$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: iR9ax6eCocff3GCaws/I9vbUDphG9woJ2jRFVDyz2FI= Subject key identifier: D1:23:EE:2C:93:09:DE:CD:DA:82:B8:DD:7E:9E:43:5E:14:31:8D:F9 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 0E6FEB9659F6D87B669C7B034435B8AB08153320 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:55:44 +0000 Manifest this update: Tue 21 Jul 2026 03:50:44 +0000 Manifest next update: Wed 22 Jul 2026 06:02:44 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 3: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: Tww2NsK774DOUMU0DNLbbyuBYnTAEUD0lDGc+hproes=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6f:eb:96:59:f6:d8:7b:66:9c:7b:03:44:35:b8:ab:08:15:33:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Jul 21 03:50:44 2026 GMT Not After : Jul 22 06:02:44 2026 GMT Subject: CN=D123EE2C9309DECDDA82B8DD7E9E435E14318DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:33:98:a3:8b:6b:2a:ff:4b:2e:53:ed:ec: 15:ca:6e:32:54:c7:ba:13:84:34:df:61:5f:b7:e9: b3:b5:21:46:73:ab:78:36:00:e7:4f:fa:4a:52:e8: 26:7f:64:f0:7f:ee:ff:a9:81:d2:5e:9b:7f:de:e1: a5:d4:cf:d8:36:81:99:58:31:82:08:66:98:72:12: fc:09:75:96:ec:10:c0:8a:23:c2:4e:a3:42:b0:4f: fb:3c:58:8a:7b:c3:e6:30:f3:ef:64:92:9f:c4:fa: 13:4f:1f:f6:9d:bb:66:6d:20:a1:da:4c:9d:e0:f4: fe:b1:06:9a:35:7e:7a:87:46:58:c6:08:8e:f1:83: c4:86:63:23:c9:52:3b:79:c7:c3:a2:93:cf:75:0e: 2a:44:7c:01:c2:b5:ba:6e:6f:27:e3:25:b2:ba:9d: 37:3b:af:15:2d:14:1f:f0:0f:39:54:a0:0f:82:a1: a6:13:4e:32:96:4a:14:aa:55:82:48:63:51:21:57: 92:bb:69:f3:80:69:aa:68:77:1e:97:66:4c:92:cd: 67:50:4d:02:ab:43:e9:f8:2f:a2:14:56:26:6b:47: 9d:c1:b9:99:79:5b:e8:51:aa:09:3a:48:b4:6d:15: 70:a5:af:14:88:32:a0:22:6f:59:b4:df:db:37:3e: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:EE:2C:93:09:DE:CD:DA:82:B8:DD:7E:9E:43:5E:14:31:8D:F9 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:87:db:b5:3f:75:61:ed:28:db:4c:6f:39:85:50:3f:d5:ed: 25:b5:1f:95:cc:03:51:c3:29:dc:eb:53:fa:95:9e:e7:2b:46: 1c:f3:9d:c6:2a:a0:68:ff:20:ac:58:c5:eb:46:f2:dc:e9:a1: d8:24:d3:ea:81:ad:56:f8:42:6a:26:e2:56:96:71:ba:b5:0f: 7c:01:d8:73:bf:80:27:9d:19:7d:5f:e4:68:bb:8c:f3:d1:fa: 16:03:69:d8:c1:27:ec:ca:e9:2d:1b:ff:2c:bf:06:b9:f1:a9: ba:ad:f8:bb:ed:cb:26:18:90:b1:21:3a:55:ba:3a:4b:ca:ae: 5f:b7:f7:f0:64:9a:74:dc:1a:46:87:31:a3:b5:a2:e2:09:67: 46:cd:6e:f8:3f:29:07:cc:b1:5d:11:07:7e:d8:70:ec:05:cc: 9e:e5:5f:b1:fc:f2:ae:09:30:33:3e:12:88:6a:ab:b4:b9:ec: 38:f2:b6:0c:e3:69:81:70:28:81:b9:f1:b1:79:42:60:11:e7: 13:12:39:85:9f:67:d4:65:55:7a:1d:a7:e5:4f:ec:e8:ec:67: 62:ba:b7:01:c9:50:44:b4:c0:33:1d:33:6c:5f:f0:60:43:b4: 3f:7e:a7:dd:8d:07:21:4f:0c:0b:ba:5c:3f:51:9a:11:7a:d9: 14:17:47:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDm/rlln22HtmnHsDRDW4qwgVMyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA3MjEwMzUwNDRaFw0yNjA3MjIwNjAyNDRaMDMxMTAvBgNV BAMTKEQxMjNFRTJDOTMwOURFQ0REQTgyQjhERDdFOUU0MzVFMTQzMThERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QTOYo4trKv9LLlPt7BXKbjJU x7oThDTfYV+36bO1IUZzq3g2AOdP+kpS6CZ/ZPB/7v+pgdJem3/e4aXUz9g2gZlY MYIIZphyEvwJdZbsEMCKI8JOo0KwT/s8WIp7w+Yw8+9kkp/E+hNPH/adu2ZtIKHa TJ3g9P6xBpo1fnqHRljGCI7xg8SGYyPJUjt5x8Oik891DipEfAHCtbpubyfjJbK6 nTc7rxUtFB/wDzlUoA+CoaYTTjKWShSqVYJIY1EhV5K7afOAaapodx6XZkySzWdQ TQKrQ+n4L6IUViZrR53BuZl5W+hRqgk6SLRtFXClrxSIMqAib1m039s3PsVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SPuLJMJ3s3agrjdfp5DXhQxjfkwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuH27U/dWHtKNtMbzmFUD/V7SW1H5XMA1HD KdzrU/qVnucrRhzzncYqoGj/IKxYxetG8tzpodgk0+qBrVb4Qmom4laWcbq1D3wB 2HO/gCedGX1f5Gi7jPPR+hYDadjBJ+zK6S0b/yy/Brnxqbqt+LvtyyYYkLEhOlW6 OkvKrl+39/BkmnTcGkaHMaO1ouIJZ0bNbvg/KQfMsV0RB37YcOwFzJ7lX7H88q4J MDM+Eohqq7S57DjytgzjaYFwKIG58bF5QmAR5xMSOYWfZ9RlVXodp+VP7OjsZ2K6 twHJUES0wDMdM2xf8GBDtD9+p92NByFPDAu6XD9RmhF62RQXRy8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:36:58 2026 by rpki-client