$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json) Hash identifier: Df4WuBc7lWPdwjsKraJKy3kDLSZnUC4Prj0mgEqgoZc= Subject key identifier: D9:CE:C8:66:9B:E4:3E:A9:96:4A:42:96:F5:0B:66:30:79:5B:E8:1A Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Certificate serial: 62D217D8CBDD1094E1020127D6DCD3705A74D056 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 07:04:38 +0000 Manifest this update: Tue 21 Jul 2026 06:59:38 +0000 Manifest next update: Wed 22 Jul 2026 07:42:38 +0000 Files and hashes: 1: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: IA4L6j69HuCu+3Gm5ecK/I/6tSW9EzzhYiHqzzKzxoE=) 2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=) 3: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=) 5: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d2:17:d8:cb:dd:10:94:e1:02:01:27:d6:dc:d3:70:5a:74:d0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6 Validity Not Before: Jul 21 06:59:38 2026 GMT Not After : Jul 22 07:42:38 2026 GMT Subject: CN=D9CEC8669BE43EA9964A4296F50B6630795BE81A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:2d:82:07:a0:bc:a6:0b:10:c8:62:0b:f9: 43:52:8b:d8:2d:93:0d:69:c1:6c:fa:d0:65:c6:d4: 49:24:b1:13:d5:a9:b7:09:11:4a:db:3a:9d:1f:7a: 1b:61:e9:18:c6:a7:84:be:e2:e5:91:a9:9f:f8:af: eb:61:ef:c7:5d:9c:fe:70:d2:30:af:58:ee:5e:d5: 65:50:bd:fc:23:a0:f8:8e:50:5c:ff:c2:1b:b8:2b: f4:d4:87:62:66:fb:26:b8:8d:b8:61:ab:f6:30:0d: 6f:4f:e5:36:5f:ed:61:04:0e:ad:6d:30:84:bb:22: e5:d9:6e:f0:9d:34:e0:35:e4:42:6f:3d:45:78:99: d9:bf:19:18:72:84:be:1c:43:d5:3e:d8:b2:ff:35: a5:13:11:6a:5e:ad:40:5f:fd:49:3b:ea:e0:f8:79: 12:3f:e8:a8:d8:4d:26:25:d9:47:6b:cc:f2:c1:42: 5d:93:d7:25:b7:cd:a1:b3:17:95:a2:27:4a:93:e2: 96:a8:c6:4e:ae:2d:5e:4c:02:53:b5:e9:8b:21:67: 8b:7d:82:24:91:0d:bf:80:7d:6b:5c:09:4e:15:e4: 7a:4a:b6:81:47:5f:42:6e:ab:3e:5b:31:97:cd:20: f0:fb:10:80:ef:a7:eb:64:0d:44:06:e5:bb:c3:d8: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CE:C8:66:9B:E4:3E:A9:96:4A:42:96:F5:0B:66:30:79:5B:E8:1A X509v3 Authority Key Identifier: keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:16:90:1a:26:88:90:09:f7:0d:c3:8a:3f:40:9e:ca:e7:46: 0f:9b:ee:d9:f1:ec:8b:f2:a2:4f:1d:c4:be:60:43:e9:0a:4f: 4f:93:c2:e9:8f:19:17:9b:6c:3d:de:a8:9d:bc:d4:e3:9b:16: 21:9a:94:ef:70:bc:f1:a1:50:5a:77:c6:e5:72:a9:1f:cd:86: e7:dd:62:97:3a:be:7d:7f:90:63:73:89:bc:b5:e8:91:0d:07: 7f:ce:cb:c7:42:06:c5:77:f4:d8:d1:16:47:3c:8b:db:ed:0c: 05:4d:0f:12:e3:8b:eb:b2:00:cb:26:bd:6a:5e:4d:be:f3:12: ae:ab:34:cf:1c:13:7a:24:de:0a:02:ae:4b:81:d4:5a:67:53: 64:8f:77:e0:9c:ea:e1:f5:9a:5b:85:88:b6:fa:83:85:a2:b7: e4:ef:69:13:0b:84:bd:d9:f0:1a:ad:13:dd:b0:68:32:c3:95: ad:7f:34:c6:df:6b:24:68:08:3d:27:3c:30:2c:4f:2c:76:af: b1:69:4e:b2:c9:70:11:fd:ea:23:2d:ea:40:90:44:47:03:ad: 1f:ee:15:9d:b2:e6:eb:cd:a2:a1:62:33:8c:b3:f6:13:b0:1c: 96:34:66:9d:01:3c:a2:4d:3b:a1:fa:0d:04:4b:1b:de:e4:49: 84:6b:0e:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtIX2MvdEJThAgEn1tzTcFp00FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw RDU1NTlDNjAeFw0yNjA3MjEwNjU5MzhaFw0yNjA3MjIwNzQyMzhaMDMxMTAvBgNV BAMTKEQ5Q0VDODY2OUJFNDNFQTk5NjRBNDI5NkY1MEI2NjMwNzk1QkU4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyS2CB6C8pgsQyGIL+UNSi9gt kw1pwWz60GXG1EkksRPVqbcJEUrbOp0fehth6RjGp4S+4uWRqZ/4r+th78ddnP5w 0jCvWO5e1WVQvfwjoPiOUFz/whu4K/TUh2Jm+ya4jbhhq/YwDW9P5TZf7WEEDq1t MIS7IuXZbvCdNOA15EJvPUV4mdm/GRhyhL4cQ9U+2LL/NaUTEWperUBf/Uk76uD4 eRI/6KjYTSYl2UdrzPLBQl2T1yW3zaGzF5WiJ0qT4paoxk6uLV5MAlO16YshZ4t9 giSRDb+AfWtcCU4V5HpKtoFHX0Juqz5bMZfNIPD7EIDvp+tkDUQG5bvD2DkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2c7IZpvkPqmWSkKW9QtmMHlb6BowHwYDVR0j BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1 OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3 RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQWkBomiJAJ9w3Dij9AnsrnRg+b7tnx7Ivy ok8dxL5gQ+kKT0+TwumPGRebbD3eqJ281OObFiGalO9wvPGhUFp3xuVyqR/Nhufd Ypc6vn1/kGNziby16JENB3/Oy8dCBsV39NjRFkc8i9vtDAVNDxLji+uyAMsmvWpe Tb7zEq6rNM8cE3ok3goCrkuB1FpnU2SPd+Cc6uH1mluFiLb6g4Wit+TvaRMLhL3Z 8BqtE92waDLDla1/NMbfayRoCD0nPDAsTyx2r7FpTrLJcBH96iMt6kCQREcDrR/u FZ2y5uvNoqFiM4yz9hOwHJY0Zp0BPKJNO6H6DQRLG97kSYRrDoo= -----END CERTIFICATE-----Generated at Tue Jul 21 08:31:55 2026 by rpki-client