$ rpki-client -vvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: H0zvO3M/vvUOPwFOn+4ojI7MXPKqaTSAkCD9P5LfWTE= Subject key identifier: 09:BE:87:BD:4E:6C:B1:24:D7:F6:88:DE:E4:AF:3A:72:FA:03:FB:B1 Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 0E9296B613B2A6C51AD6ADBA8FB7A4B6F484F065 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:25:36 +0000 Manifest this update: Mon 20 Jul 2026 15:20:36 +0000 Manifest next update: Tue 21 Jul 2026 18:00:36 +0000 Files and hashes: 1: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: dc+2ai3B7NwTm7+Q35xX+6o5j6hyHVi+/1PoWKchcoc=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:92:96:b6:13:b2:a6:c5:1a:d6:ad:ba:8f:b7:a4:b6:f4:84:f0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Jul 20 15:20:36 2026 GMT Not After : Jul 21 18:00:36 2026 GMT Subject: CN=09BE87BD4E6CB124D7F688DEE4AF3A72FA03FBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:b4:a0:44:46:7a:b2:55:7c:ed:65:93:96: 5d:0f:48:ea:79:55:85:ae:4a:19:82:3b:3f:74:8a: d8:33:10:84:f2:25:b9:2d:c2:1a:b5:0f:c6:17:7e: cc:d8:74:ac:88:7d:24:c8:e6:47:c8:66:63:a2:35: 8c:3f:3e:8e:5c:70:48:11:5b:06:c2:7a:95:4b:4d: f2:f9:12:3e:ff:a0:a2:71:9e:5e:72:3a:6b:46:ab: 93:d8:40:d6:4b:07:eb:41:75:64:0c:c4:c9:49:04: 0e:d5:57:4e:78:62:0a:85:6f:67:5d:55:f6:82:33: ea:c4:a4:18:c3:24:16:e3:6d:54:d6:82:88:b2:94: 11:c6:44:01:0e:98:41:03:fe:ee:4b:44:aa:44:cb: ae:c2:02:98:91:f6:93:74:91:62:e0:8a:42:4c:08: 45:e4:2c:35:47:19:6e:ad:02:2d:8a:c2:33:a4:a1: a6:25:2f:b8:77:28:ca:8a:2e:ff:c4:fe:6f:52:5d: b7:35:f9:22:0e:78:d4:c4:9f:d3:ed:d9:b2:61:e9: dd:64:aa:9e:32:0e:02:2e:de:65:43:9a:fb:ec:b3: 3a:b3:60:80:3c:32:36:38:6e:dc:38:2e:7b:11:ff: b6:a1:52:ba:0e:2a:97:d3:5e:f2:16:66:63:a1:48: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BE:87:BD:4E:6C:B1:24:D7:F6:88:DE:E4:AF:3A:72:FA:03:FB:B1 X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:12:76:50:67:90:e6:7d:46:3b:a0:62:92:76:72:e2:16:05: d7:36:7d:26:8e:bf:ae:58:77:74:89:59:38:e6:39:6f:47:f6: c6:af:6b:ba:94:25:d3:4a:7a:7e:42:e3:b5:72:97:50:96:9f: 8b:9b:4c:10:eb:12:03:3a:ed:7a:44:f5:3e:64:5f:85:f4:e0: 1b:d3:ce:fc:08:c2:2d:51:f2:ed:6f:66:3e:88:6a:30:84:9b: a3:4e:46:15:18:83:82:8a:33:dc:27:f9:04:38:3f:72:9c:56: 61:fc:37:b6:24:0a:3c:27:9b:29:2e:9e:f7:5c:e0:3d:26:8d: 29:0c:10:d2:65:44:67:c7:96:02:bd:0a:88:be:e9:09:72:e7: 29:46:81:fd:20:b7:67:6f:e1:16:95:00:e6:d9:77:33:30:de: d5:f5:0a:ec:4e:a0:2e:dd:3f:f2:f8:cf:9f:f8:89:b3:d7:48: 8d:63:6c:2d:c2:27:4c:4f:0b:f3:3f:0b:2c:d5:e0:c0:37:be: f8:1a:66:19:e5:e6:5b:34:3b:2e:e2:5b:f1:99:6a:7c:bb:39: 2e:44:31:de:8a:ee:ef:a9:c2:00:be:1e:99:35:4a:ea:90:07: 9d:cc:f3:c4:36:be:16:13:04:a3:76:08:f4:8c:85:db:d2:d6: 9b:df:49:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDpKWthOypsUa1q26j7ektvSE8GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA3MjAxNTIwMzZaFw0yNjA3MjExODAwMzZaMDMxMTAvBgNV BAMTKDA5QkU4N0JENEU2Q0IxMjREN0Y2ODhERUU0QUYzQTcyRkEwM0ZCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3LSgREZ6slV87WWTll0PSOp5 VYWuShmCOz90itgzEITyJbktwhq1D8YXfszYdKyIfSTI5kfIZmOiNYw/Po5ccEgR WwbCepVLTfL5Ej7/oKJxnl5yOmtGq5PYQNZLB+tBdWQMxMlJBA7VV054YgqFb2dd VfaCM+rEpBjDJBbjbVTWgoiylBHGRAEOmEED/u5LRKpEy67CApiR9pN0kWLgikJM CEXkLDVHGW6tAi2KwjOkoaYlL7h3KMqKLv/E/m9SXbc1+SIOeNTEn9Pt2bJh6d1k qp4yDgIu3mVDmvvsszqzYIA8MjY4btw4LnsR/7ahUroOKpfTXvIWZmOhSG9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCb6HvU5ssSTX9oje5K86cvoD+7EwHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUSdlBnkOZ9RjugYpJ2cuIWBdc2fSaOv65Y d3SJWTjmOW9H9sava7qUJdNKen5C47Vyl1CWn4ubTBDrEgM67XpE9T5kX4X04BvT zvwIwi1R8u1vZj6IajCEm6NORhUYg4KKM9wn+QQ4P3KcVmH8N7YkCjwnmykunvdc 4D0mjSkMENJlRGfHlgK9Coi+6Qly5ylGgf0gt2dv4RaVAObZdzMw3tX1CuxOoC7d P/L4z5/4ibPXSI1jbC3CJ0xPC/M/CyzV4MA3vvgaZhnl5ls0Oy7iW/GZany7OS5E Md6K7u+pwgC+Hpk1SuqQB53M88Q2vhYTBKN2CPSMhdvS1pvfSSE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:37 2026 by rpki-client