$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft File: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft (raw, json) Hash identifier: IlY59B+YY0URat8V7a6RNJNHceZovkUcTsIy83uIeUA= Subject key identifier: E9:F5:CE:58:81:0B:65:33:B6:35:02:29:8C:72:31:4F:A6:D8:AA:5E Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Certificate serial: 65A081167AAE39113872B331F9C25E73719DED92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:00:45 +0000 Manifest this update: Mon 20 Jul 2026 23:55:45 +0000 Manifest next update: Wed 22 Jul 2026 03:33:45 +0000 Files and hashes: 1: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl (hash: OBkwHXQGDpAuhonTz7njV/Gua2AgpTGwrw6pl5Mgyvk=) 2: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Lw1DMZ5kJp5ICeFivj5ZZ60njB9OoQuGFsGq8+auMdU=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=) 5: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: XrQbHF8ES5i2bpLQRbTUE7Wl3M4ZUVmyaoRlPolZS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a0:81:16:7a:ae:39:11:38:72:b3:31:f9:c2:5e:73:71:9d:ed:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Validity Not Before: Jul 20 23:55:45 2026 GMT Not After : Jul 22 03:33:45 2026 GMT Subject: CN=E9F5CE58810B6533B63502298C72314FA6D8AA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:80:e9:76:9d:d6:d6:d4:33:49:e9:d1:86: b7:5b:89:a4:3a:13:90:c6:20:00:26:2c:f3:11:9e: 7f:eb:3d:0e:d1:2e:b0:6a:30:8f:d5:02:0c:57:87: 2d:aa:07:d0:36:23:20:5c:20:25:ac:48:3c:df:55: 49:9e:7d:7e:fd:8b:94:9f:1f:49:68:dc:df:c3:53: bd:18:e3:9c:ec:e4:1e:a7:de:bb:45:d0:80:61:8b: 03:6e:b8:0f:ed:7a:15:b1:d2:8a:b6:ee:14:fe:ae: 94:ad:0c:8b:ad:a0:4f:32:18:79:6d:e7:1b:99:a8: 5f:7b:49:cb:a7:df:b7:91:05:22:95:30:20:a4:87: 5d:df:02:ef:80:88:35:4e:76:32:ec:f2:c8:21:2f: 4d:22:d7:28:b1:c5:a2:c8:0c:9a:35:40:e5:ad:09: 5c:68:3b:d4:cf:bf:f2:7f:de:50:84:64:1f:7c:9f: 31:70:cb:e1:64:58:cd:3d:4e:77:49:3f:64:4c:91: e7:6d:cb:7d:6d:5a:cc:c2:ed:54:ce:8a:58:a5:c6: 1a:e4:37:af:59:9e:44:db:a0:7b:f7:29:e2:58:5d: 1f:62:f7:3c:06:ee:0e:0b:da:9d:dc:91:ec:84:0a: dc:09:1b:be:e4:0c:ae:e7:20:53:d3:6e:2f:c2:80: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F5:CE:58:81:0B:65:33:B6:35:02:29:8C:72:31:4F:A6:D8:AA:5E X509v3 Authority Key Identifier: keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:34:d6:dc:ed:c9:24:f6:2a:9d:35:2c:b3:45:5e:2a:d6:22: f8:30:31:11:aa:9c:4d:06:41:5b:d1:c8:28:b7:dd:7e:7c:93: 31:20:0c:94:32:0e:c8:06:0d:4b:49:c7:0f:47:93:d4:1d:94: df:38:30:9f:29:95:c4:a6:15:38:76:13:40:21:3b:91:b4:d4: bc:44:20:12:62:31:35:39:06:af:d8:ec:3f:da:36:1c:77:d9: 66:2c:dd:14:54:a2:2a:a7:26:93:c4:f3:9b:f6:e3:be:7a:64: 0f:2d:db:94:7e:4a:aa:e7:25:01:e5:79:84:a7:b0:96:40:ea: 8e:02:02:fc:2e:84:6e:a2:bf:c7:3d:91:ca:0d:80:98:57:74: 75:3d:ab:6f:c8:50:aa:a4:17:eb:0e:49:d5:c9:5d:b8:94:f0: 54:a3:db:9b:ce:a1:3f:9f:76:ae:76:02:e7:26:12:90:7e:99: 14:3d:ca:77:7b:17:72:d2:b3:4a:b4:c9:13:d4:ba:e8:9d:c8: 30:64:a5:4d:43:34:4d:be:ea:4a:66:77:67:9d:45:d7:41:20: 72:38:dc:12:99:26:e9:07:9e:9d:df:c6:f4:e2:86:6d:b6:14: 53:0f:f7:6a:1b:08:e2:9f:64:15:3b:e7:4d:da:b2:a8:20:45: 88:a6:6e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaCBFnquORE4crMx+cJec3Gd7ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5 RjQxNTlBMjAeFw0yNjA3MjAyMzU1NDVaFw0yNjA3MjIwMzMzNDVaMDMxMTAvBgNV BAMTKEU5RjVDRTU4ODEwQjY1MzNCNjM1MDIyOThDNzIzMTRGQTZEOEFBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9toDpdp3W1tQzSenRhrdbiaQ6 E5DGIAAmLPMRnn/rPQ7RLrBqMI/VAgxXhy2qB9A2IyBcICWsSDzfVUmefX79i5Sf H0lo3N/DU70Y45zs5B6n3rtF0IBhiwNuuA/tehWx0oq27hT+rpStDIutoE8yGHlt 5xuZqF97Scun37eRBSKVMCCkh13fAu+AiDVOdjLs8sghL00i1yixxaLIDJo1QOWt CVxoO9TPv/J/3lCEZB98nzFwy+FkWM09TndJP2RMkedty31tWszC7VTOililxhrk N69ZnkTboHv3KeJYXR9i9zwG7g4L2p3ckeyECtwJG77kDK7nIFPTbi/CgPlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fXOWIELZTO2NQIpjHIxT6bYql4wHwYDVR0j BBgwFoAU1n3ctGz0C1JkH3G/d1bfop9BWaIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3ZTgwODEtNjNhZi00OWU3LTk2NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2 Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5RjQxNTlBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjdERENCNDZDRjQwQjUyNjQxRjcxQkY3NzU2REZBMjlGNDE1 OUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRG QTI5RjQxNTlBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU01tztyST2Kp01LLNFXirWIvgwMRGqnE0G QVvRyCi33X58kzEgDJQyDsgGDUtJxw9Hk9QdlN84MJ8plcSmFTh2E0AhO5G01LxE IBJiMTU5Bq/Y7D/aNhx32WYs3RRUoiqnJpPE85v24756ZA8t25R+SqrnJQHleYSn sJZA6o4CAvwuhG6iv8c9kcoNgJhXdHU9q2/IUKqkF+sOSdXJXbiU8FSj25vOoT+f dq52AucmEpB+mRQ9ynd7F3LSs0q0yRPUuuidyDBkpU1DNE2+6kpmd2edRddBIHI4 3BKZJukHnp3fxvTihm22FFMP92obCOKfZBU7503asqggRYimbt4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:08 2026 by rpki-client