$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: 0B/z83zmJ4Af6ArQ32ZrPgS+fcoZmCEEo5U3f92Ext8= Subject key identifier: 6D:74:EC:45:56:CF:15:C1:52:B4:A4:67:D2:BF:A3:3B:40:85:AA:73 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 44832A947FA49A042E0694227AC05F2578F163A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 01:32:45 +0000 Manifest this update: Tue 21 Jul 2026 01:27:45 +0000 Manifest next update: Wed 22 Jul 2026 03:07:45 +0000 Files and hashes: 1: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 2: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 3: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: kc1sLwe0+OdQqlHGEXf5BDd7c47Keb7n4X2jt09GfuE=) 4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 5: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 6: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 7: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 8: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:83:2a:94:7f:a4:9a:04:2e:06:94:22:7a:c0:5f:25:78:f1:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Jul 21 01:27:45 2026 GMT Not After : Jul 22 03:07:45 2026 GMT Subject: CN=6D74EC4556CF15C152B4A467D2BFA33B4085AA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:37:a5:24:82:39:cc:ef:70:72:d1:16:0f: 7c:c7:37:9d:54:6b:36:0d:6c:d6:16:96:13:b3:4f: d0:2d:09:8a:3f:e6:61:13:3d:eb:64:d1:f0:9b:a4: 00:ff:22:3b:64:3c:04:48:90:62:c6:14:c5:77:7d: b8:09:08:2e:05:24:28:43:60:0f:43:a9:cf:cd:2b: c1:e3:9b:b2:d4:bf:c1:1b:5d:b8:43:56:82:2d:d3: ff:2f:d0:a9:72:39:37:9b:23:6c:e4:96:2e:fc:db: 3b:d4:3f:54:27:4f:41:1e:44:b1:20:50:1b:c0:1b: f9:48:4b:6a:ab:76:40:69:0f:f1:17:54:39:bf:32: c8:b5:17:3a:5c:6f:62:5f:12:12:85:9d:e9:22:a6: 60:f2:31:2c:f2:0b:66:20:7e:e4:d1:47:cf:69:23: a3:1f:7d:0f:fe:a7:a5:b2:ca:15:01:77:b7:87:43: 1c:09:23:68:4c:cf:23:42:34:a2:27:76:e7:e6:96: cf:ef:ad:58:a9:95:99:c2:b5:de:eb:5a:1e:e7:11: 8f:bb:e0:db:1b:49:14:1f:a4:db:8e:71:69:9c:a7: 71:02:a1:26:81:0b:9a:34:53:aa:85:85:48:d8:08: 8e:65:c6:5e:54:4b:ac:f9:69:c0:7d:90:be:06:e1: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:74:EC:45:56:CF:15:C1:52:B4:A4:67:D2:BF:A3:3B:40:85:AA:73 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9c:aa:08:3d:0a:e9:f8:d9:c5:76:10:49:37:b0:6c:c5:e8: 28:62:63:0c:ce:6a:9a:c0:52:ce:33:ca:b4:a1:a2:4f:34:5e: 54:43:f0:cd:9c:2a:76:7d:c9:e0:06:e0:0c:e9:f7:79:f1:ca: 0c:80:0c:94:89:a5:a4:ee:76:a4:f8:b0:59:b7:7c:88:39:a0: e6:13:17:e2:c9:be:0c:d8:34:19:1a:8b:c3:d3:3c:66:35:68: 73:ce:75:c3:ed:54:98:6c:3d:2c:8c:d1:e8:86:ed:97:12:16: a9:f6:44:78:9c:e2:6c:68:db:13:75:ff:f5:ab:e3:c5:d7:39: 09:53:f1:eb:f7:20:11:c0:ad:9d:34:84:5b:20:9e:3d:a4:20: 11:67:aa:b0:5a:be:b6:79:cd:40:5d:62:7c:f2:4f:40:f1:ac: 65:02:25:9e:cd:bd:00:dd:d2:9f:55:f7:12:ec:ae:b5:7f:74: e9:bb:55:a7:a4:65:d4:33:bd:c9:ed:a7:6d:cc:11:5c:cd:a5: ad:8d:25:2e:cc:ca:2e:73:d7:f7:71:0e:c9:68:8d:ba:b7:0c: 73:dc:ba:83:1f:84:b3:a3:98:33:6e:2d:da:c7:4f:bf:71:20: 8d:af:ab:bb:51:b7:47:29:e4:72:0f:78:43:5a:76:50:6b:ea: 18:a4:e0:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIMqlH+kmgQuBpQiesBfJXjxY6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA3MjEwMTI3NDVaFw0yNjA3MjIwMzA3NDVaMDMxMTAvBgNV BAMTKDZENzRFQzQ1NTZDRjE1QzE1MkI0QTQ2N0QyQkZBMzNCNDA4NUFBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVDelJII5zO9wctEWD3zHN51U azYNbNYWlhOzT9AtCYo/5mETPetk0fCbpAD/IjtkPARIkGLGFMV3fbgJCC4FJChD YA9Dqc/NK8Hjm7LUv8EbXbhDVoIt0/8v0KlyOTebI2zkli782zvUP1QnT0EeRLEg UBvAG/lIS2qrdkBpD/EXVDm/Msi1Fzpcb2JfEhKFnekipmDyMSzyC2YgfuTRR89p I6MffQ/+p6WyyhUBd7eHQxwJI2hMzyNCNKIndufmls/vrViplZnCtd7rWh7nEY+7 4NsbSRQfpNuOcWmcp3ECoSaBC5o0U6qFhUjYCI5lxl5US6z5acB9kL4G4codAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXTsRVbPFcFStKRn0r+jO0CFqnMwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCcqgg9Cun42cV2EEk3sGzF6ChiYwzOaprA Us4zyrShok80XlRD8M2cKnZ9yeAG4Azp93nxygyADJSJpaTudqT4sFm3fIg5oOYT F+LJvgzYNBkai8PTPGY1aHPOdcPtVJhsPSyM0eiG7ZcSFqn2RHic4mxo2xN1//Wr 48XXOQlT8ev3IBHArZ00hFsgnj2kIBFnqrBavrZ5zUBdYnzyT0DxrGUCJZ7NvQDd 0p9V9xLsrrV/dOm7VaekZdQzvcntp23MEVzNpa2NJS7Myi5z1/dxDslojbq3DHPc uoMfhLOjmDNuLdrHT79xII2vq7tRt0cp5HIPeENadlBr6hik4Pk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:14 2026 by rpki-client