$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft File: A0255156E104D661F25134DFEF8EF05BD73E8C04.mft (raw, json) Hash identifier: fL/MdxMPy8mUG+zAJiBCOdXJhrd9L4msCswpxKBb9M4= Subject key identifier: 8F:05:38:BA:75:B9:BD:36:08:AD:D1:66:E9:18:D4:35:F3:50:7D:56 Authority key identifier: A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 Certificate issuer: /CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Certificate serial: 5C976F7CCCABAA0E600EA3BB8C58BF86DD0B561C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:26:44 +0000 Manifest this update: Mon 20 Jul 2026 12:21:44 +0000 Manifest next update: Tue 21 Jul 2026 15:03:44 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: mPG/zuyU/XUm9QM+7MhLY4PXMJXJc11dpd+ekiFfezo=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 00GZwg/Y9T0ZdKSWulyuB3JLDZ01RudXgy9Ju+lMmEg=) 3: A0255156E104D661F25134DFEF8EF05BD73E8C04.crl (hash: 0Z19eIMHXxLj35Try8HJ+vN77LTXqPKavMp5uQW8UdI=) 4: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: OwiazASeDIe+vC4nWyzCtb4oqvt1RTV99SuTJlMtud4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:97:6f:7c:cc:ab:aa:0e:60:0e:a3:bb:8c:58:bf:86:dd:0b:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0255156E104D661F25134DFEF8EF05BD73E8C04 Validity Not Before: Jul 20 12:21:44 2026 GMT Not After : Jul 21 15:03:44 2026 GMT Subject: CN=8F0538BA75B9BD3608ADD166E918D435F3507D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:d7:a2:d8:ad:58:a3:b5:3b:d6:eb:66:98: b2:67:64:03:cf:d0:d3:10:a7:2f:03:8d:ae:ac:45: 77:fd:e3:2a:46:eb:f2:55:6a:63:86:9f:20:5a:39: be:b9:50:b1:60:46:6c:60:96:7a:03:d0:a1:bc:84: dc:41:7f:7f:c0:ed:bd:35:14:13:f7:1e:77:ac:88: d4:b1:73:dc:aa:45:20:25:cd:c1:7e:b5:1c:5a:93: db:4e:7f:67:2a:3e:32:b6:75:94:4c:c5:be:ca:a3: ca:75:38:5d:a6:74:b1:20:23:a3:83:3b:55:07:51: bb:42:3c:c0:0d:9b:07:27:84:60:9f:7e:20:4e:e7: 15:73:42:e9:ae:6a:3a:d2:6f:e9:0a:a7:7b:67:32: 34:bf:c4:47:fb:90:76:7d:ff:7c:d6:b1:ab:cb:76: a4:ae:a4:5e:74:ec:2a:15:a0:2f:db:c1:e6:ee:e6: ce:e0:ce:b7:ce:0c:1b:66:d0:e7:8b:46:e7:72:5d: 26:0a:d2:e7:4d:4e:05:66:8b:31:a3:33:9f:cc:6c: 81:7f:38:cc:de:40:3e:c6:40:29:89:d2:c8:5c:a0: d4:4c:0a:09:ed:eb:1e:56:60:db:5d:79:43:c1:38: 15:56:f3:1b:96:bd:8d:df:5d:40:e9:9d:d0:a3:8b: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:38:BA:75:B9:BD:36:08:AD:D1:66:E9:18:D4:35:F3:50:7D:56 X509v3 Authority Key Identifier: keyid:A0:25:51:56:E1:04:D6:61:F2:51:34:DF:EF:8E:F0:5B:D7:3E:8C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A0255156E104D661F25134DFEF8EF05BD73E8C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/A0255156E104D661F25134DFEF8EF05BD73E8C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:c8:27:e1:57:b3:81:37:34:9e:14:dc:1f:90:f8:f3:83: eb:d4:42:46:d0:e7:be:d0:2a:26:e1:9a:43:2a:6c:cf:9e:08: 0f:ed:c6:ca:bf:d0:00:5e:c2:7b:05:52:be:26:f6:0b:7c:e4: 90:fb:08:8e:d1:23:c1:f9:de:52:84:08:ed:ec:16:c4:6b:d6: 6e:f7:72:dd:1d:b0:c6:70:94:ab:bd:bf:f2:58:3d:6d:24:9f: 03:6b:4c:31:ec:e0:b7:46:f4:36:c6:d4:7c:aa:a7:16:20:bd: d6:2f:d8:2b:3b:94:c3:b9:ec:c3:88:0d:93:8b:db:8a:ce:d0: 8c:8b:b0:99:67:da:33:76:bc:5a:41:7d:82:55:0c:0a:7d:e2: 0e:6c:c5:04:4d:59:b0:1a:12:7e:4f:56:ac:5a:49:2c:32:21: f6:9a:a8:9d:fb:1a:c9:0a:2e:08:46:7a:0b:f2:93:e7:6f:08: 57:bd:85:0a:de:4f:49:0a:62:92:95:2f:97:0e:58:f7:e8:86: 02:74:48:a2:16:10:45:93:ae:1f:e4:f7:32:90:41:b2:ab:fa: 3b:68:99:e6:c0:e3:f6:78:a9:20:27:2a:38:73:41:b0:ad:64: dc:ff:3e:1e:f1:bc:37:58:37:9b:60:e6:b7:19:f9:f7:20:f6: 70:44:05:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJdvfMyrqg5gDqO7jFi/ht0LVhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYwNUJE NzNFOEMwNDAeFw0yNjA3MjAxMjIxNDRaFw0yNjA3MjExNTAzNDRaMDMxMTAvBgNV BAMTKDhGMDUzOEJBNzVCOUJEMzYwOEFERDE2NkU5MThENDM1RjM1MDdENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3tei2K1Yo7U71utmmLJnZAPP 0NMQpy8Dja6sRXf94ypG6/JVamOGnyBaOb65ULFgRmxglnoD0KG8hNxBf3/A7b01 FBP3HnesiNSxc9yqRSAlzcF+tRxak9tOf2cqPjK2dZRMxb7Ko8p1OF2mdLEgI6OD O1UHUbtCPMANmwcnhGCffiBO5xVzQumuajrSb+kKp3tnMjS/xEf7kHZ9/3zWsavL dqSupF507CoVoC/bwebu5s7gzrfODBtm0OeLRudyXSYK0udNTgVmizGjM5/MbIF/ OMzeQD7GQCmJ0shcoNRMCgnt6x5WYNtdeUPBOBVW8xuWvY3fXUDpndCjiyMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwU4unW5vTYIrdFm6RjUNfNQfVYwHwYDVR0j BBgwFoAUoCVRVuEE1mHyUTTf747wW9c+jAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NiZmIyMjgtZmQwNS00YWZkLTg3YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZF MTA0RDY2MUYyNTEzNERGRUY4RUYwNUJENzNFOEMwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDI1NTE1NkUxMDRENjYxRjI1MTM0REZFRjhFRjA1QkQ3M0U4 QzA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvQTAyNTUxNTZFMTA0RDY2MUYyNTEzNERGRUY4RUYw NUJENzNFOEMwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbHyCfhV7OBNzSeFNwfkPjzg+vUQkbQ577Q KibhmkMqbM+eCA/txsq/0ABewnsFUr4m9gt85JD7CI7RI8H53lKECO3sFsRr1m73 ct0dsMZwlKu9v/JYPW0knwNrTDHs4LdG9DbG1HyqpxYgvdYv2Cs7lMO57MOIDZOL 24rO0IyLsJln2jN2vFpBfYJVDAp94g5sxQRNWbAaEn5PVqxaSSwyIfaaqJ37GskK LghGegvyk+dvCFe9hQreT0kKYpKVL5cOWPfohgJ0SKIWEEWTrh/k9zKQQbKr+jto mebA4/Z4qSAnKjhzQbCtZNz/Ph7xvDdYN5tg5rcZ+fcg9nBEBfQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:32 2026 by rpki-client