$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: nWYV8ZT31TtIQW7/N4ed+9254i5VtDGDWafvbvTkyxM= Subject key identifier: 84:E9:2C:C3:AC:1D:0D:EA:9F:51:F2:1D:54:FF:62:4C:B0:A7:45:76 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 671CEB457F0690B35AC83A9C388FB545DC77B249 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:20:28 +0000 Manifest this update: Mon 20 Jul 2026 15:15:28 +0000 Manifest next update: Tue 21 Jul 2026 16:51:28 +0000 Files and hashes: 1: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 2: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 3: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 4: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: zwh8AStR8NgyYz4ftuQ6UpmeTKaRhyj3kilpA/yzQYE=) 5: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 6: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 7: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1c:eb:45:7f:06:90:b3:5a:c8:3a:9c:38:8f:b5:45:dc:77:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Jul 20 15:15:28 2026 GMT Not After : Jul 21 16:51:28 2026 GMT Subject: CN=84E92CC3AC1D0DEA9F51F21D54FF624CB0A74576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:10:cc:f5:76:9b:1a:20:00:c6:77:19:ee: 50:b7:8a:b6:c5:bb:51:19:11:30:e5:b9:df:e3:64: 17:0d:8c:db:2e:88:68:b5:1a:26:b0:ba:53:6f:ad: 59:4b:a1:6f:e4:98:8f:6d:f6:50:61:5b:21:36:0f: 86:0a:96:1f:58:3a:e4:97:27:d3:db:e2:ad:34:d0: 52:4c:06:52:39:b6:45:8d:9e:58:19:32:35:80:b1: 77:67:21:6b:12:1b:68:d9:63:e0:bc:83:6e:1d:e8: 03:ca:38:09:93:28:b4:94:c9:6f:d4:8b:a7:21:a7: 0d:09:a1:31:7e:96:98:63:62:14:cf:7c:d9:a2:bc: 4e:3f:4d:8f:cf:99:9d:50:23:c4:08:68:ab:0f:8b: a2:e0:2d:05:93:11:a8:40:2a:78:a1:25:46:fe:f7: bb:fc:fb:7c:fc:ac:d2:91:d8:ae:7e:91:ac:ff:6d: 4a:f1:b5:5c:9f:46:8f:99:98:66:13:37:fa:00:90: 84:62:f1:a4:cd:1b:93:89:19:ba:61:6e:71:c9:af: a0:ec:a6:20:91:52:29:36:c8:d1:41:68:c6:0d:16: 46:1e:a3:d4:f8:7b:52:3d:c8:a3:95:87:6c:48:e9: 0a:47:fb:06:c7:d3:3c:f9:9a:c7:24:83:60:14:46: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E9:2C:C3:AC:1D:0D:EA:9F:51:F2:1D:54:FF:62:4C:B0:A7:45:76 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4a:bd:cc:23:09:a5:70:70:7f:de:19:f3:2e:91:0b:9a:2b: e8:31:97:ab:45:6a:12:3f:68:a7:c6:a6:c5:f8:d6:b0:ec:d5: 63:36:47:d9:bf:d2:59:b5:0c:d1:81:5c:6f:9e:fa:a6:c2:c1: 0b:a6:e6:92:13:12:6d:30:4f:ae:9c:79:4b:91:01:30:ad:1a: 8d:1e:b0:71:2e:5c:17:c0:a6:97:70:40:8d:c4:8a:7c:6c:01: b4:14:1f:23:51:db:eb:ed:ec:ba:86:bb:9a:d5:b2:03:c8:0a: 13:fb:c7:b3:da:5b:89:f5:ec:22:7a:d2:56:e8:b5:ef:16:06: c1:96:a0:e1:d1:bc:08:90:03:b4:a7:7b:1c:84:e2:ab:e0:b0: a1:f3:f5:09:9b:91:fd:22:10:7e:ba:d1:c9:38:59:10:65:91: 53:e0:d1:3c:00:6f:cc:3d:3f:d0:ef:33:87:b0:f5:fd:5e:95: e3:72:2f:8f:51:23:d9:0c:77:bb:f3:7b:78:a9:35:1c:37:5f: 2a:80:f7:a9:63:fb:5c:44:73:d1:1d:6d:7c:86:73:15:8d:65: 15:1f:34:4b:2a:99:5c:64:0f:2a:fb:a0:87:21:48:9d:ba:c4: 0b:95:18:26:da:d8:19:ed:13:6b:09:80:24:1e:4a:38:ac:b6: 17:94:51:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxzrRX8GkLNayDqcOI+1Rdx3skkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA3MjAxNTE1MjhaFw0yNjA3MjExNjUxMjhaMDMxMTAvBgNV BAMTKDg0RTkyQ0MzQUMxRDBERUE5RjUxRjIxRDU0RkY2MjRDQjBBNzQ1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JBDM9XabGiAAxncZ7lC3irbF u1EZETDlud/jZBcNjNsuiGi1GiawulNvrVlLoW/kmI9t9lBhWyE2D4YKlh9YOuSX J9Pb4q000FJMBlI5tkWNnlgZMjWAsXdnIWsSG2jZY+C8g24d6APKOAmTKLSUyW/U i6chpw0JoTF+lphjYhTPfNmivE4/TY/PmZ1QI8QIaKsPi6LgLQWTEahAKnihJUb+ 97v8+3z8rNKR2K5+kaz/bUrxtVyfRo+ZmGYTN/oAkIRi8aTNG5OJGbphbnHJr6Ds piCRUik2yNFBaMYNFkYeo9T4e1I9yKOVh2xI6QpH+wbH0zz5msckg2AURrn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOksw6wdDeqfUfIdVP9iTLCnRXYwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9KvcwjCaVwcH/eGfMukQuaK+gxl6tFahI/ aKfGpsX41rDs1WM2R9m/0lm1DNGBXG+e+qbCwQum5pITEm0wT66ceUuRATCtGo0e sHEuXBfAppdwQI3EinxsAbQUHyNR2+vt7LqGu5rVsgPIChP7x7PaW4n17CJ60lbo te8WBsGWoOHRvAiQA7SnexyE4qvgsKHz9Qmbkf0iEH660ck4WRBlkVPg0TwAb8w9 P9DvM4ew9f1eleNyL49RI9kMd7vze3ipNRw3XyqA96lj+1xEc9EdbXyGcxWNZRUf NEsqmVxkDyr7oIchSJ26xAuVGCba2BntE2sJgCQeSjistheUUSA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:35 2026 by rpki-client