$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: RGfK2S8IpBscAPY/hKwZSLmycygi9cVH7Byg0hqlI8A= Subject key identifier: B5:F5:29:36:25:0E:80:1B:3E:4A:85:90:51:FA:7A:14:F5:D9:F5:1B Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 70B4C7E52AE09F88D9262651030EF7A69085607B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: 67 Signing time: Sat 18 Jul 2026 00:17:43 +0000 Manifest this update: Sat 18 Jul 2026 00:12:43 +0000 Manifest next update: Sun 19 Jul 2026 02:26:43 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: 8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=) 2: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: Ottml1tDXwYRq/s5YXA5S9baWb/QYkC7mGd5TQH6FTs=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 6IFvIlwM6aIx7tnOnE1+rdakVYbeL0dKrUmRNu3aOIc=) 4: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: HMvuZA5GEygwEQ/A4E++UiWHcNENuOx/DwxIrFLrduA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b4:c7:e5:2a:e0:9f:88:d9:26:26:51:03:0e:f7:a6:90:85:60:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Jul 18 00:12:43 2026 GMT Not After : Jul 19 02:26:43 2026 GMT Subject: CN=B5F52936250E801B3E4A859051FA7A14F5D9F51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8d:fd:ed:fd:78:93:a4:73:a0:a3:6c:bb:e2: cf:7f:42:97:ec:96:a6:4b:5b:2f:bf:2f:6e:74:8c: ca:dd:1f:9a:64:ad:bb:be:68:40:44:5f:98:d0:61: cc:96:eb:de:01:06:45:d3:88:9b:5f:26:ae:c2:28: 3d:ca:fa:e3:b3:8e:2d:2e:36:c1:22:1d:09:4f:01: 94:db:94:b3:9e:31:c9:b5:3c:10:d1:65:68:cd:cb: d5:5f:16:95:17:0e:83:d9:d5:4e:d4:ec:6d:28:12: 4f:67:52:7d:ec:df:21:01:1e:1b:10:b3:c6:76:9d: 63:16:99:de:67:ed:b3:bd:ad:fa:21:6c:60:d8:4e: 4e:a8:c3:c0:53:0a:5d:8f:dc:d2:4e:bd:5a:73:dc: ed:68:67:16:c7:f4:86:3b:08:59:ee:a9:47:60:62: a7:0b:24:dd:6d:d6:8e:61:25:29:81:e8:f3:8e:f7: a8:07:46:b4:c9:d7:46:70:a1:37:06:5b:50:fe:f3: b4:06:27:7e:c8:3d:8b:29:3f:74:0b:77:4a:4a:af: ab:d5:d8:c0:1e:68:41:81:c2:a7:02:cd:e4:e0:14: 36:8b:34:27:01:95:52:30:c6:f9:44:1e:c3:55:c0: 47:75:7a:76:07:f0:1b:6f:17:1c:5b:a4:5a:fe:af: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:29:36:25:0E:80:1B:3E:4A:85:90:51:FA:7A:14:F5:D9:F5:1B X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7d:58:40:ee:cf:a2:fa:38:65:08:74:72:95:8e:90:8d:8a: 63:86:4b:e4:05:4c:0d:fd:a8:25:e1:03:79:49:e6:1a:e6:80: 75:f7:e3:a2:55:20:d3:bb:bc:d6:a0:f6:23:26:52:77:fa:52: 1a:62:dd:02:a9:a9:85:e1:94:7c:7e:c3:40:db:09:3d:19:e5: a1:ba:0c:36:3a:91:a9:d1:f9:42:b9:ef:b3:24:bc:bd:41:56: 5f:be:1f:d2:25:0a:56:ab:87:b9:a1:af:c3:44:be:5d:d4:47: 08:8c:c9:2a:c3:3e:83:4a:af:0e:fe:3e:71:b4:95:c1:e3:fe: 10:89:a9:57:03:f3:90:1e:e5:03:66:e3:d7:03:db:c8:61:2e: 0f:db:2a:30:26:eb:ec:0f:05:3e:42:e5:e0:6e:93:d4:46:ee: 1a:7d:93:36:02:c3:1f:cb:3c:da:de:db:a8:68:5a:31:bf:a8: 5e:01:a7:15:a8:18:08:e1:3e:6f:06:5a:57:71:a3:29:51:f5: 3d:1c:b5:51:3f:6f:32:17:5c:c4:bc:90:0c:7c:aa:12:bd:86: dc:dc:da:50:36:16:2c:52:32:cd:cc:08:f7:af:cb:2b:43:f3: 9b:f1:a4:47:7d:fa:d6:35:ca:1f:b6:31:ba:d7:bf:b5:ee:15: bd:eb:f4:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLTH5Srgn4jZJiZRAw73ppCFYHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA3MTgwMDEyNDNaFw0yNjA3MTkwMjI2NDNaMDMxMTAvBgNV BAMTKEI1RjUyOTM2MjUwRTgwMUIzRTRBODU5MDUxRkE3QTE0RjVEOUY1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjf3t/XiTpHOgo2y74s9/Qpfs lqZLWy+/L250jMrdH5pkrbu+aEBEX5jQYcyW694BBkXTiJtfJq7CKD3K+uOzji0u NsEiHQlPAZTblLOeMcm1PBDRZWjNy9VfFpUXDoPZ1U7U7G0oEk9nUn3s3yEBHhsQ s8Z2nWMWmd5n7bO9rfohbGDYTk6ow8BTCl2P3NJOvVpz3O1oZxbH9IY7CFnuqUdg YqcLJN1t1o5hJSmB6POO96gHRrTJ10ZwoTcGW1D+87QGJ37IPYspP3QLd0pKr6vV 2MAeaEGBwqcCzeTgFDaLNCcBlVIwxvlEHsNVwEd1enYH8BtvFxxbpFr+ryJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfUpNiUOgBs+SoWQUfp6FPXZ9RswHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH59WEDuz6L6OGUIdHKVjpCNimOGS+QFTA39 qCXhA3lJ5hrmgHX346JVINO7vNag9iMmUnf6Uhpi3QKpqYXhlHx+w0DbCT0Z5aG6 DDY6kanR+UK577MkvL1BVl++H9IlClarh7mhr8NEvl3URwiMySrDPoNKrw7+PnG0 lcHj/hCJqVcD85Ae5QNm49cD28hhLg/bKjAm6+wPBT5C5eBuk9RG7hp9kzYCwx/L PNre26hoWjG/qF4BpxWoGAjhPm8GWldxoylR9T0ctVE/bzIXXMS8kAx8qhK9htzc 2lA2FixSMs3MCPevyytD85vxpEd9+tY1yh+2MbrXv7XuFb3r9LU= -----END CERTIFICATE-----Generated at Sat Jul 18 02:22:51 2026 by rpki-client