$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: 2KI7Oi8MwWQaj8R61UvZwJkw4IU4af0DdMAG64oxuKA= Subject key identifier: C6:74:13:49:2E:90:1A:73:23:ED:D4:F9:7D:08:F3:3F:70:90:CC:B3 Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 6BBF57132C612841DEC0AA7746F9054B72D9BA80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:28:54 +0000 Manifest this update: Mon 20 Jul 2026 22:23:54 +0000 Manifest next update: Wed 22 Jul 2026 00:16:54 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 2: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 3: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) 4: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 5: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 6: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: CpfKTlorStI4Td7+3Sbhwwj7LlYdqhdsRXEqPtenFn8=) 7: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 8: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bf:57:13:2c:61:28:41:de:c0:aa:77:46:f9:05:4b:72:d9:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Jul 20 22:23:54 2026 GMT Not After : Jul 22 00:16:54 2026 GMT Subject: CN=C67413492E901A7323EDD4F97D08F33F7090CCB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:f5:d5:be:8b:6d:fe:27:72:6e:47:25:ad: 9e:7a:9f:97:01:1e:a0:20:9f:4e:87:67:d3:9b:13: a4:9f:53:37:da:96:9e:29:71:11:0e:2d:b3:b6:74: d6:d6:0e:6e:a0:08:1c:25:e4:3b:9e:a6:bb:bb:42: d6:ab:df:f5:51:8e:59:e2:09:b0:7b:0a:d4:dd:c4: 1a:68:9f:91:3e:0a:6e:f7:b0:fe:6c:01:a8:1e:31: 3d:b0:1e:66:20:1d:cb:ef:b0:a1:1d:4a:e8:c5:90: 84:02:3f:36:08:08:d1:f1:b2:21:d8:8a:4b:d6:9f: 86:b8:a4:1f:fb:90:a5:43:11:e3:b7:a6:71:a7:e8: f6:20:fb:c3:5e:ea:40:db:02:7e:90:60:46:64:6b: 00:b7:ff:3b:4f:ae:5c:4c:c8:38:c2:55:eb:8e:34: 3a:58:7c:43:cb:1a:81:64:02:45:ca:fd:0f:43:9b: 11:4a:b8:1d:df:e8:7c:66:fb:b0:2f:1e:02:a9:b8: bc:ec:bd:f2:df:ad:5b:6d:42:de:32:cf:7a:10:48: 60:5b:67:bf:93:da:2d:cc:9d:ee:94:ad:66:22:c1: ee:f3:62:49:8d:4d:b2:7e:5b:9a:6c:ba:2e:d2:0c: 30:2a:31:f5:17:d0:a3:1c:98:68:f9:05:d4:24:8f: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:13:49:2E:90:1A:73:23:ED:D4:F9:7D:08:F3:3F:70:90:CC:B3 X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9f:a4:09:4a:f4:05:62:8e:a5:f6:f0:c1:3c:b7:db:b2:b5: e7:ac:cf:1f:20:26:16:e2:7e:cc:8f:b0:3c:e5:d3:f7:72:e5: fe:5b:82:dc:d4:28:45:48:f4:98:ad:60:04:4b:04:fc:9b:e4: a7:65:bd:2c:ef:0b:f8:6b:f8:b2:79:22:22:63:9e:91:99:9f: f9:57:6c:91:58:4f:74:ae:1b:60:c7:4b:fa:7e:3d:f9:0f:b1: 89:06:f3:6c:d5:cf:74:27:ce:00:10:ff:78:30:99:13:37:00: b7:9d:8f:43:0d:4c:1c:3b:1e:7a:fd:cf:e1:dc:69:6a:b8:19: 3f:64:af:09:fe:ba:06:af:45:f7:bd:02:f0:11:7c:c0:4d:fd: 3c:e4:9d:65:5f:b7:e9:d5:54:a3:ad:19:98:14:5c:b9:7f:3c: f0:21:76:9e:4e:aa:1b:ad:f3:67:1a:a0:0f:20:f6:4b:66:f1: 38:2b:68:f7:26:5a:9e:34:b3:ef:81:a8:a6:67:c2:a0:9c:50: f3:d4:73:c5:83:ec:ab:d7:87:91:49:84:ac:a4:21:ac:c8:1b: df:00:63:f7:47:82:0e:d0:2e:2e:54:2a:e6:85:3e:62:05:89: 79:d3:7d:12:14:86:28:1f:ba:de:e4:f1:f0:b0:1c:3a:45:33: 66:79:83:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa79XEyxhKEHewKp3RvkFS3LZuoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA3MjAyMjIzNTRaFw0yNjA3MjIwMDE2NTRaMDMxMTAvBgNV BAMTKEM2NzQxMzQ5MkU5MDFBNzMyM0VERDRGOTdEMDhGMzNGNzA5MENDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRfXVvott/idybkclrZ56n5cB HqAgn06HZ9ObE6SfUzfalp4pcREOLbO2dNbWDm6gCBwl5Duepru7Qtar3/VRjlni CbB7CtTdxBpon5E+Cm73sP5sAageMT2wHmYgHcvvsKEdSujFkIQCPzYICNHxsiHY ikvWn4a4pB/7kKVDEeO3pnGn6PYg+8Ne6kDbAn6QYEZkawC3/ztPrlxMyDjCVeuO NDpYfEPLGoFkAkXK/Q9DmxFKuB3f6Hxm+7AvHgKpuLzsvfLfrVttQt4yz3oQSGBb Z7+T2i3Mne6UrWYiwe7zYkmNTbJ+W5psui7SDDAqMfUX0KMcmGj5BdQkj1/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnQTSS6QGnMj7dT5fQjzP3CQzLMwHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCfpAlK9AVijqX28ME8t9uyteeszx8gJhbi fsyPsDzl0/dy5f5bgtzUKEVI9JitYARLBPyb5KdlvSzvC/hr+LJ5IiJjnpGZn/lX bJFYT3SuG2DHS/p+PfkPsYkG82zVz3QnzgAQ/3gwmRM3ALedj0MNTBw7Hnr9z+Hc aWq4GT9krwn+ugavRfe9AvARfMBN/TzknWVft+nVVKOtGZgUXLl/PPAhdp5Oqhut 82caoA8g9ktm8TgraPcmWp40s++BqKZnwqCcUPPUc8WD7KvXh5FJhKykIazIG98A Y/dHgg7QLi5UKuaFPmIFiXnTfRIUhigfut7k8fCwHDpFM2Z5g/U= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:03 2026 by rpki-client