$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft (raw, json) Hash identifier: pi+lC4t3rrQDIYwshtYb3RV7RZIHvmehoZ90EfSnlzU= Subject key identifier: 2B:34:DA:BA:C2:57:B3:48:68:B5:0F:EC:6E:C1:65:EF:B5:0A:68:F0 Authority key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE Certificate issuer: /CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Certificate serial: 6110DFEE8A01A1C307B7079DC7CD5D4CBED0B65F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:40:23 +0000 Manifest this update: Mon 20 Jul 2026 23:35:23 +0000 Manifest next update: Tue 21 Jul 2026 23:51:23 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: SdJfcBicTcG5/kcedYnrcuYyXbwXNypphwy52Yrbsfs=) 2: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl (hash: iHbU9IdNFhGewfVDpox4qWcz39daWjRR2FgAj9GNN48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:10:df:ee:8a:01:a1:c3:07:b7:07:9d:c7:cd:5d:4c:be:d0:b6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Validity Not Before: Jul 20 23:35:23 2026 GMT Not After : Jul 21 23:51:23 2026 GMT Subject: CN=2B34DABAC257B34868B50FEC6EC165EFB50A68F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:7c:5e:23:6d:b9:ea:ea:36:67:b7:44:e1: ec:c8:9a:ab:a7:ff:bb:ff:07:bf:4c:59:bf:d6:c4: 26:b4:6d:81:95:52:cd:04:c1:4a:f6:54:03:85:58: 6c:e3:6c:59:d7:c6:db:54:2f:76:c3:1d:85:09:44: 46:67:78:56:eb:ab:00:7b:19:54:2d:06:77:3e:c9: e8:f8:bd:2e:97:2a:b8:8b:ec:12:e9:0b:0d:9f:2e: 0e:58:61:70:de:50:ff:46:d1:07:f4:79:18:4d:b2: a7:13:77:cd:ab:2a:c9:c6:dd:86:82:5a:72:8d:49: 97:10:14:26:59:82:d4:d9:a0:a9:6c:88:56:3c:e9: 64:71:87:e4:ae:7c:7b:20:5d:0f:9c:24:35:44:96: 67:a4:79:de:23:f2:5f:5c:82:d0:75:49:c9:4b:98: ae:eb:01:06:32:95:1c:58:b6:db:d2:0b:c8:b3:a1: 6e:87:79:9d:a2:64:f1:13:9d:20:91:68:b8:7b:43: a7:14:c6:5d:ee:0e:18:f7:be:6b:03:49:2a:a3:09: 71:94:ea:1a:00:cb:91:fd:fa:e2:8c:c4:e8:ab:06: f3:5a:09:44:09:10:df:1e:d4:64:b0:38:0e:06:6c: c1:ee:c3:fe:b9:c2:13:f6:ec:bb:d4:ab:b5:86:fe: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:34:DA:BA:C2:57:B3:48:68:B5:0F:EC:6E:C1:65:EF:B5:0A:68:F0 X509v3 Authority Key Identifier: keyid:E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:33:c4:a7:43:89:b2:0b:51:43:6b:5a:f2:a4:d7:9a:5f:b8: 95:fb:82:06:ba:d1:5f:df:ea:5b:46:82:12:09:6a:dd:b9:51: c8:7b:9d:d7:10:e5:9b:cd:e9:82:52:09:70:75:26:9f:ce:2c: 5e:7e:03:19:da:41:5a:be:91:58:0e:3c:f0:21:bf:e1:52:6e: 92:08:34:5a:d3:be:e5:76:52:8a:ed:56:bd:b0:0b:16:bf:5a: ee:e1:e6:ca:ad:dc:57:7f:1e:44:26:d9:9e:fe:5b:b1:ce:a8: 49:ef:c0:01:63:64:f5:97:ec:fb:af:33:6c:05:d0:c2:ce:6c: d4:19:a6:43:d7:d7:94:d7:ba:36:8d:a7:50:05:e5:ec:40:4b: b8:a3:a9:bc:98:79:48:6a:4c:bc:22:f8:77:bb:c9:f7:84:97: 44:ef:92:9c:09:09:97:12:9c:c7:63:1f:b1:61:ba:26:b1:3e: 0b:1b:66:45:4b:2e:e4:bf:99:4c:ff:04:29:2f:69:5c:5a:d9: e1:18:71:dd:5d:ad:ab:bf:3f:36:aa:2c:17:9e:3b:5f:7b:ad: bb:13:17:bd:43:39:c9:ea:e2:8b:e4:6f:ea:13:77:5e:a9:58: ee:d3:9f:1b:b1:87:5f:cb:5f:37:d9:33:8f:8b:fb:a2:74:d2: 20:5f:56:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRDf7ooBocMHtwedx81dTL7Qtl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3 QzhBQTZFRTAeFw0yNjA3MjAyMzM1MjNaFw0yNjA3MjEyMzUxMjNaMDMxMTAvBgNV BAMTKDJCMzREQUJBQzI1N0IzNDg2OEI1MEZFQzZFQzE2NUVGQjUwQTY4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotHxeI2256uo2Z7dE4ezImqun /7v/B79MWb/WxCa0bYGVUs0EwUr2VAOFWGzjbFnXxttUL3bDHYUJREZneFbrqwB7 GVQtBnc+yej4vS6XKriL7BLpCw2fLg5YYXDeUP9G0Qf0eRhNsqcTd82rKsnG3YaC WnKNSZcQFCZZgtTZoKlsiFY86WRxh+SufHsgXQ+cJDVElmeked4j8l9cgtB1SclL mK7rAQYylRxYttvSC8izoW6HeZ2iZPETnSCRaLh7Q6cUxl3uDhj3vmsDSSqjCXGU 6hoAy5H9+uKMxOirBvNaCUQJEN8e1GSwOA4GbMHuw/65whP27LvUq7WG/jgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzTausJXs0hotQ/sbsFl77UKaPAwHwYDVR0j BBgwFoAU6Y1rZB6UP344MQY0xf7ornyKpu4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU2MWY4NmUtMDdmMC00YzYwLWFkYzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQx RTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3QzhBQTZFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOThENkI2NDFFOTQzRjdFMzgzMTA2MzRDNUZFRThBRTdDOEFB NkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4 QUU3QzhBQTZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYzxKdDibILUUNrWvKk15pfuJX7gga60V/f 6ltGghIJat25Uch7ndcQ5ZvN6YJSCXB1Jp/OLF5+AxnaQVq+kVgOPPAhv+FSbpII NFrTvuV2UortVr2wCxa/Wu7h5sqt3Fd/HkQm2Z7+W7HOqEnvwAFjZPWX7PuvM2wF 0MLObNQZpkPX15TXujaNp1AF5exAS7ijqbyYeUhqTLwi+He7yfeEl0TvkpwJCZcS nMdjH7FhuiaxPgsbZkVLLuS/mUz/BCkvaVxa2eEYcd1drau/PzaqLBeeO197rbsT F71DOcnq4ovkb+oTd16pWO7Tnxuxh1/LXzfZM4+L+6J00iBfVqk= -----END CERTIFICATE-----Generated at Tue Jul 21 07:19:53 2026 by rpki-client