$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft File: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json) Hash identifier: II+X1N+9jWb945c4TRji4l+5h74+jv9brf7ypILomug= Subject key identifier: D0:18:44:B3:A5:C8:6A:60:52:21:D3:D6:CC:55:25:E1:B9:BB:DE:D5 Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Certificate serial: 101CE8CCBD0FBF1F64CDDEEB3FF596A51ECB2C06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:58:15 +0000 Manifest this update: Mon 20 Jul 2026 21:53:15 +0000 Manifest next update: Tue 21 Jul 2026 23:30:15 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=) 2: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: 4ODHSP39nr3QmarA4KmKIIlzgQc7xmLkLTZFeXOZkyU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1c:e8:cc:bd:0f:bf:1f:64:cd:de:eb:3f:f5:96:a5:1e:cb:2c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Validity Not Before: Jul 20 21:53:15 2026 GMT Not After : Jul 21 23:30:15 2026 GMT Subject: CN=D01844B3A5C86A605221D3D6CC5525E1B9BBDED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2c:16:67:cf:55:76:39:bf:6a:3b:e6:d3:45: 0c:50:01:82:1a:45:8e:69:f8:b6:ea:c3:89:71:f5: de:9e:d7:16:d0:a3:d6:63:9c:00:7a:08:69:77:2d: f5:94:1a:49:d9:eb:fa:c9:f9:8d:35:ec:7b:21:3d: 0c:76:32:5d:b6:25:6d:a1:28:ca:29:a7:fd:45:65: e4:c8:f8:ae:44:a7:49:a0:67:06:82:e1:81:91:57: f5:bd:63:12:a5:f9:e5:18:d3:53:12:ce:81:b2:f7: 94:73:9e:bc:37:65:48:27:45:fa:86:92:2b:25:fb: a2:2a:4e:ee:20:84:e0:32:5e:61:bb:ff:05:2a:76: 77:48:6a:9c:ee:50:6c:97:06:44:f0:a3:54:a3:72: 97:a7:6d:d3:b3:2d:a5:2d:14:fe:9f:6f:01:bf:39: 10:1d:49:ef:37:ba:e7:17:62:e7:3d:c9:c3:65:9f: eb:4e:c0:93:8b:6f:84:fe:f6:d3:8a:0b:60:20:b1: 90:7d:a1:97:76:53:57:63:5d:57:33:06:30:0a:f7: 57:df:35:7c:22:e7:44:eb:22:45:16:ec:e9:38:6a: 6d:a1:7e:6a:20:c1:ee:92:a9:14:dc:e4:91:b7:7d: 4a:b4:73:10:53:eb:c6:00:11:bd:f6:82:26:ad:a4: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:18:44:B3:A5:C8:6A:60:52:21:D3:D6:CC:55:25:E1:B9:BB:DE:D5 X509v3 Authority Key Identifier: keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a5:81:8c:12:0e:06:4f:12:59:aa:e9:33:11:e3:ad:2e:a0: 91:93:df:22:93:38:6c:f2:96:22:8e:e3:4b:d4:ac:1a:88:cc: 8b:03:f7:6c:4d:26:b1:61:39:09:a4:50:c4:7a:a8:ba:a3:70: 17:4f:ce:34:89:01:95:b6:35:39:f0:f9:2e:0a:94:95:25:22: 2c:6c:7a:c6:a7:21:cb:c0:5f:be:b9:ec:0f:85:33:33:87:3e: 61:a3:ac:18:fa:eb:27:4a:46:17:15:9c:e9:3b:45:cc:10:79: 42:ac:b2:42:be:1c:d1:0f:1e:1b:47:c3:a0:2f:69:a6:ba:99: ad:a4:a1:88:5f:72:86:52:d9:8b:ea:c5:85:23:38:71:7c:aa: 12:73:ca:1a:60:6b:0c:63:1a:56:7f:3a:f4:6f:c6:84:6b:bd: ed:fc:fd:aa:92:da:e8:20:bf:16:db:0c:b2:01:6f:a8:22:d0: 02:e7:ba:09:8e:47:84:01:9a:3a:d5:11:4f:99:c0:18:33:0f: 7c:52:f3:8e:c8:5f:dc:ce:0c:0b:6b:f7:0b:90:7d:7d:78:15: 5a:da:73:18:ab:2d:00:7a:b1:7f:94:dc:5c:97:28:05:13:25: 7c:ad:97:2d:f7:07:ea:03:9a:dd:62:71:60:c4:69:20:1a:c3: 06:b1:60:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBzozL0Pvx9kzd7rP/WWpR7LLAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx MjQwMkM4MDAeFw0yNjA3MjAyMTUzMTVaFw0yNjA3MjEyMzMwMTVaMDMxMTAvBgNV BAMTKEQwMTg0NEIzQTVDODZBNjA1MjIxRDNENkNDNTUyNUUxQjlCQkRFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkLBZnz1V2Ob9qO+bTRQxQAYIa RY5p+Lbqw4lx9d6e1xbQo9ZjnAB6CGl3LfWUGknZ6/rJ+Y017HshPQx2Ml22JW2h KMopp/1FZeTI+K5Ep0mgZwaC4YGRV/W9YxKl+eUY01MSzoGy95Rznrw3ZUgnRfqG kisl+6IqTu4ghOAyXmG7/wUqdndIapzuUGyXBkTwo1SjcpenbdOzLaUtFP6fbwG/ ORAdSe83uucXYuc9ycNln+tOwJOLb4T+9tOKC2AgsZB9oZd2U1djXVczBjAK91ff NXwi50TrIkUW7Ok4am2hfmogwe6SqRTc5JG3fUq0cxBT68YAEb32giatpOiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BhEs6XIamBSIdPWzFUl4bm73tUwHwYDVR0j BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy QzgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYy QzAxMjQwMkM4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqlgYwSDgZPElmq6TMR460uoJGT3yKTOGzy liKO40vUrBqIzIsD92xNJrFhOQmkUMR6qLqjcBdPzjSJAZW2NTnw+S4KlJUlIixs esanIcvAX7657A+FMzOHPmGjrBj66ydKRhcVnOk7RcwQeUKsskK+HNEPHhtHw6Av aaa6ma2koYhfcoZS2YvqxYUjOHF8qhJzyhpgawxjGlZ/OvRvxoRrve38/aqS2ugg vxbbDLIBb6gi0ALnugmOR4QBmjrVEU+ZwBgzD3xS847IX9zODAtr9wuQfX14FVra cxirLQB6sX+U3FyXKAUTJXytly33B+oDmt1icWDEaSAawwaxYJ0= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:15 2026 by rpki-client