$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft File: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft (raw, json) Hash identifier: tiX7BO4T9WXZFF6uXbDpFUN45UvUeGbdwl3TElwSYbU= Subject key identifier: 7D:AA:63:69:B8:68:8E:8D:C1:F2:98:17:20:CD:3C:59:91:D0:6D:15 Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 Certificate issuer: /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Certificate serial: 4885E4F512D07DF1CF5F5EE5472390C5BF08FE9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:28:08 +0000 Manifest this update: Mon 20 Jul 2026 13:23:08 +0000 Manifest next update: Tue 21 Jul 2026 16:28:08 +0000 Files and hashes: 1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=) 2: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl (hash: bbWvFXrqWXAypT44ktfLrtBA/SFl3c+3JGXvfQQsDwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:85:e4:f5:12:d0:7d:f1:cf:5f:5e:e5:47:23:90:c5:bf:08:fe:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6 Validity Not Before: Jul 20 13:23:08 2026 GMT Not After : Jul 21 16:28:08 2026 GMT Subject: CN=7DAA6369B8688E8DC1F2981720CD3C5991D06D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:1d:32:4b:e5:10:18:70:49:9e:5d:ee:91: 07:e0:d3:f3:c5:c6:e0:5a:38:cb:d0:a2:22:76:f1: 39:bf:81:85:f6:e9:d6:ed:0b:20:56:b2:ed:59:52: 15:f3:c3:6e:f0:38:71:8a:f0:b3:c9:2b:bd:4f:b2: 0e:48:8c:25:24:40:4c:e0:f4:9d:18:53:35:4c:54: 7a:83:6a:df:f9:58:dc:36:41:19:dd:74:86:0c:2b: 5e:8d:8c:97:54:84:40:a8:71:a5:91:cc:e3:24:e3: 49:1f:40:dd:08:56:9a:2a:fa:a9:7d:c3:cd:72:09: 2b:d9:3c:ee:06:d4:1c:e0:51:d8:c6:bb:f9:0b:42: 20:27:dc:c0:82:32:87:cd:a4:2b:1d:bb:31:7a:8a: 9a:db:cf:01:1b:9d:f5:ae:6a:2a:97:59:fa:01:57: b2:21:ee:ba:bf:73:c4:0e:5a:65:54:6a:f3:af:9c: 4c:a7:2c:70:f1:a3:7b:ef:07:17:5c:64:c2:ee:21: a5:95:a9:ac:a8:5e:b8:f7:2f:c1:d6:15:f8:62:8d: 46:c5:58:26:c3:29:fa:a7:0d:27:47:4d:e7:11:d8: 50:dc:62:c6:00:66:7f:b3:f9:54:cc:bf:53:0d:f8: ea:dc:19:62:76:93:e7:bd:43:fe:cc:16:5f:b4:5f: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AA:63:69:B8:68:8E:8D:C1:F2:98:17:20:CD:3C:59:91:D0:6D:15 X509v3 Authority Key Identifier: keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c7:bc:ff:f7:46:ea:fe:7c:41:70:df:7b:3d:2c:1b:97:48: 55:94:fc:1b:dc:04:e8:04:a7:3c:d2:e2:30:da:9a:09:80:51: e9:8c:c8:1d:e8:58:da:e1:10:b2:f1:dd:6f:cd:f9:ee:12:27: ef:69:9b:3b:26:72:92:9d:49:8c:4b:13:c6:1c:ed:7c:da:ed: 24:a8:7b:3c:96:29:36:36:0a:12:e5:86:af:f8:a3:2a:5d:b3: bd:bc:44:e7:d1:46:d9:a3:8b:58:00:4c:24:fc:54:9e:d0:c8: bd:65:7b:88:e9:82:ff:23:76:dc:d6:17:bf:51:b0:3a:5a:fd: 1e:3e:55:2e:4c:37:3d:ff:2a:f3:19:b0:ab:42:99:47:86:b2: 7e:36:2a:d3:59:89:a9:ef:e0:15:a8:dd:e0:a5:9a:6c:c1:a0: d5:ce:8c:bf:ee:85:c7:99:33:82:08:c9:7b:fa:2c:e1:0f:63: 98:19:27:ca:bb:ef:d3:8e:5b:db:cf:30:ca:50:b6:49:8d:a5: 6f:41:fb:fc:05:44:9b:b4:c8:5c:76:88:84:4e:c0:bb:45:1c: e6:7b:11:d4:cb:4e:cd:dd:d7:53:d8:9a:57:14:81:69:9e:22: d8:66:10:ca:dc:13:a7:c8:14:73:b7:5b:ea:19:b9:ef:56:92: 92:d7:04:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIXk9RLQffHPX17lRyOQxb8I/powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1 MEI1MjlGNjAeFw0yNjA3MjAxMzIzMDhaFw0yNjA3MjExNjI4MDhaMDMxMTAvBgNV BAMTKDdEQUE2MzY5Qjg2ODhFOERDMUYyOTgxNzIwQ0QzQzU5OTFEMDZEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUB0yS+UQGHBJnl3ukQfg0/PF xuBaOMvQoiJ28Tm/gYX26dbtCyBWsu1ZUhXzw27wOHGK8LPJK71Psg5IjCUkQEzg 9J0YUzVMVHqDat/5WNw2QRnddIYMK16NjJdUhECocaWRzOMk40kfQN0IVpoq+ql9 w81yCSvZPO4G1BzgUdjGu/kLQiAn3MCCMofNpCsduzF6iprbzwEbnfWuaiqXWfoB V7Ih7rq/c8QOWmVUavOvnEynLHDxo3vvBxdcZMLuIaWVqayoXrj3L8HWFfhijUbF WCbDKfqnDSdHTecR2FDcYsYAZn+z+VTMv1MN+OrcGWJ2k+e9Q/7MFl+0XwrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfapjabhojo3B8pgXIM08WZHQbRUwHwYDVR0j BBgwFoAUDTzMerFnWCCn/bzPRQKXHFC1KfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwOTNhZDYtYjExNS00ZjEwLTg4ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FC MTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1MEI1MjlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDNDQ0M3QUIxNjc1ODIwQTdGREJDQ0Y0NTAyOTcxQzUwQjUy OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3 MUM1MEI1MjlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvHvP/3Rur+fEFw33s9LBuXSFWU/BvcBOgE pzzS4jDamgmAUemMyB3oWNrhELLx3W/N+e4SJ+9pmzsmcpKdSYxLE8Yc7Xza7SSo ezyWKTY2ChLlhq/4oypds728ROfRRtmji1gATCT8VJ7QyL1le4jpgv8jdtzWF79R sDpa/R4+VS5MNz3/KvMZsKtCmUeGsn42KtNZianv4BWo3eClmmzBoNXOjL/uhceZ M4IIyXv6LOEPY5gZJ8q779OOW9vPMMpQtkmNpW9B+/wFRJu0yFx2iIROwLtFHOZ7 EdTLTs3d11PYmlcUgWmeIthmEMrcE6fIFHO3W+oZue9WkpLXBNA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:53:00 2026 by rpki-client