$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json) Hash identifier: AwGlDW1c/YoNsQ7eTRfYvGvvoxjE3cHURXL4vTWCZpk= Subject key identifier: 9C:D1:0E:DF:64:7C:0F:DF:45:22:B9:A7:B1:FB:74:9F:5F:3D:34:07 Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Certificate serial: 49A708BE482D559EFC378215853A2CED13F76889 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 21:13:12 +0000 Manifest this update: Sun 19 Jul 2026 21:08:12 +0000 Manifest next update: Mon 20 Jul 2026 23:37:12 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=) 3: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=) 4: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: 62QaT2BgP9Xxzz8R/2at14LyRzHHzBcfLh2lIu44sv0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a7:08:be:48:2d:55:9e:fc:37:82:15:85:3a:2c:ed:13:f7:68:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Validity Not Before: Jul 19 21:08:12 2026 GMT Not After : Jul 20 23:37:12 2026 GMT Subject: CN=9CD10EDF647C0FDF4522B9A7B1FB749F5F3D3407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:99:99:a2:ee:7b:c6:60:fc:cb:b8:36:80: 50:85:f4:e0:57:84:7d:d8:97:9a:4d:7b:27:fb:92: 84:61:d2:26:49:1e:54:a3:20:c0:dc:a9:c6:4e:9f: 89:12:4c:78:1a:bf:8c:47:6a:90:a8:05:63:de:d2: 52:f7:a4:45:18:9d:f5:0b:4b:23:56:d4:af:13:4a: 34:da:ac:0a:93:b4:f0:16:4f:c9:39:0a:c0:b7:76: 9e:50:12:a0:c1:38:1b:d0:90:3f:58:37:03:28:18: c0:f9:69:bd:9c:25:56:c1:66:f7:49:be:bb:c7:c9: 8d:35:2b:23:6f:14:0c:5c:ba:f7:a8:59:56:a6:e1: 6a:c1:2b:70:42:13:0f:cb:6e:e4:e1:56:7a:4f:e8: f7:67:56:6d:6d:90:d6:66:6b:14:5c:10:89:1c:35: 3b:60:ac:45:a7:ed:a2:38:c3:3f:55:b9:de:0a:eb: 75:0a:38:46:85:df:e8:b6:01:83:7f:d9:95:2f:d6: 81:66:3d:b7:c2:9a:f1:21:ff:a5:ab:70:ec:f4:a3: 99:62:76:e0:6c:7a:cd:31:e9:fb:ab:19:81:17:0e: 46:ea:fe:27:d4:48:35:13:04:2b:f7:a7:56:6a:8b: 78:79:62:cd:78:67:a8:dd:98:d5:53:3e:3e:03:a6: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:0E:DF:64:7C:0F:DF:45:22:B9:A7:B1:FB:74:9F:5F:3D:34:07 X509v3 Authority Key Identifier: keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:19:f6:cf:3e:82:09:ea:f3:7c:a6:a8:a8:93:7e:15:59:9a: ff:b7:10:d5:44:56:0e:ff:17:5d:f0:94:63:7c:7e:f4:ba:29: e8:fc:5b:61:2d:6b:2f:58:b0:2b:08:c3:e6:f1:52:48:6a:7e: 95:48:54:73:53:5f:e6:fa:96:1e:20:89:c1:79:ec:40:21:2c: 3b:d2:62:f5:80:1b:3a:53:4c:f3:d1:29:b5:36:20:11:68:29: 2e:53:1a:32:c6:49:01:e4:b5:b1:8b:c7:49:33:d9:24:ad:07: aa:91:ed:a4:ca:ea:d8:f8:49:84:4b:53:ac:57:e3:19:ad:87: 8e:c5:f1:52:8d:1d:ea:06:31:2c:6c:a3:fe:98:3e:f3:05:ed: 09:b6:90:8c:66:8d:f8:4c:c1:1e:0a:bc:a0:19:8f:8f:5e:38: 8f:76:60:4f:e4:05:57:64:32:f5:41:18:f5:26:bd:37:76:e7: aa:aa:b1:aa:90:3a:96:ac:0c:db:97:77:e5:c1:70:27:cf:90: 4f:f4:87:f0:df:d2:e6:81:38:f2:91:56:0f:7f:9f:de:c3:c0: 59:cc:1a:87:da:3d:e7:10:50:bd:60:41:d6:55:ef:04:35:fd: 97:14:e3:35:19:8a:1b:71:49:85:51:11:f3:33:91:ee:3e:22: ea:c1:3b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSacIvkgtVZ78N4IVhTos7RP3aIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNBRkUw QjQ4QzEwNTAeFw0yNjA3MTkyMTA4MTJaFw0yNjA3MjAyMzM3MTJaMDMxMTAvBgNV BAMTKDlDRDEwRURGNjQ3QzBGREY0NTIyQjlBN0IxRkI3NDlGNUYzRDM0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoe5mZou57xmD8y7g2gFCF9OBX hH3Yl5pNeyf7koRh0iZJHlSjIMDcqcZOn4kSTHgav4xHapCoBWPe0lL3pEUYnfUL SyNW1K8TSjTarAqTtPAWT8k5CsC3dp5QEqDBOBvQkD9YNwMoGMD5ab2cJVbBZvdJ vrvHyY01KyNvFAxcuveoWVam4WrBK3BCEw/LbuThVnpP6PdnVm1tkNZmaxRcEIkc NTtgrEWn7aI4wz9Vud4K63UKOEaF3+i2AYN/2ZUv1oFmPbfCmvEh/6WrcOz0o5li duBses0x6furGYEXDkbq/ifUSDUTBCv3p1Zqi3h5Ys14Z6jdmNVTPj4DpgCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNEO32R8D99FIrmnsft0n189NAcwHwYDVR0j BBgwFoAU0nB9U+B9U7AK8ZF8ewbK/gtIwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlMjQ5MDctYTZmMi00YTU1LWFhNmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNF MDdENTNCMDBBRjE5MTdDN0IwNkNBRkUwQjQ4QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjcwN0Q1M0UwN0Q1M0IwMEFGMTkxN0M3QjA2Q0FGRTBCNDhD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNB RkUwQjQ4QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIZ9s8+ggnq83ymqKiTfhVZmv+3ENVEVg7/ F13wlGN8fvS6Kej8W2Etay9YsCsIw+bxUkhqfpVIVHNTX+b6lh4gicF57EAhLDvS YvWAGzpTTPPRKbU2IBFoKS5TGjLGSQHktbGLx0kz2SStB6qR7aTK6tj4SYRLU6xX 4xmth47F8VKNHeoGMSxso/6YPvMF7Qm2kIxmjfhMwR4KvKAZj49eOI92YE/kBVdk MvVBGPUmvTd256qqsaqQOpasDNuXd+XBcCfPkE/0h/Df0uaBOPKRVg9/n97DwFnM GofaPecQUL1gQdZV7wQ1/ZcU4zUZihtxSYVREfMzke4+IurBO9c= -----END CERTIFICATE-----Generated at Sun Jul 19 23:51:15 2026 by rpki-client