$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft File: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft (raw, json) Hash identifier: Qhh06nKCGkLgQxhcyMEnnOm2ix15PK2n4qmiTzOgLfY= Subject key identifier: D7:B6:84:96:F2:77:E8:06:41:F5:81:FE:13:96:25:F9:5F:FB:AF:68 Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 Certificate issuer: /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Certificate serial: 6154EF5A9DD7D98D58DF5633FDD3BF48069A5B29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:12:43 +0000 Manifest this update: Mon 20 Jul 2026 17:07:43 +0000 Manifest next update: Tue 21 Jul 2026 20:05:43 +0000 Files and hashes: 1: 814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl (hash: zJt+YNIHSz3qC4Oi8r/Uihk4WbUX8Xs1e+d95/OuJZ0=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: 2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:54:ef:5a:9d:d7:d9:8d:58:df:56:33:fd:d3:bf:48:06:9a:5b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3 Validity Not Before: Jul 20 17:07:43 2026 GMT Not After : Jul 21 20:05:43 2026 GMT Subject: CN=D7B68496F277E80641F581FE139625F95FFBAF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:79:11:15:76:b7:40:b4:db:46:30:e3:62: fe:64:9b:56:b7:6c:76:f0:62:aa:3b:04:b5:8a:eb: 00:d3:5e:66:e5:41:61:51:85:91:3c:69:31:6a:2a: ae:6a:ff:1a:96:a6:b7:6c:f5:5f:ab:69:6e:a2:48: 6b:25:70:e9:b1:10:75:25:f4:50:f5:00:a5:e6:19: 6c:80:99:4b:54:fb:ff:a0:b0:db:fe:1d:e8:0a:6b: 85:b5:ff:84:73:bf:0d:e5:64:09:37:b2:ff:2e:f9: c3:a0:67:07:63:51:cb:c3:00:80:10:bd:ec:a0:af: a2:f6:a0:e0:45:44:77:ac:9a:a9:36:a5:35:72:6d: 5f:2a:53:db:eb:cc:8f:9f:e2:4e:0c:e5:26:a4:3b: 4a:4d:9a:1b:c8:19:69:4d:98:ab:76:10:1e:36:23: 97:8a:eb:38:8f:e5:db:38:35:b5:d2:db:28:ff:99: c3:d3:68:af:5f:5a:d5:02:9c:30:ab:a7:13:f0:bb: 77:2c:87:02:76:f4:54:ae:0f:7c:bd:99:22:3a:64: cf:03:54:fe:8e:e8:cb:9d:f1:07:54:b5:2e:6f:4e: cb:38:93:4a:f4:67:c9:69:86:69:67:c9:79:3e:e3: cb:a5:54:86:5f:da:54:05:85:5e:f6:1e:ab:18:c3: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:84:96:F2:77:E8:06:41:F5:81:FE:13:96:25:F9:5F:FB:AF:68 X509v3 Authority Key Identifier: keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8f:24:fe:d2:c6:dd:9c:51:8d:bb:bd:54:85:7c:aa:18:ca: 16:7b:36:f5:02:cc:b1:d6:d8:19:ce:f1:d1:6f:86:a3:54:ae: 0d:1a:c8:fd:6d:28:1a:ce:a0:cc:25:68:b0:a3:c2:b5:10:c1: 09:7c:68:21:1e:8b:85:42:08:fa:17:06:3b:d4:17:28:3e:0c: 1e:0d:87:ba:cd:3c:86:d8:8d:d1:77:12:07:a1:90:c8:5d:80: 2b:e3:2e:99:9f:3c:6e:42:cd:93:1b:92:fc:93:64:90:51:6b: 76:3b:6a:4a:f8:1d:47:73:f7:0b:c7:54:d4:e8:b1:fa:c6:0d: 8d:ff:57:29:48:07:5d:ae:68:8d:57:d9:22:ed:e2:ef:4a:2f: 77:d3:80:5a:d7:13:8e:ae:9b:48:97:30:cb:02:d5:cf:5c:82: 1c:4c:27:3d:85:e1:85:06:95:74:eb:8d:58:57:35:f8:0e:e4: 3c:2e:7d:a1:1d:ea:a6:68:68:22:c0:84:48:a7:ec:98:27:67: 55:5f:02:7c:d3:5c:cc:af:8e:3b:61:43:49:a8:6d:e2:72:be: f1:ff:c9:1f:17:08:16:bb:a1:29:fc:b9:d4:99:eb:c9:51:71: 0d:a7:3c:cf:33:1e:31:30:65:43:95:7d:16:de:c2:61:ef:39: 6c:1d:17:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVTvWp3X2Y1Y31Yz/dO/SAaaWykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMxNDky RDEyQzFDMzAeFw0yNjA3MjAxNzA3NDNaFw0yNjA3MjEyMDA1NDNaMDMxMTAvBgNV BAMTKEQ3QjY4NDk2RjI3N0U4MDY0MUY1ODFGRTEzOTYyNUY5NUZGQkFGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOnkRFXa3QLTbRjDjYv5km1a3 bHbwYqo7BLWK6wDTXmblQWFRhZE8aTFqKq5q/xqWprds9V+raW6iSGslcOmxEHUl 9FD1AKXmGWyAmUtU+/+gsNv+HegKa4W1/4Rzvw3lZAk3sv8u+cOgZwdjUcvDAIAQ veygr6L2oOBFRHesmqk2pTVybV8qU9vrzI+f4k4M5SakO0pNmhvIGWlNmKt2EB42 I5eK6ziP5ds4NbXS2yj/mcPTaK9fWtUCnDCrpxPwu3cshwJ29FSuD3y9mSI6ZM8D VP6O6Mud8QdUtS5vTss4k0r0Z8lphmlnyXk+48ulVIZf2lQFhV72HqsYw0N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17aElvJ36AZB9YH+E5Yl+V/7r2gwHwYDVR0j BBgwFoAUgU18qPWoYohW1D0eIBoxSS0SwcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY1ZGQwYWEtZmE3YS00ZGE0LWExYzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThG NUE4NjI4ODU2RDQzRDFFMjAxQTMxNDkyRDEyQzFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTREN0NBOEY1QTg2Mjg4NTZENDNEMUUyMDFBMzE0OTJEMTJD MUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvODE0RDdDQThGNUE4NjI4ODU2RDQzRDFFMjAxQTMx NDkyRDEyQzFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICPJP7Sxt2cUY27vVSFfKoYyhZ7NvUCzLHW 2BnO8dFvhqNUrg0ayP1tKBrOoMwlaLCjwrUQwQl8aCEei4VCCPoXBjvUFyg+DB4N h7rNPIbYjdF3EgehkMhdgCvjLpmfPG5CzZMbkvyTZJBRa3Y7akr4HUdz9wvHVNTo sfrGDY3/VylIB12uaI1X2SLt4u9KL3fTgFrXE46um0iXMMsC1c9cghxMJz2F4YUG lXTrjVhXNfgO5DwufaEd6qZoaCLAhEin7JgnZ1VfAnzTXMyvjjthQ0mobeJyvvH/ yR8XCBa7oSn8udSZ68lRcQ2nPM8zHjEwZUOVfRbewmHvOWwdFzQ= -----END CERTIFICATE-----Generated at Tue Jul 21 08:47:39 2026 by rpki-client