$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: XaH/PSGrqai4NFYetWbLMfMQf+H9jtnxj4ehyWCPvac= Subject key identifier: A8:CE:CD:47:F6:E9:60:80:DB:C0:58:63:7F:18:65:11:4F:78:45:7A Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 332E5CA22026204BAE55970F06F7EFC1BB40EE8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:35:46 +0000 Manifest this update: Mon 20 Jul 2026 15:30:46 +0000 Manifest next update: Tue 21 Jul 2026 18:43:46 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 4: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: zTz38rcM3oizkG32trcuw+CvPF9a8zIzWx3xYyiKja0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2e:5c:a2:20:26:20:4b:ae:55:97:0f:06:f7:ef:c1:bb:40:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Jul 20 15:30:46 2026 GMT Not After : Jul 21 18:43:46 2026 GMT Subject: CN=A8CECD47F6E96080DBC058637F1865114F78457A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:c4:76:99:5c:4f:73:7b:c0:42:f0:0d:30: c6:91:10:78:53:1f:29:cf:76:64:ab:36:ca:7f:1b: e4:5b:49:b4:9f:31:f5:7c:0f:51:51:e6:ea:a4:08: d3:4d:cb:7b:aa:00:6c:f1:fd:36:93:e1:0f:37:0f: f6:91:f8:93:3c:b3:0e:24:80:b0:b1:84:fd:8e:44: 2a:bc:b3:4e:59:33:37:80:75:7b:cb:a5:d5:f3:c7: a3:ac:2c:8e:9d:59:0b:c6:43:0c:28:b3:52:41:b6: e2:9a:6b:94:d2:e7:dd:71:2e:b6:60:8b:92:60:b6: 1e:5c:f7:0e:7e:60:f4:47:f2:ad:87:37:30:a4:c4: 8e:08:ca:24:e0:7a:f8:cf:61:1b:72:60:41:26:12: fa:ba:ee:69:37:79:9f:2f:54:08:ea:e0:35:9e:e5: 66:a0:99:81:12:d8:72:f7:ba:9b:65:9a:40:7f:d6: 96:a5:f2:95:0e:70:1d:34:3e:17:9a:0d:f9:c4:16: 1c:6a:fe:b6:4d:89:99:b8:fb:6a:78:39:c1:a8:54: d0:46:29:76:5b:4a:09:16:06:c5:9c:8e:cc:bb:40: 3e:ea:4e:8e:09:46:0d:6c:7a:0c:4a:9e:f3:b0:10: 55:39:33:3a:d6:39:92:9e:b1:06:85:df:7a:de:49: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:CD:47:F6:E9:60:80:DB:C0:58:63:7F:18:65:11:4F:78:45:7A X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:96:2d:32:4c:8a:62:4a:78:7f:f5:4b:c5:62:d3:bf:25:a4: 79:e4:8a:60:24:0b:81:8d:0c:ad:ff:a9:cc:ab:9a:8e:a6:6f: 3f:e7:0d:e7:4c:52:99:64:f4:3a:63:57:d5:77:02:4a:9d:5b: c5:12:f7:ac:0c:57:ea:24:90:d8:96:a7:dd:26:1b:90:91:d5: 87:e5:f9:a4:4a:a1:4b:3d:1a:8f:df:1e:05:b1:b8:0a:ac:c6: 81:b7:55:25:b8:a0:b1:3d:60:2d:e2:33:70:c7:43:60:fc:20: d2:f5:e5:06:4f:75:a5:c9:84:27:f5:a3:78:cf:43:86:26:12: d5:e8:cc:87:15:db:fc:7b:f3:4e:57:05:85:ed:78:4c:c3:04: 3c:11:eb:61:e2:0f:6b:5d:e9:86:0f:e4:1a:49:df:01:af:3b: b2:24:9f:ee:95:8f:35:d7:ab:a8:a3:80:6d:7c:55:2f:f0:5d: f4:87:c2:16:2c:20:d2:4a:2b:dc:50:06:b6:c0:92:9e:fd:e6: 1c:97:60:c8:fb:b7:7e:c9:57:e5:33:0d:5b:f5:aa:66:49:f7: 10:b8:12:47:8e:bf:e4:e4:e6:f2:ee:3f:b5:30:ce:c7:fc:43: 56:c2:01:e8:d3:88:de:33:fe:0f:6d:6d:2a:ad:6d:62:89:9b: cf:fe:33:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMy5coiAmIEuuVZcPBvfvwbtA7oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA3MjAxNTMwNDZaFw0yNjA3MjExODQzNDZaMDMxMTAvBgNV BAMTKEE4Q0VDRDQ3RjZFOTYwODBEQkMwNTg2MzdGMTg2NTExNEY3ODQ1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8sR2mVxPc3vAQvANMMaREHhT HynPdmSrNsp/G+RbSbSfMfV8D1FR5uqkCNNNy3uqAGzx/TaT4Q83D/aR+JM8sw4k gLCxhP2ORCq8s05ZMzeAdXvLpdXzx6OsLI6dWQvGQwwos1JBtuKaa5TS591xLrZg i5Jgth5c9w5+YPRH8q2HNzCkxI4IyiTgevjPYRtyYEEmEvq67mk3eZ8vVAjq4DWe 5WagmYES2HL3uptlmkB/1pal8pUOcB00PheaDfnEFhxq/rZNiZm4+2p4OcGoVNBG KXZbSgkWBsWcjsy7QD7qTo4JRg1segxKnvOwEFU5MzrWOZKesQaF33reSdFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqM7NR/bpYIDbwFhjfxhlEU94RXowHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2WLTJMimJKeH/1S8Vi078lpHnkimAkC4GN DK3/qcyrmo6mbz/nDedMUplk9DpjV9V3AkqdW8US96wMV+okkNiWp90mG5CR1Yfl +aRKoUs9Go/fHgWxuAqsxoG3VSW4oLE9YC3iM3DHQ2D8INL15QZPdaXJhCf1o3jP Q4YmEtXozIcV2/x7805XBYXteEzDBDwR62HiD2td6YYP5BpJ3wGvO7Ikn+6VjzXX q6ijgG18VS/wXfSHwhYsINJKK9xQBrbAkp795hyXYMj7t37JV+UzDVv1qmZJ9xC4 EkeOv+Tk5vLuP7Uwzsf8Q1bCAejTiN4z/g9tbSqtbWKJm8/+M74= -----END CERTIFICATE-----Generated at Tue Jul 21 06:31:54 2026 by rpki-client