$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json) Hash identifier: lLS/QLHfRBo++1XRmQrqfty7I3llDTxwZDBDn0rb0rg= Subject key identifier: 14:35:06:BE:79:96:6C:C9:C9:07:A5:38:05:2E:32:DF:C1:A6:4F:0C Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 24E2A0C91D9ED9265AAB3F42BC422E4648A6EF60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:47:20 +0000 Manifest this update: Mon 20 Jul 2026 16:42:20 +0000 Manifest next update: Tue 21 Jul 2026 18:33:20 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: 6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=) 2: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: 57dkRmUfV8q+AnmqDVBitKr9ZDAHEFHDlmoNg7lgf4c=) 3: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=) 4: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: YLw5IVSAkKDuGq+lyyvqHOq+xZOAw6KjW85lZGyeWXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e2:a0:c9:1d:9e:d9:26:5a:ab:3f:42:bc:42:2e:46:48:a6:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Jul 20 16:42:20 2026 GMT Not After : Jul 21 18:33:20 2026 GMT Subject: CN=143506BE79966CC9C907A538052E32DFC1A64F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:4c:78:24:6a:5d:97:0e:05:6e:ff:f6:57: 95:45:ad:e1:e6:a3:9c:d3:b4:4c:77:06:1d:df:a4: 22:bf:36:ad:ae:fc:73:5d:fd:56:48:1f:f5:48:9b: 3b:04:e4:c2:34:d4:4e:67:ad:87:b7:b6:4b:97:f4: 32:31:26:f7:b5:17:d0:34:f5:1f:51:fd:f7:e0:10: 12:6d:3b:70:42:23:4f:28:b7:31:77:ea:46:34:ff: 26:c4:ad:77:54:65:e3:e9:da:04:f3:3e:c6:3a:be: 1f:bd:fb:ef:09:c2:d0:b6:c3:35:0b:12:b1:ca:19: b0:25:ee:06:89:3d:57:58:bd:a3:e8:02:47:86:9a: 70:8f:9f:73:25:7d:0a:8b:76:89:fc:96:cc:00:78: de:b1:02:e5:45:41:51:f5:c8:8c:d3:5c:ff:0e:a7: 4f:d6:a2:d7:24:19:34:3c:9f:f0:51:0c:43:70:d9: 36:f7:f4:01:90:0a:96:d8:9c:1f:fe:b5:01:e4:8e: a0:de:40:9a:95:94:64:f2:be:46:4e:d4:a5:5e:c6: ad:ea:83:cc:e8:f0:fa:79:4a:63:ac:c7:9a:23:9d: 3a:4a:90:c6:6f:7b:a7:f0:6e:3b:e6:7f:7f:62:da: bf:a1:de:24:ee:2a:90:c7:54:91:ee:56:1c:df:a3: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:35:06:BE:79:96:6C:C9:C9:07:A5:38:05:2E:32:DF:C1:A6:4F:0C X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:69:f6:4f:d1:17:cd:b7:1e:8c:dd:4f:79:19:5b:ab:53:b5: 55:f6:ea:16:51:f1:c9:98:bc:8e:55:10:37:d2:1a:c3:3d:b2: ca:24:33:f8:d8:97:c2:82:0b:56:7a:74:3c:98:13:24:3a:ad: 43:93:89:c1:34:11:3d:15:c5:22:fe:b0:ac:75:6e:e1:0f:df: a8:fd:fb:02:8a:c6:f3:31:27:0d:05:20:2b:20:92:3f:03:32: 0a:e0:dc:fc:ba:75:d1:5b:2d:2f:29:b7:2e:6b:79:46:89:97: e0:6e:0e:93:f4:7a:9b:79:e5:03:f7:fa:3b:27:e2:f4:48:2d: 08:66:8d:a7:b9:07:80:68:bb:6d:6c:91:9b:3e:09:20:5b:7c: 4d:8c:4c:78:14:b8:fd:5d:96:cb:06:24:8e:c6:35:51:1f:96: 8b:6e:66:bb:3c:1d:3f:72:de:50:5d:95:09:72:96:a2:23:0f: 5b:15:cc:83:23:c4:cf:b8:53:57:dd:95:47:e3:0e:74:ef:c4: f7:d5:59:79:0e:47:61:5f:5f:e4:25:00:f3:69:7d:7a:b5:c1: eb:b5:34:6f:73:0c:a2:8d:1f:7d:e4:2e:38:65:cb:65:09:c7: 9f:ac:55:00:c6:e4:82:38:90:cd:e1:9a:14:a5:e9:4b:27:d4: b2:84:71:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOKgyR2e2SZaqz9CvEIuRkim72AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA3MjAxNjQyMjBaFw0yNjA3MjExODMzMjBaMDMxMTAvBgNV BAMTKDE0MzUwNkJFNzk5NjZDQzlDOTA3QTUzODA1MkUzMkRGQzFBNjRGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzkx4JGpdlw4Fbv/2V5VFreHm o5zTtEx3Bh3fpCK/Nq2u/HNd/VZIH/VImzsE5MI01E5nrYe3tkuX9DIxJve1F9A0 9R9R/ffgEBJtO3BCI08otzF36kY0/ybErXdUZePp2gTzPsY6vh+9++8JwtC2wzUL ErHKGbAl7gaJPVdYvaPoAkeGmnCPn3MlfQqLdon8lswAeN6xAuVFQVH1yIzTXP8O p0/WotckGTQ8n/BRDENw2Tb39AGQCpbYnB/+tQHkjqDeQJqVlGTyvkZO1KVexq3q g8zo8Pp5SmOsx5ojnTpKkMZve6fwbjvmf39i2r+h3iTuKpDHVJHuVhzfo56bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDUGvnmWbMnJB6U4BS4y38GmTwwwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcx MjUyMUQ2NEIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBp9k/RF823HozdT3kZW6tTtVX26hZR8cmY vI5VEDfSGsM9ssokM/jYl8KCC1Z6dDyYEyQ6rUOTicE0ET0VxSL+sKx1buEP36j9 +wKKxvMxJw0FICsgkj8DMgrg3Py6ddFbLS8pty5reUaJl+BuDpP0ept55QP3+jsn 4vRILQhmjae5B4Bou21skZs+CSBbfE2MTHgUuP1dlssGJI7GNVEflotuZrs8HT9y 3lBdlQlylqIjD1sVzIMjxM+4U1fdlUfjDnTvxPfVWXkOR2FfX+QlAPNpfXq1weu1 NG9zDKKNH33kLjhly2UJx5+sVQDG5II4kM3hmhSl6Usn1LKEcU0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:19:01 2026 by rpki-client