$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: SIGP1pxoV62fN8aGq/Gk9mvXiqd53/RedTrcjCy8rvs= Subject key identifier: 91:DA:C7:42:3A:57:97:4E:9A:D3:5D:F1:82:F3:3C:8B:71:36:C2:33 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 25623319B1C5AD0ED23235F3A22EC473762C0191 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:01:19 +0000 Manifest this update: Mon 20 Jul 2026 15:56:19 +0000 Manifest next update: Tue 21 Jul 2026 16:32:19 +0000 Files and hashes: 1: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: vDOvAT78UAe9dPCqdqjjJNX/Y7BxrVnl5A13xN3SFAo=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:33:19:b1:c5:ad:0e:d2:32:35:f3:a2:2e:c4:73:76:2c:01:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Jul 20 15:56:19 2026 GMT Not After : Jul 21 16:32:19 2026 GMT Subject: CN=91DAC7423A57974E9AD35DF182F33C8B7136C233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:1a:33:f6:e3:fa:80:d6:be:34:b4:fd:b1: 4d:88:1e:1f:b2:8a:1f:78:8b:f9:8b:ca:47:fe:26: fa:70:b8:68:a3:00:bb:29:75:84:e6:04:05:b6:8e: 27:2f:98:36:95:c5:41:71:7a:01:ad:fb:5f:c2:c9: 73:a2:d7:56:f3:35:68:72:ab:48:3b:55:16:0c:98: e8:83:94:43:7d:b7:71:89:b1:97:06:78:58:96:30: 75:85:52:3c:c6:f8:24:1e:f9:73:f9:33:20:e1:36: f0:b7:27:8b:b0:5a:d6:76:77:1f:61:18:ef:d0:b3: af:78:7a:15:4e:3e:f9:c0:19:c1:4d:37:60:9c:8f: 49:ed:5d:18:25:d5:cc:03:2b:22:ff:55:5f:8c:64: 9f:2e:c5:d1:a2:d1:a6:76:33:8f:d1:07:fb:27:53: 9b:71:0e:27:70:8d:09:91:cc:8f:71:8b:6a:53:39: 34:21:92:c7:30:1a:51:96:cd:2d:31:8a:ff:89:f3: 3f:e1:1b:d8:20:95:26:9e:4e:12:2b:ea:8a:47:8d: 3e:09:51:cf:b1:be:fd:de:59:77:10:37:fd:ab:ba: ff:30:a4:42:f9:cf:73:cb:73:60:ea:a3:a8:f2:cd: 3f:c5:f3:e8:ca:43:0c:a7:f4:bf:57:b9:17:55:2f: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:C7:42:3A:57:97:4E:9A:D3:5D:F1:82:F3:3C:8B:71:36:C2:33 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:fb:c7:81:d5:70:6d:4a:f4:85:5e:54:79:37:ae:fd:81:ad: 0b:9e:72:50:ab:a4:c8:75:f2:96:f6:ab:96:ee:8e:30:67:3c: 08:d7:c7:da:7c:af:31:72:a2:5f:98:d0:2a:16:73:5c:ab:82: 0f:e4:cb:e4:7d:ed:56:45:60:89:06:f7:73:84:78:57:0b:d3: 12:19:b3:b3:61:3c:47:f7:0f:8f:19:e2:c9:3c:d8:8e:30:33: 00:57:4d:a9:59:82:ef:3c:fd:05:49:ed:d6:08:d9:c3:58:0c: 17:3c:a0:76:30:93:58:b6:50:43:09:e4:69:e5:85:36:5b:5c: f8:a3:36:4b:43:d4:2d:f7:18:a9:58:bf:a6:00:0e:68:c3:7b: c9:d5:35:90:43:28:ef:92:e2:06:37:0e:bf:59:2e:0a:d2:33: a9:c8:fc:38:97:97:7e:94:b1:55:5f:4e:3e:57:8f:0f:45:1e: d4:c2:d0:0b:1c:94:4f:e1:26:a4:bb:9d:db:a0:3d:71:19:d8: 2f:e6:ff:1d:af:fa:00:4d:11:e9:91:20:a4:ce:60:72:30:cc: 11:14:66:77:5a:04:bc:e1:c8:d8:86:c8:46:ac:da:8b:6d:ea: 3c:49:df:16:cc:bd:f2:df:29:3d:73:53:46:b8:79:9d:68:7a: bc:7b:be:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWIzGbHFrQ7SMjXzoi7Ec3YsAZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA3MjAxNTU2MTlaFw0yNjA3MjExNjMyMTlaMDMxMTAvBgNV BAMTKDkxREFDNzQyM0E1Nzk3NEU5QUQzNURGMTgyRjMzQzhCNzEzNkMyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDRoz9uP6gNa+NLT9sU2IHh+y ih94i/mLykf+JvpwuGijALspdYTmBAW2jicvmDaVxUFxegGt+1/CyXOi11bzNWhy q0g7VRYMmOiDlEN9t3GJsZcGeFiWMHWFUjzG+CQe+XP5MyDhNvC3J4uwWtZ2dx9h GO/Qs694ehVOPvnAGcFNN2Ccj0ntXRgl1cwDKyL/VV+MZJ8uxdGi0aZ2M4/RB/sn U5txDidwjQmRzI9xi2pTOTQhkscwGlGWzS0xiv+J8z/hG9gglSaeThIr6opHjT4J Uc+xvv3eWXcQN/2ruv8wpEL5z3PLc2Dqo6jyzT/F8+jKQwyn9L9XuRdVL06BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdrHQjpXl06a013xgvM8i3E2wjMwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX7x4HVcG1K9IVeVHk3rv2BrQueclCrpMh1 8pb2q5bujjBnPAjXx9p8rzFyol+Y0CoWc1yrgg/ky+R97VZFYIkG93OEeFcL0xIZ s7NhPEf3D48Z4sk82I4wMwBXTalZgu88/QVJ7dYI2cNYDBc8oHYwk1i2UEMJ5Gnl hTZbXPijNktD1C33GKlYv6YADmjDe8nVNZBDKO+S4gY3Dr9ZLgrSM6nI/DiXl36U sVVfTj5Xjw9FHtTC0AsclE/hJqS7ndugPXEZ2C/m/x2v+gBNEemRIKTOYHIwzBEU ZndaBLzhyNiGyEas2ott6jxJ3xbMvfLfKT1zU0a4eZ1oerx7vss= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:09 2026 by rpki-client