$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: 1LQYfyF7UU7bmRVRs2x7RPvAyh8Ob3ynSkCngrAIdsA= Subject key identifier: 1E:D8:C4:98:41:F9:05:E5:A8:02:AC:A9:EA:B7:C3:FC:BE:A5:8F:54 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 1D0734BE23D95B771DBF4FE219A450C4F60A5A26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:28:05 +0000 Manifest this update: Mon 20 Jul 2026 17:23:05 +0000 Manifest next update: Tue 21 Jul 2026 20:46:05 +0000 Files and hashes: 1: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: pbHZRQj3UOwKTdZM5KHE7vQ/NT/UC817Q+7ZeD2JP3o=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:07:34:be:23:d9:5b:77:1d:bf:4f:e2:19:a4:50:c4:f6:0a:5a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Jul 20 17:23:05 2026 GMT Not After : Jul 21 20:46:05 2026 GMT Subject: CN=1ED8C49841F905E5A802ACA9EAB7C3FCBEA58F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:b1:26:21:aa:29:a2:52:a0:82:03:21:fa: a4:07:ca:2c:0d:2a:e0:d3:35:a9:f1:fa:1d:33:20: 80:fd:bd:63:0a:50:43:fc:78:cd:4f:1e:69:93:13: 3f:32:3a:4f:6c:be:98:98:e0:c1:6b:fc:29:43:bb: c2:f9:23:1a:c8:d9:af:7b:88:7e:26:8c:4d:a4:21: 07:a3:92:fe:6a:26:85:05:ff:da:55:93:ed:15:82: 06:8c:51:bc:c0:fe:c9:09:5d:41:1d:b8:96:9a:6b: 82:68:40:58:77:f1:01:d1:b4:e1:45:8d:f2:b8:fe: 29:0b:64:6c:5b:21:c2:6a:bb:2f:bc:a7:a6:72:c9: 77:c2:e6:dc:be:a2:c7:18:a4:e8:b9:09:ad:b4:c5: 99:5e:1f:b8:be:d7:df:13:85:14:0e:32:71:b1:fe: 27:f0:07:53:c9:eb:c3:42:ea:2d:b0:97:7b:15:84: e0:a8:7b:cf:a5:77:8e:17:1a:27:bb:49:3c:87:09: 83:df:8c:ec:97:0e:79:3d:47:24:eb:43:be:be:10: e0:e4:9c:60:20:d0:30:11:69:59:f4:60:08:50:69: e8:b1:5b:b9:10:b4:cb:31:3d:a4:81:2a:29:aa:f3: 4d:cb:dc:c5:ff:19:5d:d0:c3:09:0c:a2:a5:7c:3e: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D8:C4:98:41:F9:05:E5:A8:02:AC:A9:EA:B7:C3:FC:BE:A5:8F:54 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:52:36:e7:5c:b3:fc:a6:50:40:9f:de:f8:23:71:51:e9:47: 30:28:d1:3c:15:e9:36:4b:56:8c:7f:83:3a:6f:41:6a:8e:4d: 92:14:5e:e5:35:e9:5f:f8:d4:5b:2d:ec:b3:60:7b:bb:94:f6: c7:d7:53:ae:cd:ab:81:77:ff:15:fe:e6:0c:7c:6b:ec:75:d7: 4b:05:d1:4b:22:b2:20:04:81:db:25:d4:86:4c:a2:38:7a:7f: 45:39:75:81:b4:bb:0f:4c:f9:45:76:e0:31:04:3e:5c:fa:93: 5b:a4:21:ac:70:c1:d8:75:e3:9b:8d:e1:b1:a6:51:d1:76:f0: d5:43:a4:53:c3:bb:88:d6:17:b4:f1:7e:af:1e:99:97:cc:5a: b9:49:82:18:6b:e2:b2:69:dd:9b:fa:3c:b4:27:52:d4:13:bb: cb:3d:5d:f5:5e:2c:a6:5c:a2:16:1e:18:d1:b8:19:dc:05:f6: dd:89:7d:3f:16:5b:9a:40:a2:76:07:3c:96:46:8d:15:f2:b4: dc:af:21:90:cb:d2:08:94:73:96:73:93:c8:5c:1d:8a:6d:c4: 49:e6:2a:1e:e6:e0:3e:41:cb:07:bb:7a:0e:45:a3:42:96:cb: 72:37:2e:65:a5:10:85:d9:58:4a:db:a5:3d:1a:68:8b:22:e2: 1d:d4:6d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQc0viPZW3cdv0/iGaRQxPYKWiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA3MjAxNzIzMDVaFw0yNjA3MjEyMDQ2MDVaMDMxMTAvBgNV BAMTKDFFRDhDNDk4NDFGOTA1RTVBODAyQUNBOUVBQjdDM0ZDQkVBNThGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBLEmIaopolKgggMh+qQHyiwN KuDTNanx+h0zIID9vWMKUEP8eM1PHmmTEz8yOk9svpiY4MFr/ClDu8L5IxrI2a97 iH4mjE2kIQejkv5qJoUF/9pVk+0VggaMUbzA/skJXUEduJaaa4JoQFh38QHRtOFF jfK4/ikLZGxbIcJquy+8p6ZyyXfC5ty+oscYpOi5Ca20xZleH7i+198ThRQOMnGx /ifwB1PJ68NC6i2wl3sVhOCoe8+ld44XGie7STyHCYPfjOyXDnk9RyTrQ76+EODk nGAg0DARaVn0YAhQaeixW7kQtMsxPaSBKimq803L3MX/GV3QwwkMoqV8PpKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHtjEmEH5BeWoAqyp6rfD/L6lj1QwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVSNudcs/ymUECf3vgjcVHpRzAo0TwV6TZL Vox/gzpvQWqOTZIUXuU16V/41Fst7LNge7uU9sfXU67Nq4F3/xX+5gx8a+x110sF 0UsisiAEgdsl1IZMojh6f0U5dYG0uw9M+UV24DEEPlz6k1ukIaxwwdh145uN4bGm UdF28NVDpFPDu4jWF7Txfq8emZfMWrlJghhr4rJp3Zv6PLQnUtQTu8s9XfVeLKZc ohYeGNG4GdwF9t2JfT8WW5pAonYHPJZGjRXytNyvIZDL0giUc5Zzk8hcHYptxEnm Kh7m4D5Bywe7eg5Fo0KWy3I3LmWlEIXZWErbpT0aaIsi4h3UbTg= -----END CERTIFICATE-----Generated at Tue Jul 21 08:33:57 2026 by rpki-client