$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: Mp6Xmqlp7rDNHFHICqmEfwBKvsE8t+7sNyp1KI9zGjM= Subject key identifier: 13:C6:6A:CA:2B:83:40:59:E0:13:84:74:6B:60:5E:1F:2C:8A:03:D0 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 1515AAEA29F187A48C5C9E9D646708474911B160 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:16:09 +0000 Manifest this update: Tue 21 Jul 2026 04:11:09 +0000 Manifest next update: Wed 22 Jul 2026 06:23:09 +0000 Files and hashes: 1: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 3: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: 73+ffMtAHh9x4GR1tbsz/kzGkGwnsnXr+ESccrxE6zs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:15:aa:ea:29:f1:87:a4:8c:5c:9e:9d:64:67:08:47:49:11:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Jul 21 04:11:09 2026 GMT Not After : Jul 22 06:23:09 2026 GMT Subject: CN=13C66ACA2B834059E01384746B605E1F2C8A03D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:c0:19:f7:34:b4:61:25:97:e8:11:3d:cd: 5c:88:b7:b2:12:dc:60:3d:bc:bc:23:5b:21:59:14: 23:4a:59:dc:dc:f6:6b:a9:ad:5b:86:3c:7b:aa:15: b6:c5:2a:bb:e8:1c:f8:5e:6b:33:64:ca:8d:7b:f4: 2d:c9:81:49:f3:b0:ee:79:ea:ec:aa:df:db:fd:93: f4:20:1b:c4:bf:06:ae:e1:c3:79:8e:d4:0c:19:af: 09:73:db:c4:15:0a:c1:3b:e8:75:df:ac:02:3a:e5: 91:d7:67:e8:bb:51:5f:a8:ec:f4:a1:cb:38:23:cd: 6d:53:aa:e2:d2:90:0b:c3:53:c2:ad:ba:1b:cb:37: 2f:49:c6:ac:cb:2a:27:44:14:48:6e:95:cb:af:55: d6:b7:e1:4e:75:cf:94:d3:62:a3:3d:c7:5f:3d:f1: 7f:d1:a6:12:ef:7e:9d:15:fd:0f:69:03:fa:57:8a: 4f:3b:d2:46:0b:81:28:4c:b2:5a:b4:e1:e3:50:88: c4:6a:b2:27:9a:f1:88:96:8b:09:ba:7d:0a:68:90: a1:54:bf:65:2f:fb:6b:38:ba:cd:75:6e:2c:a8:6f: 87:58:2d:ff:b4:3d:bb:d7:90:e4:f5:26:49:9b:fa: 94:48:ef:ef:be:c6:42:ca:df:3b:cb:20:6d:e2:20: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:6A:CA:2B:83:40:59:E0:13:84:74:6B:60:5E:1F:2C:8A:03:D0 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:02:9f:9f:79:10:3a:a1:81:93:67:16:65:fa:fd:e1:9a:ab: 95:17:e0:30:05:1e:5e:e9:4f:b0:0a:ae:98:5b:9a:19:5c:50: af:8a:f9:06:00:5f:2d:70:de:34:a4:ce:78:65:04:8a:41:51: 1d:a4:08:2f:9b:8b:80:f0:5e:7f:7a:0f:f5:e9:29:47:88:c1: c7:fb:7c:89:c6:dd:b1:8e:8d:3d:36:48:d8:63:9f:18:ce:77: ae:7b:e4:73:91:14:71:e4:1e:7b:99:1d:55:ef:cb:e7:e5:e4: 3f:99:bc:3e:69:c0:9b:d4:17:fb:d5:e9:f5:47:b1:eb:9b:bf: 20:74:c1:5a:3b:14:60:e0:0c:46:81:a4:eb:6a:f3:6d:57:c5: 49:27:fd:96:e7:2b:60:92:f6:45:d6:07:93:ee:ba:5c:1e:6a: f9:0c:75:0b:1c:40:d9:e1:a2:d4:67:38:5e:0f:90:50:fe:dd: 11:fe:9e:6d:8e:1d:5d:ae:b0:46:4c:1e:b8:50:d2:0d:98:59: 77:f9:3f:f7:cc:09:73:14:10:ea:7a:d3:c3:65:7c:6c:5f:1b: 6f:c0:2b:4e:63:06:53:0f:ec:92:e6:12:5e:5e:27:d1:4c:44: ee:68:dd:d7:09:75:94:eb:72:a9:e0:87:90:2c:56:9e:0f:f2: c1:f5:7a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRWq6inxh6SMXJ6dZGcIR0kRsWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA3MjEwNDExMDlaFw0yNjA3MjIwNjIzMDlaMDMxMTAvBgNV BAMTKDEzQzY2QUNBMkI4MzQwNTlFMDEzODQ3NDZCNjA1RTFGMkM4QTAzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FcAZ9zS0YSWX6BE9zVyIt7IS 3GA9vLwjWyFZFCNKWdzc9muprVuGPHuqFbbFKrvoHPheazNkyo179C3JgUnzsO55 6uyq39v9k/QgG8S/Bq7hw3mO1AwZrwlz28QVCsE76HXfrAI65ZHXZ+i7UV+o7PSh yzgjzW1TquLSkAvDU8KtuhvLNy9JxqzLKidEFEhulcuvVda34U51z5TTYqM9x189 8X/RphLvfp0V/Q9pA/pXik870kYLgShMslq04eNQiMRqsiea8YiWiwm6fQpokKFU v2Uv+2s4us11biyob4dYLf+0PbvXkOT1Jkmb+pRI7+++xkLK3zvLIG3iIME9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8ZqyiuDQFngE4R0a2BeHyyKA9AwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcCn595EDqhgZNnFmX6/eGaq5UX4DAFHl7p T7AKrphbmhlcUK+K+QYAXy1w3jSkznhlBIpBUR2kCC+bi4DwXn96D/XpKUeIwcf7 fInG3bGOjT02SNhjnxjOd6575HORFHHkHnuZHVXvy+fl5D+ZvD5pwJvUF/vV6fVH seubvyB0wVo7FGDgDEaBpOtq821XxUkn/ZbnK2CS9kXWB5PuulweavkMdQscQNnh otRnOF4PkFD+3RH+nm2OHV2usEZMHrhQ0g2YWXf5P/fMCXMUEOp608NlfGxfG2/A K05jBlMP7JLmEl5eJ9FMRO5o3dcJdZTrcqngh5AsVp4P8sH1eik= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:27 2026 by rpki-client