$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: FnnK5BkLTBUU2OISwYrOOlRLU/ClYuWoknowDMxnCUI= Subject key identifier: 8D:99:10:21:97:1C:41:FC:A5:CC:75:CF:CA:79:2F:E0:D5:C9:44:2A Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 283A216089DCF7C9C1893E43722049C68C007E57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:42:55 +0000 Manifest this update: Mon 20 Jul 2026 21:37:55 +0000 Manifest next update: Tue 21 Jul 2026 22:36:55 +0000 Files and hashes: 1: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) 2: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) 3: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: lCuncR8wwRpHHLIgwM8xeOj2BsntM6UCwx1DjL8aqCA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3a:21:60:89:dc:f7:c9:c1:89:3e:43:72:20:49:c6:8c:00:7e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: Jul 20 21:37:55 2026 GMT Not After : Jul 21 22:36:55 2026 GMT Subject: CN=8D991021971C41FCA5CC75CFCA792FE0D5C9442A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:0a:80:a0:1d:e6:91:b5:3c:da:f5:8b:43: 7f:bf:58:c2:9e:bb:52:a3:08:23:e5:66:7f:7f:15: 17:e0:6c:77:ab:e0:27:2d:97:c0:c2:45:a6:4d:9e: 4f:5f:3b:94:09:ca:b3:f5:25:8e:5c:b2:dd:9c:f4: c9:e8:24:c5:68:0c:ac:63:c2:f0:da:e8:22:ba:d9: 45:ea:65:57:e4:07:a7:d9:3e:10:db:8e:47:83:b0: ef:79:62:d8:f2:b6:d9:97:0e:7e:6b:8b:2d:e4:b7: 75:88:71:17:5e:cb:e1:d5:26:fb:e8:9b:ef:36:bc: c1:f8:5f:17:0a:e0:ac:9d:b2:a4:78:51:04:6c:8b: 39:bc:d7:bd:ec:d9:44:84:02:43:ab:64:57:0a:25: 76:12:ad:ea:76:10:0d:be:79:54:24:71:e7:4a:e4: a2:be:8e:c6:a3:39:65:a5:c9:b1:c4:f6:cb:53:68: d7:cc:22:1a:ac:12:7e:d8:e0:21:cd:b6:9e:18:78: 58:42:dd:53:0e:93:f8:e1:71:66:73:a7:8a:ab:8e: 71:80:72:5c:c7:30:20:80:f9:bb:66:58:c6:b4:55: 2b:64:62:90:4c:4a:14:72:22:e1:81:a1:91:1e:d3: 00:c1:f8:6f:6b:43:34:a9:48:e3:bb:ea:04:36:3a: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:10:21:97:1C:41:FC:A5:CC:75:CF:CA:79:2F:E0:D5:C9:44:2A X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ca:17:20:c5:27:02:8a:d4:f0:8c:53:10:41:d1:77:15:fb: 10:39:5a:91:25:42:cb:1a:74:49:4a:54:ce:d0:c7:27:83:3e: df:1e:fc:38:00:0c:53:f9:85:cc:03:ee:70:05:72:b0:b6:08: d1:2e:df:5e:3e:6b:91:54:cb:4d:f2:fe:84:98:b7:4d:bb:cb: e1:74:76:95:bf:2d:0c:23:00:4e:38:97:6a:3a:38:36:f9:9a: 13:69:32:9e:1d:ca:37:c3:55:0d:3e:d4:f8:bf:b3:98:e2:76: 85:e4:87:c1:c8:ea:07:0c:6d:56:fe:62:df:29:4d:42:8d:1d: 01:98:0a:e1:21:47:c6:62:74:f4:59:61:15:69:b8:1f:a6:b2: ea:f5:67:16:78:bb:62:18:ae:f4:b6:e1:21:ca:bc:e9:5a:d9: af:b5:c2:01:3a:ab:d0:2e:6e:a6:4b:5b:69:b7:50:1e:0c:1c: c5:47:bd:7c:a0:6e:62:3d:5d:43:ab:4f:82:bd:8c:04:17:16: c3:ff:04:78:ab:fb:a2:31:4f:bf:35:0d:f2:f5:10:26:12:9e: 5f:fc:20:7e:92:46:69:87:4c:7f:d0:9b:22:ce:c6:49:08:ce: a6:fa:22:45:26:db:1b:dd:24:00:d7:9d:54:38:7b:e4:37:ab: d8:02:92:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDohYInc98nBiT5DciBJxowAflcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA3MjAyMTM3NTVaFw0yNjA3MjEyMjM2NTVaMDMxMTAvBgNV BAMTKDhEOTkxMDIxOTcxQzQxRkNBNUNDNzVDRkNBNzkyRkUwRDVDOTQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjwqAoB3mkbU82vWLQ3+/WMKe u1KjCCPlZn9/FRfgbHer4Cctl8DCRaZNnk9fO5QJyrP1JY5cst2c9MnoJMVoDKxj wvDa6CK62UXqZVfkB6fZPhDbjkeDsO95YtjyttmXDn5riy3kt3WIcRdey+HVJvvo m+82vMH4XxcK4KydsqR4UQRsizm8173s2USEAkOrZFcKJXYSrep2EA2+eVQkcedK 5KK+jsajOWWlybHE9stTaNfMIhqsEn7Y4CHNtp4YeFhC3VMOk/jhcWZzp4qrjnGA clzHMCCA+btmWMa0VStkYpBMShRyIuGBoZEe0wDB+G9rQzSpSOO76gQ2Ogq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZkQIZccQfylzHXPynkv4NXJRCowHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLKFyDFJwKK1PCMUxBB0XcV+xA5WpElQssa dElKVM7QxyeDPt8e/DgADFP5hcwD7nAFcrC2CNEu314+a5FUy03y/oSYt027y+F0 dpW/LQwjAE44l2o6ODb5mhNpMp4dyjfDVQ0+1Pi/s5jidoXkh8HI6gcMbVb+Yt8p TUKNHQGYCuEhR8ZidPRZYRVpuB+msur1ZxZ4u2IYrvS24SHKvOla2a+1wgE6q9Au bqZLW2m3UB4MHMVHvXygbmI9XUOrT4K9jAQXFsP/BHir+6IxT781DfL1ECYSnl/8 IH6SRmmHTH/QmyLOxkkIzqb6IkUm2xvdJADXnVQ4e+Q3q9gCkkE= -----END CERTIFICATE-----Generated at Tue Jul 21 07:54:15 2026 by rpki-client