$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: iK6O7zX9fbm28Cq7Mj6j+kvpxkz5QrHBdNaD2pqnfkI= Subject key identifier: 6C:D1:7B:54:8F:75:38:F9:20:80:86:44:E1:E9:40:44:11:B9:C2:85 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 04FD5F9E3A117E9CBC397FE797F1463EE3525D2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:04:37 +0000 Manifest this update: Tue 21 Jul 2026 02:59:37 +0000 Manifest next update: Wed 22 Jul 2026 03:47:37 +0000 Files and hashes: 1: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: lqoPgsXUecfgK0qqgFckX61i9VtFixYKQJaT5Y7WPIE=) 2: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 4: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fd:5f:9e:3a:11:7e:9c:bc:39:7f:e7:97:f1:46:3e:e3:52:5d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Jul 21 02:59:37 2026 GMT Not After : Jul 22 03:47:37 2026 GMT Subject: CN=6CD17B548F7538F920808644E1E9404411B9C285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:ac:a6:8b:0a:cd:2f:30:ea:d8:76:e4:16: 6a:49:0a:e1:33:fb:15:ec:92:38:af:7b:50:26:3c: 8b:63:dc:21:3a:f7:11:fe:39:40:b8:14:23:ab:dc: e3:4a:28:9a:f5:eb:7c:ad:bf:d0:11:92:3d:6b:19: 75:2f:38:e9:ad:86:89:d5:49:19:e1:2c:74:15:c1: 8f:9c:1c:70:c9:d2:3b:86:7f:39:d0:3b:8e:f0:bf: 1a:32:a8:b4:02:33:d7:8c:3d:63:1d:42:78:49:2a: d8:12:73:e5:44:39:5f:6d:8f:5a:e3:ae:36:24:78: 78:4c:30:ca:c9:3c:87:cf:46:70:d1:18:1a:86:d3: 9b:48:d9:cb:05:89:30:99:f2:64:48:bc:6a:b5:6d: b4:75:6b:6f:83:72:53:8f:67:df:53:8c:e8:97:92: f1:d3:9e:a4:73:06:f0:f2:2a:fc:df:c1:89:83:fd: e0:95:2a:9c:7a:81:48:db:92:75:c6:26:f5:b9:f1: 3d:7e:4f:ef:4c:73:79:6c:0e:5a:fe:4c:16:09:30: da:01:50:f0:8b:b5:14:28:d4:21:7a:a9:13:f9:53: ce:8f:5a:97:61:48:bf:85:40:9c:b8:59:3f:d8:65: e6:03:11:f5:3b:55:bb:52:16:62:e3:78:81:17:ac: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:7B:54:8F:75:38:F9:20:80:86:44:E1:E9:40:44:11:B9:C2:85 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:36:a0:de:3b:a2:a9:f3:4c:cc:81:bf:af:7a:eb:07:1b:b7: ec:ab:7f:b2:f5:c1:31:7d:55:1b:97:8c:24:dd:58:76:51:46: 9c:51:09:3a:89:1d:0c:84:d6:5d:86:5e:80:e4:7d:c0:15:9c: 99:02:2f:f7:63:df:56:fd:1d:a2:c7:80:e2:53:13:e9:0f:58: e1:db:fe:ec:49:26:2c:7d:17:22:eb:45:3b:0a:a8:eb:6b:d8: 99:7a:47:c7:75:68:9a:a6:9a:2c:9c:73:f4:d9:dc:4b:25:6c: 82:56:6f:f1:7e:55:47:cd:36:71:30:f5:0f:13:60:6e:2e:85: 0b:10:9c:65:1d:8c:5c:23:64:06:bb:a1:e3:91:3a:4e:9a:73: 86:91:2a:49:d7:f7:b9:79:55:27:53:aa:94:ad:b6:6e:7d:63: 27:35:27:d3:fd:f3:59:9a:b1:c4:23:11:7f:07:99:91:04:6a: 88:05:d4:e4:ea:64:90:17:19:7c:9e:c2:b8:03:71:01:f2:cc: 93:f8:d2:05:b9:0c:26:f8:d8:47:6f:c5:19:09:92:50:71:51: 5d:c5:ff:5e:47:b9:f2:c1:b4:f9:fe:d3:de:57:3f:1d:4e:8d: 95:8d:6b:49:2c:1d:37:f1:7e:06:09:cf:b0:d5:fe:ce:29:1b: 7c:c4:2a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBP1fnjoRfpy8OX/nl/FGPuNSXSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA3MjEwMjU5MzdaFw0yNjA3MjIwMzQ3MzdaMDMxMTAvBgNV BAMTKDZDRDE3QjU0OEY3NTM4RjkyMDgwODY0NEUxRTk0MDQ0MTFCOUMyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBKymiwrNLzDq2HbkFmpJCuEz +xXskjive1AmPItj3CE69xH+OUC4FCOr3ONKKJr163ytv9ARkj1rGXUvOOmthonV SRnhLHQVwY+cHHDJ0juGfznQO47wvxoyqLQCM9eMPWMdQnhJKtgSc+VEOV9tj1rj rjYkeHhMMMrJPIfPRnDRGBqG05tI2csFiTCZ8mRIvGq1bbR1a2+DclOPZ99TjOiX kvHTnqRzBvDyKvzfwYmD/eCVKpx6gUjbknXGJvW58T1+T+9Mc3lsDlr+TBYJMNoB UPCLtRQo1CF6qRP5U86PWpdhSL+FQJy4WT/YZeYDEfU7VbtSFmLjeIEXrA03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNF7VI91OPkggIZE4elARBG5woUwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU2oN47oqnzTMyBv6966wcbt+yrf7L1wTF9 VRuXjCTdWHZRRpxRCTqJHQyE1l2GXoDkfcAVnJkCL/dj31b9HaLHgOJTE+kPWOHb /uxJJix9FyLrRTsKqOtr2Jl6R8d1aJqmmiycc/TZ3EslbIJWb/F+VUfNNnEw9Q8T YG4uhQsQnGUdjFwjZAa7oeOROk6ac4aRKknX97l5VSdTqpSttm59Yyc1J9P981ma scQjEX8HmZEEaogF1OTqZJAXGXyewrgDcQHyzJP40gW5DCb42EdvxRkJklBxUV3F /15HufLBtPn+095XPx1OjZWNa0ksHTfxfgYJz7DV/s4pG3zEKvQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:09 2026 by rpki-client