$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json) Hash identifier: poMqep56HnnIOPDv793V566r+X7eQ2ddrI+UfOEYoI8= Subject key identifier: 4C:29:4C:3F:4E:9D:A3:7B:07:36:E0:56:DC:25:BE:51:83:3E:1B:02 Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Certificate serial: 7479708C315EBA5835C522921500280936195DB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 06:23:43 +0000 Manifest this update: Tue 21 Jul 2026 06:18:43 +0000 Manifest next update: Wed 22 Jul 2026 07:09:43 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=) 2: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: 8pkkDzQbKtXF5eDYFHGNQNWO5J9ODzG3DEvA9hT0F8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:79:70:8c:31:5e:ba:58:35:c5:22:92:15:00:28:09:36:19:5d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Validity Not Before: Jul 21 06:18:43 2026 GMT Not After : Jul 22 07:09:43 2026 GMT Subject: CN=4C294C3F4E9DA37B0736E056DC25BE51833E1B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:c1:03:b3:08:4b:90:56:15:ab:1d:d6:5d: 12:0f:35:2a:03:b6:17:e5:f9:6e:54:a0:60:1c:16: 35:29:9f:78:42:ca:92:fd:5e:c7:6f:d1:44:3c:8c: 76:e0:f3:f1:7e:80:50:c1:7a:f8:b3:58:13:cc:84: f4:a1:3d:d8:ea:b3:2d:6b:0e:0c:2f:39:d2:38:6e: fc:fc:4e:5d:29:a6:47:01:23:97:47:54:e8:b1:97: 52:b5:32:5f:42:ba:0a:65:5e:f3:1c:21:37:ba:5c: 7b:12:ec:c9:a0:0f:d0:3b:86:9a:0c:79:61:1b:cf: a5:b6:85:4a:46:a9:c1:58:dd:72:39:0e:64:55:81: 37:da:5d:56:dc:82:a6:6e:96:93:58:a4:7c:3b:97: 41:33:46:e3:66:06:30:30:87:d2:a4:6e:3e:b1:29: ff:7f:b4:84:70:a9:cd:23:7e:ec:9b:5e:e3:fa:80: a9:3a:bd:2f:48:3e:9b:29:fe:fb:2e:64:f6:3f:d6: 37:d1:ed:0f:ba:67:7d:fe:17:7a:50:e6:54:d2:fa: 74:23:f6:d4:cc:87:ce:cf:09:7a:71:10:03:4e:52: 7d:02:ff:5b:4f:2d:f5:ec:19:d4:04:25:54:d1:21: 77:89:4c:dd:e4:34:49:c2:c5:b4:62:50:59:7c:8e: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:4C:3F:4E:9D:A3:7B:07:36:E0:56:DC:25:BE:51:83:3E:1B:02 X509v3 Authority Key Identifier: keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:61:b2:46:ed:e3:49:87:f2:72:2e:59:6f:0e:7f:ac:71:c4: 27:bd:72:5f:0c:5a:63:5a:f4:e9:5b:b4:2d:d4:54:3c:c2:f7: 59:aa:1e:01:ce:9e:ca:39:70:ff:d6:a6:19:7e:80:21:ca:bc: cb:34:76:ea:00:ad:19:22:16:8b:6d:43:e1:1a:8c:00:73:12: 89:36:e2:8f:6f:e5:1d:48:89:9f:2b:81:96:37:1c:75:89:b8: 8c:4d:f8:b4:c7:c9:f8:cf:16:c4:6e:d4:06:be:a8:76:09:c6: ea:d2:ab:9c:80:aa:27:ed:6a:df:59:49:dc:ab:a8:a9:7c:40: df:e5:0e:2e:1d:78:c2:35:2d:46:b1:ed:f0:46:1d:10:48:ac: 7a:ff:b9:a8:5d:bf:26:b6:49:f5:fa:2e:3d:3f:eb:dc:66:28: 01:38:c2:4b:4f:18:33:c2:84:93:88:8c:3a:5b:ff:da:ac:d4: a2:6d:05:6b:68:24:4d:9a:45:90:a7:8b:e6:18:b5:a5:ad:e4: 44:af:74:5c:b0:b4:78:0e:51:ad:95:da:08:e5:46:d3:6d:e9: e6:6d:11:8a:e4:c6:c8:e7:6b:10:8c:b4:4a:ac:37:9f:53:4e: 67:90:a9:e8:65:b4:0b:a1:80:2d:06:d9:e0:f3:66:7d:a8:4b: 47:be:77:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHlwjDFeulg1xSKSFQAoCTYZXbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE QjYyQzI0MjAeFw0yNjA3MjEwNjE4NDNaFw0yNjA3MjIwNzA5NDNaMDMxMTAvBgNV BAMTKDRDMjk0QzNGNEU5REEzN0IwNzM2RTA1NkRDMjVCRTUxODMzRTFCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdcEDswhLkFYVqx3WXRIPNSoD thfl+W5UoGAcFjUpn3hCypL9Xsdv0UQ8jHbg8/F+gFDBevizWBPMhPShPdjqsy1r DgwvOdI4bvz8Tl0ppkcBI5dHVOixl1K1Ml9CugplXvMcITe6XHsS7MmgD9A7hpoM eWEbz6W2hUpGqcFY3XI5DmRVgTfaXVbcgqZulpNYpHw7l0EzRuNmBjAwh9Kkbj6x Kf9/tIRwqc0jfuybXuP6gKk6vS9IPpsp/vsuZPY/1jfR7Q+6Z33+F3pQ5lTS+nQj 9tTMh87PCXpxEANOUn0C/1tPLfXsGdQEJVTRIXeJTN3kNEnCxbRiUFl8jgBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTClMP06do3sHNuBW3CW+UYM+GwIwHwYDVR0j BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRhskbt40mH8nIuWW8Of6xxxCe9cl8MWmNa 9OlbtC3UVDzC91mqHgHOnso5cP/Wphl+gCHKvMs0duoArRkiFottQ+EajABzEok2 4o9v5R1IiZ8rgZY3HHWJuIxN+LTHyfjPFsRu1Aa+qHYJxurSq5yAqiftat9ZSdyr qKl8QN/lDi4deMI1LUax7fBGHRBIrHr/uahdvya2SfX6Lj0/69xmKAE4wktPGDPC hJOIjDpb/9qs1KJtBWtoJE2aRZCni+YYtaWt5ESvdFywtHgOUa2V2gjlRtNt6eZt EYrkxsjnaxCMtEqsN59TTmeQqehltAuhgC0G2eDzZn2oS0e+d0M= -----END CERTIFICATE-----Generated at Tue Jul 21 11:01:13 2026 by rpki-client