$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: 3/L8sy81ZfI8ht0iYViVRKYRIHm8/RXxt5BNVO/EHBU= Subject key identifier: 34:69:7D:87:C7:38:75:D7:CF:FA:96:21:87:3F:4F:7A:51:31:93:03 Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 60FEFE1A2B1E8C5FA3D85F281C2D7A5076D72930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 23:35:15 +0000 Manifest this update: Mon 20 Jul 2026 23:30:15 +0000 Manifest next update: Wed 22 Jul 2026 03:06:15 +0000 Files and hashes: 1: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: IE065qbj2o+UTArEiund75zz6VK/fZjLkgpsABued6o=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fe:fe:1a:2b:1e:8c:5f:a3:d8:5f:28:1c:2d:7a:50:76:d7:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Jul 20 23:30:15 2026 GMT Not After : Jul 22 03:06:15 2026 GMT Subject: CN=34697D87C73875D7CFFA9621873F4F7A51319303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:bc:bf:e3:26:56:1e:6b:1c:ae:4a:e0:a6: ba:6a:52:b8:d8:b0:35:4e:54:ef:c8:39:4d:5e:a6: 62:76:a2:66:d9:b3:50:84:e6:f1:10:a4:7d:bf:2b: 94:73:78:3d:60:8e:07:87:dc:11:f4:e5:56:39:14: 7d:9f:ca:f0:4e:28:9a:f0:7d:87:e5:6b:8e:5e:b5: 3c:93:7e:b3:b4:bd:b6:a1:9e:45:72:ce:59:87:7d: 14:e1:d7:3c:64:ef:4e:ee:63:03:1e:39:d0:6c:d2: 5e:7d:50:27:6d:ba:b3:19:7c:04:08:29:df:b7:02: 4a:82:29:65:32:8c:d0:ec:a7:21:ce:cb:ca:4f:6e: c9:2a:a6:bc:3c:d7:0d:15:75:5c:2a:0d:a6:18:74: 6a:e9:d3:68:4f:b3:c6:51:36:be:7d:66:b7:de:65: 28:45:bb:93:90:40:5e:2c:f0:b0:eb:cb:d5:5c:4c: e0:d4:b3:43:46:33:93:e4:c7:9a:40:41:fe:bf:61: 3c:75:76:da:9e:af:cb:8e:a2:7a:2a:11:f9:47:f0: d9:9b:1f:20:d3:ce:7a:4f:02:2b:8f:2f:d3:fe:e3: 92:c0:99:71:b5:ad:fb:70:da:a4:f6:83:0c:91:21: 63:af:83:92:5f:3d:71:9c:3a:aa:61:f1:87:92:5d: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:69:7D:87:C7:38:75:D7:CF:FA:96:21:87:3F:4F:7A:51:31:93:03 X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:85:7a:43:2e:df:06:e3:41:86:e2:58:d8:4e:9a:b7:7f:1b: 49:9a:13:8c:b7:d4:a4:6c:5c:b1:6c:f0:ce:0c:04:ad:cd:c9: ab:ce:21:23:04:27:c4:f1:3c:72:30:03:f0:11:65:f8:95:40: 64:35:f9:20:66:d8:f7:61:d0:34:2a:48:20:90:4b:80:60:9b: 70:4a:2e:07:9b:52:f7:5a:ef:a5:62:53:a2:61:51:45:84:46: 7c:ec:ab:fa:cd:93:b1:71:dc:b2:6d:b8:11:a5:ea:7e:50:22: be:7a:fb:fd:f0:2f:71:c4:de:f1:1e:8b:6a:5e:2e:86:9b:cb: 1c:be:b3:e5:02:4a:fd:3a:84:1d:52:77:e3:4a:e4:e7:26:51: d7:8b:9c:92:66:71:64:b9:a9:18:86:d5:cb:2c:52:c9:12:5b: ba:c3:66:d0:7d:91:51:16:80:dc:12:c7:01:eb:64:fe:31:c7: 45:47:14:0c:48:3f:5f:1f:cd:d2:6b:08:ac:f0:c5:52:ba:2e: b4:33:0c:8e:5a:e7:53:e5:1e:28:3b:78:61:b5:76:72:25:06: 8c:f2:91:7a:66:e3:b0:78:35:a1:12:fa:73:37:46:ec:3c:71: 76:89:b6:e1:9e:93:c1:a5:6f:bc:81:41:40:4f:ed:a0:12:78: 9f:95:06:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP7+GisejF+j2F8oHC16UHbXKTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA3MjAyMzMwMTVaFw0yNjA3MjIwMzA2MTVaMDMxMTAvBgNV BAMTKDM0Njk3RDg3QzczODc1RDdDRkZBOTYyMTg3M0Y0RjdBNTEzMTkzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxWry/4yZWHmscrkrgprpqUrjY sDVOVO/IOU1epmJ2ombZs1CE5vEQpH2/K5RzeD1gjgeH3BH05VY5FH2fyvBOKJrw fYfla45etTyTfrO0vbahnkVyzlmHfRTh1zxk707uYwMeOdBs0l59UCdturMZfAQI Kd+3AkqCKWUyjNDspyHOy8pPbskqprw81w0VdVwqDaYYdGrp02hPs8ZRNr59Zrfe ZShFu5OQQF4s8LDry9VcTODUs0NGM5Pkx5pAQf6/YTx1dtqer8uOonoqEflH8Nmb HyDTznpPAiuPL9P+45LAmXG1rftw2qT2gwyRIWOvg5JfPXGcOqph8YeSXS6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGl9h8c4ddfP+pYhhz9PelExkwMwHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2FekMu3wbjQYbiWNhOmrd/G0maE4y31KRs XLFs8M4MBK3NyavOISMEJ8TxPHIwA/ARZfiVQGQ1+SBm2Pdh0DQqSCCQS4Bgm3BK LgebUvda76ViU6JhUUWERnzsq/rNk7Fx3LJtuBGl6n5QIr56+/3wL3HE3vEei2pe Loabyxy+s+UCSv06hB1Sd+NK5OcmUdeLnJJmcWS5qRiG1cssUskSW7rDZtB9kVEW gNwSxwHrZP4xx0VHFAxIP18fzdJrCKzwxVK6LrQzDI5a51PlHig7eGG1dnIlBozy kXpm47B4NaES+nM3Ruw8cXaJtuGek8Glb7yBQUBP7aASeJ+VBrc= -----END CERTIFICATE-----Generated at Tue Jul 21 09:56:28 2026 by rpki-client