$ rpki-client -vvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: vvRYQXeel4doF0psCUUm7CUNTerbz7DDh+pzduW0hj0= Subject key identifier: 03:39:31:B5:8A:2F:88:2C:39:7B:D9:78:76:6B:F8:94:5F:6A:6C:80 Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 3CE4DD841017F96415276CCCA5E8C41BFBAD5B12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:45:45 +0000 Manifest this update: Mon 20 Jul 2026 19:40:45 +0000 Manifest next update: Tue 21 Jul 2026 22:26:45 +0000 Files and hashes: 1: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: FmK9WgyCVMT26pTto0DdA2Yi4OyAxcmbBzJi7PKTJIs=) 2: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e4:dd:84:10:17:f9:64:15:27:6c:cc:a5:e8:c4:1b:fb:ad:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Jul 20 19:40:45 2026 GMT Not After : Jul 21 22:26:45 2026 GMT Subject: CN=033931B58A2F882C397BD978766BF8945F6A6C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:fb:e1:87:85:d3:7e:eb:a0:2c:52:98:22: ea:c5:58:ac:20:af:c4:5c:b7:e9:1a:2f:1a:45:0a: 43:f6:44:e9:96:d5:2e:cc:4c:f9:98:e8:4c:df:dd: ab:26:d1:ac:25:b7:25:f3:d1:af:33:0e:58:27:3a: 5a:37:f5:a8:3d:43:2f:17:ab:80:87:70:00:f5:8d: 4a:b7:80:5a:e7:c4:09:09:bf:57:66:46:6b:4d:73: 93:ca:61:8a:2d:da:18:2c:c9:90:4c:f0:5e:43:97: 6d:da:95:6b:30:c0:ce:1e:18:2f:2c:95:10:dd:56: 72:ee:03:a4:c4:f2:04:37:d5:27:7e:c7:dc:b2:5f: 31:a3:25:bf:99:d5:64:4f:a8:80:4c:98:40:b9:1d: d5:4f:2c:77:79:7c:fd:98:b5:3e:2b:58:6d:86:c4: 8c:b2:9a:27:41:91:ba:fe:94:51:c8:b6:c3:0e:ff: db:74:57:69:4d:a4:c6:be:1c:6f:de:54:91:b0:8b: 71:ec:4f:7a:89:62:12:a4:5c:95:f6:9f:fc:9f:c8: 52:c9:cb:12:e5:a1:b4:54:d1:09:f1:47:60:fb:15: 0e:78:61:7c:46:8c:c9:99:94:bd:6f:fa:bc:a2:bd: 30:bf:be:69:f6:43:78:eb:2c:17:d8:c5:00:3d:67: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:39:31:B5:8A:2F:88:2C:39:7B:D9:78:76:6B:F8:94:5F:6A:6C:80 X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:08:1f:68:12:17:1e:1b:90:d8:12:b8:36:97:f5:0f:b4:2f: b3:7a:4d:90:ca:77:95:2b:6d:b1:39:51:58:49:06:82:9b:5b: 4d:96:5a:69:79:3e:d8:00:ee:5b:cd:b1:bc:d9:52:21:f3:4d: eb:c8:e2:6c:6d:2a:34:5a:80:36:38:80:40:4f:df:89:7e:9a: cf:9f:ef:e6:e2:e2:3a:cc:bf:88:43:f3:f6:01:c6:47:a0:42: a6:d4:53:93:fc:83:8d:88:63:7a:da:8e:48:03:23:5b:ee:1e: ad:f2:1e:62:ab:a5:f4:f0:5b:11:7e:89:9a:0f:72:13:a4:6b: 61:8c:da:8a:40:ad:d0:b0:bd:b5:0d:5e:45:90:a6:a5:d7:8f: 56:d2:3a:fd:17:15:1c:98:27:b8:42:3c:72:e1:7f:14:5c:33: 69:8d:86:60:96:92:09:99:c8:f6:ec:96:e8:de:ff:f7:50:2d: 71:a6:a1:1d:db:5c:f7:d2:98:c8:d6:aa:f2:52:53:21:6e:7f: 3e:cf:51:a5:51:62:d8:6c:dc:57:7d:e3:08:d3:c0:c0:6f:d6: f7:4c:d9:c9:f2:83:8b:69:5b:8a:86:c7:21:42:ea:c0:2b:40: c6:1d:e9:30:61:44:86:e8:4b:ba:24:71:ed:82:b4:4f:72:76: ca:36:9a:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOTdhBAX+WQVJ2zMpejEG/utWxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA3MjAxOTQwNDVaFw0yNjA3MjEyMjI2NDVaMDMxMTAvBgNV BAMTKDAzMzkzMUI1OEEyRjg4MkMzOTdCRDk3ODc2NkJGODk0NUY2QTZDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfvvhh4XTfuugLFKYIurFWKwg r8Rct+kaLxpFCkP2ROmW1S7MTPmY6Ezf3asm0awltyXz0a8zDlgnOlo39ag9Qy8X q4CHcAD1jUq3gFrnxAkJv1dmRmtNc5PKYYot2hgsyZBM8F5Dl23alWswwM4eGC8s lRDdVnLuA6TE8gQ31Sd+x9yyXzGjJb+Z1WRPqIBMmEC5HdVPLHd5fP2YtT4rWG2G xIyymidBkbr+lFHItsMO/9t0V2lNpMa+HG/eVJGwi3HsT3qJYhKkXJX2n/yfyFLJ yxLlobRU0QnxR2D7FQ54YXxGjMmZlL1v+ryivTC/vmn2Q3jrLBfYxQA9Z1dVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzkxtYoviCw5e9l4dmv4lF9qbIAwHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIIH2gSFx4bkNgSuDaX9Q+0L7N6TZDKd5Ur bbE5UVhJBoKbW02WWml5PtgA7lvNsbzZUiHzTevI4mxtKjRagDY4gEBP34l+ms+f 7+bi4jrMv4hD8/YBxkegQqbUU5P8g42IY3rajkgDI1vuHq3yHmKrpfTwWxF+iZoP chOka2GM2opArdCwvbUNXkWQpqXXj1bSOv0XFRyYJ7hCPHLhfxRcM2mNhmCWkgmZ yPbsluje//dQLXGmoR3bXPfSmMjWqvJSUyFufz7PUaVRYths3Fd94wjTwMBv1vdM 2cnyg4tpW4qGxyFC6sArQMYd6TBhRIboS7okce2CtE9ydso2msM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:35:37 2026 by rpki-client