$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: nvPv9BITqjAYvzfGzPxtJGnNvq+SQJt8Gx+ix2e1p8M= Subject key identifier: 82:F7:40:AB:06:B3:B5:AE:4A:9E:07:1B:FB:C9:33:01:40:D1:32:2E Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 367075A4B3AF7AC0BA498E7923E90CB4005E469E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:28:06 +0000 Manifest this update: Mon 20 Jul 2026 13:23:06 +0000 Manifest next update: Tue 21 Jul 2026 15:04:06 +0000 Files and hashes: 1: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 2: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 3: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) 4: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 5: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) 6: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: I/P9oENlyQxJJRWeVetLCs3TwJQwvdZ9/5o4aOjBXd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:70:75:a4:b3:af:7a:c0:ba:49:8e:79:23:e9:0c:b4:00:5e:46:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: Jul 20 13:23:06 2026 GMT Not After : Jul 21 15:04:06 2026 GMT Subject: CN=82F740AB06B3B5AE4A9E071BFBC9330140D1322E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:a2:48:31:2c:3a:98:20:50:d4:a9:68:fb: 22:98:83:dd:9c:10:48:e3:12:bb:43:83:33:77:da: dc:81:23:28:30:65:f7:92:75:72:e9:a4:a3:19:5b: d8:dc:50:f9:f9:08:86:be:bd:90:ff:f0:d1:70:e6: b0:50:49:50:5a:f1:79:a6:1a:cd:5c:d8:ba:67:78: 41:3a:91:9d:72:be:d1:cd:90:88:95:3b:b0:c5:67: 9e:10:94:09:9e:be:b0:19:31:18:4d:c6:e1:08:c7: 92:f3:da:50:3c:42:9b:f5:45:37:9d:a6:85:68:1c: 84:50:1d:47:14:3b:86:49:83:6d:1d:fa:7d:c8:1d: 91:27:3d:c7:59:7d:6d:1d:fd:30:c0:c6:36:c3:97: 5c:a9:16:ea:6f:96:83:36:05:00:8c:e4:e9:6c:16: ac:05:2a:d2:ad:2d:1e:ba:86:07:d5:3e:3c:5d:7d: d2:61:87:52:00:8e:cb:e4:63:44:1a:3d:d4:e7:ba: 4b:af:21:5a:5b:7f:3b:38:14:4e:66:2a:89:51:2d: 3f:61:46:ed:28:89:06:b4:c8:7e:7c:0a:7d:4a:d8: 41:9c:8a:01:57:f5:43:4d:03:26:18:2b:d8:cc:80: 13:2a:78:c3:e0:44:af:82:dc:0d:c5:44:1b:8c:ff: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:40:AB:06:B3:B5:AE:4A:9E:07:1B:FB:C9:33:01:40:D1:32:2E X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7b:54:d6:b4:91:f5:27:ac:03:8a:f2:5e:ea:ba:03:70:c7: 97:18:76:71:19:e0:d1:6f:8c:47:4d:dc:9b:ca:cd:79:0f:0d: 16:da:81:02:e9:d9:2d:4a:e6:ea:c6:9b:81:fc:96:d1:47:59: 80:9e:05:b5:ac:33:e3:ca:d6:5e:4f:4d:62:a8:cf:7d:ba:42: 33:41:1d:94:5e:54:70:7e:51:cd:bf:e7:94:46:53:23:c7:b1: de:b4:00:d3:21:e5:20:f6:ec:6f:57:11:e6:d2:ba:e6:21:b7: f3:90:0e:50:60:e2:75:5c:04:5f:ca:d6:31:9d:71:88:60:c3: ba:81:9d:9d:39:ee:31:d0:77:93:f8:97:fe:94:fb:e8:8f:c3: 8f:32:e2:4b:31:97:ea:ef:84:de:84:90:16:51:3e:0d:95:f7: a6:11:d0:d5:5e:7a:93:fe:e8:4a:3b:15:11:db:81:2e:c0:8d: 3f:5f:5f:a9:34:81:6e:9e:04:c6:1d:1d:a0:90:86:b5:4f:48: 6d:d8:23:d0:c6:5e:bd:bc:28:81:5c:cb:a9:d4:e6:b9:bc:07: ec:87:fd:44:e4:e6:ba:cc:c5:b6:dc:82:7f:80:19:09:d0:f9: a2:76:2c:4f:89:1a:77:22:38:a5:3f:fd:94:04:f4:44:d6:ba: a1:81:a7:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnB1pLOvesC6SY55I+kMtABeRp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA3MjAxMzIzMDZaFw0yNjA3MjExNTA0MDZaMDMxMTAvBgNV BAMTKDgyRjc0MEFCMDZCM0I1QUU0QTlFMDcxQkZCQzkzMzAxNDBEMTMyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdv6JIMSw6mCBQ1Klo+yKYg92c EEjjErtDgzN32tyBIygwZfeSdXLppKMZW9jcUPn5CIa+vZD/8NFw5rBQSVBa8Xmm Gs1c2LpneEE6kZ1yvtHNkIiVO7DFZ54QlAmevrAZMRhNxuEIx5Lz2lA8Qpv1RTed poVoHIRQHUcUO4ZJg20d+n3IHZEnPcdZfW0d/TDAxjbDl1ypFupvloM2BQCM5Ols FqwFKtKtLR66hgfVPjxdfdJhh1IAjsvkY0QaPdTnukuvIVpbfzs4FE5mKolRLT9h Ru0oiQa0yH58Cn1K2EGcigFX9UNNAyYYK9jMgBMqeMPgRK+C3A3FRBuM/zU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvdAqwazta5Kngcb+8kzAUDRMi4wHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJd7VNa0kfUnrAOK8l7qugNwx5cYdnEZ4NFv jEdN3JvKzXkPDRbagQLp2S1K5urGm4H8ltFHWYCeBbWsM+PK1l5PTWKoz326QjNB HZReVHB+Uc2/55RGUyPHsd60ANMh5SD27G9XEebSuuYht/OQDlBg4nVcBF/K1jGd cYhgw7qBnZ057jHQd5P4l/6U++iPw48y4ksxl+rvhN6EkBZRPg2V96YR0NVeepP+ 6Eo7FRHbgS7AjT9fX6k0gW6eBMYdHaCQhrVPSG3YI9DGXr28KIFcy6nU5rm8B+yH /UTk5rrMxbbcgn+AGQnQ+aJ2LE+JGnciOKU//ZQE9ETWuqGBp1M= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:37 2026 by rpki-client