$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft File: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json) Hash identifier: RfZIh5JdmyC44LHA/JN/2fGvHFGlx47NqzqvtxZzOgU= Subject key identifier: D2:36:25:80:9F:72:D2:D4:ED:A4:E9:2D:B0:09:2A:D9:3B:1C:98:54 Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD Certificate issuer: /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Certificate serial: 3863B61B50648DD715773BF66908CE0D8DE6DF2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:00:52 +0000 Manifest this update: Mon 20 Jul 2026 23:55:52 +0000 Manifest next update: Wed 22 Jul 2026 01:45:52 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=) 2: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: EGc+dRkMRvW0Stbe6Xfff9A8Lw0SB0Fvnl1FlcE2Nu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:63:b6:1b:50:64:8d:d7:15:77:3b:f6:69:08:ce:0d:8d:e6:df:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Validity Not Before: Jul 20 23:55:52 2026 GMT Not After : Jul 22 01:45:52 2026 GMT Subject: CN=D23625809F72D2D4EDA4E92DB0092AD93B1C9854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:99:8f:80:d4:fc:7f:01:4f:6a:d4:5d:ec: 96:15:ec:d0:44:3b:ce:19:7a:aa:3f:93:84:9a:3c: ff:e9:2f:94:60:0b:9a:b2:2d:8b:88:f5:12:6c:fd: 93:57:ad:50:89:b9:b7:a5:ad:13:f1:99:13:4e:62: 2c:b2:e9:9e:12:6c:92:db:48:5b:2d:d2:81:6c:d8: 71:ee:d1:7b:08:12:a6:42:da:47:06:4f:ef:41:3f: fc:1a:77:47:6a:0b:e3:a5:ea:35:0d:9c:73:96:90: 25:58:7e:ce:14:3a:33:29:2f:7b:62:88:87:bf:6a: fb:65:4b:60:04:4c:1f:52:e8:d1:a7:3b:65:0a:c6: b6:b0:5c:25:bb:c0:64:d8:ed:57:45:9c:e1:28:3c: 0f:80:20:6d:98:4b:71:c3:43:c2:d5:3d:4f:5f:7b: ef:9d:a4:e5:5a:1a:72:04:eb:d1:ab:90:aa:71:16: d3:42:8e:46:21:d7:97:a0:94:3b:3b:64:d8:ab:70: aa:7c:e6:09:06:93:36:39:b7:9a:3c:27:a9:73:0c: 18:83:1d:a8:79:aa:52:a5:a5:2c:2a:cd:a9:e5:b5: a3:be:23:3f:92:21:de:c1:d0:58:bf:3e:7e:14:a7: f6:d0:50:5e:b6:5a:cd:fc:31:d1:9d:b4:2c:e0:25: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:25:80:9F:72:D2:D4:ED:A4:E9:2D:B0:09:2A:D9:3B:1C:98:54 X509v3 Authority Key Identifier: keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fa:3e:41:b1:5a:e9:df:a8:5b:3e:fa:ef:56:f8:5b:71:86: 60:c0:2c:bf:3b:88:b2:16:08:8e:61:8a:6b:a6:54:2a:e1:f8: 52:60:d1:43:e5:85:12:4e:80:14:32:a1:11:33:9f:f5:de:37: 23:3a:3f:cc:ca:61:d3:27:23:52:c2:33:b7:13:03:86:4b:28: e5:29:1d:a2:d1:df:83:e7:65:7c:87:02:24:c2:31:9f:bc:f9: 6d:83:1f:c4:ea:71:5e:ca:2d:0b:0b:54:72:28:96:df:43:bc: b5:56:fc:8d:86:ba:ed:3c:9c:24:d7:24:8f:3f:77:28:c8:97: 33:5e:17:55:22:a6:84:90:5e:02:7b:0e:9a:e4:b3:08:36:67: 0f:9b:b8:4f:16:84:f7:a0:ff:fe:9c:2f:5a:78:5b:89:02:3d: ae:ea:f5:86:6f:ca:9f:6e:da:1a:9b:a4:39:c6:78:c7:e8:52: f6:82:33:a9:76:c1:69:ef:d5:82:78:d0:48:6e:aa:56:72:2a: e6:7a:2a:bf:bc:17:17:c9:e7:9e:46:14:e7:a6:47:6a:40:d3: 3c:5f:28:bf:13:08:be:b8:bc:90:2b:36:03:44:91:1c:2d:a1: 52:26:62:0a:dd:8d:d4:c5:6e:59:9e:06:69:c2:8d:38:50:f8: af:9d:64:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGO2G1BkjdcVdzv2aQjODY3m3y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5NzcyM0NC MzY5RjNDRDAeFw0yNjA3MjAyMzU1NTJaFw0yNjA3MjIwMTQ1NTJaMDMxMTAvBgNV BAMTKEQyMzYyNTgwOUY3MkQyRDRFREE0RTkyREIwMDkyQUQ5M0IxQzk4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3pmPgNT8fwFPatRd7JYV7NBE O84Zeqo/k4SaPP/pL5RgC5qyLYuI9RJs/ZNXrVCJubelrRPxmRNOYiyy6Z4SbJLb SFst0oFs2HHu0XsIEqZC2kcGT+9BP/wad0dqC+Ol6jUNnHOWkCVYfs4UOjMpL3ti iIe/avtlS2AETB9S6NGnO2UKxrawXCW7wGTY7VdFnOEoPA+AIG2YS3HDQ8LVPU9f e++dpOVaGnIE69GrkKpxFtNCjkYh15eglDs7ZNircKp85gkGkzY5t5o8J6lzDBiD Hah5qlKlpSwqzanltaO+Iz+SId7B0Fi/Pn4Up/bQUF62Ws38MdGdtCzgJV9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jYlgJ9y0tTtpOktsAkq2TscmFQwHwYDVR0j BBgwFoAUFCBIS9mL+DwcbF/2L5dyPLNp880wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMTVlNmYtMDY4OS00NzEzLWIwZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJE OThCRjgzQzFDNkM1RkY2MkY5NzcyM0NCMzY5RjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIwNDg0QkQ5OEJGODNDMUM2QzVGRjYyRjk3NzIzQ0IzNjlG M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5Nzcy M0NCMzY5RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB76PkGxWunfqFs++u9W+FtxhmDALL87iLIW CI5himumVCrh+FJg0UPlhRJOgBQyoREzn/XeNyM6P8zKYdMnI1LCM7cTA4ZLKOUp HaLR34PnZXyHAiTCMZ+8+W2DH8TqcV7KLQsLVHIolt9DvLVW/I2Guu08nCTXJI8/ dyjIlzNeF1UipoSQXgJ7Dprkswg2Zw+buE8WhPeg//6cL1p4W4kCPa7q9YZvyp9u 2hqbpDnGeMfoUvaCM6l2wWnv1YJ40EhuqlZyKuZ6Kr+8FxfJ555GFOemR2pA0zxf KL8TCL64vJArNgNEkRwtoVImYgrdjdTFblmeBmnCjThQ+K+dZPs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:12:03 2026 by rpki-client