$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft File: 228D8D937BBC58B186163CE4DD0333EF171136B5.mft (raw, json) Hash identifier: 2VLtgpRUvehGKWCILSg9qQa324T3VFnDwuhmilv03+k= Subject key identifier: 1A:13:13:95:13:C2:07:33:0E:6E:C4:35:AE:40:87:0F:0E:FC:DD:50 Authority key identifier: 22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 Certificate issuer: /CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Certificate serial: 1BD3864FB91C456B69D2DB2B12DAC617FC32A654 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:05:03 +0000 Manifest this update: Mon 20 Jul 2026 19:00:03 +0000 Manifest next update: Tue 21 Jul 2026 21:01:03 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: MTpdy0CYG7SIZe6cOf6a6b9EOLMRkXO/tTUBIEJ2xwQ=) 2: 228D8D937BBC58B186163CE4DD0333EF171136B5.crl (hash: EYdL/3ChNSwPORxr2hUW6IzJ7A/D7pLU8nRH1jGYVqU=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Dk+nSXFZDNacuokslAhQOKnR2rRHLun2ihG3BWOPCgU=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: JM/02KXvppUFA6M2lfoMyS0PaD1KXTG0P2tE2Kswrq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:86:4f:b9:1c:45:6b:69:d2:db:2b:12:da:c6:17:fc:32:a6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Validity Not Before: Jul 20 19:00:03 2026 GMT Not After : Jul 21 21:01:03 2026 GMT Subject: CN=1A13139513C207330E6EC435AE40870F0EFCDD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:83:7b:39:10:98:40:f4:97:69:cb:81:61: c7:a8:52:c7:db:99:26:f9:5a:cf:09:bd:8a:9b:f8: c5:38:f2:cf:19:9e:25:a1:f6:30:0d:f2:b7:b7:ae: ba:f3:2b:17:42:cb:47:a6:d6:fb:17:ab:89:3a:0d: 63:7e:d8:28:18:9d:af:2d:6c:55:b4:d3:64:6c:23: 32:0f:2b:09:48:96:14:fb:37:65:c8:39:75:da:90: 84:dc:f3:22:9e:91:ab:28:70:c4:c0:68:73:33:10: f9:ef:ba:c0:3b:36:5d:a3:b6:e6:eb:7f:a6:12:f9: 63:e2:22:25:30:e0:11:1d:1b:06:1e:2c:52:1b:0a: 26:3d:b5:e7:e1:c4:3c:07:c3:04:07:d9:f5:df:03: 57:8a:ca:08:37:99:4f:18:a8:fc:d0:79:e8:3c:e8: 39:76:58:6d:ff:57:7d:b9:2c:22:af:6e:25:fe:c3: 0c:34:6f:ac:14:fd:5f:35:e2:f4:53:e4:c4:1e:25: dc:00:be:06:08:6c:a5:24:e1:0b:a0:cf:d5:b6:25: 37:34:04:3f:36:cd:df:e2:64:5e:7e:b3:14:7b:bb: 88:d3:fa:ab:a5:4f:2f:1b:94:23:28:24:c1:15:eb: 44:27:0b:77:db:d5:b4:5f:29:80:da:98:11:b6:db: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:13:95:13:C2:07:33:0E:6E:C4:35:AE:40:87:0F:0E:FC:DD:50 X509v3 Authority Key Identifier: keyid:22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b8:f4:e6:8e:67:70:57:bb:4a:ef:68:66:3c:c3:1e:2c:b1: bc:cd:8f:85:3f:00:30:94:b7:58:6e:41:cb:38:b9:d8:06:b0: 1b:66:4d:85:42:4a:a8:5d:ea:cd:1a:ec:5b:52:f4:94:45:b2: 1b:4c:3d:d0:ee:ba:a0:68:9a:7a:6a:7a:5b:f5:6f:68:07:71: 81:e2:a7:fe:d3:3a:a3:4e:1e:eb:92:9b:da:a6:d6:e8:23:31: de:7e:6d:7e:5a:d7:b1:45:13:63:2d:d2:d1:d7:53:f0:e7:94: ca:21:91:20:d6:65:91:88:b5:26:84:34:5d:9a:c2:84:1f:8d: 22:67:fa:fb:80:72:bf:ac:ff:97:de:76:74:a1:ab:5f:de:8f: 05:25:dc:4c:9a:10:51:aa:6b:23:3d:d2:dd:85:de:a7:79:19: 6f:14:46:2e:a1:6a:bb:11:bf:e4:ca:7b:49:59:f3:3b:f9:ac: 31:75:0c:3a:e4:c2:e9:c5:cd:7c:99:44:f5:7f:06:49:87:86: 7d:a6:7e:af:69:3f:73:9f:8e:b7:06:05:d4:f5:38:65:60:ae: 0a:15:4e:a0:22:c5:24:73:00:9c:c4:0d:3a:f0:2a:1e:c2:ff: 98:1c:ac:ee:d3:13:81:00:46:75:73:05:e3:73:3c:51:7a:65: 44:83:20:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9OGT7kcRWtp0tsrEtrGF/wyplQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYx NzExMzZCNTAeFw0yNjA3MjAxOTAwMDNaFw0yNjA3MjEyMTAxMDNaMDMxMTAvBgNV BAMTKDFBMTMxMzk1MTNDMjA3MzMwRTZFQzQzNUFFNDA4NzBGMEVGQ0RENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiroN7ORCYQPSXacuBYceoUsfb mSb5Ws8JvYqb+MU48s8ZniWh9jAN8re3rrrzKxdCy0em1vsXq4k6DWN+2CgYna8t bFW002RsIzIPKwlIlhT7N2XIOXXakITc8yKekasocMTAaHMzEPnvusA7Nl2jtubr f6YS+WPiIiUw4BEdGwYeLFIbCiY9tefhxDwHwwQH2fXfA1eKygg3mU8YqPzQeeg8 6Dl2WG3/V325LCKvbiX+www0b6wU/V814vRT5MQeJdwAvgYIbKUk4Qugz9W2JTc0 BD82zd/iZF5+sxR7u4jT+qulTy8blCMoJMEV60QnC3fb1bRfKYDamBG222yzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhMTlRPCBzMObsQ1rkCHDw783VAwHwYDVR0j BBgwFoAUIo2Nk3u8WLGGFjzk3QMz7xcRNrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDliODk5YWMtNDg3MC00ZTI4LThlNGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3 QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYxNzExMzZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjhEOEQ5MzdCQkM1OEIxODYxNjNDRTRERDAzMzNFRjE3MTEz NkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMz RUYxNzExMzZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy49OaOZ3BXu0rvaGY8wx4ssbzNj4U/ADCU t1huQcs4udgGsBtmTYVCSqhd6s0a7FtS9JRFshtMPdDuuqBomnpqelv1b2gHcYHi p/7TOqNOHuuSm9qm1ugjMd5+bX5a17FFE2Mt0tHXU/DnlMohkSDWZZGItSaENF2a woQfjSJn+vuAcr+s/5fednShq1/ejwUl3EyaEFGqayM90t2F3qd5GW8URi6harsR v+TKe0lZ8zv5rDF1DDrkwunFzXyZRPV/BkmHhn2mfq9pP3OfjrcGBdT1OGVgrgoV TqAixSRzAJzEDTrwKh7C/5gcrO7TE4EARnVzBeNzPFF6ZUSDIOQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:48 2026 by rpki-client