$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: eZOb5y9ECMLACHRohVQeaeYQxjweLs16jJvmjNzKTwg= Subject key identifier: FD:89:CB:95:3B:2C:AE:77:BD:B2:F7:79:2B:F2:03:49:55:1C:33:37 Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 59FE1A0C57A9A090C871854C1343D0F5ADDC11CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 17:23:18 +0000 Manifest this update: Sun 19 Jul 2026 17:18:18 +0000 Manifest next update: Mon 20 Jul 2026 18:13:18 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) 2: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: 68OXbenlYoiRa74v4/Kfy6zcpBQmdR5b2GrQ9vOuAGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fe:1a:0c:57:a9:a0:90:c8:71:85:4c:13:43:d0:f5:ad:dc:11:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Jul 19 17:18:18 2026 GMT Not After : Jul 20 18:13:18 2026 GMT Subject: CN=FD89CB953B2CAE77BDB2F7792BF20349551C3337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:f0:2f:d8:03:9e:30:ab:a0:96:fc:a7:1d: e4:8f:01:18:0b:b6:a7:92:23:50:f0:76:30:ed:fd: e0:8e:f1:85:8d:ee:6e:84:99:0d:44:51:70:ea:68: 3d:71:b4:ce:e1:04:dc:f8:d8:13:2a:24:50:6e:bd: 77:3b:64:3c:ab:a2:11:d4:8e:f8:bf:ba:a0:1c:4d: 5c:96:86:a7:28:ba:4e:0e:e6:90:07:99:2b:4c:2d: 02:0e:bf:be:50:1a:84:74:4a:9c:e8:a7:8a:54:1a: 3f:14:33:66:2a:78:85:b8:72:bf:fa:bd:3f:78:c6: fa:ed:6d:bb:3b:ef:ce:fe:0f:e6:8a:f0:6b:df:12: 36:d4:3f:85:03:6b:63:b2:b5:7a:e7:f1:d0:17:e7: 11:bf:87:e6:04:c3:f1:f5:af:a2:6a:82:30:71:6a: cb:a7:d0:d3:7d:53:6f:44:78:87:fa:ed:49:f9:fa: 65:cc:d3:a9:fa:82:e7:b3:65:3f:e1:16:7c:f2:94: 00:07:b2:87:87:f5:ee:33:16:57:82:ed:a8:de:b2: 4a:12:9d:84:4e:38:36:d1:e6:5f:96:78:26:03:9c: 3f:7e:76:aa:ed:cd:32:5d:4a:ea:b7:e6:2d:ba:24: 98:f4:66:03:b9:6a:54:21:fe:f9:34:04:0b:2d:20: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:CB:95:3B:2C:AE:77:BD:B2:F7:79:2B:F2:03:49:55:1C:33:37 X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1d:c8:63:b7:46:1a:bb:66:f3:9a:22:97:f6:79:56:4d:13: dd:6b:b3:c3:43:c0:bd:87:5f:5e:a3:19:1f:0c:ce:9d:23:60: 88:02:51:e3:28:6a:8e:ff:fb:41:eb:b4:c7:58:a6:29:c3:f9: cf:55:9e:2c:47:49:b7:9f:68:ce:17:32:7d:0e:c9:86:b6:c0: 4c:c1:8b:be:88:44:1b:bf:ba:9e:8b:5c:37:d5:e1:90:d6:18: 1e:2f:b0:fa:5c:a5:21:32:e8:7e:f8:ce:5e:45:bb:d2:85:d7: 43:17:05:49:85:c4:a3:f7:db:09:75:a9:5a:ee:48:cb:e3:e9: 0f:e7:53:67:4e:a7:a0:1c:9e:0f:e1:3e:b0:e2:b3:55:32:e8: 37:09:5d:98:48:0d:04:b3:d1:79:58:14:1a:eb:7b:25:01:f7: 88:fe:58:08:f1:c5:58:f7:b7:4d:8f:33:5a:0f:08:f7:45:df: f9:25:93:dd:40:3c:e0:17:38:05:4e:4e:b7:56:96:47:22:80: 0f:25:8d:bf:0e:9f:d7:11:be:27:43:54:6a:b3:24:9b:12:c5: 5e:f8:20:94:be:d2:79:64:07:dd:f4:fe:42:7a:c0:43:15:fc: 2d:d0:c5:87:ea:29:30:fb:af:ba:5c:5a:a8:4e:23:cc:27:88: 1f:90:97:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWf4aDFepoJDIcYVME0PQ9a3cEcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA3MTkxNzE4MThaFw0yNjA3MjAxODEzMThaMDMxMTAvBgNV BAMTKEZEODlDQjk1M0IyQ0FFNzdCREIyRjc3OTJCRjIwMzQ5NTUxQzMzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjd/Av2AOeMKuglvynHeSPARgL tqeSI1DwdjDt/eCO8YWN7m6EmQ1EUXDqaD1xtM7hBNz42BMqJFBuvXc7ZDyrohHU jvi/uqAcTVyWhqcouk4O5pAHmStMLQIOv75QGoR0Spzop4pUGj8UM2YqeIW4cr/6 vT94xvrtbbs7787+D+aK8GvfEjbUP4UDa2OytXrn8dAX5xG/h+YEw/H1r6JqgjBx asun0NN9U29EeIf67Un5+mXM06n6guezZT/hFnzylAAHsoeH9e4zFleC7ajeskoS nYROODbR5l+WeCYDnD9+dqrtzTJdSuq35i26JJj0ZgO5alQh/vk0BAstIJOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YnLlTssrne9svd5K/IDSVUcMzcwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEdyGO3Rhq7ZvOaIpf2eVZNE91rs8NDwL2H X16jGR8Mzp0jYIgCUeMoao7/+0HrtMdYpinD+c9VnixHSbefaM4XMn0OyYa2wEzB i76IRBu/up6LXDfV4ZDWGB4vsPpcpSEy6H74zl5Fu9KF10MXBUmFxKP32wl1qVru SMvj6Q/nU2dOp6Acng/hPrDis1Uy6DcJXZhIDQSz0XlYFBrreyUB94j+WAjxxVj3 t02PM1oPCPdF3/klk91APOAXOAVOTrdWlkcigA8ljb8On9cRvidDVGqzJJsSxV74 IJS+0nlkB930/kJ6wEMV/C3QxYfqKTD7r7pcWqhOI8wniB+Ql98= -----END CERTIFICATE-----Generated at Sun Jul 19 23:45:16 2026 by rpki-client