$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft (raw, json) Hash identifier: UUuOe4XAMZjCgaGCYoPk1zZG39Vmqs1g0NmqJRsZ/DA= Subject key identifier: C9:32:C7:CA:DF:82:AE:5D:DB:A6:65:5D:BB:28:5A:17:07:17:13:8F Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Certificate serial: 3392EA215CDA76F3948423442871C3DB6CDF9AC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:00:06 +0000 Manifest this update: Mon 20 Jul 2026 14:55:06 +0000 Manifest next update: Tue 21 Jul 2026 15:09:06 +0000 Files and hashes: 1: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl (hash: ngsla6a+ZB042tZQa8Gt1SdSYgui9BNlwy3UDgjNqh4=) 2: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: GK/q1qgmQxfM3voSc0k+YTmkhCDo78ptqyplH6DohgE=) 3: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=) 4: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=) 5: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: 1XW8m/1HHafjwn856SxYeKjsgoK5KYpfAPCW/Yr3PaE=) 6: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:92:ea:21:5c:da:76:f3:94:84:23:44:28:71:c3:db:6c:df:9a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Validity Not Before: Jul 20 14:55:06 2026 GMT Not After : Jul 21 15:09:06 2026 GMT Subject: CN=C932C7CADF82AE5DDBA6655DBB285A170717138F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:ed:78:89:e8:7d:9a:e2:0a:a8:f3:95:66: 96:57:05:e1:f0:28:6e:be:ee:74:b5:0c:aa:b3:08: 62:8d:bd:b2:3a:b2:c0:8b:35:a4:a0:13:0c:f3:c7: c7:df:8f:73:a0:2e:84:f3:0e:1b:13:de:b5:13:23: b6:bd:aa:64:e9:e7:76:aa:5d:75:6b:8f:04:dc:e2: 73:e0:ec:35:4e:6a:99:92:9e:38:6f:c4:ec:a5:10: db:2e:e7:31:df:f2:ee:31:e7:e8:ea:99:b9:ff:8e: c1:c6:71:72:1c:d0:a9:98:42:79:50:83:ab:6e:dd: ec:53:3e:93:9f:c2:ac:b3:7a:bb:7e:d6:be:cb:f4: cc:fb:68:54:cd:1e:2b:eb:a8:3d:9e:31:05:95:b5: 1c:99:56:82:83:a3:de:55:aa:b1:30:29:09:fe:60: 80:96:63:cc:60:ee:1a:71:b4:ea:8d:b6:1b:b7:1e: 59:a9:7b:6b:9a:a3:67:e9:8b:3e:95:d3:1c:b7:65: b3:05:7e:64:17:b0:6b:e1:fa:df:11:8a:ac:5e:37: 3f:d0:5d:ac:3e:0c:a3:18:50:84:f9:2b:45:99:1f: 91:c1:66:5a:82:ee:b4:8c:a9:ed:2f:0b:9f:ce:7f: 0d:d6:13:69:67:7e:e8:d7:82:1c:04:4c:bd:6d:b6: 44:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:C7:CA:DF:82:AE:5D:DB:A6:65:5D:BB:28:5A:17:07:17:13:8F X509v3 Authority Key Identifier: keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:73:93:5a:40:fe:c1:a0:c6:f0:bd:2b:1c:f5:5e:f1:29: 65:c8:33:a1:80:7e:e7:91:bc:70:67:d7:03:25:6d:0e:8f:2c: 4b:57:f5:d5:e7:ae:cd:a9:8e:28:bb:29:3e:05:5b:97:d9:a4: c6:89:b4:55:13:21:13:cb:25:39:c4:9d:98:14:54:cb:37:d1: 55:20:76:9d:48:13:1c:75:0e:6c:15:61:14:46:03:3a:96:05: e7:c0:f7:96:df:fe:c0:e3:56:1f:88:d0:34:db:64:8c:f2:97: bf:b9:bb:5b:5a:c6:3a:68:06:cd:89:74:0e:9d:ff:ea:5c:80: 73:a7:1c:c9:a0:40:d2:e4:9b:01:2b:31:13:47:bc:a6:02:72: 78:b9:f3:f3:6d:ce:44:a5:bb:f0:88:4e:ed:12:da:51:c3:e7: 53:98:ec:f8:9b:05:fe:b1:99:87:d6:5e:69:ce:62:68:2d:a3: b3:cf:e3:7d:60:40:fc:37:4b:68:66:0c:2b:56:a3:c9:be:5f: 22:29:ae:8b:65:e3:1d:59:5c:ea:82:dc:dd:f7:1d:d1:45:a9: 40:4b:58:61:f8:d2:e6:1e:de:9e:f2:3c:8c:b0:e7:c7:4a:35: c1:5c:91:27:9a:ba:fc:e9:bd:6e:32:17:4e:a1:d2:ec:38:3d: 49:40:a2:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5LqIVzadvOUhCNEKHHD22zfmskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1 RkU1QTU3MDAeFw0yNjA3MjAxNDU1MDZaFw0yNjA3MjExNTA5MDZaMDMxMTAvBgNV BAMTKEM5MzJDN0NBREY4MkFFNUREQkE2NjU1REJCMjg1QTE3MDcxNzEzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpO14ieh9muIKqPOVZpZXBeHw KG6+7nS1DKqzCGKNvbI6ssCLNaSgEwzzx8ffj3OgLoTzDhsT3rUTI7a9qmTp53aq XXVrjwTc4nPg7DVOapmSnjhvxOylENsu5zHf8u4x5+jqmbn/jsHGcXIc0KmYQnlQ g6tu3exTPpOfwqyzert+1r7L9Mz7aFTNHivrqD2eMQWVtRyZVoKDo95VqrEwKQn+ YICWY8xg7hpxtOqNthu3Hlmpe2uao2fpiz6V0xy3ZbMFfmQXsGvh+t8RiqxeNz/Q Xaw+DKMYUIT5K0WZH5HBZlqC7rSMqe0vC5/Ofw3WE2lnfujXghwETL1ttkTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTLHyt+Crl3bpmVduyhaFwcXE48wHwYDVR0j BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2 NzE1RkU1QTU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsgc5NaQP7BoMbwvSsc9V7xKWXIM6GAfueR vHBn1wMlbQ6PLEtX9dXnrs2pjii7KT4FW5fZpMaJtFUTIRPLJTnEnZgUVMs30VUg dp1IExx1DmwVYRRGAzqWBefA95bf/sDjVh+I0DTbZIzyl7+5u1taxjpoBs2JdA6d /+pcgHOnHMmgQNLkmwErMRNHvKYCcni58/NtzkSlu/CITu0S2lHD51OY7PibBf6x mYfWXmnOYmgto7PP431gQPw3S2hmDCtWo8m+XyIprotl4x1ZXOqC3N33HdFFqUBL WGH40uYe3p7yPIyw58dKNcFckSeauvzpvW4yF06h0uw4PUlAonw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:17 2026 by rpki-client