$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: R9oVAXyqMvz19zI+vXLzAaHWODPQfWDccHuYQZG9RlE= Subject key identifier: 2C:9A:FF:E3:E2:3E:A8:0D:18:8D:15:28:17:BC:EA:D4:B3:3F:58:46 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 7782B1ECA98293C9A48036707B79953C5B9C2D62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:22:29 +0000 Manifest this update: Tue 21 Jul 2026 01:17:29 +0000 Manifest next update: Wed 22 Jul 2026 01:42:29 +0000 Files and hashes: 1: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: v5r/gLLlHq3oau8JnKipfGsEIMNRlY46jVCxUHYtpLc=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:82:b1:ec:a9:82:93:c9:a4:80:36:70:7b:79:95:3c:5b:9c:2d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Jul 21 01:17:29 2026 GMT Not After : Jul 22 01:42:29 2026 GMT Subject: CN=2C9AFFE3E23EA80D188D152817BCEAD4B33F5846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:d3:0a:cd:c0:97:38:4f:ea:a3:bd:fa:01: eb:0b:07:20:00:6b:aa:d1:00:7a:0d:42:13:e6:45: d3:81:9f:9f:c9:39:f8:9d:f4:e8:f9:63:a6:8e:59: de:bb:a3:d6:5b:b7:3b:42:87:4b:f2:da:5a:76:36: a3:33:b3:ed:33:5c:ba:72:f8:a9:82:2a:a4:fd:b6: 20:f6:3a:f2:09:50:68:fc:17:e5:4f:c0:06:18:bf: df:46:71:42:9c:5f:54:c8:8e:b7:90:06:90:af:95: a5:79:85:49:46:5c:dc:c3:d8:f7:38:bc:7b:ae:c4: 57:df:98:fd:40:80:d2:fd:01:2c:9d:f1:90:76:31: 82:dc:84:16:0b:19:7a:ac:2f:32:0d:f2:d5:19:94: 5e:95:f5:2a:7c:a7:61:fd:cd:96:3b:06:d7:07:00: 97:ff:0d:ab:ea:d8:84:c0:6c:85:7a:7a:36:a6:12: 54:4b:46:34:10:1c:09:e0:f7:7f:cf:cc:31:c4:3d: 82:9e:97:ec:84:93:f1:fa:98:b7:ec:ca:2b:be:eb: 27:f7:61:b4:ad:b6:0f:5f:f7:60:47:da:8c:e2:7a: 5d:32:fe:d0:f7:3c:24:df:e7:7a:b4:ad:9c:a8:c7: e8:00:3c:89:86:9f:e3:ab:60:b4:cf:fc:2f:70:d0: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:FF:E3:E2:3E:A8:0D:18:8D:15:28:17:BC:EA:D4:B3:3F:58:46 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:10:8c:51:f0:51:6c:8d:90:fe:2b:97:7a:f1:a2:57:bc:d3: 27:f8:8e:f7:29:27:b6:d2:2f:00:f4:77:2c:44:e0:28:3e:f5: 8b:ea:7d:63:50:99:3a:d7:49:b0:26:47:f9:01:95:06:22:23: b8:27:ed:f7:4a:b1:68:78:98:b4:6e:c6:6e:dd:eb:f4:2e:c1: 04:91:59:51:bb:41:45:23:b6:75:fe:03:cc:c9:45:17:1e:72: 28:1e:c0:33:39:6e:9a:75:dc:97:70:9d:2a:9e:32:76:a5:22: a9:8f:7c:a5:04:fd:2a:ae:8d:95:dc:6b:f2:6d:b3:b4:70:85: ea:f4:d5:d0:39:e9:ff:12:99:09:bd:4e:d5:24:fd:eb:6e:74: dd:f3:70:33:e3:76:a9:46:3a:ca:0a:74:3b:5a:f6:40:e5:a3: e3:c7:e9:48:fd:81:b2:c3:93:5f:b9:a6:95:d3:6b:62:bb:e8: 1e:38:76:52:f1:6b:53:16:db:4a:43:16:8d:70:4e:17:fa:c0: 2e:ae:df:a0:a8:fb:fd:f8:27:27:1f:8c:8a:9a:2a:64:e6:3d: d5:16:41:29:bd:d8:d1:51:b6:80:29:00:d6:45:13:02:f9:89: bc:04:30:86:04:52:79:d3:9c:be:7d:98:64:62:36:b0:ca:a8: 1a:ce:ae:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4Kx7KmCk8mkgDZwe3mVPFucLWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA3MjEwMTE3MjlaFw0yNjA3MjIwMTQyMjlaMDMxMTAvBgNV BAMTKDJDOUFGRkUzRTIzRUE4MEQxODhEMTUyODE3QkNFQUQ0QjMzRjU4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDctMKzcCXOE/qo736AesLByAA a6rRAHoNQhPmRdOBn5/JOfid9Oj5Y6aOWd67o9ZbtztCh0vy2lp2NqMzs+0zXLpy +KmCKqT9tiD2OvIJUGj8F+VPwAYYv99GcUKcX1TIjreQBpCvlaV5hUlGXNzD2Pc4 vHuuxFffmP1AgNL9ASyd8ZB2MYLchBYLGXqsLzIN8tUZlF6V9Sp8p2H9zZY7BtcH AJf/Davq2ITAbIV6ejamElRLRjQQHAng93/PzDHEPYKel+yEk/H6mLfsyiu+6yf3 YbSttg9f92BH2oziel0y/tD3PCTf53q0rZyox+gAPImGn+OrYLTP/C9w0C2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJr/4+I+qA0YjRUoF7zq1LM/WEYwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoQjFHwUWyNkP4rl3rxole80yf4jvcpJ7bS LwD0dyxE4Cg+9YvqfWNQmTrXSbAmR/kBlQYiI7gn7fdKsWh4mLRuxm7d6/QuwQSR WVG7QUUjtnX+A8zJRRcecigewDM5bpp13JdwnSqeMnalIqmPfKUE/SqujZXca/Jt s7Rwher01dA56f8SmQm9TtUk/etudN3zcDPjdqlGOsoKdDta9kDlo+PH6Uj9gbLD k1+5ppXTa2K76B44dlLxa1MW20pDFo1wThf6wC6u36Co+/34JycfjIqaKmTmPdUW QSm92NFRtoApANZFEwL5ibwEMIYEUnnTnL59mGRiNrDKqBrOrrk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:22 2026 by rpki-client