$ rpki-client -vvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: O/MuRIRsjcMoNm9ztOeH05c96tFFOFklTiQlfEkTLkg= Subject key identifier: 8C:E1:31:28:03:65:F8:DB:BA:6A:5B:48:09:11:F4:89:A4:4B:69:7F Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 32F6E6A8D03E9E6FF8DC3794CD25DEDD71C1BC20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:34:32 +0000 Manifest this update: Mon 20 Jul 2026 18:29:32 +0000 Manifest next update: Tue 21 Jul 2026 20:28:32 +0000 Files and hashes: 1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) 2: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: twpLpaNgqMdHBM+7Yglc1swprwcssbuCyZwIYN6ROm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f6:e6:a8:d0:3e:9e:6f:f8:dc:37:94:cd:25:de:dd:71:c1:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Jul 20 18:29:32 2026 GMT Not After : Jul 21 20:28:32 2026 GMT Subject: CN=8CE131280365F8DBBA6A5B480911F489A44B697F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:84:c3:bc:75:cc:88:03:b8:31:89:2a:37: d4:83:5f:44:8d:06:93:6e:91:2c:5e:be:cb:de:d1: e8:15:1f:23:de:46:cc:5c:96:b1:fc:71:55:7a:4a: e6:03:65:c0:5b:61:12:27:f3:a2:0d:aa:67:70:94: 29:cc:7b:ab:8c:4b:d5:f5:24:63:69:6e:9f:d1:0b: ca:dc:6c:a1:d3:08:d4:12:50:2e:b0:4e:77:f4:98: 8e:1e:20:cf:40:53:50:9e:fc:ca:a5:d1:43:0c:39: df:ac:b8:59:9b:c3:06:cb:59:2e:20:4c:48:ad:3e: 3b:a3:c8:61:03:2c:5e:aa:e9:4c:51:24:ea:89:e6: 17:6c:7d:be:27:ab:28:fc:c7:16:3b:f8:22:0d:bc: c9:d3:2d:63:8d:58:71:15:7a:36:f3:b8:f6:ea:5a: 4f:75:75:bd:14:cf:9c:6c:fe:29:01:8e:68:2a:b2: d8:6f:d5:dd:cb:28:52:e2:69:33:f5:ec:19:19:c5: 63:fa:c6:08:e7:18:e8:e7:ab:98:f8:da:a8:42:bc: c3:ef:49:07:36:6d:69:55:95:92:84:a9:a4:2c:18: 38:64:73:fd:ad:5d:e9:c6:3c:46:34:5f:e4:b1:14: 75:b9:92:ef:47:3e:76:33:b3:bd:5b:f4:ce:e2:1f: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E1:31:28:03:65:F8:DB:BA:6A:5B:48:09:11:F4:89:A4:4B:69:7F X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a1:fe:e0:5b:05:a4:3b:58:42:b9:75:a0:76:19:a8:df:11: 06:27:c1:e0:d0:02:0a:d8:20:57:78:97:21:95:71:d1:18:6a: 0b:7c:e5:67:64:c1:f5:88:fe:de:bf:5b:af:2f:d7:6f:39:1b: da:ab:c3:6a:43:37:af:da:c7:86:a3:9d:ce:a8:63:fb:38:50: c2:59:fc:3c:c4:e6:a6:10:22:ee:f8:0e:e3:ee:3a:d5:24:c0: f9:76:44:72:15:da:cd:45:8c:96:0a:4f:f6:1c:ec:97:b5:b5: b6:e2:9f:d7:b4:0c:7e:86:cc:d1:ca:10:84:cc:6b:a4:a8:8a: 4b:41:f0:1f:b9:9e:3e:ce:49:44:84:7e:45:e9:8a:cf:1b:1c: 77:5c:3d:99:6d:77:c9:77:91:67:ab:43:2f:71:e6:f0:dd:d9: 4e:88:c1:11:48:59:68:82:af:51:b3:1f:86:0a:21:67:86:74: 65:f9:20:96:b3:b7:39:e9:87:f9:82:08:78:b7:08:dc:30:85: ab:16:53:38:e8:75:e8:08:55:ac:cf:c0:7e:ca:03:b6:df:1e: f3:0c:0b:57:41:98:c4:5c:a1:6e:64:cf:77:2a:27:10:99:74: 82:00:f7:a0:93:d7:af:2d:a2:25:76:d7:2a:f3:4f:33:8a:69: b4:b6:fd:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvbmqNA+nm/43DeUzSXe3XHBvCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA3MjAxODI5MzJaFw0yNjA3MjEyMDI4MzJaMDMxMTAvBgNV BAMTKDhDRTEzMTI4MDM2NUY4REJCQTZBNUI0ODA5MTFGNDg5QTQ0QjY5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjPITDvHXMiAO4MYkqN9SDX0SN BpNukSxevsve0egVHyPeRsxclrH8cVV6SuYDZcBbYRIn86INqmdwlCnMe6uMS9X1 JGNpbp/RC8rcbKHTCNQSUC6wTnf0mI4eIM9AU1Ce/Mql0UMMOd+suFmbwwbLWS4g TEitPjujyGEDLF6q6UxRJOqJ5hdsfb4nqyj8xxY7+CINvMnTLWONWHEVejbzuPbq Wk91db0Uz5xs/ikBjmgqsthv1d3LKFLiaTP17BkZxWP6xgjnGOjnq5j42qhCvMPv SQc2bWlVlZKEqaQsGDhkc/2tXenGPEY0X+SxFHW5ku9HPnYzs71b9M7iH3mpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOExKANl+Nu6altICRH0iaRLaX8wHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeh/uBbBaQ7WEK5daB2GajfEQYnweDQAgrY IFd4lyGVcdEYagt85WdkwfWI/t6/W68v1285G9qrw2pDN6/ax4ajnc6oY/s4UMJZ /DzE5qYQIu74DuPuOtUkwPl2RHIV2s1FjJYKT/Yc7Je1tbbin9e0DH6GzNHKEITM a6SoiktB8B+5nj7OSUSEfkXpis8bHHdcPZltd8l3kWerQy9x5vDd2U6IwRFIWWiC r1GzH4YKIWeGdGX5IJaztznph/mCCHi3CNwwhasWUzjodegIVazPwH7KA7bfHvMM C1dBmMRcoW5kz3cqJxCZdIIA96CT168toiV21yrzTzOKabS2/QM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:36:57 2026 by rpki-client