$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: QW8r13pQt+B/0qc7l1RHp1Yg8reY4pUSBrPnsUH72X0= Subject key identifier: 77:45:06:E6:94:CE:E5:A8:69:72:92:33:EA:67:4D:F0:1D:81:4A:48 Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 320C729D21DBAAE541D7151A38666C1886F26C24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 02:34:28 +0000 Manifest this update: Mon 20 Jul 2026 02:29:28 +0000 Manifest next update: Tue 21 Jul 2026 03:25:28 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 2: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: rqo1e1IPXYfn1y4b/Fqppck+xh6AAxuYtqQWHhRq7yw=) 3: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) 4: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 03:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0c:72:9d:21:db:aa:e5:41:d7:15:1a:38:66:6c:18:86:f2:6c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Jul 20 02:29:28 2026 GMT Not After : Jul 21 03:25:28 2026 GMT Subject: CN=774506E694CEE5A869729233EA674DF01D814A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:a1:d8:9e:bb:f8:25:7a:88:89:b5:b1:b9: 69:68:d1:80:78:ba:2b:e6:4e:b1:97:73:6c:da:bf: 26:88:77:bf:f1:7c:39:2a:8b:28:fd:f8:5b:5e:1b: c6:69:7f:72:a7:4a:cb:43:14:af:93:00:da:e4:23: 40:c9:85:46:c3:4d:73:b8:48:c0:47:d5:cc:ad:ad: ed:88:b5:64:23:ba:95:df:76:d7:56:a2:69:d5:a3: 08:31:3c:c2:75:a4:a6:86:49:4d:a2:50:54:8a:96: d6:1c:24:67:d7:e4:ee:fb:fa:cd:ea:56:d1:24:bd: 1e:26:21:e7:e6:38:c0:c5:cf:53:c9:be:6e:a0:b2: f8:21:16:c9:1c:7f:0f:1d:74:d3:65:3f:4b:de:49: b4:5f:c2:e0:39:df:6f:f6:b9:51:ca:2f:8b:31:6a: b5:8a:17:43:71:14:e2:8e:84:e6:63:78:a1:4f:5d: b1:4d:c6:ef:60:31:dd:dd:46:39:3e:d5:3f:fd:5b: 70:36:05:05:3e:60:e0:fa:cb:e0:2d:6b:05:00:0c: 52:4d:99:ca:51:4d:ca:b3:09:e0:57:dd:83:2b:26: 43:52:4a:f9:bb:54:75:64:71:a1:83:c0:0e:10:b4: b7:01:85:d2:f6:b8:b1:77:e8:dd:14:1e:a1:94:cd: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:06:E6:94:CE:E5:A8:69:72:92:33:EA:67:4D:F0:1D:81:4A:48 X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:53:56:c4:58:bd:00:4d:6b:26:f3:9b:57:10:58:47:1e:55: 47:a9:a1:43:6a:d6:7a:90:1f:54:11:61:4f:ed:a7:c0:6b:71: d0:67:bf:a6:8f:57:cf:ef:4e:67:22:02:bf:73:fa:3c:11:e3: dc:8f:50:58:df:0d:e1:5e:85:ef:ff:12:6f:90:cc:ee:e9:dd: 8e:bc:37:37:bd:f5:89:1f:c5:24:90:fa:c8:40:27:b4:d5:a9: c8:c9:75:b0:90:61:dc:34:d3:7e:a6:75:d8:bc:fc:a0:7e:3c: 7e:62:8a:a8:81:9a:ac:97:85:77:ce:fc:d6:eb:28:b2:e6:80: b5:70:86:48:6b:d3:b6:8b:ac:87:47:75:66:5f:b2:0d:0f:fe: 2c:16:69:79:c7:8e:65:43:d2:7a:c9:bc:e4:4b:55:11:ce:07: 70:da:5e:43:c5:30:a4:6f:2b:ef:d0:da:eb:6f:03:b8:54:1c: 08:40:5b:62:d5:a7:99:f5:5f:48:6e:fe:58:6c:c4:64:62:95: c7:2b:ee:02:24:cd:15:10:20:73:96:97:db:0f:a3:1e:e6:f6: 7f:f3:b7:53:2f:34:7c:8d:bc:4a:da:9a:60:f7:ba:04:17:a5: 47:28:b3:8c:d1:0f:09:74:36:f4:f5:36:e4:85:99:ac:cd:77: cd:95:72:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgxynSHbquVB1xUaOGZsGIbybCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA3MjAwMjI5MjhaFw0yNjA3MjEwMzI1MjhaMDMxMTAvBgNV BAMTKDc3NDUwNkU2OTRDRUU1QTg2OTcyOTIzM0VBNjc0REYwMUQ4MTRBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUqHYnrv4JXqIibWxuWlo0YB4 uivmTrGXc2zavyaId7/xfDkqiyj9+FteG8Zpf3KnSstDFK+TANrkI0DJhUbDTXO4 SMBH1cytre2ItWQjupXfdtdWomnVowgxPMJ1pKaGSU2iUFSKltYcJGfX5O77+s3q VtEkvR4mIefmOMDFz1PJvm6gsvghFskcfw8ddNNlP0veSbRfwuA532/2uVHKL4sx arWKF0NxFOKOhOZjeKFPXbFNxu9gMd3dRjk+1T/9W3A2BQU+YOD6y+AtawUADFJN mcpRTcqzCeBX3YMrJkNSSvm7VHVkcaGDwA4QtLcBhdL2uLF36N0UHqGUzbLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0UG5pTO5ahpcpIz6mdN8B2BSkgwHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZTVsRYvQBNaybzm1cQWEceVUepoUNq1nqQ H1QRYU/tp8BrcdBnv6aPV8/vTmciAr9z+jwR49yPUFjfDeFehe//Em+QzO7p3Y68 Nze99YkfxSSQ+shAJ7TVqcjJdbCQYdw0036mddi8/KB+PH5iiqiBmqyXhXfO/Nbr KLLmgLVwhkhr07aLrIdHdWZfsg0P/iwWaXnHjmVD0nrJvORLVRHOB3DaXkPFMKRv K+/Q2utvA7hUHAhAW2LVp5n1X0hu/lhsxGRilccr7gIkzRUQIHOWl9sPox7m9n/z t1MvNHyNvErammD3ugQXpUcos4zRDwl0NvT1NuSFmazNd82Vcj4= -----END CERTIFICATE-----Generated at Mon Jul 20 04:47:32 2026 by rpki-client