$ rpki-client -vvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft (raw, json) Hash identifier: eF8mkaSDklj68A+uBHnpSrJMeZh658bGwxpuWlzoNgQ= Subject key identifier: CE:ED:E9:A0:22:0F:A7:B7:1F:36:0C:B6:6C:3A:4C:80:59:87:D5:14 Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E Certificate issuer: /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Certificate serial: 3CD1B3DCD2840180E92FE3A0ADA884C7747D3C4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:09:33 +0000 Manifest this update: Mon 20 Jul 2026 23:04:33 +0000 Manifest next update: Tue 21 Jul 2026 23:11:33 +0000 Files and hashes: 1: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl (hash: QCc3OlW9TxtHv/tDeYTKP7z25VRtRXVBBsWqa2SfOlU=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: 50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d1:b3:dc:d2:84:01:80:e9:2f:e3:a0:ad:a8:84:c7:74:7d:3c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Validity Not Before: Jul 20 23:04:33 2026 GMT Not After : Jul 21 23:11:33 2026 GMT Subject: CN=CEEDE9A0220FA7B71F360CB66C3A4C805987D514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:44:db:9c:4f:b4:90:5f:1b:49:14:5d:9c: 30:c4:4d:66:34:7e:72:83:90:f1:b1:8f:12:7e:7d: b9:ba:da:72:ab:94:00:ea:39:9a:9c:b3:1d:b2:4a: e5:b8:97:2e:2b:68:71:30:3d:8a:93:af:6f:73:b0: 4d:fe:0b:3c:bf:aa:cf:f2:78:e6:12:be:aa:34:e3: 9d:c9:f7:1a:84:00:3f:9d:fe:8a:58:ad:87:fd:bc: 91:08:26:6f:fe:95:63:eb:2b:ff:68:63:e8:e0:29: 8a:fe:b6:ff:df:ea:92:b7:ad:8f:74:28:aa:3f:fd: 36:68:dc:f6:81:8c:ff:68:7e:2b:ea:bc:6b:3c:32: ac:e6:8b:51:ee:33:80:6b:e4:88:8c:d8:c0:37:d1: da:21:82:f6:dd:46:64:e7:be:fe:7a:7a:31:ff:41: ca:87:c6:79:a6:60:1d:f5:1f:db:b2:3d:d6:98:31: 75:93:0c:98:5b:6b:32:b2:36:eb:b0:25:2a:78:f2: 2c:ef:5f:b6:31:fc:92:36:31:5e:e7:3d:dc:34:1d: 60:b0:0d:96:f4:30:ee:49:95:33:c0:b2:29:b0:67: d0:78:ec:2a:98:f4:0f:1a:0b:aa:4b:bf:3f:4f:58: a1:46:7d:a3:fd:09:d8:a9:6b:28:73:eb:d3:c1:67: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:E9:A0:22:0F:A7:B7:1F:36:0C:B6:6C:3A:4C:80:59:87:D5:14 X509v3 Authority Key Identifier: keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c8:39:78:77:97:73:c6:a7:16:66:c3:72:1c:ee:59:29:9f: 96:9e:cc:7a:7e:f2:a4:c2:c7:37:3a:d1:88:14:60:f4:8e:fc: 3a:01:06:94:4e:30:67:82:9b:a4:3b:84:e9:13:bd:24:51:b9: f8:85:6f:ec:28:a7:ae:d0:6b:f2:b2:3e:5f:5c:f0:a1:b8:95: ad:02:a0:10:4d:b7:62:30:bd:7c:06:31:5e:49:c1:02:97:a9: 23:63:ca:fd:cc:8f:98:92:a4:95:bb:ea:4e:08:c0:73:29:ef: e8:a3:13:61:8e:af:04:f9:61:94:28:0b:98:5d:d5:4d:f5:f2: 7c:8c:ef:d7:d8:33:3e:67:c0:22:aa:c4:e4:03:c8:0f:85:77: 55:95:ec:78:fc:c2:25:b8:99:3f:26:49:4a:99:a8:24:d3:3a: 1d:03:56:15:0e:16:5d:0d:e8:28:bd:7b:25:5e:b9:0a:14:88: cb:31:5e:e3:83:31:e2:5f:dc:86:85:9e:9a:ea:b6:30:16:93: ea:fc:4a:fe:58:67:a7:e8:7c:79:f8:d2:fd:c0:0e:b1:b4:0a: 81:c4:6d:ba:eb:d1:82:c7:f4:df:70:0c:a2:53:6d:ba:a2:58: 86:e4:42:3c:d5:b9:2b:97:93:07:ff:ff:28:d7:9b:d8:a5:86: fb:ae:de:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNGz3NKEAYDpL+OgraiEx3R9PEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAz MEJCMzk4RTAeFw0yNjA3MjAyMzA0MzNaFw0yNjA3MjEyMzExMzNaMDMxMTAvBgNV BAMTKENFRURFOUEwMjIwRkE3QjcxRjM2MENCNjZDM0E0QzgwNTk4N0Q1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsETbnE+0kF8bSRRdnDDETWY0 fnKDkPGxjxJ+fbm62nKrlADqOZqcsx2ySuW4ly4raHEwPYqTr29zsE3+Czy/qs/y eOYSvqo0453J9xqEAD+d/opYrYf9vJEIJm/+lWPrK/9oY+jgKYr+tv/f6pK3rY90 KKo//TZo3PaBjP9ofivqvGs8Mqzmi1HuM4Br5IiM2MA30dohgvbdRmTnvv56ejH/ QcqHxnmmYB31H9uyPdaYMXWTDJhbazKyNuuwJSp48izvX7Yx/JI2MV7nPdw0HWCw DZb0MO5JlTPAsimwZ9B47CqY9A8aC6pLvz9PWKFGfaP9Cdipayhz69PBZ5XTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzu3poCIPp7cfNgy2bDpMgFmH1RQwHwYDVR0j BBgwFoAU1ruwSpbelbodsc+xWdqa4DC7OY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTI2MmQzNDEtOTRiNS00NzRlLThiY2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5 NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAzMEJCMzk4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkJCQjA0QTk2REU5NUJBMURCMUNGQjE1OURBOUFFMDMwQkIz OThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlB RTAzMEJCMzk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/IOXh3l3PGpxZmw3Ic7lkpn5aezHp+8qTC xzc60YgUYPSO/DoBBpROMGeCm6Q7hOkTvSRRufiFb+wop67Qa/KyPl9c8KG4la0C oBBNt2IwvXwGMV5JwQKXqSNjyv3Mj5iSpJW76k4IwHMp7+ijE2GOrwT5YZQoC5hd 1U318nyM79fYMz5nwCKqxOQDyA+Fd1WV7Hj8wiW4mT8mSUqZqCTTOh0DVhUOFl0N 6Ci9eyVeuQoUiMsxXuODMeJf3IaFnprqtjAWk+r8Sv5YZ6fofHn40v3ADrG0CoHE bbrr0YLH9N9wDKJTbbqiWIbkQjzVuSuXkwf//yjXm9ilhvuu3ic= -----END CERTIFICATE-----Generated at Tue Jul 21 07:24:01 2026 by rpki-client