$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: gcpNcKXBhWOoDDmTsC6po+CeBobweDQkdMEXy3wECPI= Subject key identifier: 6C:E9:68:FD:19:D8:7F:8B:9B:03:BC:51:F7:B6:3C:7B:85:38:97:50 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 17D486825262CBE30EFDF9F556423E22FE53BFB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: 68 Signing time: Sat 18 Jul 2026 03:11:22 +0000 Manifest this update: Sat 18 Jul 2026 03:06:22 +0000 Manifest next update: Sun 19 Jul 2026 03:22:22 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) 4: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: +n2K3ICkwZPRAu9MM+BEIeDGj+jWjsrkQgA/PiDfezs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:86:82:52:62:cb:e3:0e:fd:f9:f5:56:42:3e:22:fe:53:bf:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Jul 18 03:06:22 2026 GMT Not After : Jul 19 03:22:22 2026 GMT Subject: CN=6CE968FD19D87F8B9B03BC51F7B63C7B85389750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:37:f6:94:ba:89:1d:63:e9:f1:a8:16:dd: bb:09:52:ec:c6:3d:67:c7:bd:61:99:8b:d6:ff:0a: 99:1f:3d:c2:ee:42:0b:69:32:83:e0:95:60:a8:8f: 07:5a:8b:77:fe:b5:4b:93:26:35:c3:d4:5e:3b:7b: 57:da:08:0f:af:9d:b6:24:a4:bc:13:37:d3:b7:aa: f7:e1:6f:33:01:5d:7a:e1:99:23:31:a5:d8:3d:62: 21:ba:54:1c:12:0f:3c:93:eb:e8:60:7c:e6:8a:94: 5c:a7:d0:62:fa:74:51:2f:25:67:e0:8a:9a:3b:b9: cc:e9:79:44:d0:a1:e5:4b:6c:31:7b:68:4d:87:47: e9:84:be:20:23:fb:87:63:a6:59:0a:8e:8d:13:10: 70:d3:a9:50:18:c7:05:b1:43:bf:77:0b:32:2a:f8: e1:43:36:9e:22:69:80:53:b8:c1:b8:9a:9f:6b:9e: 1d:68:79:7b:6b:3f:fc:1b:63:1c:0a:a4:02:4c:1b: 20:3d:9a:44:41:27:ab:32:ed:83:ce:ca:90:62:e3: cc:f4:f6:60:4e:eb:f9:d6:be:59:24:ec:4b:5b:9e: d0:76:8f:ea:f0:51:b5:d4:28:81:c8:50:45:0d:24: bc:54:64:70:60:6d:87:da:91:11:ca:84:66:46:8e: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:68:FD:19:D8:7F:8B:9B:03:BC:51:F7:B6:3C:7B:85:38:97:50 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:26:bc:e7:8a:eb:9f:cf:d0:4a:4e:d0:a6:ec:33:5a:c2:78: a0:bc:9c:52:9c:16:bb:25:c9:de:43:2b:8f:fc:1e:92:a6:a8: 91:22:b4:4b:6a:1a:63:c5:f5:58:69:68:32:ce:89:68:4a:12: 61:fd:4e:9b:12:91:0f:c3:d5:3f:32:fd:f9:bd:e6:54:48:8b: 1c:21:02:48:64:6c:08:12:da:02:24:1b:05:3f:7b:c5:9a:cf: a8:bc:de:ec:7d:d6:7f:76:b0:57:71:97:ff:a6:cc:bc:0b:56: 31:69:e7:f0:5a:bb:23:62:b8:11:cf:78:0c:bf:d1:8d:d1:cb: ca:ca:e2:0c:d2:28:7f:78:47:53:b1:bb:e3:1d:c3:8b:08:65: b4:b0:1c:86:11:bf:2c:a1:5b:34:04:d8:0d:d2:23:72:17:72: ba:5a:e0:0d:e9:d7:7e:04:ce:f5:ae:80:51:61:28:60:81:52: 63:3b:5c:8c:27:ff:32:9f:37:52:51:96:f2:8c:fe:f4:79:c7: 7c:ab:11:da:b6:e5:7b:62:54:25:4f:11:41:cd:71:aa:3c:0a: e5:dc:22:06:6f:c8:18:53:c8:cc:64:07:57:c3:96:00:74:34: b1:ad:b5:9a:dd:21:d6:e8:9c:5e:6a:a7:ed:e2:fc:49:77:ec: fb:7c:d7:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9SGglJiy+MO/fn1VkI+Iv5Tv7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA3MTgwMzA2MjJaFw0yNjA3MTkwMzIyMjJaMDMxMTAvBgNV BAMTKDZDRTk2OEZEMTlEODdGOEI5QjAzQkM1MUY3QjYzQzdCODUzODk3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fjf2lLqJHWPp8agW3bsJUuzG PWfHvWGZi9b/CpkfPcLuQgtpMoPglWCojwdai3f+tUuTJjXD1F47e1faCA+vnbYk pLwTN9O3qvfhbzMBXXrhmSMxpdg9YiG6VBwSDzyT6+hgfOaKlFyn0GL6dFEvJWfg ipo7uczpeUTQoeVLbDF7aE2HR+mEviAj+4djplkKjo0TEHDTqVAYxwWxQ793CzIq +OFDNp4iaYBTuMG4mp9rnh1oeXtrP/wbYxwKpAJMGyA9mkRBJ6sy7YPOypBi48z0 9mBO6/nWvlkk7EtbntB2j+rwUbXUKIHIUEUNJLxUZHBgbYfakRHKhGZGjvyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOlo/RnYf4ubA7xR97Y8e4U4l1AwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMmvOeK65/P0EpO0KbsM1rCeKC8nFKcFrsl yd5DK4/8HpKmqJEitEtqGmPF9VhpaDLOiWhKEmH9TpsSkQ/D1T8y/fm95lRIixwh AkhkbAgS2gIkGwU/e8Waz6i83ux91n92sFdxl/+mzLwLVjFp5/BauyNiuBHPeAy/ 0Y3Ry8rK4gzSKH94R1Oxu+Mdw4sIZbSwHIYRvyyhWzQE2A3SI3IXcrpa4A3p134E zvWugFFhKGCBUmM7XIwn/zKfN1JRlvKM/vR5x3yrEdq25XtiVCVPEUHNcao8CuXc IgZvyBhTyMxkB1fDlgB0NLGttZrdIdbonF5qp+3i/El37Pt81xk= -----END CERTIFICATE-----Generated at Sat Jul 18 06:13:03 2026 by rpki-client