$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft File: A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json) Hash identifier: lkWVKtGkvHhAp8OA3IHjA/bwQuBfTkpLZSgpLUCqkEs= Subject key identifier: 5D:1E:A4:D0:D7:70:81:A4:9E:8C:D6:33:98:B4:5A:28:05:17:13:95 Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61 Certificate issuer: /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261 Certificate serial: 66322F65D8EB3066CF5037998C4FFAC77FAF91B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:27:41 +0000 Manifest this update: Mon 20 Jul 2026 21:22:41 +0000 Manifest next update: Wed 22 Jul 2026 00:20:41 +0000 Files and hashes: 1: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: lwo1u7RtfaNhU2ItfiriiQkt1Y+htcZQYpmQ8weFcw0=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:32:2f:65:d8:eb:30:66:cf:50:37:99:8c:4f:fa:c7:7f:af:91:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261 Validity Not Before: Jul 20 21:22:41 2026 GMT Not After : Jul 22 00:20:41 2026 GMT Subject: CN=5D1EA4D0D77081A49E8CD63398B45A2805171395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:3f:a8:87:1e:bd:f8:92:0f:d2:c8:8f:90: c0:f9:58:7d:36:e9:81:01:bd:e3:c5:7d:b2:62:93: da:29:43:0c:c4:46:d4:fe:08:42:52:d1:3c:81:b0: 4f:36:a5:e5:c8:58:e0:32:85:6c:3d:1f:cc:d0:b4: 7d:4e:73:c0:0f:e5:ee:23:83:33:41:26:3f:04:9a: 27:51:39:36:47:b5:1a:a7:c0:3f:4f:56:4f:57:60: 42:45:2c:4f:d2:64:12:d3:4f:d2:6d:b8:3f:95:2e: 4d:91:58:e6:b6:2e:55:6a:fd:eb:bf:95:1d:db:1a: 7a:ac:04:8f:f8:e0:67:d1:be:d1:e0:47:20:01:da: bf:a5:bf:4d:fd:34:81:5f:e4:65:3d:10:63:23:fe: be:03:13:df:94:b7:6f:c0:70:87:23:19:81:2e:d4: cc:e7:ad:a3:18:d8:f1:a2:6f:99:a3:84:15:7b:b7: f7:22:29:2f:cc:02:82:32:d7:ae:c5:38:b2:5d:f5: 5b:b3:a0:21:78:a8:ed:3d:b5:8b:f8:e4:15:1a:19: 5d:1e:41:30:13:5c:eb:c3:45:c8:cb:51:db:6c:18: 35:12:cd:25:06:99:21:1a:2b:06:54:04:41:30:9d: c1:12:13:38:b9:cc:3a:91:32:66:7e:36:8f:b6:2a: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:A4:D0:D7:70:81:A4:9E:8C:D6:33:98:B4:5A:28:05:17:13:95 X509v3 Authority Key Identifier: keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:6b:36:c8:52:ca:af:bc:16:55:79:4f:37:df:1c:c1:c7: 1f:4c:17:82:3d:7f:41:ac:02:07:ae:9b:07:d6:b3:10:25:ab: c1:4f:36:3c:33:ff:b7:31:c9:68:1b:35:f4:88:5d:e1:3c:0b: 29:6c:52:d3:36:b9:6a:17:62:c9:7c:51:0b:df:80:78:f7:a1: 75:00:37:96:5c:21:10:7c:c6:0e:32:84:a7:5f:d4:a9:0b:ea: 29:f6:ed:b6:39:d0:36:35:1a:af:9f:1b:e7:2c:27:1c:d0:39: 9b:fb:e9:4f:85:09:ab:07:a7:8d:8f:5e:8c:ca:db:a9:26:c8: 7e:99:ab:7e:0f:af:a5:f0:ba:e5:e1:d1:a8:25:1e:a3:0c:59: de:c3:be:59:e5:14:ab:17:a4:81:56:0c:b0:2a:12:16:de:d8: b0:b6:82:ea:0c:71:3f:77:81:35:02:1e:a8:19:f2:9a:c9:47: 45:dd:e2:7d:b3:60:50:db:dd:c6:15:50:04:4f:9f:55:a2:a1: 69:02:6d:04:fc:75:82:b1:3d:f2:17:c2:06:8f:60:e3:56:69: e6:fe:bd:31:11:44:83:e9:b1:75:52:23:3e:c2:39:9b:b7:9a: 30:07:aa:42:b2:8d:03:d7:d9:63:f4:ad:0b:bc:d9:08:66:43: 00:e5:43:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjIvZdjrMGbPUDeZjE/6x3+vkbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5NUFGQzNBQ0U2OEZENEVCMThENDVGNDgxNDhGNjY5 MjYwRjI2MTAeFw0yNjA3MjAyMTIyNDFaFw0yNjA3MjIwMDIwNDFaMDMxMTAvBgNV BAMTKDVEMUVBNEQwRDc3MDgxQTQ5RThDRDYzMzk4QjQ1QTI4MDUxNzEzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVD+ohx69+JIP0siPkMD5WH02 6YEBvePFfbJik9opQwzERtT+CEJS0TyBsE82peXIWOAyhWw9H8zQtH1Oc8AP5e4j gzNBJj8EmidROTZHtRqnwD9PVk9XYEJFLE/SZBLTT9JtuD+VLk2RWOa2LlVq/eu/ lR3bGnqsBI/44GfRvtHgRyAB2r+lv039NIFf5GU9EGMj/r4DE9+Ut2/AcIcjGYEu 1MznraMY2PGib5mjhBV7t/ciKS/MAoIy167FOLJd9VuzoCF4qO09tYv45BUaGV0e QTATXOvDRcjLUdtsGDUSzSUGmSEaKwZUBEEwncESEzi5zDqRMmZ+No+2KpAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXR6k0NdwgaSejNYzmLRaKAUXE5UwHwYDVR0j BBgwFoAUp5Wvw6zmj9TrGNRfSBSPZpJg8mEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZhNWFiNTQtNzg0NC00NjAyLThhZWEtM2MyZTY0MWY2YTNjLzAvQTc5NUFGQzNB Q0U2OEZENEVCMThENDVGNDgxNDhGNjY5MjYwRjI2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzk1QUZDM0FDRTY4RkQ0RUIxOEQ0NUY0ODE0OEY2NjkyNjBG MjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQTc5NUFGQzNBQ0U2OEZENEVCMThENDVGNDgxNDhG NjY5MjYwRjI2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt5azbIUsqvvBZVeU833xzBxx9MF4I9f0Gs AgeumwfWsxAlq8FPNjwz/7cxyWgbNfSIXeE8CylsUtM2uWoXYsl8UQvfgHj3oXUA N5ZcIRB8xg4yhKdf1KkL6in27bY50DY1Gq+fG+csJxzQOZv76U+FCasHp42PXozK 26kmyH6Zq34Pr6XwuuXh0aglHqMMWd7DvlnlFKsXpIFWDLAqEhbe2LC2guoMcT93 gTUCHqgZ8prJR0Xd4n2zYFDb3cYVUARPn1WioWkCbQT8dYKxPfIXwgaPYONWaeb+ vTERRIPpsXVSIz7COZu3mjAHqkKyjQPX2WP0rQu82QhmQwDlQ6g= -----END CERTIFICATE-----Generated at Tue Jul 21 06:28:44 2026 by rpki-client