$ rpki-client -vvf rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft File: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft (raw, json) Hash identifier: p1iBasv+HgVGgSK1VX2qjUhiyKQMlMRkJ2fVTDypinc= Subject key identifier: 2C:6F:F0:D8:F1:03:A9:E7:7B:B7:9D:80:60:1F:B6:BF:7F:6E:88:22 Authority key identifier: 0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C Certificate issuer: /CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C Certificate serial: 211A2FC3C9E56BD6B58B6B599F48FCB2D1D2FDE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:03:57 +0000 Manifest this update: Mon 20 Jul 2026 13:58:57 +0000 Manifest next update: Tue 21 Jul 2026 14:58:57 +0000 Files and hashes: 1: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl (hash: WFLYQTTRg4E8mzhIl+bnSH0fe+L3F3/JYNo7613LYoI=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: fn14xb7Fet3D9STECs6nLsztZDz4SqE0tmJcaxx1cKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1a:2f:c3:c9:e5:6b:d6:b5:8b:6b:59:9f:48:fc:b2:d1:d2:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C Validity Not Before: Jul 20 13:58:57 2026 GMT Not After : Jul 21 14:58:57 2026 GMT Subject: CN=2C6FF0D8F103A9E77BB79D80601FB6BF7F6E8822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:1d:4b:19:1f:73:24:6c:10:9c:5b:32:2c: 7f:8e:e9:03:eb:cc:d4:56:82:fe:75:ec:82:53:dd: 81:03:09:97:e7:d9:ea:5c:bc:3c:b2:7f:f7:04:75: 69:d6:9e:d9:5b:80:cc:81:0b:e2:00:42:d9:74:06: 6e:bc:30:a1:6f:43:c6:43:3e:48:1c:b5:8b:80:f5: fb:1c:77:ff:0b:8d:f5:60:5a:e1:a0:de:20:94:4c: 99:45:05:2a:ff:e9:22:bb:76:65:84:37:9c:e0:70: dc:5e:76:82:6e:8a:50:ee:89:2b:d3:c5:5c:9d:39: d7:a3:6a:b0:9e:e6:f0:e7:f3:47:09:0f:5e:1b:73: 03:c7:9b:0f:f1:52:62:08:72:82:ec:9b:8a:17:3e: bc:48:ec:cc:df:e0:50:e0:34:ba:25:b6:d1:d5:d6: 33:2c:95:5f:02:f3:47:37:dc:1b:a9:bd:56:b8:86: 04:a9:eb:ba:22:da:df:ab:5a:ce:43:3d:67:1d:53: fd:5f:d3:0a:b6:63:d9:fd:ac:a9:47:69:ab:7a:c4: b3:15:83:04:90:ff:22:ec:72:8c:44:a6:77:f4:a9: ed:59:5d:48:96:6c:59:48:6b:a1:1d:1c:aa:96:48: 0d:c3:53:c8:47:5a:57:45:ed:6b:4c:6c:87:db:cd: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6F:F0:D8:F1:03:A9:E7:7B:B7:9D:80:60:1F:B6:BF:7F:6E:88:22 X509v3 Authority Key Identifier: keyid:0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0f:95:28:9c:4c:f7:f7:2c:fb:ce:72:54:7d:3d:3a:21:f5: 50:fc:6e:00:5e:d9:f2:ef:de:c3:f4:09:1a:da:af:e2:b0:45: fa:35:2b:14:0f:85:38:4a:90:bc:93:0b:a8:0a:4d:ca:4f:06: c3:4f:35:53:36:ef:26:aa:ed:47:db:2f:d6:d1:06:51:12:f4: 83:83:b1:33:4c:62:d0:86:c8:b9:a0:92:df:3a:1d:61:b0:33: 6a:0f:d6:de:82:8b:63:75:53:2e:17:26:52:ed:02:8c:ec:51: f1:de:a2:79:f4:04:c6:56:57:2a:83:e4:fd:fa:a2:9e:31:41: e6:b6:97:5d:7f:90:3c:87:fa:78:24:8c:a7:b7:f1:7c:c6:5c: b3:7d:1f:d9:bc:b0:a5:3f:80:97:47:b8:ea:b4:dc:40:a3:e4: 70:72:40:c9:b5:fa:18:98:c1:a0:f9:e5:77:8f:1d:a7:7b:26: 18:bf:d7:51:ab:90:45:43:38:a9:0d:8d:64:e5:ff:b0:fa:8a: c3:97:f0:55:47:e9:87:bf:e3:92:cf:08:ae:0a:38:04:28:58: f1:b7:b6:a3:b2:56:09:84:96:78:66:79:d0:7d:9d:9e:0e:ee: 0b:77:ad:55:d4:cb:5c:f4:40:93:5e:51:42:65:9b:f0:f4:be: 8a:66:8f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRovw8nla9a1i2tZn0j8stHS/egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDNjYxOUJENUVFMDQxQ0Y5NDNBNUM2MEExNEFBMDlB N0UxRTA4QzAeFw0yNjA3MjAxMzU4NTdaFw0yNjA3MjExNDU4NTdaMDMxMTAvBgNV BAMTKDJDNkZGMEQ4RjEwM0E5RTc3QkI3OUQ4MDYwMUZCNkJGN0Y2RTg4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxh1LGR9zJGwQnFsyLH+O6QPr zNRWgv517IJT3YEDCZfn2epcvDyyf/cEdWnWntlbgMyBC+IAQtl0Bm68MKFvQ8ZD PkgctYuA9fscd/8LjfVgWuGg3iCUTJlFBSr/6SK7dmWEN5zgcNxedoJuilDuiSvT xVydOdejarCe5vDn80cJD14bcwPHmw/xUmIIcoLsm4oXPrxI7Mzf4FDgNLolttHV 1jMslV8C80c33BupvVa4hgSp67oi2t+rWs5DPWcdU/1f0wq2Y9n9rKlHaat6xLMV gwSQ/yLscoxEpnf0qe1ZXUiWbFlIa6EdHKqWSA3DU8hHWldF7WtMbIfbzbffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULG/w2PEDqed7t52AYB+2v39uiCIwHwYDVR0j BBgwFoAUDcZhm9XuBBz5Q6XGChSqCafh4IwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYxMThmMmItOWY5NC00MTk5LWEyNDEtOGZjNTFkMTdlMGM1LzAvMERDNjYxOUJE NUVFMDQxQ0Y5NDNBNUM2MEExNEFBMDlBN0UxRTA4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREM2NjE5QkQ1RUUwNDFDRjk0M0E1QzYwQTE0QUEwOUE3RTFF MDhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvMERDNjYxOUJENUVFMDQxQ0Y5NDNBNUM2MEExNEFB MDlBN0UxRTA4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0PlSicTPf3LPvOclR9PToh9VD8bgBe2fLv 3sP0CRrar+KwRfo1KxQPhThKkLyTC6gKTcpPBsNPNVM27yaq7UfbL9bRBlES9IOD sTNMYtCGyLmgkt86HWGwM2oP1t6Ci2N1Uy4XJlLtAozsUfHeonn0BMZWVyqD5P36 op4xQea2l11/kDyH+ngkjKe38XzGXLN9H9m8sKU/gJdHuOq03ECj5HByQMm1+hiY waD55XePHad7Jhi/11GrkEVDOKkNjWTl/7D6isOX8FVH6Ye/45LPCK4KOAQoWPG3 tqOyVgmElnhmedB9nZ4O7gt3rVXUy1z0QJNeUUJlm/D0vopmj24= -----END CERTIFICATE-----Generated at Tue Jul 21 07:07:39 2026 by rpki-client