$ rpki-client -vvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: Q4qt4iKUykq+IJ4eEW+fIZFWaAX5PeX77iVs//wyiLM= Subject key identifier: BF:38:9A:45:C6:F0:C4:12:9D:2C:FD:A5:B0:01:30:AC:A6:95:18:6D Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 41B9990660938759576AD01A9123A26F77FD7E7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 02:25:33 +0000 Manifest this update: Sun 02 Aug 2026 02:20:33 +0000 Manifest next update: Mon 03 Aug 2026 03:15:33 +0000 Files and hashes: 1: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: 0etsEda5Hatgh8hjvvWF7gpCrDQK72NiSp8y7whyfxk=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b9:99:06:60:93:87:59:57:6a:d0:1a:91:23:a2:6f:77:fd:7e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Aug 2 02:20:33 2026 GMT Not After : Aug 3 03:15:33 2026 GMT Subject: CN=BF389A45C6F0C4129D2CFDA5B00130ACA695186D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9b:ad:f3:8b:4f:dd:34:1c:94:b2:14:e0:0f: 6e:5a:49:03:dc:29:87:26:fb:0c:8f:ec:33:82:7f: f1:a6:91:1b:29:a0:33:70:37:bb:7d:f4:08:52:b7: e8:60:49:d0:92:3f:45:83:fa:2d:89:9a:f5:5b:34: 08:e4:9a:dd:b6:ca:d3:67:bf:83:77:9b:56:95:f8: a5:ed:c7:97:55:61:61:ef:95:13:36:bf:f5:0e:02: eb:08:2e:7b:3f:ee:82:6b:f9:1d:21:a2:4c:c2:e1: 20:90:d6:db:9d:cf:34:53:f7:96:0b:d4:ac:e7:35: 73:df:a4:8c:c1:bd:e9:1d:8c:4f:5d:50:9b:f7:32: 1d:fb:b1:51:ae:07:24:d8:b2:72:d7:9c:2b:bc:63: f3:23:fb:a2:2f:c2:44:72:5f:00:41:38:33:e8:5d: a6:b2:e9:9b:9e:3b:8a:f3:b8:a2:6b:5f:14:6c:10: c7:0d:a2:42:5e:d5:ae:34:b7:b2:ab:c9:20:eb:7b: 23:9d:6b:9b:0b:f1:bf:b2:9f:11:d3:68:49:14:e8: 91:c7:85:80:fa:6b:5f:82:00:28:28:a0:de:8f:df: 17:32:0a:c2:e9:a0:7a:1a:0c:b1:06:e5:d0:02:8f: f8:50:2c:1c:d2:e5:31:99:cf:4b:5c:bf:ba:06:6b: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:9A:45:C6:F0:C4:12:9D:2C:FD:A5:B0:01:30:AC:A6:95:18:6D X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bf:7d:20:09:4c:cd:30:75:c9:bb:f5:c9:1c:e8:53:10:df: 74:2c:96:27:1a:1f:ff:ec:51:bb:ef:73:ad:c3:3a:1f:56:34: c3:72:3a:13:98:10:d1:be:54:80:68:0a:06:04:5e:dd:1d:1d: d9:71:1f:8d:18:b2:71:fe:a7:bb:d4:9f:45:1f:42:03:7a:00: 02:1d:6e:05:43:86:62:2e:41:cd:19:cb:2b:aa:06:ca:36:d8: af:df:8f:ed:4a:d6:0c:69:e4:37:51:44:e1:5b:18:25:01:42: d0:cc:9e:cb:06:2a:cc:65:31:1d:60:f1:68:22:19:be:a9:ba: 73:33:26:c9:6b:5b:db:ca:f9:b6:a1:7d:eb:b8:46:2b:e3:47: a7:57:72:16:13:c8:e0:53:4a:c8:eb:4f:60:90:94:6a:d1:b2: 7a:9b:3f:ab:62:8d:f5:ff:94:4b:1f:4e:cb:00:a8:71:fe:72: 32:44:03:80:f0:31:f9:3b:99:26:24:92:2e:54:0d:43:eb:14: 69:68:8b:15:4b:16:65:72:ce:cb:24:fe:0a:93:9f:84:da:dc: 30:f4:20:da:6b:2b:7d:3a:6b:2b:06:2f:62:73:e6:8c:0b:4a: 17:c4:32:ef:97:44:7e:ea:58:ed:a6:8a:e3:6c:7f:6f:53:60: 47:cf:40:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbmZBmCTh1lXatAakSOib3f9fn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA4MDIwMjIwMzNaFw0yNjA4MDMwMzE1MzNaMDMxMTAvBgNV BAMTKEJGMzg5QTQ1QzZGMEM0MTI5RDJDRkRBNUIwMDEzMEFDQTY5NTE4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpm63zi0/dNByUshTgD25aSQPc KYcm+wyP7DOCf/GmkRspoDNwN7t99AhSt+hgSdCSP0WD+i2JmvVbNAjkmt22ytNn v4N3m1aV+KXtx5dVYWHvlRM2v/UOAusILns/7oJr+R0hokzC4SCQ1tudzzRT95YL 1KznNXPfpIzBvekdjE9dUJv3Mh37sVGuByTYsnLXnCu8Y/Mj+6IvwkRyXwBBODPo Xaay6ZueO4rzuKJrXxRsEMcNokJe1a40t7KrySDreyOda5sL8b+ynxHTaEkU6JHH hYD6a1+CACgooN6P3xcyCsLpoHoaDLEG5dACj/hQLBzS5TGZz0tcv7oGa2QnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvziaRcbwxBKdLP2lsAEwrKaVGG0wHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS/fSAJTM0wdcm79ckc6FMQ33QslicaH//s Ubvvc63DOh9WNMNyOhOYENG+VIBoCgYEXt0dHdlxH40YsnH+p7vUn0UfQgN6AAId bgVDhmIuQc0ZyyuqBso22K/fj+1K1gxp5DdRROFbGCUBQtDMnssGKsxlMR1g8Wgi Gb6punMzJslrW9vK+bahfeu4RivjR6dXchYTyOBTSsjrT2CQlGrRsnqbP6tijfX/ lEsfTssAqHH+cjJEA4DwMfk7mSYkki5UDUPrFGloixVLFmVyzssk/gqTn4Ta3DD0 INprK306aysGL2Jz5owLShfEMu+XRH7qWO2miuNsf29TYEfPQEg= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:57 2026 by rpki-client