$ rpki-client -vvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: bQE8SkBm2HilWpqyoNsdKziFFPtrA1r5sthSnTnDV00= Subject key identifier: C9:73:7E:80:3D:86:B0:78:FC:5B:B9:B5:7A:12:FC:F2:3C:FD:1C:EE Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 4ED33DA64BD1109A6CC940B9E401FC36118C9124 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:50:51 +0000 Manifest this update: Mon 20 Jul 2026 19:45:51 +0000 Manifest next update: Tue 21 Jul 2026 21:38:51 +0000 Files and hashes: 1: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) 2: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: 9tKNBb322Es1c+X5KEZMddFvQW5IqsImptN46kPbVNc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d3:3d:a6:4b:d1:10:9a:6c:c9:40:b9:e4:01:fc:36:11:8c:91:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: Jul 20 19:45:51 2026 GMT Not After : Jul 21 21:38:51 2026 GMT Subject: CN=C9737E803D86B078FC5BB9B57A12FCF23CFD1CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a3:a0:f8:5f:13:dd:53:29:2f:da:3e:14:03: eb:ac:0a:c7:68:3e:21:37:b1:03:e9:c4:eb:e8:d8: bc:ce:53:e7:12:ff:d9:06:7a:a1:e7:89:a0:5a:24: d1:52:b0:9c:1e:d8:d0:a5:6f:b0:72:57:0b:93:f6: 0f:17:25:a9:aa:5f:1b:ee:2e:ec:e4:1f:f5:ed:2d: e5:56:80:2a:ef:30:52:35:85:a7:fe:ee:02:a3:b0: 99:f5:4d:37:56:0a:69:74:2a:2e:6d:80:24:b5:fe: 5b:61:d2:c6:a4:43:93:f7:46:c8:16:d4:0e:55:d1: f4:8a:9f:bc:bb:c3:96:87:72:55:3d:47:ce:33:d5: 3e:5f:f0:ff:9c:c4:39:7e:e9:82:e9:82:61:4c:3f: 06:1c:d5:92:65:81:d8:24:90:36:3d:ff:2a:49:60: 58:e0:6c:cf:61:57:43:2f:b4:8b:f8:f1:da:ca:ed: a9:b5:b6:da:8a:b4:71:f7:bb:f3:dc:96:dd:f8:e1: da:67:a5:7f:1d:59:d1:ef:69:4e:51:70:8b:c4:c1: 3f:82:44:b3:a0:b4:cd:48:7f:03:d7:b1:75:82:64: a6:2b:30:7d:b3:bc:6c:84:16:b3:47:f0:c9:1d:0b: 40:67:46:f8:da:8f:38:34:fa:d9:1d:be:ba:9b:6a: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:7E:80:3D:86:B0:78:FC:5B:B9:B5:7A:12:FC:F2:3C:FD:1C:EE X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6a:f8:3c:49:20:bc:73:56:a2:59:a6:57:fa:09:2a:e2:90: b4:e4:3b:e1:6c:d0:b6:64:e2:0e:ce:51:16:41:f6:79:a6:f1: 8d:28:16:6d:f5:e3:33:27:41:e4:54:7e:5b:53:ec:eb:00:b4: 4e:eb:2d:25:88:7a:26:51:05:d4:9a:4d:7b:b2:ac:62:9e:fd: ad:c3:76:56:eb:89:19:40:e5:f5:c9:fa:79:51:cb:16:f9:da: 98:c9:ca:76:25:60:9e:a1:b3:ef:1c:d4:9b:6e:6e:b4:dc:2e: 38:ac:2d:8c:72:ad:48:26:4a:3c:04:f1:16:27:c4:7a:5f:1c: 05:48:e2:85:92:db:f1:11:7c:34:6b:e3:95:49:60:02:68:dc: c5:5c:6e:43:0f:0e:69:62:83:8b:30:81:f4:b6:e0:76:44:46: 15:35:b8:9e:b6:cd:e1:f9:3a:6e:1f:9b:7a:f8:cd:f5:2c:24: 7a:e6:5f:72:62:d8:8e:3c:c2:f9:6f:ec:f9:5d:c5:03:74:28: 6e:5b:21:f9:92:f2:64:57:fb:36:c7:b4:d5:f2:12:ba:c4:95: 3a:93:36:0b:b8:c0:85:cd:e6:89:76:28:cd:99:98:d5:af:91: 90:0c:53:f3:4d:f0:51:49:1f:99:ba:ce:36:6b:4f:46:89:5c: 25:ed:57:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtM9pkvREJpsyUC55AH8NhGMkSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA3MjAxOTQ1NTFaFw0yNjA3MjEyMTM4NTFaMDMxMTAvBgNV BAMTKEM5NzM3RTgwM0Q4NkIwNzhGQzVCQjlCNTdBMTJGQ0YyM0NGRDFDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDto6D4XxPdUykv2j4UA+usCsdo PiE3sQPpxOvo2LzOU+cS/9kGeqHniaBaJNFSsJwe2NClb7ByVwuT9g8XJamqXxvu LuzkH/XtLeVWgCrvMFI1haf+7gKjsJn1TTdWCml0Ki5tgCS1/lth0sakQ5P3RsgW 1A5V0fSKn7y7w5aHclU9R84z1T5f8P+cxDl+6YLpgmFMPwYc1ZJlgdgkkDY9/ypJ YFjgbM9hV0MvtIv48drK7am1ttqKtHH3u/Pclt344dpnpX8dWdHvaU5RcIvEwT+C RLOgtM1IfwPXsXWCZKYrMH2zvGyEFrNH8MkdC0BnRvjajzg0+tkdvrqbatBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXN+gD2GsHj8W7m1ehL88jz9HO4wHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9q+DxJILxzVqJZplf6CSrikLTkO+Fs0LZk 4g7OURZB9nmm8Y0oFm314zMnQeRUfltT7OsAtE7rLSWIeiZRBdSaTXuyrGKe/a3D dlbriRlA5fXJ+nlRyxb52pjJynYlYJ6hs+8c1JtubrTcLjisLYxyrUgmSjwE8RYn xHpfHAVI4oWS2/ERfDRr45VJYAJo3MVcbkMPDmlig4swgfS24HZERhU1uJ62zeH5 Om4fm3r4zfUsJHrmX3Ji2I48wvlv7PldxQN0KG5bIfmS8mRX+zbHtNXyErrElTqT Ngu4wIXN5ol2KM2ZmNWvkZAMU/NN8FFJH5m6zjZrT0aJXCXtV6E= -----END CERTIFICATE-----Generated at Tue Jul 21 06:08:30 2026 by rpki-client