$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: VO9P1BDlDXKS+JUVosNR9ANLUP5WiJoG8y28dF0cmAU= Subject key identifier: DD:6D:5E:16:B3:35:BB:CA:A3:A2:07:D9:21:3B:9E:4E:E9:F5:53:C3 Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 61FC11B2878DB6F543031AC479EA0766B32A13F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:49:45 +0000 Manifest this update: Mon 20 Jul 2026 18:44:45 +0000 Manifest next update: Tue 21 Jul 2026 20:19:45 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) 2: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: jDUUSiXjfSL5TYsbFEY0HgIl5HynH41lsTzVHOScQyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fc:11:b2:87:8d:b6:f5:43:03:1a:c4:79:ea:07:66:b3:2a:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Jul 20 18:44:45 2026 GMT Not After : Jul 21 20:19:45 2026 GMT Subject: CN=DD6D5E16B335BBCAA3A207D9213B9E4EE9F553C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:9d:19:73:a5:cf:55:6a:ad:23:c1:28:2c: 67:70:ae:8b:62:53:52:a3:12:f8:09:be:5d:72:f1: a8:de:3c:9f:62:be:25:63:13:bd:7c:ed:99:10:73: a3:9a:3d:6b:05:77:2e:69:8f:57:f1:67:76:7e:a3: 1a:72:2e:9d:ca:10:ff:5e:39:13:b3:fe:82:c3:73: 5e:e2:99:6e:d4:80:15:5e:d2:79:3a:21:73:8c:46: 87:b0:77:5e:93:93:0e:c4:c2:4e:25:11:9d:09:49: 62:95:92:6e:be:ba:22:71:ff:a4:48:55:26:9d:ae: fa:9d:a6:83:27:31:2a:f2:d1:74:b1:18:f1:1b:aa: e7:fb:19:0a:e6:6a:43:af:18:a5:5b:a9:17:d8:4f: 5e:f3:12:19:0a:83:ab:c1:93:62:85:68:e2:62:7a: 10:9d:e1:ba:dc:f4:21:16:4d:7c:40:70:95:73:82: 39:c1:e3:b4:15:14:4d:0d:61:e8:35:db:cc:45:83: f4:b4:bb:10:38:04:17:fc:59:d2:88:b5:0b:95:f5: fe:52:3d:7b:90:8c:99:76:8c:a6:cb:8b:bd:46:bd: ba:24:16:46:92:3d:93:6f:9a:8c:85:8d:f4:e2:92: a9:23:49:9f:03:99:44:a2:aa:9a:31:81:11:8b:65: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6D:5E:16:B3:35:BB:CA:A3:A2:07:D9:21:3B:9E:4E:E9:F5:53:C3 X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:34:ba:f0:9f:92:93:8b:0d:53:1c:51:6b:5f:0f:7e:1f:00: 2f:a3:bc:ef:cf:b4:26:7f:df:6b:ff:48:9a:e8:a1:da:45:a3: 3b:78:4c:cb:96:c8:2a:4f:2c:a5:0a:21:4d:f3:80:3f:4f:c3: 6f:89:df:fb:53:71:ad:97:90:e6:50:65:e8:52:48:6a:99:fe: 12:2b:57:a1:d3:5e:90:a9:bf:fa:62:d8:e5:bf:20:ef:51:a1: 47:c0:3b:7c:ea:45:1b:34:a7:9f:ee:8b:f6:bd:a4:82:7a:95: bd:94:90:bc:4f:c6:7c:db:39:42:27:0a:25:f9:f8:6a:e2:6d: f5:3f:6f:dd:57:63:d5:0b:21:cf:6b:e7:81:3c:7a:0b:95:9e: be:f7:ba:cb:11:1d:1d:db:83:b4:2a:0b:a9:74:13:df:e0:cc: 51:06:a4:b6:26:82:0c:fb:a5:38:86:63:19:e0:b0:69:9f:1e: 74:07:66:e9:2b:75:99:4e:a6:35:e4:6b:16:75:5c:94:c6:cb: 12:17:3f:4f:f6:14:1e:9d:6d:72:a5:4f:e5:68:09:6c:d7:84: d4:a5:74:cd:f1:15:7b:41:05:73:84:db:2d:10:1d:7f:b2:73: 5d:ea:19:c9:4c:80:99:c7:aa:38:85:c0:cd:e5:1c:82:58:f8: 3c:82:20:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfwRsoeNtvVDAxrEeeoHZrMqE/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA3MjAxODQ0NDVaFw0yNjA3MjEyMDE5NDVaMDMxMTAvBgNV BAMTKERENkQ1RTE2QjMzNUJCQ0FBM0EyMDdEOTIxM0I5RTRFRTlGNTUzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPb50Zc6XPVWqtI8EoLGdwroti U1KjEvgJvl1y8ajePJ9iviVjE7187ZkQc6OaPWsFdy5pj1fxZ3Z+oxpyLp3KEP9e OROz/oLDc17imW7UgBVe0nk6IXOMRoewd16Tkw7Ewk4lEZ0JSWKVkm6+uiJx/6RI VSadrvqdpoMnMSry0XSxGPEbquf7GQrmakOvGKVbqRfYT17zEhkKg6vBk2KFaOJi ehCd4brc9CEWTXxAcJVzgjnB47QVFE0NYeg128xFg/S0uxA4BBf8WdKItQuV9f5S PXuQjJl2jKbLi71GvbokFkaSPZNvmoyFjfTikqkjSZ8DmUSiqpoxgRGLZd/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3W1eFrM1u8qjogfZITueTun1U8MwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk0uvCfkpOLDVMcUWtfD34fAC+jvO/PtCZ/ 32v/SJroodpFozt4TMuWyCpPLKUKIU3zgD9Pw2+J3/tTca2XkOZQZehSSGqZ/hIr V6HTXpCpv/pi2OW/IO9RoUfAO3zqRRs0p5/ui/a9pIJ6lb2UkLxPxnzbOUInCiX5 +GribfU/b91XY9ULIc9r54E8eguVnr73ussRHR3bg7QqC6l0E9/gzFEGpLYmggz7 pTiGYxngsGmfHnQHZukrdZlOpjXkaxZ1XJTGyxIXP0/2FB6dbXKlT+VoCWzXhNSl dM3xFXtBBXOE2y0QHX+yc13qGclMgJnHqjiFwM3lHIJY+DyCILI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:59 2026 by rpki-client