$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: OpFnUE0pSBYIMPDzC66qBvitP/wt1UFsLZennJRDze4= Subject key identifier: 17:E4:3B:51:78:94:B9:41:65:84:34:BC:B4:B1:FB:57:6A:8A:29:32 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 695C8E53E9E466B3399E91BD753ABB17E025CC97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 23:10:31 +0000 Manifest this update: Sun 19 Jul 2026 23:05:31 +0000 Manifest next update: Tue 21 Jul 2026 01:45:31 +0000 Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 3: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: VE0gyI7Bviis1g63IZkyTckAoMEs4/AkkNneJc8jhXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 01:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5c:8e:53:e9:e4:66:b3:39:9e:91:bd:75:3a:bb:17:e0:25:cc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Jul 19 23:05:31 2026 GMT Not After : Jul 21 01:45:31 2026 GMT Subject: CN=17E43B517894B941658434BCB4B1FB576A8A2932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:55:0e:ab:d3:2b:d9:b3:46:d1:c8:1b:17: 2c:92:75:16:31:f1:9d:c6:b3:53:57:4b:34:1a:5b: d1:8f:18:07:b1:86:05:72:ce:d8:b6:ee:3b:0e:b6: 12:06:9c:23:e4:69:aa:8d:d2:70:f3:a5:0c:70:05: b9:a7:1c:e9:21:1e:f5:44:6c:d6:a9:3e:df:88:2a: e5:97:1c:e1:77:1e:e5:81:6e:f7:82:4b:9d:06:76: cd:25:13:da:91:0c:11:76:71:f6:23:d8:06:d2:db: eb:12:1d:c8:5c:74:d5:10:60:53:3f:a7:1a:03:4e: 40:71:89:87:2b:c0:cd:a8:aa:f2:77:da:e6:47:8f: 6a:27:4e:3a:76:b4:d0:25:9b:29:6d:28:8e:ed:7d: 4d:a0:76:f2:b7:fb:9a:36:e5:04:b8:c9:95:12:60: e8:fe:64:36:cf:76:86:dd:01:49:fb:c5:31:e7:5a: d2:27:fe:f6:52:52:5b:5f:bf:42:50:bd:9d:9d:a8: ee:34:d2:70:c9:24:e7:e4:56:22:15:38:ef:1b:fd: a1:ea:32:e1:19:33:ab:93:fa:f1:82:8f:4e:5c:bf: c2:d3:45:41:ef:db:0b:1a:56:10:05:a4:5a:aa:07: 8d:f0:ca:e4:02:f8:f8:b4:16:fc:34:86:21:ee:90: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E4:3B:51:78:94:B9:41:65:84:34:BC:B4:B1:FB:57:6A:8A:29:32 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:08:1f:5b:43:7b:43:d5:20:8b:d5:72:f9:5f:65:36:5e:ab: 3b:4e:34:6e:fe:65:c7:1d:41:81:10:6d:a9:f1:ba:53:24:65: 78:b0:53:92:d1:d4:82:fb:ae:6e:5a:f4:aa:88:ca:87:59:4b: e6:d5:74:e4:ac:7c:95:e1:f5:d5:96:15:8c:fc:ef:d8:95:dd: 43:8d:6b:cd:b9:c3:99:69:37:06:e1:f1:60:e0:f8:ab:b6:70: 0c:17:65:b4:f7:97:43:38:9b:09:6c:b8:3a:7a:24:3f:12:c6: 08:8f:65:30:23:70:93:a2:fc:ae:37:c8:8f:34:ac:8f:00:b2: c0:24:2b:45:36:42:50:28:4d:9c:88:b2:21:e0:fc:e2:d3:6d: a4:d7:a5:d9:67:08:75:27:59:c1:a5:15:5d:2d:9f:20:5b:fe: b5:c5:d1:8a:30:25:c3:72:71:d1:b5:2d:ba:c9:cc:bf:a2:ac: 1b:5e:bb:13:ca:1d:04:74:68:76:08:60:77:50:ee:26:aa:9c: 44:af:77:9f:c6:6e:a2:1c:40:f2:9a:cd:d6:33:34:8d:aa:be: f2:a0:ca:cc:db:36:de:1d:5d:a7:34:24:03:a3:b0:9e:c6:c5: ca:ab:47:1e:77:70:e1:8f:c3:2b:fd:0f:a7:75:e1:ba:f5:23: df:61:e2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVyOU+nkZrM5npG9dTq7F+AlzJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA3MTkyMzA1MzFaFw0yNjA3MjEwMTQ1MzFaMDMxMTAvBgNV BAMTKDE3RTQzQjUxNzg5NEI5NDE2NTg0MzRCQ0I0QjFGQjU3NkE4QTI5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcFUOq9Mr2bNG0cgbFyySdRYx 8Z3Gs1NXSzQaW9GPGAexhgVyzti27jsOthIGnCPkaaqN0nDzpQxwBbmnHOkhHvVE bNapPt+IKuWXHOF3HuWBbveCS50Gds0lE9qRDBF2cfYj2AbS2+sSHchcdNUQYFM/ pxoDTkBxiYcrwM2oqvJ32uZHj2onTjp2tNAlmyltKI7tfU2gdvK3+5o25QS4yZUS YOj+ZDbPdobdAUn7xTHnWtIn/vZSUltfv0JQvZ2dqO400nDJJOfkViIVOO8b/aHq MuEZM6uT+vGCj05cv8LTRUHv2wsaVhAFpFqqB43wyuQC+Pi0Fvw0hiHukGuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF+Q7UXiUuUFlhDS8tLH7V2qKKTIwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIIH1tDe0PVIIvVcvlfZTZeqztONG7+Zccd QYEQbanxulMkZXiwU5LR1IL7rm5a9KqIyodZS+bVdOSsfJXh9dWWFYz879iV3UON a825w5lpNwbh8WDg+Ku2cAwXZbT3l0M4mwlsuDp6JD8SxgiPZTAjcJOi/K43yI80 rI8AssAkK0U2QlAoTZyIsiHg/OLTbaTXpdlnCHUnWcGlFV0tnyBb/rXF0YowJcNy cdG1LbrJzL+irBteuxPKHQR0aHYIYHdQ7iaqnESvd5/GbqIcQPKazdYzNI2qvvKg yszbNt4dXac0JAOjsJ7GxcqrRx53cOGPwyv9D6d14br1I99h4u8= -----END CERTIFICATE-----Generated at Mon Jul 20 04:49:47 2026 by rpki-client