$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: I1jOjvXmxPcXlo8oRHjGFQouKqzvSZIeLkvAZ/Hqb+Y= Subject key identifier: 60:70:97:6E:5E:84:FA:E5:D5:DF:19:7B:A5:99:4E:97:E3:24:7B:2E Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 57109C43781A3DDD0314700C0B43A9C4023E18DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 19:50:48 +0000 Manifest this update: Mon 20 Jul 2026 19:45:48 +0000 Manifest next update: Tue 21 Jul 2026 20:29:48 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 4: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: 6ngvKdcRiHgUcnadrSDSkHg/qA0LofbLPr5pWShXh0k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:10:9c:43:78:1a:3d:dd:03:14:70:0c:0b:43:a9:c4:02:3e:18:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Jul 20 19:45:48 2026 GMT Not After : Jul 21 20:29:48 2026 GMT Subject: CN=6070976E5E84FAE5D5DF197BA5994E97E3247B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:ee:93:4a:4d:8a:ce:b2:1b:6e:0a:9c:b5: 9b:5a:6c:73:c7:ac:1f:64:72:7d:4b:31:90:fc:66: ca:ee:26:f0:0f:7b:45:69:e1:4f:73:9a:ee:3a:64: fe:f4:54:80:76:83:e6:b5:8f:08:ac:a5:ed:63:04: 5c:b3:6a:cd:0c:bb:71:ad:9c:24:8e:8d:3c:e5:cb: db:86:1b:6c:ea:91:7d:fa:45:da:29:23:67:78:a0: 43:ec:b9:55:0d:ad:c6:32:30:ad:84:b8:bf:f5:57: d8:ae:13:03:8c:c4:40:47:8d:f6:e1:b4:a9:b6:2b: 12:65:c3:59:d9:b5:5d:0d:6d:61:de:be:2e:de:1b: e5:64:f7:35:95:fb:17:da:ab:b8:80:45:cf:f2:d9: 8e:c0:b1:fb:30:bc:15:98:33:94:6f:5e:ef:52:87: f4:97:08:db:ce:19:e4:22:16:85:f3:9a:83:62:92: 74:76:d5:6e:5b:45:e1:1f:31:f4:1e:58:28:5f:25: ee:c4:4c:8e:12:be:b1:86:f2:03:2b:8f:a8:8c:57: 26:41:cb:93:4a:b3:42:44:4e:c2:22:dc:05:09:17: 70:cc:44:0f:15:13:17:6f:be:6c:fa:41:6b:b0:d2: 70:a5:98:03:13:0d:db:75:98:55:13:ec:6c:1f:fc: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:70:97:6E:5E:84:FA:E5:D5:DF:19:7B:A5:99:4E:97:E3:24:7B:2E X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3e:f2:2e:b5:cf:d1:81:25:59:88:a0:86:02:cf:b5:41:13: 7f:64:9b:8a:b8:f5:01:58:c7:f6:88:35:c4:54:22:7b:cb:34: d3:06:07:bc:22:bc:f4:ab:66:6d:d2:ad:52:98:d5:86:80:63: be:41:01:5c:11:f4:3f:b6:63:11:66:dc:32:1b:8a:62:0b:ff: 10:47:ee:5d:e1:d3:f7:44:47:4f:ac:2b:88:60:71:96:8b:d1: 0f:64:ee:74:8a:5a:ed:74:e8:0b:29:67:ce:e0:e6:b9:f7:74: 60:1e:63:86:da:4b:1f:a9:7f:93:55:80:65:3c:04:9c:f0:78: 76:ec:4c:45:40:71:fa:df:c8:9c:77:be:fd:85:9b:22:bf:b9: 7d:07:0a:f0:06:30:6c:64:24:99:36:27:d2:2c:70:5d:e2:6b: be:49:96:8a:a8:53:5f:0a:7b:a0:7f:70:c8:f1:5d:e3:a1:ef: 8b:09:36:23:0e:d2:8c:07:9f:30:77:75:0b:27:7a:0d:10:02: aa:58:0e:b2:42:ab:4f:0b:5d:0e:a7:74:36:8d:30:ae:98:46: 88:c2:24:f0:b1:74:ab:38:b1:23:17:b2:33:4a:73:5d:a9:e6: f4:e8:33:38:b6:1b:25:54:ce:c7:3b:f5:a0:35:4e:70:99:79: c0:52:24:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxCcQ3gaPd0DFHAMC0OpxAI+GNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA3MjAxOTQ1NDhaFw0yNjA3MjEyMDI5NDhaMDMxMTAvBgNV BAMTKDYwNzA5NzZFNUU4NEZBRTVENURGMTk3QkE1OTk0RTk3RTMyNDdCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Au6TSk2KzrIbbgqctZtabHPH rB9kcn1LMZD8ZsruJvAPe0Vp4U9zmu46ZP70VIB2g+a1jwispe1jBFyzas0Mu3Gt nCSOjTzly9uGG2zqkX36RdopI2d4oEPsuVUNrcYyMK2EuL/1V9iuEwOMxEBHjfbh tKm2KxJlw1nZtV0NbWHevi7eG+Vk9zWV+xfaq7iARc/y2Y7AsfswvBWYM5RvXu9S h/SXCNvOGeQiFoXzmoNiknR21W5bReEfMfQeWChfJe7ETI4SvrGG8gMrj6iMVyZB y5NKs0JETsIi3AUJF3DMRA8VExdvvmz6QWuw0nClmAMTDdt1mFUT7Gwf/KdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHCXbl6E+uXV3xl7pZlOl+Mkey4wHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg+8i61z9GBJVmIoIYCz7VBE39km4q49QFY x/aINcRUInvLNNMGB7wivPSrZm3SrVKY1YaAY75BAVwR9D+2YxFm3DIbimIL/xBH 7l3h0/dER0+sK4hgcZaL0Q9k7nSKWu106AspZ87g5rn3dGAeY4baSx+pf5NVgGU8 BJzweHbsTEVAcfrfyJx3vv2FmyK/uX0HCvAGMGxkJJk2J9IscF3ia75JloqoU18K e6B/cMjxXeOh74sJNiMO0owHnzB3dQsneg0QAqpYDrJCq08LXQ6ndDaNMK6YRojC JPCxdKs4sSMXsjNKc12p5vToMzi2GyVUzsc79aA1TnCZecBSJJQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:44:10 2026 by rpki-client