$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: cDdmX/R1Ijxar/+5w5yXLqIVVvcrnDJSmle2PDzFGQQ= Subject key identifier: 10:42:5D:62:D3:2A:AB:AB:0C:E8:E6:25:E1:BB:0F:D9:98:F5:C9:79 Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 6391F5BAC0C6FCAE50E6023F74AA939339C116E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 10:59:55 +0000 Manifest this update: Mon 20 Jul 2026 10:54:55 +0000 Manifest next update: Tue 21 Jul 2026 14:42:55 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 2: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: UXNd/xgI2vv7lzT6kp68Ni4q075ODa64Mqqlwm3TOWM=) 3: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:91:f5:ba:c0:c6:fc:ae:50:e6:02:3f:74:aa:93:93:39:c1:16:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Jul 20 10:54:55 2026 GMT Not After : Jul 21 14:42:55 2026 GMT Subject: CN=10425D62D32AABAB0CE8E625E1BB0FD998F5C979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:5e:48:34:0d:cf:dc:5b:84:69:e7:cd:7d: 29:0b:25:69:8d:78:3e:e4:ce:f3:33:28:3a:21:ca: a0:79:6d:ad:97:72:78:d8:7d:79:78:a5:a2:a9:80: be:fc:da:7f:ef:a9:9b:55:01:3a:9a:b4:4e:63:43: 48:f2:52:0a:75:c1:85:be:a3:63:8c:f9:fe:31:12: 3d:38:54:68:31:ce:41:9f:d6:be:94:f0:3c:df:c1: 54:60:66:4d:e2:2a:a0:5a:f3:3e:4d:4c:fe:10:44: a7:17:a2:f0:7c:b7:34:cb:d7:d2:c6:4f:78:a8:e1: 05:eb:52:86:f6:b6:9a:cb:b7:91:62:66:11:08:4e: e7:b0:6f:aa:6c:f5:be:25:cc:f0:03:39:43:58:e8: f3:40:b2:a4:6b:1d:70:ad:6f:26:15:53:65:65:af: 07:98:b2:4a:0b:d4:ea:3a:37:41:98:82:9d:53:57: ec:4f:5d:39:e3:95:d9:1f:17:ef:b8:8c:c9:20:db: 06:c0:5c:28:20:5b:5c:0d:b6:a6:0c:c7:b5:09:e7: be:ac:4f:9a:96:d0:65:ce:f9:26:2a:06:5f:17:d1: ce:5c:56:06:f9:15:e1:61:57:1e:e1:37:62:76:a5: 98:a0:53:de:c0:39:4a:c2:f8:21:8f:91:8c:8b:2b: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:42:5D:62:D3:2A:AB:AB:0C:E8:E6:25:E1:BB:0F:D9:98:F5:C9:79 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9a:fe:10:c5:60:22:d2:c0:6a:ad:b2:96:44:38:e6:5f:e9: 90:9f:b8:ff:2a:e3:b5:a3:6b:06:37:ca:8d:90:e5:17:13:a2: 13:b7:b6:76:ae:f6:c9:15:d1:b1:49:d8:47:9d:6c:96:74:a8: 1a:6e:44:e6:55:ce:dd:33:ff:1f:6e:66:bd:93:51:a3:55:74: fa:ad:ac:0a:0b:66:78:e8:d3:a7:d2:49:da:7b:0a:8f:5a:4e: f6:fb:85:52:aa:35:42:64:7e:d4:0e:14:2f:90:99:b6:bd:78: a1:b0:e3:9b:69:1c:13:6b:c3:63:45:a1:47:d1:18:37:f1:8e: a9:27:91:98:56:4c:6a:d6:65:17:a2:ea:b8:fa:72:e9:f9:c0: f5:6a:fa:b0:77:7a:ab:7a:ea:da:0c:f7:fa:8a:4c:64:31:a7: d8:8e:82:ea:41:a1:0c:bb:f8:91:f7:ff:03:6f:fd:99:d6:04: 2f:62:29:3b:7d:49:48:41:3d:76:ee:c6:e4:38:21:ca:cc:0a: bd:5d:06:d1:f0:c4:f6:0b:6a:c5:b1:4a:37:bb:4a:9b:24:a0: 23:a8:6a:b2:c5:1d:eb:83:96:c4:9a:d0:0a:40:29:99:4c:1f: b9:75:6a:3e:bc:d8:2c:b2:5d:1d:fe:10:f5:9f:09:96:2d:de: 2c:6a:6d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5H1usDG/K5Q5gI/dKqTkznBFuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA3MjAxMDU0NTVaFw0yNjA3MjExNDQyNTVaMDMxMTAvBgNV BAMTKDEwNDI1RDYyRDMyQUFCQUIwQ0U4RTYyNUUxQkIwRkQ5OThGNUM5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxV5INA3P3FuEaefNfSkLJWmN eD7kzvMzKDohyqB5ba2XcnjYfXl4paKpgL782n/vqZtVATqatE5jQ0jyUgp1wYW+ o2OM+f4xEj04VGgxzkGf1r6U8DzfwVRgZk3iKqBa8z5NTP4QRKcXovB8tzTL19LG T3io4QXrUob2tprLt5FiZhEITuewb6ps9b4lzPADOUNY6PNAsqRrHXCtbyYVU2Vl rweYskoL1Oo6N0GYgp1TV+xPXTnjldkfF++4jMkg2wbAXCggW1wNtqYMx7UJ576s T5qW0GXO+SYqBl8X0c5cVgb5FeFhVx7hN2J2pZigU97AOUrC+CGPkYyLK09TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEJdYtMqq6sM6OYl4bsP2Zj1yXkwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2a/hDFYCLSwGqtspZEOOZf6ZCfuP8q47Wj awY3yo2Q5RcTohO3tnau9skV0bFJ2EedbJZ0qBpuROZVzt0z/x9uZr2TUaNVdPqt rAoLZnjo06fSSdp7Co9aTvb7hVKqNUJkftQOFC+Qmba9eKGw45tpHBNrw2NFoUfR GDfxjqknkZhWTGrWZRei6rj6cun5wPVq+rB3eqt66toM9/qKTGQxp9iOgupBoQy7 +JH3/wNv/ZnWBC9iKTt9SUhBPXbuxuQ4IcrMCr1dBtHwxPYLasWxSje7SpskoCOo arLFHeuDlsSa0ApAKZlMH7l1aj682CyyXR3+EPWfCZYt3ixqbQE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:34 2026 by rpki-client