$ rpki-client -vvf rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft File: 1767C40EF953BF431D4947D499414812C8AB0D53.mft (raw, json) Hash identifier: i0Cl8VbbjxhErZ+i2o+f2AFOMVIKa2CoWGPQ+pQNly8= Subject key identifier: A6:9F:EC:F8:0C:1E:44:25:3B:64:6F:FF:8E:3B:D3:A9:2F:1E:05:6F Authority key identifier: 17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 Certificate issuer: /CN=1767C40EF953BF431D4947D499414812C8AB0D53 Certificate serial: 7CF6F9782C97C58B988AE8E73643808D99F8B246 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:02:36 +0000 Manifest this update: Mon 20 Jul 2026 16:57:36 +0000 Manifest next update: Tue 21 Jul 2026 18:40:36 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: 3fUrcuhU6jaeFfZiNtVK08Yeh8OVEIRyrvEdhO9M9Ow=) 2: 1767C40EF953BF431D4947D499414812C8AB0D53.crl (hash: ocWHosTx3lk2jcY1weeGk/eWZfST7pU7/QDCEBcRUp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f6:f9:78:2c:97:c5:8b:98:8a:e8:e7:36:43:80:8d:99:f8:b2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1767C40EF953BF431D4947D499414812C8AB0D53 Validity Not Before: Jul 20 16:57:36 2026 GMT Not After : Jul 21 18:40:36 2026 GMT Subject: CN=A69FECF80C1E44253B646FFF8E3BD3A92F1E056F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:bf:56:4d:99:d7:fa:c9:5e:c0:42:66:4f: 9a:81:c4:64:8b:26:e6:36:e3:ca:9d:0c:83:03:b1: 23:20:31:b2:d0:74:8e:b0:ec:a4:9e:c9:05:b8:8d: 61:6f:9f:29:1c:96:0e:9f:88:e1:c7:19:b6:77:ad: ab:2b:63:c2:7e:67:43:a5:1a:aa:7f:73:cd:e5:fe: fa:1c:ab:c6:c1:ab:a9:f3:c6:65:58:9f:57:4b:de: a3:f1:6f:0b:c5:37:bf:a7:82:82:5e:c7:18:a2:87: a8:88:dc:51:fc:5f:df:30:6b:6b:5a:fc:37:d0:b0: 28:99:d3:13:9d:b4:07:f2:b1:f8:13:a4:98:e7:9d: 9f:cf:b3:65:44:43:70:00:dc:58:dd:7a:08:1b:64: 09:75:50:aa:58:15:6b:88:10:20:68:1d:17:c1:88: 02:30:77:c5:68:34:2e:39:6e:ae:c4:47:92:9d:7f: fe:a0:0a:71:2a:52:f5:be:9a:94:f8:4b:82:86:44: a7:5a:ba:44:9c:d5:77:d8:d1:c9:26:f9:d9:d2:b9: dc:5b:13:65:2f:6d:f7:61:04:2e:65:7b:fb:2c:c6: 80:2b:52:4e:64:97:22:db:36:74:7e:c2:2d:4d:52: 48:3f:8e:39:b8:9f:75:48:9e:57:ad:28:6c:d6:a8: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9F:EC:F8:0C:1E:44:25:3B:64:6F:FF:8E:3B:D3:A9:2F:1E:05:6F X509v3 Authority Key Identifier: keyid:17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1c:f1:28:11:34:80:ff:da:62:f5:a3:a6:c6:1b:86:25:97: b0:60:19:fb:ad:2e:4d:32:3e:3f:a9:54:eb:dc:9c:9d:0d:82: b6:65:71:22:61:6b:4a:6a:9d:71:9d:53:8b:af:1c:cd:52:4e: 2e:4b:02:fc:f7:6e:90:61:7d:9e:23:2b:28:c3:43:85:0a:d3: 8f:bc:dd:1a:f2:c0:f0:0f:19:8a:44:ac:5f:f3:87:92:40:19: 48:b2:be:ed:4a:ff:e5:99:69:a9:f1:01:01:c9:dc:00:e1:28: 30:4c:c3:6e:4a:2b:8b:9d:15:1d:15:ad:88:9e:81:61:19:64: aa:02:69:e2:26:4b:c4:f4:32:02:1d:52:ec:0c:21:ee:8f:7e: 0a:41:b1:b9:1c:13:71:1b:d0:0f:09:51:63:c0:fa:27:5a:5d: c8:44:ba:f0:9b:4a:94:97:f7:09:cb:3a:c7:9b:df:df:c0:c8: c8:44:0c:47:f6:6e:d8:16:ff:f7:8d:db:d0:17:5e:12:f2:78: 18:d4:f2:3b:eb:c4:4e:f2:54:39:54:6e:b7:44:f8:70:24:bf: 40:56:3b:9e:cd:78:46:81:80:38:ee:7d:38:29:33:bf:66:cf: 58:b6:9d:95:dc:be:a5:d8:9f:97:6a:45:19:fc:9f:0a:4f:28: c5:e4:1a:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPb5eCyXxYuYiujnNkOAjZn4skYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJD OEFCMEQ1MzAeFw0yNjA3MjAxNjU3MzZaFw0yNjA3MjExODQwMzZaMDMxMTAvBgNV BAMTKEE2OUZFQ0Y4MEMxRTQ0MjUzQjY0NkZGRjhFM0JEM0E5MkYxRTA1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDr9WTZnX+slewEJmT5qBxGSL JuY248qdDIMDsSMgMbLQdI6w7KSeyQW4jWFvnykclg6fiOHHGbZ3rasrY8J+Z0Ol Gqp/c83l/vocq8bBq6nzxmVYn1dL3qPxbwvFN7+ngoJexxiih6iI3FH8X98wa2ta /DfQsCiZ0xOdtAfysfgTpJjnnZ/Ps2VEQ3AA3FjdeggbZAl1UKpYFWuIECBoHRfB iAIwd8VoNC45bq7ER5Kdf/6gCnEqUvW+mpT4S4KGRKdaukSc1XfY0ckm+dnSudxb E2UvbfdhBC5le/ssxoArUk5klyLbNnR+wi1NUkg/jjm4n3VInletKGzWqMmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpp/s+AweRCU7ZG//jjvTqS8eBW8wHwYDVR0j BBgwFoAUF2fEDvlTv0MdSUfUmUFIEsirDVMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzZGI3ZDItYjNmZC00MjE0LWI2YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVG OTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJDOEFCMEQ1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzY3QzQwRUY5NTNCRjQzMUQ0OTQ3RDQ5OTQxNDgxMkM4QUIw RDUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4 MTJDOEFCMEQ1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcc8SgRNID/2mL1o6bGG4Yll7BgGfutLk0y Pj+pVOvcnJ0NgrZlcSJha0pqnXGdU4uvHM1STi5LAvz3bpBhfZ4jKyjDQ4UK04+8 3RrywPAPGYpErF/zh5JAGUiyvu1K/+WZaanxAQHJ3ADhKDBMw25KK4udFR0VrYie gWEZZKoCaeImS8T0MgIdUuwMIe6PfgpBsbkcE3Eb0A8JUWPA+idaXchEuvCbSpSX 9wnLOseb39/AyMhEDEf2btgW//eN29AXXhLyeBjU8jvrxE7yVDlUbrdE+HAkv0BW O57NeEaBgDjufTgpM79mz1i2nZXcvqXYn5dqRRn8nwpPKMXkGkU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:36 2026 by rpki-client