$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json) Hash identifier: B/oLGM8cMHOzcn8eDgWGg44/Zh81UiRMv0jgqPC8znI= Subject key identifier: A8:A3:B9:64:B0:A7:F2:1E:69:B1:B1:C5:DA:00:3E:8B:1D:D5:DC:5B Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D Certificate serial: 125DFF7FF748FEFD350EF73E71D6C5E3F03871B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:52:07 +0000 Manifest this update: Mon 20 Jul 2026 20:47:07 +0000 Manifest next update: Tue 21 Jul 2026 21:58:07 +0000 Files and hashes: 1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=) 2: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: Q92xRWFMB0f6A5yCgYOz+6CsD3XeNFTZStZmULhLTE4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5d:ff:7f:f7:48:fe:fd:35:0e:f7:3e:71:d6:c5:e3:f0:38:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D Validity Not Before: Jul 20 20:47:07 2026 GMT Not After : Jul 21 21:58:07 2026 GMT Subject: CN=A8A3B964B0A7F21E69B1B1C5DA003E8B1DD5DC5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:1b:38:8e:87:ed:f2:18:aa:81:48:61:f3: 6d:ea:77:6e:f8:24:2e:96:ef:22:8c:68:87:33:ef: 5a:93:5b:b2:bc:6d:97:54:c2:27:a9:2e:d6:c5:0e: fc:db:82:9a:3a:5d:c5:29:71:b7:78:04:6c:95:ee: ff:67:2e:6d:df:8d:e1:f3:6f:66:95:5a:3c:55:d2: 10:a4:9d:fc:81:af:e5:3f:5b:24:c3:f8:a1:67:7f: 1c:a1:9c:12:5a:46:d8:d1:0b:23:df:a8:f7:54:5a: 78:a2:68:7c:c0:16:ee:f5:7b:c5:63:71:3f:e1:76: d3:46:46:02:df:01:c7:a5:59:be:18:bc:6c:92:a6: 64:fd:02:f7:a9:ef:41:ff:b2:ac:b1:93:6a:4f:c9: 9a:34:39:3e:ef:3b:49:b2:c6:e9:dd:31:bd:a6:30: e5:dc:c1:6c:79:53:17:33:42:08:f4:fa:1e:a2:f6: 06:eb:e3:8c:f4:13:b4:79:08:78:3d:14:04:85:28: 92:4c:ba:e0:ed:08:c6:96:30:d4:fb:8f:99:66:d2: bb:14:7d:92:52:8b:4f:ea:b9:ca:65:91:64:61:b1: 8a:ce:f5:d5:5c:11:62:9e:60:7a:8d:c7:b6:d1:42: b1:4c:50:f6:53:11:78:18:30:95:8c:56:f1:9f:cc: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:B9:64:B0:A7:F2:1E:69:B1:B1:C5:DA:00:3E:8B:1D:D5:DC:5B X509v3 Authority Key Identifier: keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ee:08:86:bf:96:01:e0:cc:5d:d5:07:c3:bd:26:37:a9:56: b7:d1:bc:5e:f4:83:d9:68:85:5e:e4:f4:83:6f:48:a1:5e:b5: 71:41:25:37:1f:c4:8b:fb:93:f9:82:04:00:0b:ba:f8:09:bf: ed:38:ba:f4:ed:31:f1:88:a2:95:02:ad:af:f6:5a:35:7b:ed: 21:da:3b:c2:31:71:be:82:ef:dc:fe:25:42:b9:c2:cc:19:ee: 93:19:98:ed:94:aa:18:8e:5c:c9:ad:31:a5:dc:ff:e5:91:4d: 37:3c:d4:ef:f9:15:e3:f7:d4:8b:43:af:f2:d1:09:e8:07:ae: 39:5d:70:ea:0f:55:0c:8f:21:7f:5e:7c:f0:73:75:8a:fc:4e: 05:a9:75:91:4c:70:72:25:0e:65:fc:08:ca:32:dd:78:3a:de: b3:07:ba:dd:88:27:00:e4:27:1e:db:1d:72:29:3c:6b:ae:8a: 71:af:fc:8c:ab:0c:60:48:4d:c9:cf:9a:b7:ae:bd:56:48:22: ce:bb:63:1e:f9:4f:b2:50:fa:f7:a4:8b:94:3a:9e:f8:ed:ae: 3d:67:d2:23:e3:9f:d9:03:33:be:2b:1c:6c:c3:96:88:4a:9f: 27:05:73:95:77:c2:be:6e:c1:99:dd:01:36:70:bb:6a:08:af: 6f:2a:56:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEl3/f/dI/v01Dvc+cdbF4/A4cbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZF NzAzQjI4RDAeFw0yNjA3MjAyMDQ3MDdaFw0yNjA3MjEyMTU4MDdaMDMxMTAvBgNV BAMTKEE4QTNCOTY0QjBBN0YyMUU2OUIxQjFDNURBMDAzRThCMURENURDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqRs4joft8hiqgUhh823qd274 JC6W7yKMaIcz71qTW7K8bZdUwiepLtbFDvzbgpo6XcUpcbd4BGyV7v9nLm3fjeHz b2aVWjxV0hCknfyBr+U/WyTD+KFnfxyhnBJaRtjRCyPfqPdUWniiaHzAFu71e8Vj cT/hdtNGRgLfAcelWb4YvGySpmT9Avep70H/sqyxk2pPyZo0OT7vO0myxundMb2m MOXcwWx5UxczQgj0+h6i9gbr44z0E7R5CHg9FASFKJJMuuDtCMaWMNT7j5lm0rsU fZJSi0/qucplkWRhsYrO9dVcEWKeYHqNx7bRQrFMUPZTEXgYMJWMVvGfzMZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKO5ZLCn8h5psbHF2gA+ix3V3FswHwYDVR0j BBgwFoAUEgmdE3UM4HBPXYfCVeSwVucDso0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdlZjI4YWYtYTlhZS00YzMzLThjOTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3 NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZFNzAzQjI4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjA5OUQxMzc1MENFMDcwNEY1RDg3QzI1NUU0QjA1NkU3MDNC MjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIw NTZFNzAzQjI4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvuCIa/lgHgzF3VB8O9JjepVrfRvF70g9lo hV7k9INvSKFetXFBJTcfxIv7k/mCBAALuvgJv+04uvTtMfGIopUCra/2WjV77SHa O8Ixcb6C79z+JUK5wswZ7pMZmO2UqhiOXMmtMaXc/+WRTTc81O/5FeP31ItDr/LR CegHrjldcOoPVQyPIX9efPBzdYr8TgWpdZFMcHIlDmX8CMoy3Xg63rMHut2IJwDk Jx7bHXIpPGuuinGv/IyrDGBITcnPmreuvVZIIs67Yx75T7JQ+veki5Q6nvjtrj1n 0iPjn9kDM74rHGzDlohKnycFc5V3wr5uwZndATZwu2oIr28qVlM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:34 2026 by rpki-client