:55:a0:dd:4b:ba:0e:76:5f:79:60:22:e7:31:22: 2a:f1:e6:a4:41:d5:6c:31:83:ea:de:ff:f5:61:bc:6a:14:bf: 62:9f:fb:52:6b:d3:72:1f:c7:cc:cd:60:08:e1:ea:e4:63:ff: 3c:38:bb:5d:bd:38:c8:4b:0d:8a:0c:e9:b0:f0:6a:2c:42:6e: 0a:7e:7f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7cEq4WaiNZYld2xZzWKcs4NFGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA3MjEwNjQ0MTZaFw0yNjA3MjIxMDI0MTZaMDMxMTAvBgNV BAMTKDdFM0E1MkU0NDIwMTZDMjE2RDFBNjNDNUQyQjZDOUFERkJCNzIwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsxucFRu+gNueFj10TITm//8p XI4N+pL0C5zZDvjJouSjDGVLdmPKlu7SSHayxe1QK984SDLWdCNkXZ6vlW3f01ql k4XOjKqFt+kwBZZSQZndzPSlwUrUTG6SAeh+0phj0BKokr4aHvO81+Ts5BfZ8kY0 WXNKMNfbNYVb77hhwzUdqK+L4B18UDb2dJT1RAt16UbRYfe8fhTiX3foSUqbuG0R chms7FVrkzynQ0JnXfhXlqbLByxqO8L2GF5XFhjs1WJNlIXnD1nvXAD8jLu3qDqv 8EgVYdwFl++htFMszKbUL2O2k+3sQ3AKOnSOLhB7BwJjAQvf21oQdFUztU1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjpS5EIBbCFtGmPF0rbJrfu3IP4wHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHWNLOT12hqXPeVvIDQ/XSB/48Fft5am3R2 vWqQmmH6FRPohhf3JzRJh01DGSHabu4ge/RpcuhkfLw1tIwy4wcR97A+eppeUBq0 CMShIY0U7lrpFsTYBrRYaybX6xhObF6XdZTNXZYzFSZwgswyC/QPnka8HIrNuw9W yefFBIaK4UP8OjO1hk8uOmk5DNtnEC7DigGYVQYaqj9yBM+sg4yIzMPzl1XlJOrG E6N+pQ2Jz3MnPnHMXkRVoN1Lug52X3lgIucxIirx5qRB1Wwxg+re//VhvGoUv2Kf +1Jr03Ifx8zNYAjh6uRj/zw4u129OMhLDYoM6bDwaixCbgp+f/s= -----END CERTIFICATE-----Generated at Tue Jul 21 08:28:03 2026 by rpki-client