$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: qXkoztouA2kSPZhi7lk07t6W3zM7aD3NQchK6IXTbwo= Subject key identifier: 12:55:70:D2:AA:33:F9:35:4A:F6:88:A9:1C:7A:96:5E:0D:19:FE:9D Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 211FE143F1015DE92BA05EE03D702FD13A61D41C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:48:34 +0000 Manifest this update: Mon 20 Jul 2026 13:43:34 +0000 Manifest next update: Tue 21 Jul 2026 13:55:34 +0000 Files and hashes: 1: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) 2: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 3: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: vX3qe+hnqxcMoTMzQn73fiCHUdObNT4+yPZMeHT/Z00=) 4: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) 5: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 6: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 7: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 13:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1f:e1:43:f1:01:5d:e9:2b:a0:5e:e0:3d:70:2f:d1:3a:61:d4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: Jul 20 13:43:34 2026 GMT Not After : Jul 21 13:55:34 2026 GMT Subject: CN=125570D2AA33F9354AF688A91C7A965E0D19FE9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:de:87:86:ee:78:05:3e:7c:1e:c8:9c:b2: 9f:a0:30:8d:1c:09:82:9c:ad:be:6b:bf:14:da:eb: e5:de:17:ef:1b:8d:79:e1:72:7c:e6:12:f0:14:60: 41:ba:d1:ce:83:ce:e8:6c:d0:dd:4d:b2:a3:b7:8d: 81:44:7c:c9:05:8c:25:5b:f5:61:bc:b5:36:c2:33: a2:ab:11:d5:c9:b5:b8:ac:de:66:db:dc:5e:fb:00: 80:1e:97:b1:a2:55:2b:11:40:b6:bc:b1:e6:96:32: b3:d7:36:18:99:09:bf:6e:c6:d1:d3:4a:47:93:2a: d3:b6:88:e8:65:08:84:2a:3b:9e:75:65:3a:3a:54: 9b:03:42:b0:a3:2e:44:40:ad:e8:f7:6e:15:68:ad: d7:28:78:71:52:b0:58:7b:e4:18:77:67:c7:90:82: 1b:e2:fe:00:ad:ef:78:ac:b8:0c:42:a0:cc:67:6c: 2a:62:bd:b4:9d:8c:80:38:55:d2:57:cf:8e:7a:e6: 8d:83:7f:09:8c:c0:c9:50:27:5c:1b:7a:b0:49:59: 15:d1:7b:e8:f4:00:2c:84:5e:44:1a:36:87:cd:79: 29:b1:70:69:2b:0f:63:59:9f:6c:23:a8:24:0a:d4: 90:03:6a:2c:47:ce:21:62:74:11:53:9d:78:31:ee: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:70:D2:AA:33:F9:35:4A:F6:88:A9:1C:7A:96:5E:0D:19:FE:9D X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7c:39:67:3c:1f:ef:a1:88:bc:1f:13:48:c1:e7:d3:40:89: 8a:6d:2c:82:b0:8e:77:4b:1d:75:ba:ee:c7:40:ab:eb:52:d3: 0e:da:e7:49:47:d4:4b:44:04:4b:f1:3f:5d:c7:d4:fb:af:37: 00:f7:6b:10:20:12:34:f7:17:39:56:75:bd:d8:ea:40:8d:5f: 5b:fa:d1:f8:75:78:f7:75:35:ab:4e:ea:f0:be:20:1b:b8:c3: 96:d4:56:8a:de:96:82:fd:5e:e1:f0:5b:5d:77:03:1a:75:fd: c2:99:0f:35:71:55:82:13:8f:34:5f:87:5a:42:87:90:03:c9: 36:0d:c5:03:f5:5a:da:f9:66:f3:10:79:86:3e:b5:f9:cc:99: a5:8a:15:a1:ff:0f:f3:22:d1:6d:e4:da:75:13:3a:22:9f:81: 78:07:0e:98:28:47:9e:a7:ea:52:31:fe:df:fa:67:2b:a9:fe: ea:25:0f:33:d8:e1:c9:a5:4b:be:f4:9e:39:ce:56:23:3b:a2: ba:68:d2:c9:a5:eb:8d:f5:fe:4d:ea:91:20:f5:b8:f1:ec:26: 2a:41:da:49:10:27:20:95:3c:15:14:84:97:ae:e0:dc:3b:bd: 07:ab:ca:ef:45:c8:4a:c5:17:dc:2f:b4:b9:b9:87:bd:09:4c: 4f:8a:79:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIR/hQ/EBXekroF7gPXAv0Tph1BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA3MjAxMzQzMzRaFw0yNjA3MjExMzU1MzRaMDMxMTAvBgNV BAMTKDEyNTU3MEQyQUEzM0Y5MzU0QUY2ODhBOTFDN0E5NjVFMEQxOUZFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziN6Hhu54BT58Hsicsp+gMI0c CYKcrb5rvxTa6+XeF+8bjXnhcnzmEvAUYEG60c6Dzuhs0N1NsqO3jYFEfMkFjCVb 9WG8tTbCM6KrEdXJtbis3mbb3F77AIAel7GiVSsRQLa8seaWMrPXNhiZCb9uxtHT SkeTKtO2iOhlCIQqO551ZTo6VJsDQrCjLkRArej3bhVordcoeHFSsFh75Bh3Z8eQ ghvi/gCt73isuAxCoMxnbCpivbSdjIA4VdJXz4565o2DfwmMwMlQJ1wberBJWRXR e+j0ACyEXkQaNofNeSmxcGkrD2NZn2wjqCQK1JADaixHziFidBFTnXgx7m0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElVw0qoz+TVK9oipHHqWXg0Z/p0wHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC18OWc8H++hiLwfE0jB59NAiYptLIKwjndL HXW67sdAq+tS0w7a50lH1EtEBEvxP13H1PuvNwD3axAgEjT3FzlWdb3Y6kCNX1v6 0fh1ePd1NatO6vC+IBu4w5bUVoreloL9XuHwW113Axp1/cKZDzVxVYITjzRfh1pC h5ADyTYNxQP1Wtr5ZvMQeYY+tfnMmaWKFaH/D/Mi0W3k2nUTOiKfgXgHDpgoR56n 6lIx/t/6Zyup/uolDzPY4cmlS770njnOViM7orpo0sml6431/k3qkSD1uPHsJipB 2kkQJyCVPBUUhJeu4Nw7vQeryu9FyErFF9wvtLm5h70JTE+KeYk= -----END CERTIFICATE-----Generated at Tue Jul 21 07:06:58 2026 by rpki-client