$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: TAdHHZUah0lsqoSWBSJt/qfDPClI7OQeDLwHJ8wmKIw= Subject key identifier: 77:7A:9A:FC:FA:17:C8:72:0A:02:28:9D:24:5C:51:AD:FF:4D:28:60 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 121496D86EFDCAEA59A8FB2BF4C144BA812F0B83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:09:43 +0000 Manifest this update: Tue 21 Jul 2026 03:04:43 +0000 Manifest next update: Wed 22 Jul 2026 04:30:43 +0000 Files and hashes: 1: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 2: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) 3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 4: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 5: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: fj/7vmlmMegCChKbZ8VS76U+pBLf3W7iw3iBqK4bxE8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:14:96:d8:6e:fd:ca:ea:59:a8:fb:2b:f4:c1:44:ba:81:2f:0b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Jul 21 03:04:43 2026 GMT Not After : Jul 22 04:30:43 2026 GMT Subject: CN=777A9AFCFA17C8720A02289D245C51ADFF4D2860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:e8:00:02:9f:e8:df:1f:a6:34:7a:21:d0: b0:fd:d5:35:e7:9d:2e:b7:0f:7a:40:b1:f5:85:51: 8b:f8:0c:4f:24:2d:cc:1e:33:fc:8e:ae:0a:17:b3: d7:30:0a:2a:af:cf:90:cc:7a:99:f1:fd:af:26:8f: 65:7f:45:1f:09:6e:12:3c:36:ce:70:46:66:b6:88: 8f:92:2b:a5:99:33:a0:54:8c:02:19:11:2e:48:96: a2:19:57:7e:ff:2a:05:2c:c1:34:d8:5f:33:31:c3: 4f:23:5d:ac:cd:d0:d7:35:d9:65:91:b4:48:7f:62: b5:0f:ae:96:6b:e5:f3:31:fe:2a:6d:be:d8:7f:88: 99:47:63:d3:6d:d4:7d:7b:2f:37:00:9f:8c:b1:d8: 2c:2f:7c:df:8c:b4:1a:34:b4:aa:dc:82:2b:33:10: 89:e3:dd:f8:3d:47:5f:d9:37:0c:dd:a9:52:6a:c1: e2:49:e2:3a:37:2e:aa:44:ff:f7:fb:c0:79:78:51: 00:77:13:83:f3:1f:95:97:7c:5b:77:d0:8d:50:8f: 03:7c:e0:be:61:6c:7a:21:70:9d:34:e0:8a:90:e7: 91:4b:47:37:52:fe:0c:eb:5a:93:83:23:ea:e9:9f: d0:c4:7c:a0:36:0d:96:8c:1d:29:a5:75:70:7d:77: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7A:9A:FC:FA:17:C8:72:0A:02:28:9D:24:5C:51:AD:FF:4D:28:60 X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:38:32:6c:bc:2e:1f:62:d8:71:73:4b:f7:df:4a:1a:40: 69:db:7e:54:9c:fb:9c:9d:0d:19:a0:b0:53:3d:1a:6a:46:98: 13:f1:3a:b6:19:2f:ee:9e:ae:2f:d7:cc:ba:ce:c4:26:16:dc: fd:c6:73:8c:cd:32:4b:62:61:ad:47:f0:42:6a:74:a0:d8:d7: a3:63:48:e2:b5:5e:14:e4:0d:88:23:53:34:51:61:92:61:27: 20:76:7f:46:79:76:df:78:3a:89:6e:f4:db:ad:b1:ad:c2:e9: bf:de:b2:3a:ca:07:11:a1:e6:24:77:54:7b:09:ce:0a:f0:60: 05:30:ca:3e:15:db:b6:b9:4d:f4:d0:ca:2c:ab:8f:d3:ca:09: 19:2e:99:fe:a8:8b:90:de:2f:ac:47:c1:87:37:cb:e2:54:00: ea:78:2b:f5:d2:91:a4:2e:44:67:80:9d:d8:55:56:54:ce:cf: 40:80:ce:28:41:68:85:1f:70:1c:85:35:ef:e0:00:3e:c2:a3: c9:6e:1f:d6:3a:a5:a9:01:2c:54:85:5a:0a:4a:7d:d0:a3:c6: d3:36:48:34:05:df:ef:1e:62:fd:3d:f5:39:06:fc:57:30:be: 6e:65:09:48:3f:8c:1a:85:6e:23:0e:c6:b1:c0:25:b4:34:15: ed:a5:07:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhSW2G79yupZqPsr9MFEuoEvC4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA3MjEwMzA0NDNaFw0yNjA3MjIwNDMwNDNaMDMxMTAvBgNV BAMTKDc3N0E5QUZDRkExN0M4NzIwQTAyMjg5RDI0NUM1MUFERkY0RDI4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBegAAp/o3x+mNHoh0LD91TXn nS63D3pAsfWFUYv4DE8kLcweM/yOrgoXs9cwCiqvz5DMepnx/a8mj2V/RR8JbhI8 Ns5wRma2iI+SK6WZM6BUjAIZES5IlqIZV37/KgUswTTYXzMxw08jXazN0Nc12WWR tEh/YrUPrpZr5fMx/iptvth/iJlHY9Nt1H17LzcAn4yx2CwvfN+MtBo0tKrcgisz EInj3fg9R1/ZNwzdqVJqweJJ4jo3LqpE//f7wHl4UQB3E4PzH5WXfFt30I1QjwN8 4L5hbHohcJ004IqQ55FLRzdS/gzrWpODI+rpn9DEfKA2DZaMHSmldXB9dzxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd3qa/PoXyHIKAiidJFxRrf9NKGAwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMOODJsvC4fYthxc0v330oaQGnbflSc+5yd DRmgsFM9GmpGmBPxOrYZL+6eri/XzLrOxCYW3P3Gc4zNMktiYa1H8EJqdKDY16Nj SOK1XhTkDYgjUzRRYZJhJyB2f0Z5dt94Oolu9Nutsa3C6b/esjrKBxGh5iR3VHsJ zgrwYAUwyj4V27a5TfTQyiyrj9PKCRkumf6oi5DeL6xHwYc3y+JUAOp4K/XSkaQu RGeAndhVVlTOz0CAzihBaIUfcByFNe/gAD7Co8luH9Y6pakBLFSFWgpKfdCjxtM2 SDQF3+8eYv099TkG/Fcwvm5lCUg/jBqFbiMOxrHAJbQ0Fe2lB0I= -----END CERTIFICATE-----Generated at Tue Jul 21 06:18:01 2026 by rpki-client