$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft File: DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json) Hash identifier: wkbY+Bn98wHPXxT4arro1GCoVeuGKghrz8wOuPJEWu0= Subject key identifier: 65:C1:B9:DF:A7:60:C7:4B:54:D5:FD:F4:24:1D:1C:EB:95:D1:74:40 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 3F95B0E100E810E404961494E966828C8C28F5C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:57:29 +0000 Manifest this update: Mon 20 Jul 2026 16:52:29 +0000 Manifest next update: Tue 21 Jul 2026 20:33:29 +0000 Files and hashes: 1: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: uQ0JsKpTJU+zWeizDfP4TdMDw9fH4wsAOk4n3xKkJw8=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:95:b0:e1:00:e8:10:e4:04:96:14:94:e9:66:82:8c:8c:28:f5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: Jul 20 16:52:29 2026 GMT Not After : Jul 21 20:33:29 2026 GMT Subject: CN=65C1B9DFA760C74B54D5FDF4241D1CEB95D17440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:aa:1c:7d:f5:f1:2b:26:ff:1e:79:e3:22: 06:86:8e:93:79:f3:f4:11:8a:5a:17:de:22:ee:71: 8d:b4:b8:d2:28:6e:0e:41:cb:f4:e0:1a:8d:70:9c: 31:6f:7d:1b:67:91:95:a6:6e:0c:7f:65:ac:2b:e9: 4b:71:ce:91:29:ba:0f:8f:c6:48:2f:c6:01:d3:45: 12:fd:7b:b1:56:bc:cf:93:0b:c2:56:ab:28:84:c5: 1e:e3:3b:ad:25:dc:40:76:ba:23:e8:f2:37:e0:e1: 24:6d:ca:03:47:46:21:1e:34:e6:40:5f:2c:dd:1b: 84:b6:4a:dd:10:e7:da:17:50:06:c6:8d:6e:28:88: 16:04:8b:7c:e5:0f:25:22:84:28:be:0f:6c:aa:69: 93:9d:c0:2d:66:35:36:23:d6:bc:0f:a1:f8:c0:44: 36:6f:c3:2d:d5:10:bd:c1:d7:84:2d:c2:a8:2e:6e: 00:00:d0:15:bc:f9:02:f7:a1:8d:ae:a1:bd:61:1d: c7:2b:89:a4:5d:bb:f6:12:bc:25:62:85:13:73:d4: 91:e6:b5:45:67:62:3c:bc:14:95:c2:6e:18:f5:cb: 64:6f:20:17:10:d7:28:c1:ed:09:d6:ef:ca:eb:d5: e2:26:2d:fb:bd:c3:51:45:91:ef:d7:14:08:25:b3: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C1:B9:DF:A7:60:C7:4B:54:D5:FD:F4:24:1D:1C:EB:95:D1:74:40 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:49:66:4e:13:3c:b6:e1:87:93:40:03:90:5c:f0:2c:7a:0e: c3:17:32:5a:df:74:ba:9a:69:57:38:3b:85:bc:20:fd:ee:a5: 72:a1:77:f4:4d:6c:f7:57:85:8d:47:51:c2:3d:84:ce:1a:e2: 3a:72:01:ec:2d:bd:2d:59:be:2f:70:d2:ae:13:c0:7f:d0:11: e5:de:13:4d:fe:41:0d:08:ff:4f:d2:3f:db:77:be:6e:09:c8: 9f:d7:f7:f1:76:ac:6c:d4:b3:8e:82:ee:87:a7:fb:72:93:2b: 54:de:cf:19:d9:e1:51:21:25:91:a1:a8:a3:19:f2:57:18:e1: bd:21:6a:c8:e7:76:ee:e3:e3:29:0c:ef:df:f5:5a:0f:c8:57: 51:20:5f:f2:f0:a1:9e:7a:67:b5:c9:97:b4:27:70:3e:d9:2d: e1:e9:27:ed:08:be:e1:67:13:00:87:51:a3:6c:ab:d0:8a:d1: b8:ad:be:ed:ad:51:9a:52:f9:ee:76:91:26:17:6d:0c:fa:d2: eb:a8:90:50:af:08:f8:f8:1a:6f:77:b8:51:73:d3:a2:e4:2d: bc:4e:94:9a:95:7c:26:a7:87:7f:69:77:83:f7:3b:af:3c:25: 6f:18:5c:2e:2d:81:b1:65:0e:84:f7:6f:61:d4:29:58:19:02: 3c:ca:77:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5Ww4QDoEOQElhSU6WaCjIwo9cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA3MjAxNjUyMjlaFw0yNjA3MjEyMDMzMjlaMDMxMTAvBgNV BAMTKDY1QzFCOURGQTc2MEM3NEI1NEQ1RkRGNDI0MUQxQ0VCOTVEMTc0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLqocffXxKyb/HnnjIgaGjpN5 8/QRiloX3iLucY20uNIobg5By/TgGo1wnDFvfRtnkZWmbgx/Zawr6UtxzpEpug+P xkgvxgHTRRL9e7FWvM+TC8JWqyiExR7jO60l3EB2uiPo8jfg4SRtygNHRiEeNOZA XyzdG4S2St0Q59oXUAbGjW4oiBYEi3zlDyUihCi+D2yqaZOdwC1mNTYj1rwPofjA RDZvwy3VEL3B14QtwqgubgAA0BW8+QL3oY2uob1hHccriaRdu/YSvCVihRNz1JHm tUVnYjy8FJXCbhj1y2RvIBcQ1yjB7QnW78rr1eImLfu9w1FFke/XFAgls4PJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcG536dgx0tU1f30JB0c65XRdEAwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9JZk4TPLbhh5NAA5Bc8Cx6DsMXMlrfdLqa aVc4O4W8IP3upXKhd/RNbPdXhY1HUcI9hM4a4jpyAewtvS1Zvi9w0q4TwH/QEeXe E03+QQ0I/0/SP9t3vm4JyJ/X9/F2rGzUs46C7oen+3KTK1TezxnZ4VEhJZGhqKMZ 8lcY4b0hasjndu7j4ykM79/1Wg/IV1EgX/LwoZ56Z7XJl7QncD7ZLeHpJ+0IvuFn EwCHUaNsq9CK0bitvu2tUZpS+e52kSYXbQz60uuokFCvCPj4Gm93uFFz06LkLbxO lJqVfCanh39pd4P3O688JW8YXC4tgbFlDoT3b2HUKVgZAjzKd58= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:26 2026 by rpki-client