$ rpki-client -vvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json) Hash identifier: XvS5B2k75+UHTq96FbUx8n4r3bb8W47M1qdzVBX4rcE= Subject key identifier: FA:CD:DC:F1:1B:35:F8:F9:42:9B:BA:68:F4:05:6C:82:66:DD:2C:1E Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 384B954C46097C56214D6E852AA91610F2EE1189 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:03:31 +0000 Manifest this update: Sun 02 Aug 2026 04:58:31 +0000 Manifest next update: Mon 03 Aug 2026 05:41:31 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=) 3: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: yPcpcv0/Qhby0BKUfLFjeBN5acgSEjmeHPA5kjlj8ak=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4b:95:4c:46:09:7c:56:21:4d:6e:85:2a:a9:16:10:f2:ee:11:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: Aug 2 04:58:31 2026 GMT Not After : Aug 3 05:41:31 2026 GMT Subject: CN=FACDDCF11B35F8F9429BBA68F4056C8266DD2C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:c5:b3:36:01:3c:3f:9d:d3:67:06:1a:c1: 49:fa:d7:e7:25:62:d1:a3:e7:d3:08:52:8b:46:e1: de:d9:bf:bf:39:31:9b:f7:fb:75:04:74:a8:47:d8: e7:a7:c4:b7:f1:be:03:74:00:e1:3d:2d:c9:08:0e: 4f:2a:7b:2b:8b:45:f7:30:fb:9b:cf:ba:57:54:e4: bb:71:55:2d:a9:5d:d4:7f:32:cc:ee:8c:07:a3:01: 2c:35:d1:69:7e:b5:05:12:e9:18:7f:ee:8a:81:4c: 61:cc:5b:c3:70:c9:8c:b2:74:a1:4c:ec:e9:10:76: 90:d0:27:bf:fe:5c:93:38:c7:9a:dc:e2:2a:81:74: d5:4f:d4:25:c5:01:17:2d:78:2c:a4:32:c0:29:6f: e5:ee:3c:5e:cc:79:cb:dd:b4:35:eb:a2:1b:98:a4: e0:23:ec:f7:57:86:35:80:ad:b3:e8:7e:b8:86:74: 5c:92:61:97:fa:b4:6a:72:ef:4d:37:ed:0a:9e:06: 16:66:73:12:a1:e4:02:7c:2f:de:4e:14:04:59:e1: fe:54:43:85:66:77:1d:60:d4:db:3f:83:8c:50:4f: e5:11:97:d0:a6:5a:64:f6:bd:00:10:25:c8:d5:fd: 62:2f:34:28:d1:20:64:04:61:41:6d:ec:1e:92:98: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:DC:F1:1B:35:F8:F9:42:9B:BA:68:F4:05:6C:82:66:DD:2C:1E X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:aa:dc:56:a3:20:a3:00:c8:1b:7b:4c:e9:1a:e5:2d:44:90: 6f:d4:de:0c:6c:27:5d:10:bf:60:d1:96:4b:f2:a6:15:f3:45: 03:e9:b7:97:57:4b:08:55:58:83:31:89:0d:5a:9a:7b:96:a1: 80:24:85:d1:94:88:9a:59:76:32:6b:52:eb:b7:be:92:21:ad: 27:b8:42:24:2a:d7:8a:78:6d:b0:f8:a9:6c:f1:da:13:2d:6e: 0f:2b:0b:a6:6f:cc:a7:c3:2c:c8:c0:78:03:ba:a6:fd:6e:01: bb:76:d8:ff:e5:24:f1:a4:d6:f7:60:a2:69:04:4a:02:84:e4: 22:3c:d3:13:f1:ca:2b:d6:93:3d:fd:4e:81:9c:71:1c:7e:e6: 37:4b:07:cc:bc:12:2e:30:7c:bb:be:32:0e:e4:89:b9:7f:d2: fe:a2:4b:a5:48:81:b9:2d:7b:d2:cf:6a:fd:c1:84:0d:d7:db: 52:ac:18:77:2b:3f:7d:f4:bb:c9:f9:91:6f:10:c9:5c:45:dc: c6:d2:c4:d5:d5:5b:17:30:36:e0:e8:20:e6:c3:c6:4d:26:b3: 3d:7c:db:12:c1:3e:39:a6:90:90:e5:0e:9d:e7:de:0c:b3:69: fe:c1:d5:49:ea:7e:cd:36:84:6d:ae:e6:5f:cd:d1:98:dc:88: eb:c1:46:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEuVTEYJfFYhTW6FKqkWEPLuEYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjA4MDIwNDU4MzFaFw0yNjA4MDMwNTQxMzFaMDMxMTAvBgNV BAMTKEZBQ0REQ0YxMUIzNUY4Rjk0MjlCQkE2OEY0MDU2QzgyNjZERDJDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIMWzNgE8P53TZwYawUn61+cl YtGj59MIUotG4d7Zv785MZv3+3UEdKhH2OenxLfxvgN0AOE9LckIDk8qeyuLRfcw +5vPuldU5LtxVS2pXdR/MszujAejASw10Wl+tQUS6Rh/7oqBTGHMW8NwyYyydKFM 7OkQdpDQJ7/+XJM4x5rc4iqBdNVP1CXFARcteCykMsApb+XuPF7MecvdtDXrohuY pOAj7PdXhjWArbPofriGdFySYZf6tGpy70037QqeBhZmcxKh5AJ8L95OFARZ4f5U Q4Vmdx1g1Ns/g4xQT+URl9CmWmT2vQAQJcjV/WIvNCjRIGQEYUFt7B6SmKNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+s3c8Rs1+PlCm7po9AVsgmbdLB4wHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3 MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+q3FajIKMAyBt7TOka5S1EkG/U3gxsJ10Q v2DRlkvyphXzRQPpt5dXSwhVWIMxiQ1amnuWoYAkhdGUiJpZdjJrUuu3vpIhrSe4 QiQq14p4bbD4qWzx2hMtbg8rC6ZvzKfDLMjAeAO6pv1uAbt22P/lJPGk1vdgomkE SgKE5CI80xPxyivWkz39ToGccRx+5jdLB8y8Ei4wfLu+Mg7kibl/0v6iS6VIgbkt e9LPav3BhA3X21KsGHcrP330u8n5kW8QyVxF3MbSxNXVWxcwNuDoIObDxk0msz18 2xLBPjmmkJDlDp3n3gyzaf7B1Unqfs02hG2u5l/N0ZjciOvBRs0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client