$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: S55iwi7GRvrbTYCHWp3aB9pCxxbUoLUdRF27t+yhTSk= Subject key identifier: 94:45:FF:74:E7:C6:AB:E3:5C:F8:E7:D8:E4:68:5F:6A:B5:0F:DE:EB Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 781AD7E65405E71B8D866DD8FEF2D5469CA8102A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:49:51 +0000 Manifest this update: Mon 20 Jul 2026 14:44:51 +0000 Manifest next update: Tue 21 Jul 2026 15:52:51 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) 2: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: 4ehy4y+Rbm3VWd5S+Ip4glkkzG+LMbS/umAcSZz9FMY=) 3: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) 4: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1a:d7:e6:54:05:e7:1b:8d:86:6d:d8:fe:f2:d5:46:9c:a8:10:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: Jul 20 14:44:51 2026 GMT Not After : Jul 21 15:52:51 2026 GMT Subject: CN=9445FF74E7C6ABE35CF8E7D8E4685F6AB50FDEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:36:df:7b:6d:ee:d2:6f:88:38:ef:23:a9: 04:37:2b:9a:78:c9:ff:c3:24:39:63:ce:3b:8f:36: 36:81:cc:70:1f:d6:6d:78:ff:f3:4f:2f:08:1f:a5: 0b:e7:ef:49:f4:2f:ac:b1:15:c2:06:85:4a:86:76: 3d:4d:cb:07:03:23:e8:db:00:46:11:a8:2f:f2:a1: c5:37:ad:bb:39:b3:41:22:2f:e2:2e:f3:ec:24:81: 68:62:6c:2f:cd:d7:27:0e:ec:98:c3:df:60:3a:79: f8:e3:33:61:b7:f9:f5:c7:38:31:aa:77:34:80:d4: e7:6e:0e:17:fc:2f:29:d6:58:c6:25:f8:ea:31:22: e7:21:66:75:68:a4:56:7a:2a:fc:12:96:fe:17:5b: 2f:d6:7a:c8:3b:8c:dc:58:66:45:df:ec:93:05:b7: bb:62:5f:3e:3e:f9:19:57:01:aa:7a:a4:b6:1b:d6: 40:db:15:60:e4:c7:54:a4:a1:52:ae:68:1f:0a:87: dd:1b:f1:10:c7:ff:a0:a9:82:33:d4:8f:f1:32:c8: 2c:aa:d1:be:3a:d6:52:7e:07:42:75:ae:5f:d6:2c: ae:f1:34:18:43:a4:04:9f:2d:2a:20:fb:d9:4a:72: d9:b5:32:f5:a1:48:78:51:5a:f0:da:3c:a0:11:e9: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:FF:74:E7:C6:AB:E3:5C:F8:E7:D8:E4:68:5F:6A:B5:0F:DE:EB X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:19:da:83:e3:ba:98:ef:05:99:a7:fc:09:0d:3d:3d:ca:07: a9:eb:b6:4c:47:26:41:0e:b3:6c:b1:24:30:12:75:de:fb:0b: 44:2e:32:df:20:a9:f0:7a:70:3b:a6:2a:c4:ac:32:4c:09:4f: b8:70:c2:be:cb:3f:a3:aa:96:9e:c1:15:cf:22:53:d0:25:d0: c3:fa:b2:2b:72:96:2e:3d:03:bb:ea:8d:fe:fe:f5:37:43:0c: 99:57:94:84:d8:f8:e1:bd:e9:7c:57:81:e0:83:e0:55:2e:6a: 91:7f:a5:89:15:fd:dd:66:c5:fb:fd:80:f2:eb:97:54:8d:ff: a6:00:b6:c9:a4:1b:90:cf:48:8c:27:9f:84:f9:f3:da:0e:15: 73:74:28:d6:3d:c7:13:43:b1:34:83:bf:ee:2a:bf:bb:bc:c8: 64:9a:1b:03:dc:16:4f:3a:4b:fc:cf:ce:d0:f4:b6:fb:5e:c3: 0a:40:41:5e:12:93:ee:65:81:af:30:e5:a5:dd:49:7f:1c:06: 84:05:af:de:56:0e:cb:88:6a:69:40:32:92:07:85:73:00:c5: 2d:1e:a4:67:af:5d:16:7c:11:89:9c:50:a2:35:86:e1:89:f0: 68:48:ca:f8:ba:c7:18:e6:f5:74:59:f7:a8:be:f7:19:05:cc: 8b:56:00:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBrX5lQF5xuNhm3Y/vLVRpyoECowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA3MjAxNDQ0NTFaFw0yNjA3MjExNTUyNTFaMDMxMTAvBgNV BAMTKDk0NDVGRjc0RTdDNkFCRTM1Q0Y4RTdEOEU0Njg1RjZBQjUwRkRFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgszbfe23u0m+IOO8jqQQ3K5p4 yf/DJDljzjuPNjaBzHAf1m14//NPLwgfpQvn70n0L6yxFcIGhUqGdj1NywcDI+jb AEYRqC/yocU3rbs5s0EiL+Iu8+wkgWhibC/N1ycO7JjD32A6efjjM2G3+fXHODGq dzSA1OduDhf8LynWWMYl+OoxIuchZnVopFZ6KvwSlv4XWy/Wesg7jNxYZkXf7JMF t7tiXz4++RlXAap6pLYb1kDbFWDkx1SkoVKuaB8Kh90b8RDH/6CpgjPUj/EyyCyq 0b461lJ+B0J1rl/WLK7xNBhDpASfLSog+9lKctm1MvWhSHhRWvDaPKAR6bD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlEX/dOfGq+Nc+OfY5GhfarUP3uswHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4Z2oPjupjvBZmn/AkNPT3KB6nrtkxHJkEO s2yxJDASdd77C0QuMt8gqfB6cDumKsSsMkwJT7hwwr7LP6Oqlp7BFc8iU9Al0MP6 sityli49A7vqjf7+9TdDDJlXlITY+OG96XxXgeCD4FUuapF/pYkV/d1mxfv9gPLr l1SN/6YAtsmkG5DPSIwnn4T589oOFXN0KNY9xxNDsTSDv+4qv7u8yGSaGwPcFk86 S/zPztD0tvtewwpAQV4Sk+5lga8w5aXdSX8cBoQFr95WDsuIamlAMpIHhXMAxS0e pGevXRZ8EYmcUKI1huGJ8GhIyvi6xxjm9XRZ96i+9xkFzItWAIw= -----END CERTIFICATE-----Generated at Tue Jul 21 07:07:39 2026 by rpki-client