$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: DF89U90ae6S5IFe6+W7NdAkgiKLKF5tFE5jQ89PMapU= Subject key identifier: 4B:BA:F0:27:76:CB:8B:3D:4F:DB:4D:12:F2:79:5E:B4:7A:F0:42:3D Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 52AAB6EC094B1C9173067D24F1029FEEC3201635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:48:40 +0000 Manifest this update: Mon 20 Jul 2026 13:43:40 +0000 Manifest next update: Tue 21 Jul 2026 14:21:40 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) 3: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: +xASLG89CbF2WyTR2AJNI1UA1l2U7ggqyviyekZGPWc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:b6:ec:09:4b:1c:91:73:06:7d:24:f1:02:9f:ee:c3:20:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: Jul 20 13:43:40 2026 GMT Not After : Jul 21 14:21:40 2026 GMT Subject: CN=4BBAF02776CB8B3D4FDB4D12F2795EB47AF0423D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:c5:3c:d6:3a:35:d7:9a:98:2a:95:8a:24: e5:24:1f:68:51:b0:28:c2:ff:03:df:3e:5e:e9:98: 76:6a:e5:1d:9e:c1:18:65:80:f0:f6:5d:7c:20:ff: 01:dd:2e:9e:f6:2f:63:06:d4:83:9b:f4:f7:90:be: d5:03:7a:4b:51:5e:fc:6d:4b:3e:2b:1f:95:00:67: e3:53:90:bd:6e:cb:31:d9:17:aa:ec:b6:f0:97:b4: d1:e6:a8:3b:4a:78:e8:19:0c:b1:56:88:7e:3f:9f: 97:e3:1e:4e:85:f2:83:bc:90:8d:ee:4c:79:b4:08: 54:4b:db:dd:60:bd:7d:32:ca:b6:db:80:56:2c:89: f3:73:dd:96:87:8b:b2:18:e8:50:04:0e:a4:b4:43: 50:50:36:2c:84:0d:1c:3f:2f:fa:04:a5:5f:d0:bf: 90:55:0b:b7:62:4e:d5:8d:b8:ea:81:b1:3f:55:16: 8d:9d:bb:53:4c:11:33:6c:fa:e2:cb:50:d6:07:7f: 84:b4:94:46:3d:5b:7f:cc:74:40:5b:a3:0b:f6:f5: 19:87:45:ce:d2:1f:a0:e2:11:7d:3c:18:54:b5:03: 81:2c:9f:44:bd:07:00:59:5b:64:67:bc:d3:ee:ec: ed:f5:e1:c6:b6:29:02:d5:5f:fe:f0:7c:87:d9:ec: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BA:F0:27:76:CB:8B:3D:4F:DB:4D:12:F2:79:5E:B4:7A:F0:42:3D X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:76:82:82:98:3d:ba:8f:d3:35:00:9f:df:47:67:aa:42:e0: fc:6e:86:06:e3:14:13:31:01:ff:60:11:cf:3c:98:d0:62:b5: a0:b2:ad:6b:23:9a:f6:f7:a6:ba:72:6a:65:39:b6:47:b0:41: 4e:b1:d0:f4:1a:a5:bf:f7:76:15:1a:f2:5c:2e:9b:f8:02:62: 08:4f:15:d0:17:52:f4:26:de:54:c5:de:ff:7d:36:91:95:b7: 6c:ff:85:79:76:c4:e7:e9:6f:11:40:9a:b1:92:82:17:5d:6d: a0:06:95:36:6d:98:da:9c:5b:4b:a3:02:2f:7b:85:1a:e3:65: af:3e:b2:3e:05:6f:36:13:7b:15:b5:7c:8e:d4:05:84:61:0f: c8:73:f9:34:8b:34:4a:1b:6b:cd:17:28:da:da:f0:fb:63:d7: 4a:c3:c9:54:42:a0:81:16:67:5a:42:d8:5b:e8:11:78:01:83: 74:7d:14:e3:e8:52:c2:04:3a:51:30:0a:ee:f0:d7:b8:a1:51: 88:cb:4a:25:6a:5a:d6:79:51:1a:ad:4c:10:23:b0:4e:25:e3: e9:34:38:cd:cf:04:b3:42:b2:be:1f:d4:05:15:5d:ed:5e:a3: 45:71:bf:9a:6d:6a:91:c0:fd:10:85:56:c6:ea:9a:b6:32:1e: 80:05:ce:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqq27AlLHJFzBn0k8QKf7sMgFjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA3MjAxMzQzNDBaFw0yNjA3MjExNDIxNDBaMDMxMTAvBgNV BAMTKDRCQkFGMDI3NzZDQjhCM0Q0RkRCNEQxMkYyNzk1RUI0N0FGMDQyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbtcU81jo115qYKpWKJOUkH2hR sCjC/wPfPl7pmHZq5R2ewRhlgPD2XXwg/wHdLp72L2MG1IOb9PeQvtUDektRXvxt Sz4rH5UAZ+NTkL1uyzHZF6rstvCXtNHmqDtKeOgZDLFWiH4/n5fjHk6F8oO8kI3u THm0CFRL291gvX0yyrbbgFYsifNz3ZaHi7IY6FAEDqS0Q1BQNiyEDRw/L/oEpV/Q v5BVC7diTtWNuOqBsT9VFo2du1NMETNs+uLLUNYHf4S0lEY9W3/MdEBbowv29RmH Rc7SH6DiEX08GFS1A4Esn0S9BwBZW2RnvNPu7O314ca2KQLVX/7wfIfZ7GM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7rwJ3bLiz1P200S8nletHrwQj0wHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD52goKYPbqP0zUAn99HZ6pC4PxuhgbjFBMx Af9gEc88mNBitaCyrWsjmvb3prpyamU5tkewQU6x0PQapb/3dhUa8lwum/gCYghP FdAXUvQm3lTF3v99NpGVt2z/hXl2xOfpbxFAmrGSghddbaAGlTZtmNqcW0ujAi97 hRrjZa8+sj4FbzYTexW1fI7UBYRhD8hz+TSLNEoba80XKNra8Ptj10rDyVRCoIEW Z1pC2FvoEXgBg3R9FOPoUsIEOlEwCu7w17ihUYjLSiVqWtZ5URqtTBAjsE4l4+k0 OM3PBLNCsr4f1AUVXe1eo0Vxv5ptapHA/RCFVsbqmrYyHoAFzlw= -----END CERTIFICATE-----Generated at Tue Jul 21 05:38:31 2026 by rpki-client