$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft File: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json) Hash identifier: vVSn6RHgBOw1sda5nH/ySpH9FWs2H6K7lOAsYr9kY+s= Subject key identifier: EC:7E:57:03:84:F5:F5:87:5A:0B:AE:4D:4C:2C:6E:55:8A:71:2E:99 Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46 Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346 Certificate serial: 75F7A3E6FC00F1D0AD79D58D611923BB0B89EEDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:49:52 +0000 Manifest this update: Mon 20 Jul 2026 14:44:52 +0000 Manifest next update: Tue 21 Jul 2026 18:02:52 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=) 3: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: T8/tG8fatV/8ZIjsvPBjtkFHdds++umNtszCg4YNqLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f7:a3:e6:fc:00:f1:d0:ad:79:d5:8d:61:19:23:bb:0b:89:ee:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346 Validity Not Before: Jul 20 14:44:52 2026 GMT Not After : Jul 21 18:02:52 2026 GMT Subject: CN=EC7E570384F5F5875A0BAE4D4C2C6E558A712E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:74:ce:31:cf:4f:32:08:1a:50:a8:27:db: 43:56:19:b0:33:eb:e9:dc:9f:a0:e9:dd:7f:bc:58: 49:c7:8c:1f:69:27:35:d6:4e:ad:c1:0e:ca:d1:30: 25:7b:72:4f:94:be:8b:b0:01:12:2c:00:69:11:51: 61:b2:f3:78:f7:e9:5f:22:ad:e5:ad:60:b3:1e:ba: d4:2d:d2:9d:a6:7e:57:41:a3:ca:65:0c:97:ca:80: 74:be:af:75:4d:4a:c9:a7:b0:ce:9c:a7:31:26:ac: 0c:50:54:39:79:10:1e:9c:19:16:46:fe:db:1a:59: 86:3d:3f:a1:d6:12:43:9d:64:7d:b5:1f:5e:c2:cc: 8d:42:d2:3c:ec:52:f7:28:fb:51:31:18:6c:03:ff: 64:bc:4c:0a:22:df:43:fd:cb:26:b5:be:14:9f:32: c6:b3:04:fa:c6:f3:12:25:ee:b3:94:48:30:3c:d5: 1c:1c:b3:21:4b:0e:a0:40:1f:1e:61:c4:7e:0b:66: 2a:39:44:7b:33:ac:97:9f:39:5d:31:9b:aa:1c:f5: 7e:eb:0f:f9:09:ba:32:53:df:4c:e1:d6:20:34:2d: 37:03:b3:75:ab:1e:55:9d:ae:68:52:4d:e5:87:f9: 8e:b6:11:aa:1b:42:3d:e7:88:c9:0e:ab:d8:5c:85: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:57:03:84:F5:F5:87:5A:0B:AE:4D:4C:2C:6E:55:8A:71:2E:99 X509v3 Authority Key Identifier: keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2b:fd:00:d1:3f:51:af:80:a5:1c:82:54:a4:3d:ce:ba:93: b9:9b:9e:3c:89:b8:67:31:e7:19:d7:45:18:87:9b:24:0b:67: 1b:df:8a:c9:40:83:d2:e3:84:62:f6:55:7b:14:9d:93:11:12: ef:15:48:44:c9:39:fe:78:6d:97:df:6b:0a:0f:7d:3b:f3:2e: 18:1b:d6:b4:16:e6:85:a8:59:94:a7:b0:64:04:60:7c:9e:e8: f3:ec:92:1d:21:55:05:ac:ba:10:d8:8b:24:46:1f:0b:7e:32: 04:ef:b2:c8:ac:52:24:3a:af:7e:05:7d:4a:56:4f:e1:0c:df: 45:69:53:eb:ce:98:36:94:ad:23:47:56:97:d3:d9:fa:38:69: ef:0f:1b:dd:38:62:15:51:d9:87:9f:78:57:ee:5e:44:ee:e3: 87:4e:a2:c2:1e:19:dd:d1:59:d4:33:d1:c7:6d:f2:96:59:cb: 7d:1c:8d:89:1b:ad:9a:66:e8:6b:b5:86:c0:17:e0:76:a4:eb: 83:d6:b9:bc:bc:d0:40:89:4f:2e:2d:fb:7b:ac:1c:28:21:08: 09:73:1f:2f:96:b2:29:df:0c:b7:27:e3:4c:50:0e:6f:9f:5c: fe:cf:a8:b6:9f:49:d5:ba:32:b5:f1:7c:16:b2:89:15:45:40: be:29:c2:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfej5vwA8dCtedWNYRkjuwuJ7t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4 NzdGNjM0NjAeFw0yNjA3MjAxNDQ0NTJaFw0yNjA3MjExODAyNTJaMDMxMTAvBgNV BAMTKEVDN0U1NzAzODRGNUY1ODc1QTBCQUU0RDRDMkM2RTU1OEE3MTJFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDalnTOMc9PMggaUKgn20NWGbAz 6+ncn6Dp3X+8WEnHjB9pJzXWTq3BDsrRMCV7ck+UvouwARIsAGkRUWGy83j36V8i reWtYLMeutQt0p2mfldBo8plDJfKgHS+r3VNSsmnsM6cpzEmrAxQVDl5EB6cGRZG /tsaWYY9P6HWEkOdZH21H17CzI1C0jzsUvco+1ExGGwD/2S8TAoi30P9yya1vhSf MsazBPrG8xIl7rOUSDA81RwcsyFLDqBAHx5hxH4LZio5RHszrJefOV0xm6oc9X7r D/kJujJT30zh1iA0LTcDs3WrHlWdrmhSTeWH+Y62EaobQj3niMkOq9hchVC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7H5XA4T19YdaC65NTCxuVYpxLpkwHwYDVR0j BBgwFoAUEiT2f/44vOo4fi3z5mLW9od/Y0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQxNjE5Y2ItYzAxYy00NjE0LTg2M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZG RTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4NzdGNjM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjI0RjY3RkZFMzhCQ0VBMzg3RTJERjNFNjYyRDZGNjg3N0Y2 MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2 RjY4NzdGNjM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAr/QDRP1GvgKUcglSkPc66k7mbnjyJuGcx 5xnXRRiHmyQLZxvfislAg9LjhGL2VXsUnZMREu8VSETJOf54bZffawoPfTvzLhgb 1rQW5oWoWZSnsGQEYHye6PPskh0hVQWsuhDYiyRGHwt+MgTvssisUiQ6r34FfUpW T+EM30VpU+vOmDaUrSNHVpfT2fo4ae8PG904YhVR2YefeFfuXkTu44dOosIeGd3R WdQz0cdt8pZZy30cjYkbrZpm6Gu1hsAX4Hak64PWuby80ECJTy4t+3usHCghCAlz Hy+WsinfDLcn40xQDm+fXP7PqLafSdW6MrXxfBayiRVFQL4pwsc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:29 2026 by rpki-client