$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: V6gzVTy182qk64jFTg/RaHIQHG+pklLLghVb6pPsIxM= Subject key identifier: 53:2C:C7:20:D3:EB:BB:FF:77:50:63:25:B5:19:5E:6A:1A:A8:C6:A2 Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 2753AB8B9E4AB15FE92A028168EBF04EF4AC859B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 00:21:16 +0000 Manifest this update: Tue 21 Jul 2026 00:16:16 +0000 Manifest next update: Wed 22 Jul 2026 03:12:16 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 2: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: RbbGhqcJlH6VeTcVReRWek9sKGpOj5TWd4b/wci4Ucc=) 3: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:53:ab:8b:9e:4a:b1:5f:e9:2a:02:81:68:eb:f0:4e:f4:ac:85:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Jul 21 00:16:16 2026 GMT Not After : Jul 22 03:12:16 2026 GMT Subject: CN=532CC720D3EBBBFF77506325B5195E6A1AA8C6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:e8:57:15:4c:f7:c7:b4:00:62:02:1e:0c: 54:94:71:0f:24:90:16:e5:dd:16:9f:40:9e:e8:7c: 39:ec:f5:3d:14:ef:5b:43:de:ff:ce:4e:07:b3:27: a6:55:f5:02:68:ad:07:cf:08:52:48:db:56:4f:d5: aa:50:98:75:56:44:81:af:c3:5c:3b:da:84:4d:5b: c9:22:ff:44:d8:01:23:e8:02:6f:8f:62:3b:eb:b2: c9:15:8b:70:8c:ff:29:d3:cb:37:ad:2f:5f:e1:ce: 7e:a3:11:69:7d:f3:42:10:f9:44:63:d1:e4:0c:31: 12:c0:57:a5:d0:04:ba:ba:d1:17:4b:85:9d:9d:4c: fb:16:b0:4d:ed:ff:1a:a6:ad:5e:f5:74:3c:0a:5b: df:c0:de:cf:10:57:b4:e2:c9:ed:1f:05:95:cd:fe: e8:87:79:c7:a0:06:19:4a:c5:f2:b5:d9:76:97:43: 8b:19:ca:6a:45:6e:d0:55:d2:d4:11:85:49:ba:26: d1:cd:dc:1b:6d:ec:03:91:fd:0f:fc:f8:8b:07:ab: 22:fb:60:5a:36:c5:05:d6:89:b3:5c:f5:39:3a:eb: b2:19:b9:5f:b5:da:4e:b8:79:75:f6:c8:ab:6b:c8: 4b:ed:3a:7a:82:82:61:02:96:d1:4e:7a:08:b7:ff: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2C:C7:20:D3:EB:BB:FF:77:50:63:25:B5:19:5E:6A:1A:A8:C6:A2 X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:01:4f:ab:83:73:0c:ab:54:36:89:62:62:81:71:cd:14: d3:99:c9:ca:a6:bd:cc:82:d2:94:0b:b2:6b:87:bb:64:4b:7d: 98:64:3c:48:e1:84:03:0a:1e:ff:45:48:e1:3a:9f:c1:51:ce: 67:a1:43:e3:c5:e3:4f:71:21:88:d4:43:c5:d7:0c:79:c7:04: 43:d8:92:ed:0a:ae:11:d2:b1:df:43:ce:67:ac:ee:59:44:4c: b4:3c:27:36:bb:d8:64:42:d3:0d:92:4a:39:ce:e1:f3:4c:f6: 14:af:65:de:87:c9:3f:4d:b2:30:db:43:a4:12:7a:97:c9:66: 60:e8:68:e0:15:7d:61:3c:51:44:84:bc:37:c3:22:d3:09:8d: 96:39:36:d5:95:41:8d:f5:3d:b4:28:f3:1f:b7:aa:c4:d4:d9: 85:00:32:c7:ed:34:6f:29:d8:1f:09:35:68:ee:cf:92:68:43: 60:55:f1:04:e4:43:40:53:74:e4:44:b4:72:d8:12:d6:f3:2e: 4a:76:72:e1:d0:b4:c2:1d:c4:95:0b:73:1a:b7:28:fe:3a:4d: 1d:9d:c8:a9:83:43:5e:1f:9d:de:96:b0:bf:3d:d4:82:c8:21: 2b:81:cd:99:39:6b:0b:be:cf:9b:cb:5a:10:dd:5b:76:d9:a2: 4b:85:98:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Ori55KsV/pKgKBaOvwTvSshZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA3MjEwMDE2MTZaFw0yNjA3MjIwMzEyMTZaMDMxMTAvBgNV BAMTKDUzMkNDNzIwRDNFQkJCRkY3NzUwNjMyNUI1MTk1RTZBMUFBOEM2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvOhXFUz3x7QAYgIeDFSUcQ8k kBbl3RafQJ7ofDns9T0U71tD3v/OTgezJ6ZV9QJorQfPCFJI21ZP1apQmHVWRIGv w1w72oRNW8ki/0TYASPoAm+PYjvrsskVi3CM/ynTyzetL1/hzn6jEWl980IQ+URj 0eQMMRLAV6XQBLq60RdLhZ2dTPsWsE3t/xqmrV71dDwKW9/A3s8QV7Tiye0fBZXN /uiHecegBhlKxfK12XaXQ4sZympFbtBV0tQRhUm6JtHN3Btt7AOR/Q/8+IsHqyL7 YFo2xQXWibNc9Tk667IZuV+12k64eXX2yKtryEvtOnqCgmECltFOegi3/6CfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUyzHINPru/93UGMltRleahqoxqIwHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9WAU+rg3MMq1Q2iWJigXHNFNOZycqmvcyC 0pQLsmuHu2RLfZhkPEjhhAMKHv9FSOE6n8FRzmehQ+PF409xIYjUQ8XXDHnHBEPY ku0KrhHSsd9Dzmes7llETLQ8Jza72GRC0w2SSjnO4fNM9hSvZd6HyT9NsjDbQ6QS epfJZmDoaOAVfWE8UUSEvDfDItMJjZY5NtWVQY31PbQo8x+3qsTU2YUAMsftNG8p 2B8JNWjuz5JoQ2BV8QTkQ0BTdOREtHLYEtbzLkp2cuHQtMIdxJULcxq3KP46TR2d yKmDQ14fnd6WsL891ILIISuBzZk5awu+z5vLWhDdW3bZokuFmOA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:33:12 2026 by rpki-client