$ rpki-client -vvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json) Hash identifier: 1tvq4zEr7/+ImFe7DJx90dhIu2eZFY3aSI54YU4d0CE= Subject key identifier: 22:1A:36:95:3A:E0:E6:C1:A2:27:0C:BB:8D:C2:2C:CD:E7:4C:25:CC Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2 Certificate serial: 65E5FC92377F7B82722F52B73688597C8D155A8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 18:29:24 +0000 Manifest this update: Mon 20 Jul 2026 18:24:24 +0000 Manifest next update: Tue 21 Jul 2026 18:48:24 +0000 Files and hashes: 1: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: TQKa+DLZ3TAIECW3U47b4MT3YceA73X8W/uJokBZIm0=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e5:fc:92:37:7f:7b:82:72:2f:52:b7:36:88:59:7c:8d:15:5a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2 Validity Not Before: Jul 20 18:24:24 2026 GMT Not After : Jul 21 18:48:24 2026 GMT Subject: CN=221A36953AE0E6C1A2270CBB8DC22CCDE74C25CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:7a:1c:fb:50:73:21:7b:fc:38:09:f0:d3: 0b:c9:cc:ca:c0:40:d4:0f:95:41:71:0f:6f:c1:ac: 1d:d2:10:90:75:0d:ac:87:e5:d2:d2:d7:f2:3b:c5: 5c:76:1a:23:07:65:42:0c:59:21:0b:ed:ab:ed:00: c8:96:05:ab:69:82:c5:66:60:56:80:1f:3c:6e:16: 9d:8b:fc:80:5f:fd:9d:b9:60:e7:5e:f5:ce:2f:c3: 01:91:10:91:3f:18:e4:1f:c6:50:dd:f8:ca:e4:15: 3e:86:07:81:c7:bc:f7:5e:95:eb:be:e8:f1:f7:e8: 85:fe:df:a3:ab:24:b1:3f:54:b1:14:cf:13:6a:25: 86:7d:59:84:88:10:8e:bb:b7:82:08:e7:c4:5c:7e: ba:11:0f:ac:c6:4b:02:cc:aa:64:19:c5:e1:fb:08: d0:e3:3d:26:f0:b1:47:d1:22:93:40:e0:de:8f:6a: c7:00:0c:d4:e1:f9:a5:a8:09:d0:79:53:7a:95:ed: 17:5f:e5:e9:aa:15:82:01:e6:57:9b:74:98:2f:4e: 7a:d4:c8:eb:6d:12:54:27:5b:8c:02:52:10:d5:f5: f1:b2:02:c1:67:02:b3:e6:91:9c:f9:cf:c4:43:cf: 75:ac:fe:f8:79:84:ff:47:14:73:0c:3e:32:4d:26: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1A:36:95:3A:E0:E6:C1:A2:27:0C:BB:8D:C2:2C:CD:E7:4C:25:CC X509v3 Authority Key Identifier: keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:29:06:57:59:69:8f:ef:3a:35:9a:1f:2a:a0:8e:6e:c7:66: 30:89:d2:5d:31:87:d6:d2:9b:62:3c:82:c0:c0:18:ac:37:44: 7e:84:30:c4:b7:e8:67:6e:b3:f8:03:2b:87:26:11:22:0b:76: 48:60:b6:40:6e:48:d9:13:a3:95:84:a0:1e:ed:09:56:d6:16: f9:1c:87:09:9a:d1:95:fb:2d:63:e5:35:e7:98:f0:48:53:46: ae:68:34:ae:e2:27:d7:df:54:4a:a6:7c:dd:65:24:14:ca:52: f9:23:ee:40:87:ad:dd:43:fa:17:0d:65:5c:c2:af:f3:2c:a8: d0:49:11:d3:c4:b0:4c:df:ac:55:36:01:55:00:bb:cc:42:af: e6:48:d7:f5:17:b7:0d:2d:d5:a5:7b:93:49:1e:e7:d8:a8:28: a6:d5:bf:31:32:7b:71:fd:a6:93:03:a0:86:23:5a:30:f4:95: 46:d4:1b:a7:ff:d1:8c:d9:83:63:74:90:1f:5d:71:84:24:fa: 97:08:cb:22:75:6f:3e:a5:d0:a2:29:c5:c8:ef:01:c9:06:c7: a7:d2:4b:8c:6d:7b:12:ca:cc:4c:81:b8:f3:77:a1:e9:07:4f: 37:68:2d:36:92:9b:27:70:7e:b0:13:8b:a2:b7:41:64:1b:57: 8c:fe:f5:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeX8kjd/e4JyL1K3NohZfI0VWowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEw N0I1MTBCMjAeFw0yNjA3MjAxODI0MjRaFw0yNjA3MjExODQ4MjRaMDMxMTAvBgNV BAMTKDIyMUEzNjk1M0FFMEU2QzFBMjI3MENCQjhEQzIyQ0NERTc0QzI1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IHoc+1BzIXv8OAnw0wvJzMrA QNQPlUFxD2/BrB3SEJB1DayH5dLS1/I7xVx2GiMHZUIMWSEL7avtAMiWBatpgsVm YFaAHzxuFp2L/IBf/Z25YOde9c4vwwGREJE/GOQfxlDd+MrkFT6GB4HHvPdeleu+ 6PH36IX+36OrJLE/VLEUzxNqJYZ9WYSIEI67t4II58RcfroRD6zGSwLMqmQZxeH7 CNDjPSbwsUfRIpNA4N6PascADNTh+aWoCdB5U3qV7Rdf5emqFYIB5lebdJgvTnrU yOttElQnW4wCUhDV9fGyAsFnArPmkZz5z8RDz3Ws/vh5hP9HFHMMPjJNJr77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIho2lTrg5sGiJwy7jcIszedMJcwwHwYDVR0j BBgwFoAU1p3zAkefR3epoIkhVCBK8Qe1ELIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRmNDI5NmYtMWNhOS00NWZjLWJiMDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0 NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEwN0I1MTBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjlERjMwMjQ3OUY0Nzc3QTlBMDg5MjE1NDIwNEFGMTA3QjUx MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRB RjEwN0I1MTBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANkpBldZaY/vOjWaHyqgjm7HZjCJ0l0xh9bS m2I8gsDAGKw3RH6EMMS36Gdus/gDK4cmESILdkhgtkBuSNkTo5WEoB7tCVbWFvkc hwma0ZX7LWPlNeeY8EhTRq5oNK7iJ9ffVEqmfN1lJBTKUvkj7kCHrd1D+hcNZVzC r/MsqNBJEdPEsEzfrFU2AVUAu8xCr+ZI1/UXtw0t1aV7k0ke59ioKKbVvzEye3H9 ppMDoIYjWjD0lUbUG6f/0YzZg2N0kB9dcYQk+pcIyyJ1bz6l0KIpxcjvAckGx6fS S4xtexLKzEyBuPN3oekHTzdoLTaSmydwfrATi6K3QWQbV4z+9T0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:37 2026 by rpki-client