$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: 0Hs2W8M2NuZVBKt/BT8Qy4EERz1i8AtYaCtqE6349M4= Subject key identifier: 67:CE:8B:97:A7:38:75:C1:39:8B:4F:FD:96:D6:B3:14:93:B5:36:F6 Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 6E080C3317FB21E3AF9CBC4929840231F0FFC6FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 04:00:51 +0000 Manifest this update: Tue 21 Jul 2026 03:55:51 +0000 Manifest next update: Wed 22 Jul 2026 06:12:51 +0000 Files and hashes: 1: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: 47WpGE+g8BsWjgSxprrrxs8iSs6DYMUK2wNNJ3ReMVc=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:08:0c:33:17:fb:21:e3:af:9c:bc:49:29:84:02:31:f0:ff:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Jul 21 03:55:51 2026 GMT Not After : Jul 22 06:12:51 2026 GMT Subject: CN=67CE8B97A73875C1398B4FFD96D6B31493B536F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:b4:ca:14:1d:b4:00:2e:1c:5e:de:d5:b6: 1a:1d:31:68:a9:32:dd:23:dd:7a:98:57:81:bb:1c: 32:4a:d8:ac:77:b0:96:e7:9f:99:eb:58:48:36:ab: cd:43:5c:24:7a:7d:29:6e:c8:18:ef:8b:15:d7:f5: b7:83:cf:ea:e6:94:c2:0e:99:c3:42:44:d6:0b:99: 9d:6a:f0:00:e6:2c:91:7b:64:04:f9:a3:63:73:f6: 32:ed:c9:c9:9a:b0:6c:04:c4:36:a7:07:f5:fb:d3: ce:de:6c:73:74:c2:3e:3b:c8:7c:63:5b:66:d9:15: 4b:eb:21:64:61:f7:8a:57:a9:ff:01:e8:05:34:54: 17:9f:51:a5:58:dd:38:58:eb:01:8a:fb:f5:cc:89: 15:94:33:fc:ce:cb:25:ee:41:46:55:98:58:dd:09: b2:09:83:d9:5c:52:7f:61:4d:ac:01:10:36:d4:e9: a9:99:bc:18:08:a6:b4:4d:66:a4:e0:33:b5:0c:24: f0:07:d3:c6:4f:97:77:e1:64:ad:ef:cd:94:39:23: 74:a9:9e:f0:5b:c2:2a:51:74:7c:30:ae:12:64:cd: 17:13:71:18:4d:8c:f1:ef:d5:b3:4d:8b:7c:d6:a0: 80:23:ae:88:75:ba:85:98:af:e7:9d:ee:e2:77:b5: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:8B:97:A7:38:75:C1:39:8B:4F:FD:96:D6:B3:14:93:B5:36:F6 X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3e:2c:f7:80:27:af:25:ad:f0:da:4b:bd:61:c2:b1:df:0e: b1:20:8f:22:9f:7c:93:26:f7:9a:b6:e9:44:65:91:c7:c8:c6: f8:0b:29:06:ac:01:96:b0:77:e5:39:f1:cf:d0:6c:dd:81:47: 58:9b:1f:65:ab:d2:0f:19:c3:df:44:cb:1b:1a:9b:31:a2:93: 4c:4f:31:df:b8:20:2a:cf:5e:ea:e9:16:19:64:27:a8:75:53: 48:94:43:ff:e3:68:89:3a:e8:f9:38:11:74:f0:55:d7:e3:7e: 6f:44:04:8e:9a:d6:92:50:08:e9:b1:3b:de:d2:0f:88:ff:91: cb:93:5e:cd:8d:2d:12:23:ba:7a:45:af:aa:c3:b0:37:95:95: 5d:10:bf:1c:fb:1f:d2:70:1d:40:c1:ec:66:76:d1:84:e3:e9: 84:c8:8f:53:c6:b7:59:32:ff:ff:41:41:8b:15:e6:b6:fa:92: e7:a1:b5:db:db:36:22:75:11:5e:96:ee:46:33:34:f6:34:2e: 0c:d7:bb:dd:cf:56:17:7e:08:94:d0:ae:1e:77:d3:d6:a0:cb: 07:ff:75:6a:59:e0:e6:b5:39:5c:2a:49:75:41:bb:42:7a:f9: ee:e4:8f:af:f5:58:53:62:65:d8:44:b6:54:ec:62:64:ab:ed: b8:da:79:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbggMMxf7IeOvnLxJKYQCMfD/xv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA3MjEwMzU1NTFaFw0yNjA3MjIwNjEyNTFaMDMxMTAvBgNV BAMTKDY3Q0U4Qjk3QTczODc1QzEzOThCNEZGRDk2RDZCMzE0OTNCNTM2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrrTKFB20AC4cXt7VthodMWip Mt0j3XqYV4G7HDJK2Kx3sJbnn5nrWEg2q81DXCR6fSluyBjvixXX9beDz+rmlMIO mcNCRNYLmZ1q8ADmLJF7ZAT5o2Nz9jLtycmasGwExDanB/X7087ebHN0wj47yHxj W2bZFUvrIWRh94pXqf8B6AU0VBefUaVY3ThY6wGK+/XMiRWUM/zOyyXuQUZVmFjd CbIJg9lcUn9hTawBEDbU6amZvBgIprRNZqTgM7UMJPAH08ZPl3fhZK3vzZQ5I3Sp nvBbwipRdHwwrhJkzRcTcRhNjPHv1bNNi3zWoIAjroh1uoWYr+ed7uJ3tSYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ86Ll6c4dcE5i0/9ltazFJO1NvYwHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg+LPeAJ68lrfDaS71hwrHfDrEgjyKffJMm 95q26URlkcfIxvgLKQasAZawd+U58c/QbN2BR1ibH2Wr0g8Zw99EyxsamzGik0xP Md+4ICrPXurpFhlkJ6h1U0iUQ//jaIk66Pk4EXTwVdfjfm9EBI6a1pJQCOmxO97S D4j/kcuTXs2NLRIjunpFr6rDsDeVlV0Qvxz7H9JwHUDB7GZ20YTj6YTIj1PGt1ky //9BQYsV5rb6kuehtdvbNiJ1EV6W7kYzNPY0LgzXu93PVhd+CJTQrh5309agywf/ dWpZ4Oa1OVwqSXVBu0J6+e7kj6/1WFNiZdhEtlTsYmSr7bjaeQM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:57 2026 by rpki-client