$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json) Hash identifier: GlVgjCYKTaGUtXqVGVOQF8xQEtGDgV9A+TOAEoHRMhg= Subject key identifier: D1:AA:65:9B:2D:28:D1:BA:E4:B1:4C:7E:FE:FB:79:3F:4A:25:39:FB Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Certificate serial: 1E25C92DED749588AC7C21DA44F31BA2D67B0986 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:45:31 +0000 Manifest this update: Tue 21 Jul 2026 03:40:31 +0000 Manifest next update: Wed 22 Jul 2026 06:34:31 +0000 Files and hashes: 1: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: QVAree0OspzWk1SMGyFRC4g26632TQH1A4tkEAOuxeU=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:25:c9:2d:ed:74:95:88:ac:7c:21:da:44:f3:1b:a2:d6:7b:09:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Validity Not Before: Jul 21 03:40:31 2026 GMT Not After : Jul 22 06:34:31 2026 GMT Subject: CN=D1AA659B2D28D1BAE4B14C7EFEFB793F4A2539FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:44:2c:30:aa:0b:7b:39:91:9e:15:75:ab: 4f:7b:c6:44:40:d9:db:bf:ca:6a:5b:ca:b8:a2:f1: 9d:be:cf:c0:d2:b6:ce:49:28:39:ad:22:1c:ce:7e: 9b:ed:13:50:32:45:60:d1:49:97:94:92:e6:a6:40: 4f:eb:76:db:ff:89:64:ff:1c:d4:08:e6:3a:f4:cc: 94:35:3d:61:0b:5e:39:46:15:27:aa:39:3d:7d:ac: 66:4f:da:52:44:5d:c5:be:f6:70:74:13:0b:50:75: a5:67:25:6b:c0:ef:b0:6a:1a:bd:9d:d5:2f:e9:31: 0f:4a:e1:1c:60:9a:c8:d6:71:40:66:97:67:d8:56: 80:f0:e3:04:93:67:e8:4d:24:45:d7:0d:ed:67:90: e4:70:91:20:61:1b:06:b2:63:4c:08:22:13:de:ca: 86:99:4b:4c:23:48:40:d2:c7:5b:28:f1:fa:a9:9c: 6d:16:f9:c0:7e:57:06:f9:3a:ac:c1:ea:8c:d8:93: b1:6b:6d:fe:e8:17:42:d0:ac:d3:c4:6b:30:4e:8a: f5:c2:94:57:87:82:1a:42:70:66:18:3f:aa:bc:90: 8c:9e:e6:88:ec:81:c4:83:86:6e:48:00:87:65:62: 5e:76:0f:df:3e:a3:96:89:70:8b:c0:c8:3a:f1:fc: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AA:65:9B:2D:28:D1:BA:E4:B1:4C:7E:FE:FB:79:3F:4A:25:39:FB X509v3 Authority Key Identifier: keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bd:67:b7:08:9f:d1:65:6b:61:d9:46:93:17:c9:29:1a:08: 08:a8:63:9b:10:4f:14:b8:fe:16:c7:1c:7f:cc:6a:eb:58:f3: 0b:38:78:5a:69:6a:91:2b:ed:1b:70:27:fc:4b:d9:09:1c:14: 03:68:f6:b5:43:fd:a9:43:2c:14:15:5a:25:60:82:16:3a:6a: 05:d0:ee:64:de:a7:19:76:7d:d8:c3:94:68:02:fc:58:27:a4: 3d:5e:6f:42:24:dc:0a:a7:c0:29:93:70:ee:6c:06:6e:be:8e: 33:64:5e:36:b0:8e:20:ff:f1:68:e3:1c:ed:d7:ae:7f:d9:4c: 91:ad:e8:d1:af:66:93:a3:d1:67:0d:71:4f:af:f8:df:89:91: 24:c0:bc:04:c3:d9:10:0b:7d:04:28:b2:52:c6:4f:9b:10:07: 38:be:74:be:8b:28:78:2a:22:55:9f:f6:7a:c5:84:ee:af:b3: 7b:ee:16:ae:70:4f:59:4f:7f:d2:d8:4a:bf:55:62:93:a0:b1: 32:f7:61:64:5b:b1:b1:a0:41:b7:ad:d0:11:aa:1a:f5:6d:03: 74:04:a0:6a:ac:99:15:fe:ca:aa:83:90:53:34:0d:9a:c8:a9: 79:5f:2e:50:f5:5d:10:53:30:38:d4:cd:68:05:84:1c:5e:89: 00:9f:4d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiXJLe10lYisfCHaRPMbotZ7CYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2 MzJDMjRGODAeFw0yNjA3MjEwMzQwMzFaFw0yNjA3MjIwNjM0MzFaMDMxMTAvBgNV BAMTKEQxQUE2NTlCMkQyOEQxQkFFNEIxNEM3RUZFRkI3OTNGNEEyNTM5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqH0QsMKoLezmRnhV1q097xkRA 2du/ympbyrii8Z2+z8DSts5JKDmtIhzOfpvtE1AyRWDRSZeUkuamQE/rdtv/iWT/ HNQI5jr0zJQ1PWELXjlGFSeqOT19rGZP2lJEXcW+9nB0EwtQdaVnJWvA77BqGr2d 1S/pMQ9K4RxgmsjWcUBml2fYVoDw4wSTZ+hNJEXXDe1nkORwkSBhGwayY0wIIhPe yoaZS0wjSEDSx1so8fqpnG0W+cB+Vwb5OqzB6ozYk7Frbf7oF0LQrNPEazBOivXC lFeHghpCcGYYP6q8kIye5ojsgcSDhm5IAIdlYl52D98+o5aJcIvAyDrx/HppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aplmy0o0brksUx+/vt5P0olOfswHwYDVR0j BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1 QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3 RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC9Z7cIn9Fla2HZRpMXySkaCAioY5sQTxS4 /hbHHH/MautY8ws4eFppapEr7RtwJ/xL2QkcFANo9rVD/alDLBQVWiVgghY6agXQ 7mTepxl2fdjDlGgC/FgnpD1eb0Ik3AqnwCmTcO5sBm6+jjNkXjawjiD/8WjjHO3X rn/ZTJGt6NGvZpOj0WcNcU+v+N+JkSTAvATD2RALfQQoslLGT5sQBzi+dL6LKHgq IlWf9nrFhO6vs3vuFq5wT1lPf9LYSr9VYpOgsTL3YWRbsbGgQbet0BGqGvVtA3QE oGqsmRX+yqqDkFM0DZrIqXlfLlD1XRBTMDjUzWgFhBxeiQCfTcY= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:35 2026 by rpki-client