$ rpki-client -vvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: UJV6wd8ELwC4UevYG7al0iNycUkdpO84HmUUiFfaxXA= Subject key identifier: F3:4E:F3:24:52:62:AC:55:07:23:15:49:CD:55:C7:01:6B:A9:6F:27 Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 6E13074A92F6BF072603EF466010C68869534E8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:40:40 +0000 Manifest this update: Mon 20 Jul 2026 19:35:40 +0000 Manifest next update: Tue 21 Jul 2026 21:45:40 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) 2: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: H62OdqnkYcEgFf63QFvtV+RHC5QxSm7jGGvplMwEnLM=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:13:07:4a:92:f6:bf:07:26:03:ef:46:60:10:c6:88:69:53:4e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Jul 20 19:35:40 2026 GMT Not After : Jul 21 21:45:40 2026 GMT Subject: CN=F34EF3245262AC5507231549CD55C7016BA96F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:35:08:ec:d3:86:05:73:94:52:23:df:c5: c8:f7:60:03:83:37:95:01:49:eb:a0:7a:1d:72:85: 90:44:07:89:b7:8d:7c:50:a5:ae:84:43:86:a6:3b: 0e:73:48:9a:20:f0:e1:f3:de:94:b1:1a:30:d9:56: e5:fd:83:5c:0d:52:32:c5:f1:d3:e3:dd:4c:da:f3: 66:ea:c5:e7:d2:f0:95:3e:98:1a:f4:e4:4c:74:58: 58:d1:f6:97:93:96:82:1c:c6:e0:ad:90:f9:aa:a1: 7b:da:37:d2:f1:d0:0f:8d:94:2f:65:54:5a:9c:84: 07:28:7e:12:e2:5a:96:9e:4b:b6:4d:c4:11:c5:c8: 76:68:e6:6d:bf:6b:a8:0e:37:ce:66:d3:34:07:ae: de:1f:50:cb:e6:f4:b4:fd:5b:40:53:0d:63:f0:10: 71:a4:00:81:b6:84:11:10:61:dd:1a:9f:b6:b7:1c: a9:f7:3b:32:38:43:a3:44:83:ed:51:06:d6:01:87: 10:c6:20:53:26:0b:82:ab:43:f5:30:fa:f4:47:4f: ed:fe:8c:24:23:6f:b1:3c:a0:18:23:e6:de:15:72: 58:a5:20:a6:12:43:a3:56:c9:52:8d:8a:d3:4b:cc: c1:58:34:d9:0e:0d:70:40:82:0e:3c:3e:35:8c:7c: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:F3:24:52:62:AC:55:07:23:15:49:CD:55:C7:01:6B:A9:6F:27 X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4b:6c:e0:87:54:c6:4f:c6:44:e9:30:46:b8:70:f5:7d:c7: ed:fd:83:b6:cb:82:26:c9:93:fc:5c:11:f2:70:ad:00:ee:f1: 00:8d:c4:f8:84:07:85:41:0c:8a:56:fd:cf:63:0a:8f:87:a9: 46:e1:4d:d2:d7:74:30:63:da:c3:d6:2c:73:cc:04:2b:bf:1d: aa:8b:55:d5:4b:ff:6a:8e:34:fa:a2:da:e2:82:ea:e0:6d:18: 69:1b:cc:f4:44:f9:1c:5a:f0:36:29:d4:e7:59:01:2f:f7:83: 4d:6b:f2:98:30:f2:28:00:d3:4b:d7:f4:39:1f:3d:d6:56:df: c8:f8:22:14:69:21:07:71:e8:27:74:e2:9c:d0:13:9e:07:fd: 7f:f3:ae:ff:cb:bb:3d:34:79:3d:f1:04:f4:82:50:2c:36:53: bf:0b:11:a3:b7:4c:34:df:f9:55:1c:e9:f2:8a:17:4e:84:e2: 2c:fb:79:02:28:04:25:8f:53:99:5d:1f:3a:94:c0:14:e8:f3: 5f:2a:ef:60:8d:04:bf:41:83:5a:6e:b5:98:1c:9a:0d:08:1e: 5a:e4:91:f8:90:50:19:be:f3:ac:d2:e6:92:43:b1:87:bb:7f: 6a:38:23:ee:63:64:ee:06:07:ae:2b:88:11:f7:37:ba:7d:46: 81:ec:b4:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhMHSpL2vwcmA+9GYBDGiGlTTo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA3MjAxOTM1NDBaFw0yNjA3MjEyMTQ1NDBaMDMxMTAvBgNV BAMTKEYzNEVGMzI0NTI2MkFDNTUwNzIzMTU0OUNENTVDNzAxNkJBOTZGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowzUI7NOGBXOUUiPfxcj3YAOD N5UBSeugeh1yhZBEB4m3jXxQpa6EQ4amOw5zSJog8OHz3pSxGjDZVuX9g1wNUjLF 8dPj3Uza82bqxefS8JU+mBr05Ex0WFjR9peTloIcxuCtkPmqoXvaN9Lx0A+NlC9l VFqchAcofhLiWpaeS7ZNxBHFyHZo5m2/a6gON85m0zQHrt4fUMvm9LT9W0BTDWPw EHGkAIG2hBEQYd0an7a3HKn3OzI4Q6NEg+1RBtYBhxDGIFMmC4KrQ/Uw+vRHT+3+ jCQjb7E8oBgj5t4VclilIKYSQ6NWyVKNitNLzMFYNNkODXBAgg48PjWMfHsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU807zJFJirFUHIxVJzVXHAWupbycwHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVLbOCHVMZPxkTpMEa4cPV9x+39g7bLgibJ k/xcEfJwrQDu8QCNxPiEB4VBDIpW/c9jCo+HqUbhTdLXdDBj2sPWLHPMBCu/HaqL VdVL/2qONPqi2uKC6uBtGGkbzPRE+Rxa8DYp1OdZAS/3g01r8pgw8igA00vX9Dkf PdZW38j4IhRpIQdx6Cd04pzQE54H/X/zrv/Luz00eT3xBPSCUCw2U78LEaO3TDTf +VUc6fKKF06E4iz7eQIoBCWPU5ldHzqUwBTo818q72CNBL9Bg1putZgcmg0IHlrk kfiQUBm+86zS5pJDsYe7f2o4I+5jZO4GB64riBH3N7p9RoHstMk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:32 2026 by rpki-client