$ rpki-client -vvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: /rQjE+8hEZI5gtqm3D88l3JopWQuz+4mLA0QhyEh3r4= Subject key identifier: 12:52:E5:B3:2B:33:E3:E9:D3:48:0E:AC:0A:E5:FF:DD:1A:71:E7:E7 Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 358252267113A5B427A8CC1347E3DC1FC3EC9438 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 15:00:07 +0000 Manifest this update: Mon 20 Jul 2026 14:55:07 +0000 Manifest next update: Tue 21 Jul 2026 16:19:07 +0000 Files and hashes: 1: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: LbPGpkmqtcEW9sUe2gK7GxL/2nHVp8Zwm47NxF1wKKw=) 2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) 3: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:82:52:26:71:13:a5:b4:27:a8:cc:13:47:e3:dc:1f:c3:ec:94:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: Jul 20 14:55:07 2026 GMT Not After : Jul 21 16:19:07 2026 GMT Subject: CN=1252E5B32B33E3E9D3480EAC0AE5FFDD1A71E7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:08:ce:9c:d4:1c:62:bb:3a:23:c5:a3:e2: 24:ff:14:a1:a3:bf:5a:88:eb:2d:72:f8:5b:10:73: 23:44:6a:2a:0b:79:9f:96:42:cb:15:c2:09:ab:91: 40:8e:19:2b:f2:a0:ef:75:e4:f2:24:96:45:cd:bd: 8c:03:f2:3b:6f:0d:2c:a6:5c:3c:04:60:46:c6:7b: 64:59:c8:23:7f:c2:dd:de:0b:14:4d:70:bb:65:11: ff:0c:04:5d:b4:97:a4:ec:a5:62:b4:13:44:6e:c8: 87:d3:20:da:81:22:cd:b2:0b:d0:da:ff:3e:bc:18: 48:a1:e6:41:a0:bb:4d:cc:07:47:ae:eb:26:c2:0c: 1d:5a:1b:92:fe:f9:09:44:35:3e:4d:ae:6f:e9:2a: b2:7a:f5:11:b6:d4:aa:d0:e5:c5:87:e2:90:2c:62: ce:8f:d0:71:2f:20:0c:68:10:90:ed:f3:0e:4e:dd: 1d:34:f8:64:0e:2e:47:80:ab:c5:42:24:76:d9:c7: e4:ef:e1:5a:3f:1a:7e:50:be:5a:c3:23:d2:26:75: 43:1c:b7:86:4f:18:fe:68:21:49:3b:b7:d5:b6:10: 12:79:ff:d4:f3:e2:a8:18:8f:d1:ac:e7:78:da:92: aa:5c:dc:e1:3e:c1:c0:1e:b6:bb:6c:6b:4e:da:13: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:E5:B3:2B:33:E3:E9:D3:48:0E:AC:0A:E5:FF:DD:1A:71:E7:E7 X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:24:5c:b2:ab:a1:7d:4a:78:d4:30:66:45:f0:d6:c3:27:98: a6:a6:d7:7a:99:50:b3:02:a2:f8:c0:30:8e:cf:3c:40:7b:26: 5c:4e:73:53:13:1b:ac:2a:72:ea:d3:56:a3:9b:f7:ab:46:ae: 21:12:87:34:92:0d:ed:ac:7e:6a:b3:f2:81:a3:ce:e0:f3:c8: 25:5c:45:3c:28:fb:fa:6f:fd:1a:26:68:a6:d2:34:8d:70:fc: 37:c4:09:93:3c:c7:13:98:b5:d2:75:28:8b:8c:19:1c:26:b4: 4c:c4:f1:50:88:dd:b3:4e:6b:05:20:76:3a:ec:3b:87:bb:6e: 10:11:65:01:59:6a:92:af:64:1d:ec:cc:7b:b5:9e:94:a7:3f: b6:7b:7d:d9:86:e9:ef:65:f0:dd:db:40:ab:70:c7:1a:c9:2f: a4:93:21:6e:5b:c2:63:39:a6:68:d9:26:59:2c:57:40:88:79: 91:fa:a5:b5:72:2c:83:bc:d2:be:19:56:17:49:93:9c:dd:5d: b3:f8:49:5e:2d:3d:78:7e:3c:0a:b5:ec:a0:92:3e:40:30:9a: a3:e1:db:7b:4e:0a:10:89:ab:8e:a3:bd:88:98:a6:5d:c6:8e: 34:be:db:e3:bf:a1:c2:0f:04:5b:b6:7b:e2:19:83:df:7f:43: db:2d:b5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYJSJnETpbQnqMwTR+PcH8PslDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA3MjAxNDU1MDdaFw0yNjA3MjExNjE5MDdaMDMxMTAvBgNV BAMTKDEyNTJFNUIzMkIzM0UzRTlEMzQ4MEVBQzBBRTVGRkREMUE3MUU3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5AjOnNQcYrs6I8Wj4iT/FKGj v1qI6y1y+FsQcyNEaioLeZ+WQssVwgmrkUCOGSvyoO915PIklkXNvYwD8jtvDSym XDwEYEbGe2RZyCN/wt3eCxRNcLtlEf8MBF20l6TspWK0E0RuyIfTINqBIs2yC9Da /z68GEih5kGgu03MB0eu6ybCDB1aG5L++QlENT5Nrm/pKrJ69RG21KrQ5cWH4pAs Ys6P0HEvIAxoEJDt8w5O3R00+GQOLkeAq8VCJHbZx+Tv4Vo/Gn5QvlrDI9ImdUMc t4ZPGP5oIUk7t9W2EBJ5/9Tz4qgYj9Gs53jakqpc3OE+wcAetrtsa07aE4t1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElLlsysz4+nTSA6sCuX/3Rpx5+cwHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUkXLKroX1KeNQwZkXw1sMnmKam13qZULMC ovjAMI7PPEB7JlxOc1MTG6wqcurTVqOb96tGriEShzSSDe2sfmqz8oGjzuDzyCVc RTwo+/pv/RomaKbSNI1w/DfECZM8xxOYtdJ1KIuMGRwmtEzE8VCI3bNOawUgdjrs O4e7bhARZQFZapKvZB3szHu1npSnP7Z7fdmG6e9l8N3bQKtwxxrJL6STIW5bwmM5 pmjZJlksV0CIeZH6pbVyLIO80r4ZVhdJk5zdXbP4SV4tPXh+PAq17KCSPkAwmqPh 23tOChCJq46jvYiYpl3GjjS+2+O/ocIPBFu2e+IZg99/Q9sttUM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:35 2026 by rpki-client