$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: 0mxVWRYEjwz57STFldzxazrZuERJpjUJMZhMK25jILU= Subject key identifier: 1E:73:5A:0C:14:6F:86:90:54:11:A3:E8:07:A4:17:82:17:75:19:EC Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 4BF76B1063289CEE9B8BD662ED5569425BE6C3DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: 69 Signing time: Tue 21 Jul 2026 00:00:48 +0000 Manifest this update: Mon 20 Jul 2026 23:55:48 +0000 Manifest next update: Wed 22 Jul 2026 00:58:48 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) 3: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: CuvK/gJz9glDPpaJbh6Z1B+ttxPtU6OS1R4SsnyOfn0=) 4: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f7:6b:10:63:28:9c:ee:9b:8b:d6:62:ed:55:69:42:5b:e6:c3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: Jul 20 23:55:48 2026 GMT Not After : Jul 22 00:58:48 2026 GMT Subject: CN=1E735A0C146F86905411A3E807A41782177519EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:3e:de:f6:a2:3e:18:e2:aa:e5:e8:52:dd: 65:44:e5:83:af:23:e4:9d:ab:a8:15:9b:55:44:81: 09:a2:0a:8e:76:19:ac:d5:04:0b:1c:22:5f:d9:70: f6:37:c1:71:9b:43:86:0b:1f:df:f1:40:95:6e:91: 54:85:db:a2:81:c5:9f:f9:d9:5f:58:27:cb:16:1c: 22:fc:02:c7:f5:03:66:f6:03:95:92:53:cd:23:a7: 9f:a9:f2:d4:4f:2d:f5:6f:db:05:02:b4:14:27:87: 41:e9:f1:83:60:91:1e:61:a6:9a:fd:58:aa:f3:d8: 40:20:1c:f3:76:41:6b:73:02:89:7d:f3:68:44:a3: e6:c6:57:fe:b1:25:53:f9:d2:8b:06:23:a1:61:4b: 25:d5:f2:a2:e2:d4:9e:f1:09:24:60:21:dc:92:84: 89:1a:84:71:a9:5e:2b:4f:87:db:69:3a:fa:c6:d0: d7:03:db:42:69:2e:f8:16:ed:26:9f:d7:47:3d:4d: b5:e4:45:a7:3e:e2:cc:1f:28:4b:bf:5d:43:a5:b5: b8:7e:bb:77:07:4b:07:6e:23:63:f1:1a:66:36:5f: e9:89:d4:62:31:f9:ba:1a:ea:a0:e5:42:e9:6d:b6: 66:36:f5:f0:09:04:fb:5c:70:8e:e5:5a:8b:7e:a2: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:5A:0C:14:6F:86:90:54:11:A3:E8:07:A4:17:82:17:75:19:EC X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:93:9f:b2:a1:84:47:c0:71:d4:54:23:1c:fd:d6:a9:c9:5b: 8b:69:0e:f6:ed:e0:03:30:fc:f1:42:7f:86:28:90:42:76:a2: 55:e3:5b:17:23:e0:66:cf:b8:2a:63:3e:b7:d9:74:2c:62:9c: 97:17:81:ab:7a:64:94:06:19:e7:a8:75:be:83:6b:ba:9c:58: 55:1f:2e:c5:09:11:b2:b6:4c:b6:29:3d:6f:9d:fb:1a:d2:af: 2a:68:ee:a2:12:3b:94:c0:ad:8f:a3:09:65:b1:fd:31:33:09: 7a:75:72:ae:d1:fc:73:34:df:27:88:80:7e:59:7c:25:45:9d: c2:0f:14:0e:9a:22:d8:2e:79:cf:b4:53:d0:4c:9f:cf:f6:5c: ad:b0:98:a4:a4:d8:ef:e2:14:94:c9:37:ac:dc:69:ed:e5:81: 6a:07:76:1e:76:81:73:9e:a4:0b:09:97:a3:05:3a:da:d7:62: 52:c0:5c:d0:26:4b:7b:8c:7a:b5:43:22:1a:77:e4:fe:6b:4c: a9:0c:e7:58:d6:1f:67:fc:52:d6:36:0c:33:68:af:6f:a4:8a: 47:d2:b7:01:e9:e6:07:40:dc:ae:77:0a:60:be:3f:71:9b:b3: bd:3d:d5:e4:dc:7d:a4:36:53:bb:0c:09:30:b7:0f:64:cc:9b: 9f:ac:60:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/drEGMonO6bi9Zi7VVpQlvmw9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA3MjAyMzU1NDhaFw0yNjA3MjIwMDU4NDhaMDMxMTAvBgNV BAMTKDFFNzM1QTBDMTQ2Rjg2OTA1NDExQTNFODA3QTQxNzgyMTc3NTE5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZz7e9qI+GOKq5ehS3WVE5YOv I+Sdq6gVm1VEgQmiCo52GazVBAscIl/ZcPY3wXGbQ4YLH9/xQJVukVSF26KBxZ/5 2V9YJ8sWHCL8Asf1A2b2A5WSU80jp5+p8tRPLfVv2wUCtBQnh0Hp8YNgkR5hppr9 WKrz2EAgHPN2QWtzAol982hEo+bGV/6xJVP50osGI6FhSyXV8qLi1J7xCSRgIdyS hIkahHGpXitPh9tpOvrG0NcD20JpLvgW7Saf10c9TbXkRac+4swfKEu/XUOltbh+ u3cHSwduI2PxGmY2X+mJ1GIx+boa6qDlQulttmY29fAJBPtccI7lWot+oqhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnNaDBRvhpBUEaPoB6QXghd1GewwHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqTn7KhhEfAcdRUIxz91qnJW4tpDvbt4AMw /PFCf4YokEJ2olXjWxcj4GbPuCpjPrfZdCxinJcXgat6ZJQGGeeodb6Da7qcWFUf LsUJEbK2TLYpPW+d+xrSrypo7qISO5TArY+jCWWx/TEzCXp1cq7R/HM03yeIgH5Z fCVFncIPFA6aItguec+0U9BMn8/2XK2wmKSk2O/iFJTJN6zcae3lgWoHdh52gXOe pAsJl6MFOtrXYlLAXNAmS3uMerVDIhp35P5rTKkM51jWH2f8UtY2DDNor2+kikfS twHp5gdA3K53CmC+P3Gbs7091eTcfaQ2U7sMCTC3D2TMm5+sYKQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:51:59 2026 by rpki-client