$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json) Hash identifier: KKhmZKQmIn/pP7V2ox6cPiUX33Px02tCMsUyUndTurQ= Subject key identifier: CC:A9:7B:CE:AF:06:E3:45:10:A2:AD:36:9F:22:3B:5F:BE:10:E6:6A Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Certificate serial: 5FA7149ABAE4BAAC2AB18B6DAEAFC4369A02FB3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 22:08:25 +0000 Manifest this update: Mon 20 Jul 2026 22:03:25 +0000 Manifest next update: Tue 21 Jul 2026 22:48:25 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=) 2: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: ioUflDWOCqkSFg6A1EFvqJXA4vAjc0ZmLsaCkZ/q+FM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a7:14:9a:ba:e4:ba:ac:2a:b1:8b:6d:ae:af:c4:36:9a:02:fb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4 Validity Not Before: Jul 20 22:03:25 2026 GMT Not After : Jul 21 22:48:25 2026 GMT Subject: CN=CCA97BCEAF06E34510A2AD369F223B5FBE10E66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:fd:8c:d0:19:38:33:c2:88:d3:2c:19:14: c3:7c:92:14:79:99:e5:ea:61:43:43:dc:25:a0:94: 9a:56:30:0e:69:9b:00:ac:be:b4:ea:7e:b4:33:84: 18:df:a0:c0:c5:7f:d0:ff:00:c8:f5:9f:60:b8:23: 6d:66:bc:7b:c6:93:b1:23:b1:00:bf:0c:c3:0a:b3: a8:8e:4c:43:ae:b0:bb:a0:88:e2:5c:ef:28:9b:37: 40:0c:8d:b3:45:19:98:5d:f3:66:49:90:ac:b3:e1: f7:47:18:b5:58:5d:5c:6a:58:68:f9:97:62:b0:a7: d8:f3:b9:5b:ca:ee:4c:f8:a5:a5:cc:1a:3e:97:09: 25:a3:50:2b:9e:24:28:66:e0:9e:18:0c:01:15:51: ff:3a:e0:9f:1f:5a:94:f8:a9:a6:eb:a7:8d:36:9c: 94:0e:94:47:ee:28:e8:52:1b:96:2f:b7:68:89:c5: 25:d8:63:4a:57:91:e1:aa:dc:dd:9f:b7:ed:1d:75: fa:85:98:52:9b:b8:85:24:d8:69:ad:85:6f:9a:0b: 52:bb:6d:f3:f4:3b:9a:d1:81:04:a1:c4:9b:c4:fc: 9c:1b:6e:1f:bc:e2:7f:08:28:12:34:8e:83:d1:fe: 8c:2e:30:bc:5e:bc:22:c4:1d:d0:65:1e:84:42:06: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:7B:CE:AF:06:E3:45:10:A2:AD:36:9F:22:3B:5F:BE:10:E6:6A X509v3 Authority Key Identifier: keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a1:53:f6:79:1b:fd:f8:73:62:0d:b5:45:84:52:5c:a4:08: 23:b8:2a:da:fd:59:9f:0f:78:2d:0f:83:43:6d:a6:ef:03:f2: 25:ae:59:cb:cc:04:ae:cb:a0:2a:f2:00:00:95:3b:56:ad:11: 67:0f:40:29:76:77:31:80:e1:13:05:1d:30:9b:14:2b:40:c1: 0f:58:5f:cd:09:ab:97:1c:76:18:14:59:2d:25:9b:57:13:9d: 91:6b:1d:bc:17:b8:16:d9:c8:b9:44:e2:3c:78:cc:6a:a4:12: e3:a6:33:55:5e:81:58:92:52:3a:32:42:09:d4:d5:d7:12:6d: 0c:e7:44:ef:d1:37:e7:9e:36:77:fe:49:34:14:39:14:0e:48: 9f:c8:f3:19:76:06:5a:27:54:cc:9a:71:14:75:bf:73:e1:e1: 87:4b:12:a7:2f:1a:fd:26:af:aa:3e:48:9b:d1:41:d0:40:64: 93:25:db:3a:4b:29:bf:fc:89:a7:2d:c6:a8:b2:4d:5e:20:14: a8:2b:b0:60:87:04:18:41:70:6c:32:3a:69:ab:69:99:e7:d3: 5a:a1:5e:22:67:a7:73:45:9c:9f:30:6a:f6:72:7e:45:93:34: fe:13:cb:80:15:55:88:78:7f:32:f5:2a:07:50:f8:20:2b:e2: 49:9d:93:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6cUmrrkuqwqsYttrq/ENpoC+z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4 NzNFQkZGNDAeFw0yNjA3MjAyMjAzMjVaFw0yNjA3MjEyMjQ4MjVaMDMxMTAvBgNV BAMTKENDQTk3QkNFQUYwNkUzNDUxMEEyQUQzNjlGMjIzQjVGQkUxMEU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6f2M0Bk4M8KI0ywZFMN8khR5 meXqYUND3CWglJpWMA5pmwCsvrTqfrQzhBjfoMDFf9D/AMj1n2C4I21mvHvGk7Ej sQC/DMMKs6iOTEOusLugiOJc7yibN0AMjbNFGZhd82ZJkKyz4fdHGLVYXVxqWGj5 l2Kwp9jzuVvK7kz4paXMGj6XCSWjUCueJChm4J4YDAEVUf864J8fWpT4qabrp402 nJQOlEfuKOhSG5Yvt2iJxSXYY0pXkeGq3N2ft+0ddfqFmFKbuIUk2GmthW+aC1K7 bfP0O5rRgQShxJvE/Jwbbh+84n8IKBI0joPR/owuMLxevCLEHdBlHoRCBqoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKl7zq8G40UQoq02nyI7X74Q5mowHwYDVR0j BBgwFoAUokGscEuybTuwEQJkPoGa9Ic+v/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhNGVmNzEtZjBlMC00MjUyLTgxNjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0 QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4NzNFQkZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjQxQUM3MDRCQjI2RDNCQjAxMTAyNjQzRTgxOUFGNDg3M0VC RkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlB RjQ4NzNFQkZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqhU/Z5G/34c2INtUWEUlykCCO4Ktr9WZ8P eC0Pg0Ntpu8D8iWuWcvMBK7LoCryAACVO1atEWcPQCl2dzGA4RMFHTCbFCtAwQ9Y X80Jq5ccdhgUWS0lm1cTnZFrHbwXuBbZyLlE4jx4zGqkEuOmM1VegViSUjoyQgnU 1dcSbQznRO/RN+eeNnf+STQUORQOSJ/I8xl2BlonVMyacRR1v3Ph4YdLEqcvGv0m r6o+SJvRQdBAZJMl2zpLKb/8iactxqiyTV4gFKgrsGCHBBhBcGwyOmmraZnn01qh XiJnp3NFnJ8wavZyfkWTNP4Ty4AVVYh4fzL1KgdQ+CAr4kmdk6s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:12:22 2026 by rpki-client