$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft File: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft (raw, json) Hash identifier: x76vPm2JZaJ1xmbXGiC63CRuKiEa6/b7Gw70Y0coj0w= Subject key identifier: 6E:B2:83:37:E0:E3:6F:EA:71:4A:C8:E2:7D:46:E4:A3:09:45:E3:D2 Authority key identifier: E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E Certificate issuer: /CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Certificate serial: 08A9669F4230464B4101D4496625EC3CC3347DD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:58:16 +0000 Manifest this update: Mon 20 Jul 2026 21:53:16 +0000 Manifest next update: Tue 21 Jul 2026 23:37:16 +0000 Files and hashes: 1: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl (hash: Parxn9oPWOZH0UhnPbOr0ZAGXxPOequ3knBfUXlWbKQ=) 2: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: 3K7HIaNZHq6siHJ1rjKjSGagB9KT2fdBKPyuyy2IpIc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:66:9f:42:30:46:4b:41:01:d4:49:66:25:ec:3c:c3:34:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Validity Not Before: Jul 20 21:53:16 2026 GMT Not After : Jul 21 23:37:16 2026 GMT Subject: CN=6EB28337E0E36FEA714AC8E27D46E4A30945E3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:5d:76:06:16:e6:7b:bd:ce:b2:e6:25:a6: d2:ec:18:ec:ef:15:b6:30:93:ea:fd:b7:e2:f6:51: 1b:fb:2f:9d:69:76:69:f9:50:89:8d:9c:dd:19:1b: cb:7d:6a:28:fe:08:00:d2:b5:13:4a:99:bc:5f:08: 9b:61:59:14:d5:33:94:4c:b5:16:b5:42:2d:4a:f5: c1:45:b5:e8:3d:3d:3c:37:cb:a5:b5:03:2f:b4:c4: 5e:cb:1b:0a:7d:6d:40:f0:62:77:10:95:1a:4a:ba: 14:2d:7e:e3:ea:6b:02:8f:56:34:28:4d:b0:c8:20: 0f:80:5f:a4:31:be:ac:6e:d6:8a:53:e7:1a:b5:b8: ee:8e:1f:4b:37:bf:0e:72:e3:0b:f9:80:1e:91:16: 12:f0:65:97:9d:89:30:a8:ab:28:d2:91:0f:3a:91: 0e:f0:d1:55:b0:fc:82:f2:c0:bf:f7:40:bd:7d:45: 2e:a8:81:6e:e5:b7:a0:d2:0b:09:18:c1:6e:cf:54: 37:37:bc:b9:1d:ac:fd:5b:c8:11:93:a6:74:f3:27: 4a:1c:ae:cf:5a:dd:02:9b:08:e9:fe:be:3b:ab:bc: 45:81:c1:d8:c8:47:9f:5b:42:60:b4:b2:67:91:34: 6f:7d:ee:fe:c8:d5:e4:ad:e0:36:27:36:ff:7f:1c: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:83:37:E0:E3:6F:EA:71:4A:C8:E2:7D:46:E4:A3:09:45:E3:D2 X509v3 Authority Key Identifier: keyid:E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:55:82:07:f5:a3:9b:0e:2b:df:2a:3b:a6:ca:30:4c:da:b7: 8f:dc:43:11:2f:0f:52:6f:52:c9:3d:b9:a1:36:75:e1:71:d1: 84:5d:2a:b3:5f:cf:01:1c:27:34:d2:2e:e6:a8:78:15:0a:42: 10:d5:26:a6:c8:ab:f4:46:2c:b5:88:62:10:39:ef:f1:c9:17: 52:0a:0f:5a:1f:5d:7c:48:a1:15:43:7c:5e:11:3b:6c:44:fa: 41:d4:e7:2c:4e:1e:9c:c3:08:47:bd:79:31:cd:0d:a8:e0:fb: 44:aa:37:ba:b0:0a:0b:db:79:dd:48:2b:fc:0b:9c:92:a8:94: 33:21:99:62:fe:8c:a3:14:17:ac:22:60:1a:43:e7:cd:34:90: 76:d5:cc:64:c3:f5:25:6d:59:f8:1a:9b:8a:67:71:a6:00:a4: 35:1f:9c:22:da:26:fd:73:c6:80:30:5c:a1:77:1d:a2:ab:3a: d9:3b:e9:6c:57:72:81:39:76:64:47:ca:28:49:89:f1:e3:cb: 87:87:25:ba:f3:4c:42:93:87:88:4b:9d:39:b9:a6:c8:8b:b2: 9c:8e:8b:1c:65:cd:36:9b:b5:43:8f:21:cf:b6:2c:50:1b:f1: c6:d7:af:cc:1f:97:88:de:07:e0:c1:f8:d0:7e:c7:19:e7:45: 63:c5:77:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKlmn0IwRktBAdRJZiXsPMM0fdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2 NDZBMkM2RTAeFw0yNjA3MjAyMTUzMTZaFw0yNjA3MjEyMzM3MTZaMDMxMTAvBgNV BAMTKDZFQjI4MzM3RTBFMzZGRUE3MTRBQzhFMjdENDZFNEEzMDk0NUUzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVl12Bhbme73OsuYlptLsGOzv FbYwk+r9t+L2URv7L51pdmn5UImNnN0ZG8t9aij+CADStRNKmbxfCJthWRTVM5RM tRa1Qi1K9cFFteg9PTw3y6W1Ay+0xF7LGwp9bUDwYncQlRpKuhQtfuPqawKPVjQo TbDIIA+AX6Qxvqxu1opT5xq1uO6OH0s3vw5y4wv5gB6RFhLwZZediTCoqyjSkQ86 kQ7w0VWw/ILywL/3QL19RS6ogW7lt6DSCwkYwW7PVDc3vLkdrP1byBGTpnTzJ0oc rs9a3QKbCOn+vjurvEWBwdjIR59bQmC0smeRNG997v7I1eSt4DYnNv9/HD3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbrKDN+Djb+pxSsjifUbkowlF49IwHwYDVR0j BBgwFoAU40yOjpubjQ1nLbpZa4g1MWRqLG4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE1MTRkNjEtOTlmZi00MmE5LWJhOWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5 QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2NDZBMkM2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzRDOEU4RTlCOUI4RDBENjcyREJBNTk2Qjg4MzUzMTY0NkEy QzZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1 MzE2NDZBMkM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlVggf1o5sOK98qO6bKMEzat4/cQxEvD1Jv Usk9uaE2deFx0YRdKrNfzwEcJzTSLuaoeBUKQhDVJqbIq/RGLLWIYhA57/HJF1IK D1ofXXxIoRVDfF4RO2xE+kHU5yxOHpzDCEe9eTHNDajg+0SqN7qwCgvbed1IK/wL nJKolDMhmWL+jKMUF6wiYBpD5800kHbVzGTD9SVtWfgam4pncaYApDUfnCLaJv1z xoAwXKF3HaKrOtk76WxXcoE5dmRHyihJifHjy4eHJbrzTEKTh4hLnTm5psiLspyO ixxlzTabtUOPIc+2LFAb8cbXr8wfl4jeB+DB+NB+xxnnRWPFd7w= -----END CERTIFICATE-----Generated at Tue Jul 21 08:58:07 2026 by rpki-client