$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft (raw, json) Hash identifier: kRvFWrYQAmbAlgI31yiEMmJgr2xVps2RxUzQrJnUBp4= Subject key identifier: B6:BE:60:EC:FD:33:06:A5:55:D3:D7:2C:26:5B:E5:D1:23:D0:5E:D4 Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Certificate serial: 40EBEC6E63EC858B2ECD899620480F38373D3D51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:09:00 +0000 Manifest this update: Mon 20 Jul 2026 18:04:00 +0000 Manifest next update: Tue 21 Jul 2026 20:41:00 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: IjCojVCQLVDXso6MfZ5Olpug+HpXiFAkQ/9TrlGdwBg=) 2: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=) 3: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: baz94lUrN5c1rRyv2s8gFFKO/4uJw+NhpT+Cp/9iDxI=) 4: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=) 5: C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl (hash: My59Rkaiomdv6Dh4Y66zO4oPk7pRhGerQYw0kUIQ0e0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:eb:ec:6e:63:ec:85:8b:2e:cd:89:96:20:48:0f:38:37:3d:3d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Validity Not Before: Jul 20 18:04:00 2026 GMT Not After : Jul 21 20:41:00 2026 GMT Subject: CN=B6BE60ECFD3306A555D3D72C265BE5D123D05ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:e5:f0:ab:18:a8:65:f0:5c:2b:ba:ee:8d: ac:5a:5a:8b:cf:d6:7e:db:5f:dd:a8:de:c9:20:02: 04:17:d9:fd:4d:b6:15:01:6a:d8:24:76:1c:8a:fc: 49:72:fd:2a:72:f6:8d:5c:08:b9:b1:73:90:f9:60: 04:dc:00:3c:d8:ad:d1:65:ed:5d:ac:d3:7c:58:65: 02:db:e6:9f:d1:23:03:b3:2a:13:f3:cb:5b:70:2e: c5:8c:eb:2c:b5:23:32:41:43:e0:0a:04:5b:78:9a: ef:4e:6f:83:f7:60:63:b8:07:01:61:be:dd:41:a0: 11:56:66:a5:50:dd:4a:39:c8:0f:21:8b:16:7d:13: a2:f5:33:5c:3e:b7:1d:5f:57:8f:ae:70:2b:f8:b7: e8:ad:27:e8:35:af:83:34:4b:ec:df:a9:7f:e3:20: 3d:8f:cd:d2:04:28:bf:22:97:69:cd:d1:d8:94:ef: 45:e3:33:15:e3:70:c4:40:87:fb:26:a2:6e:a1:19: 25:5d:af:78:6b:f5:68:92:61:56:9b:90:09:38:31: 31:05:d9:04:e7:3d:85:14:92:a9:bc:d8:5c:dc:5c: 87:24:b0:32:6f:ec:fc:bf:38:a6:88:96:82:b9:22: 58:58:73:e2:b7:d9:5d:98:ab:78:fe:4f:7c:89:91: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:60:EC:FD:33:06:A5:55:D3:D7:2C:26:5B:E5:D1:23:D0:5E:D4 X509v3 Authority Key Identifier: keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:4f:ff:dc:18:f0:3c:43:b0:92:2a:84:a5:44:38:d7:93:1b: 34:88:ba:ff:b0:ac:77:bc:fd:25:d6:2c:ca:83:b5:b2:7d:c6: 74:c1:24:8d:07:73:61:bd:d9:87:17:08:99:d2:b7:80:26:35: 5f:bf:8e:44:10:e6:d6:8b:36:6a:d8:20:b9:eb:ee:44:a1:66: 39:e0:11:59:ed:d9:2d:0a:f8:71:4f:56:42:6c:99:12:02:ed: 8d:52:b9:53:c2:0b:0c:2f:aa:78:37:7a:c6:c0:92:87:83:ae: cc:a1:25:69:55:b5:7d:90:f3:8d:47:8d:67:68:61:b4:21:72: 9d:8a:d4:55:4b:a4:d0:3f:c0:37:17:59:49:ba:04:16:9d:59: fe:fb:78:61:84:fa:ed:ae:37:c3:9b:23:0c:ee:30:63:23:dd: 28:4d:a0:d2:d4:cc:2a:37:a5:2f:59:de:31:64:e7:c1:d7:2d: d2:7f:80:ac:fd:c9:d7:b8:ae:71:b3:b4:2e:11:1c:6b:04:cb: 09:5d:42:c9:7a:a8:01:02:7b:3f:8d:8b:af:85:ef:38:63:1d: aa:59:a1:e5:c3:b4:8a:9c:3e:32:00:88:3d:1d:e1:31:4d:3c: 1c:ff:2d:45:45:10:2a:c4:1f:c7:b3:f7:83:d0:29:aa:ec:75: c6:8d:bc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOvsbmPshYsuzYmWIEgPODc9PVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0 NTVGREMyMDAeFw0yNjA3MjAxODA0MDBaFw0yNjA3MjEyMDQxMDBaMDMxMTAvBgNV BAMTKEI2QkU2MEVDRkQzMzA2QTU1NUQzRDcyQzI2NUJFNUQxMjNEMDVFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BOXwqxioZfBcK7rujaxaWovP 1n7bX92o3skgAgQX2f1NthUBatgkdhyK/Ely/Spy9o1cCLmxc5D5YATcADzYrdFl 7V2s03xYZQLb5p/RIwOzKhPzy1twLsWM6yy1IzJBQ+AKBFt4mu9Ob4P3YGO4BwFh vt1BoBFWZqVQ3Uo5yA8hixZ9E6L1M1w+tx1fV4+ucCv4t+itJ+g1r4M0S+zfqX/j ID2PzdIEKL8il2nN0diU70XjMxXjcMRAh/smom6hGSVdr3hr9WiSYVabkAk4MTEF 2QTnPYUUkqm82FzcXIcksDJv7Py/OKaIloK5IlhYc+K32V2Yq3j+T3yJkalpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtr5g7P0zBqVV09csJlvl0SPQXtQwHwYDVR0j BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE QzIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQy NUM0NTVGREMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhP/9wY8DxDsJIqhKVEONeTGzSIuv+wrHe8 /SXWLMqDtbJ9xnTBJI0Hc2G92YcXCJnSt4AmNV+/jkQQ5taLNmrYILnr7kShZjng EVnt2S0K+HFPVkJsmRIC7Y1SuVPCCwwvqng3esbAkoeDrsyhJWlVtX2Q841HjWdo YbQhcp2K1FVLpNA/wDcXWUm6BBadWf77eGGE+u2uN8ObIwzuMGMj3ShNoNLUzCo3 pS9Z3jFk58HXLdJ/gKz9yde4rnGztC4RHGsEywldQsl6qAECez+Ni6+F7zhjHapZ oeXDtIqcPjIAiD0d4TFNPBz/LUVFECrEH8ez94PQKarsdcaNvHY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:25 2026 by rpki-client