$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: rOF70I/meMrdlQROZMw7l7ONpbpDASPFpaFKg4oTgs4= Subject key identifier: 61:D8:BF:7F:A3:1C:29:84:4C:D0:DF:E9:84:7A:DD:7E:D6:76:75:1A Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 2D27C6FC79F4A3F6F23BF9A553A36C2C2837A64B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:22:56 +0000 Manifest this update: Mon 20 Jul 2026 17:17:56 +0000 Manifest next update: Tue 21 Jul 2026 17:46:56 +0000 Files and hashes: 1: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 2: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: 1+knJVLsNrxTlBei+URUujTUfTM3FcjZchmPABOFG0w=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 5: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:c6:fc:79:f4:a3:f6:f2:3b:f9:a5:53:a3:6c:2c:28:37:a6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Jul 20 17:17:56 2026 GMT Not After : Jul 21 17:46:56 2026 GMT Subject: CN=61D8BF7FA31C29844CD0DFE9847ADD7ED676751A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:73:7b:83:d3:8f:ec:8e:2e:0c:d2:1d:25: 54:b0:d0:ea:a8:b4:6d:c8:4e:c4:31:56:ff:4c:ec: b2:c5:ac:d1:24:ad:64:fa:ad:46:27:7b:81:3b:93: 18:c7:8e:24:87:a0:53:10:3c:6e:26:16:d8:53:e6: 66:a4:e4:55:9a:10:bf:f6:27:04:b9:91:75:c9:19: ce:7b:8e:d7:e6:82:bb:59:5c:f4:1d:a5:c7:c7:01: 4c:12:6d:af:c7:c3:72:27:5d:49:1a:cc:d0:fe:a2: 71:41:a9:8c:61:d5:c9:2e:70:46:00:28:ee:1a:ce: 69:60:fa:1f:15:49:06:1b:65:cb:4d:0b:d0:86:1b: ce:17:a5:c3:fb:15:2c:2c:62:ba:e3:99:fa:83:e7: 13:e5:c3:7e:77:a1:02:49:74:43:d0:86:f2:a5:8f: 5a:e1:bb:97:e4:c5:59:a1:42:96:91:7a:24:eb:0f: 5d:77:0e:7d:0c:d7:2f:2f:78:a2:18:20:e2:04:38: 2b:23:3e:ba:62:4b:d0:08:7b:b6:d9:f8:35:20:29: 16:09:ed:b6:e6:11:0e:fa:d6:62:50:c5:e0:bc:15: 94:7a:7a:5e:11:b0:24:8c:c8:88:32:24:5c:91:68: 0a:ce:b8:b0:35:82:07:d1:7d:ba:42:b7:90:d6:03: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:BF:7F:A3:1C:29:84:4C:D0:DF:E9:84:7A:DD:7E:D6:76:75:1A X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:31:a4:35:d7:f1:34:8d:9a:bb:ec:60:92:3d:78:e3:ec:c2: c4:98:34:19:69:89:1d:f1:53:26:f2:91:88:5b:75:ef:bb:37: 01:a2:09:cf:8d:4d:8b:12:2a:8b:2b:c8:7c:81:10:cb:15:c0: 94:ea:05:e1:dd:7d:77:e2:f1:99:5e:b7:17:82:3d:48:94:df: 65:59:ed:52:a6:ef:39:29:a4:f9:60:f9:06:ec:7d:2b:a6:84: 32:3f:c0:91:d8:6f:30:08:96:fd:51:4c:4c:00:51:2c:b7:0d: f8:ad:b2:55:ad:94:41:2b:2e:cb:73:29:a1:fd:9b:f4:a8:17: 0f:b6:b6:15:89:db:e7:9e:94:82:09:52:05:9d:0e:43:9a:e1: 27:31:88:a2:29:bb:aa:16:4a:96:29:c0:7b:d1:c9:b8:ef:ab: ca:16:e2:27:24:fd:02:e4:7a:c6:a9:d1:eb:37:e3:d0:ee:a9: 61:2b:8d:ea:65:22:84:f6:a1:7a:52:b6:9c:11:8b:b8:24:4c: 04:a1:f6:72:6e:de:2e:f9:35:3c:c6:94:46:46:b9:c1:ab:32: 6f:39:df:09:c5:72:54:c7:ca:92:98:7e:8c:18:06:f5:f1:d2: 21:37:1e:45:9a:7c:01:c3:e5:68:b4:2c:89:03:d1:fd:e1:e6: 6f:19:a9:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSfG/Hn0o/byO/mlU6NsLCg3pkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA3MjAxNzE3NTZaFw0yNjA3MjExNzQ2NTZaMDMxMTAvBgNV BAMTKDYxRDhCRjdGQTMxQzI5ODQ0Q0QwREZFOTg0N0FERDdFRDY3Njc1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAnN7g9OP7I4uDNIdJVSw0Oqo tG3ITsQxVv9M7LLFrNEkrWT6rUYne4E7kxjHjiSHoFMQPG4mFthT5mak5FWaEL/2 JwS5kXXJGc57jtfmgrtZXPQdpcfHAUwSba/Hw3InXUkazND+onFBqYxh1ckucEYA KO4azmlg+h8VSQYbZctNC9CGG84XpcP7FSwsYrrjmfqD5xPlw353oQJJdEPQhvKl j1rhu5fkxVmhQpaReiTrD113Dn0M1y8veKIYIOIEOCsjPrpiS9AIe7bZ+DUgKRYJ 7bbmEQ761mJQxeC8FZR6el4RsCSMyIgyJFyRaArOuLA1ggfRfbpCt5DWA5RpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYdi/f6McKYRM0N/phHrdftZ2dRowHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8xpDXX8TSNmrvsYJI9eOPswsSYNBlpiR3x UybykYhbde+7NwGiCc+NTYsSKosryHyBEMsVwJTqBeHdfXfi8ZletxeCPUiU32VZ 7VKm7zkppPlg+QbsfSumhDI/wJHYbzAIlv1RTEwAUSy3DfitslWtlEErLstzKaH9 m/SoFw+2thWJ2+eelIIJUgWdDkOa4ScxiKIpu6oWSpYpwHvRybjvq8oW4ick/QLk esap0es349DuqWErjeplIoT2oXpStpwRi7gkTASh9nJu3i75NTzGlEZGucGrMm85 3wnFclTHypKYfowYBvXx0iE3HkWafAHD5Wi0LIkD0f3h5m8ZqUA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:37 2026 by rpki-client