$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: /CiNnFDd/2hfqw60IiOnJWOdmHIKaUOlwpy01SRtwF0= Subject key identifier: 68:B6:1C:E8:D8:89:34:F9:B2:40:61:94:DA:DE:57:C0:25:9A:83:AA Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 16B06053479D6FFF798361CA1AE710E2D40251A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 20:06:09 +0000 Manifest this update: Mon 20 Jul 2026 20:01:09 +0000 Manifest next update: Tue 21 Jul 2026 23:45:09 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 2: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 3: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: ww7GUDqtIz/5Kbjg8wiyhn7p6d3YJyCcuwZWXjWYAo4=) 4: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b0:60:53:47:9d:6f:ff:79:83:61:ca:1a:e7:10:e2:d4:02:51:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Jul 20 20:01:09 2026 GMT Not After : Jul 21 23:45:09 2026 GMT Subject: CN=68B61CE8D88934F9B2406194DADE57C0259A83AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:0b:0e:51:d7:2a:62:97:c4:a5:8c:2c:73: b8:bd:ba:2f:c2:3f:d7:50:47:59:98:36:90:23:f6: ef:44:f2:50:d6:15:1d:53:57:ae:8d:a0:95:ff:c2: 2e:84:ae:b1:6a:cf:3e:80:3f:f9:a7:aa:b1:7d:d6: 03:21:4d:b7:c6:f0:d0:83:85:b3:4e:bc:37:5f:fe: 56:36:03:16:f4:6e:29:6d:b0:34:36:46:f1:45:23: 76:b7:c2:0f:91:fb:97:41:e9:08:fa:13:e1:73:dc: 8f:c0:12:63:97:1f:9e:a8:88:4c:ce:b1:ba:ad:c0: e3:51:49:56:f2:d4:a4:9e:49:15:f0:14:54:1a:46: 72:c1:05:24:32:65:fc:3a:32:b1:cf:24:5e:77:18: f1:a4:b0:44:b2:34:a6:fc:f0:8f:bb:e9:88:bf:0e: 27:8a:79:20:f8:68:b0:0b:97:7d:b5:2d:6a:05:ff: 4a:bf:e0:8c:18:27:7b:a6:fc:8e:dd:8c:e9:7a:bc: 29:71:b5:1a:18:a7:16:60:53:ff:54:43:2a:66:60: 24:b8:55:f1:3d:b5:6c:8a:42:65:34:a0:a4:4d:61: 30:be:8d:b6:26:b3:d0:dd:d4:3e:98:c1:49:e6:90: 29:4e:f2:6a:b4:7a:3c:a7:c6:1f:19:cb:39:f9:75: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:1C:E8:D8:89:34:F9:B2:40:61:94:DA:DE:57:C0:25:9A:83:AA X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:50:a6:60:e6:d7:7e:cc:1d:c1:88:58:a6:41:fb:23:6f: 41:7a:3f:9c:df:32:19:77:16:43:ea:33:f6:bf:7c:48:14:42: 70:ac:a7:64:3d:36:9a:be:43:2d:a8:bf:c7:38:c1:ef:96:c1: 3c:cb:8f:f3:83:b4:63:cc:20:6e:30:8c:7b:4f:c6:01:40:94: f0:87:9a:99:fa:d9:4c:ce:2a:99:db:5f:a9:b1:19:af:e5:55: 6f:c3:fc:4a:1d:23:57:b4:4f:40:d0:37:d9:56:7c:10:d8:da: de:c6:8d:62:87:36:aa:45:84:dc:ba:aa:8a:ae:8e:6d:c7:d4: 6c:ad:37:a1:a9:28:e0:bd:73:7e:87:eb:14:3d:16:13:ec:74: c0:51:19:91:9d:21:9b:91:2b:9a:6a:4e:01:1a:d0:0d:96:56: 3a:1a:0f:a2:40:bd:65:1f:2b:aa:59:3d:30:66:5b:54:56:df: 86:16:1c:b1:38:b4:e4:c4:db:5c:41:26:dd:50:4f:6c:b2:fe: 1d:29:01:60:29:3a:7e:5a:f1:89:1e:15:a0:29:6b:d0:43:ec: fc:6c:51:40:37:d2:ee:52:7c:b5:28:7f:fe:d8:02:c5:b7:da: 61:f0:5f:de:5f:87:b3:9e:63:bb:19:0f:8b:80:7a:b3:54:91: 13:8a:00:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrBgU0edb/95g2HKGucQ4tQCUaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA3MjAyMDAxMDlaFw0yNjA3MjEyMzQ1MDlaMDMxMTAvBgNV BAMTKDY4QjYxQ0U4RDg4OTM0RjlCMjQwNjE5NERBREU1N0MwMjU5QTgzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCwsOUdcqYpfEpYwsc7i9ui/C P9dQR1mYNpAj9u9E8lDWFR1TV66NoJX/wi6ErrFqzz6AP/mnqrF91gMhTbfG8NCD hbNOvDdf/lY2Axb0biltsDQ2RvFFI3a3wg+R+5dB6Qj6E+Fz3I/AEmOXH56oiEzO sbqtwONRSVby1KSeSRXwFFQaRnLBBSQyZfw6MrHPJF53GPGksESyNKb88I+76Yi/ DieKeSD4aLALl321LWoF/0q/4IwYJ3um/I7djOl6vClxtRoYpxZgU/9UQypmYCS4 VfE9tWyKQmU0oKRNYTC+jbYms9Dd1D6YwUnmkClO8mq0ejynxh8Zyzn5dTnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLYc6NiJNPmyQGGU2t5XwCWag6owHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAa3UKZg5td+zB3BiFimQfsjb0F6P5zfMhl3 FkPqM/a/fEgUQnCsp2Q9Npq+Qy2ov8c4we+WwTzLj/ODtGPMIG4wjHtPxgFAlPCH mpn62UzOKpnbX6mxGa/lVW/D/EodI1e0T0DQN9lWfBDY2t7GjWKHNqpFhNy6qoqu jm3H1GytN6GpKOC9c36H6xQ9FhPsdMBRGZGdIZuRK5pqTgEa0A2WVjoaD6JAvWUf K6pZPTBmW1RW34YWHLE4tOTE21xBJt1QT2yy/h0pAWApOn5a8YkeFaApa9BD7Pxs UUA30u5SfLUof/7YAsW32mHwX95fh7OeY7sZD4uAerNUkROKABM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:26:00 2026 by rpki-client