$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: /NuEtbRAx6Nzo/7nlSU3m1ds/K2LjIb6PXXfawAiG84= Subject key identifier: 1A:D9:97:2E:10:3E:10:19:E9:E1:A6:57:5A:55:E6:F4:75:CA:C2:E0 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: A388084665A8A4F9911A1BA3DC7A7157E1327D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 10:15:43 +0000 Manifest this update: Mon 27 Jul 2026 10:10:43 +0000 Manifest next update: Tue 28 Jul 2026 10:35:43 +0000 Files and hashes: 1: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: W+OMnKPaEscEtH3CpCFBtD/YIk2xknppPYXc/JrIh38=) 2: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 4: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:88:08:46:65:a8:a4:f9:91:1a:1b:a3:dc:7a:71:57:e1:32:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Jul 27 10:10:43 2026 GMT Not After : Jul 28 10:35:43 2026 GMT Subject: CN=1AD9972E103E1019E9E1A6575A55E6F475CAC2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:b4:c4:a6:3b:49:7d:4e:c7:66:ec:ff:f3: d1:2f:65:f4:c4:10:f8:18:33:43:9b:6f:05:32:9d: 99:ce:d8:93:eb:b1:ea:5f:5d:59:cd:66:61:69:18: 5e:67:03:73:c4:59:9b:87:c7:c2:ef:df:9d:dc:d7: c7:26:43:68:4a:ce:3d:8c:4f:06:05:81:83:2f:c3: d9:3e:7e:7c:c8:de:01:3c:36:1c:f3:8f:8f:6f:d2: f2:fe:a3:fc:a5:42:4b:33:9a:cb:e8:e9:58:c3:c8: 6c:6e:ab:7e:20:2c:de:68:5f:6f:81:e3:62:6a:fd: 66:92:a3:7f:00:ff:b6:44:f6:f9:bc:7d:6c:07:23: 5a:11:6a:b7:c9:5f:ce:24:0b:94:d0:bc:a7:b1:22: 7d:75:ca:9d:20:95:bb:cc:2c:fe:34:3e:e5:cc:ee: 89:e7:f3:ec:d3:cb:e1:cd:24:2e:80:21:20:59:c8: 81:9c:78:9f:74:c7:2d:54:0a:45:f6:09:0d:36:e0: 1b:df:0d:ad:fb:d5:b8:63:2e:a4:c5:77:b5:71:39: a9:f6:b0:47:7b:cf:50:14:db:d3:86:c0:cf:ed:7f: fe:ce:99:ec:f6:f5:4c:c0:b0:7b:e6:07:ff:e8:69: 2a:64:e0:66:75:fe:07:4b:dc:e6:f2:f6:df:63:0c: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D9:97:2E:10:3E:10:19:E9:E1:A6:57:5A:55:E6:F4:75:CA:C2:E0 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:de:1e:d7:de:be:92:b8:8f:36:41:04:70:f4:37:dc:db:79: 1c:02:4b:74:d5:78:9f:83:91:5d:3f:ad:76:f9:36:81:a4:d0: a4:d9:6e:01:08:9a:8d:f6:6a:ef:60:d3:42:d0:25:f2:a0:1f: 44:5d:78:aa:f3:cd:ef:58:ac:b7:66:ee:46:19:aa:c9:39:e5: d0:65:14:73:2b:f3:34:4a:88:b3:ac:58:3c:c9:a0:8e:b3:63: 58:58:66:95:bf:75:40:05:70:5c:1b:7e:69:fb:f3:1c:1c:9a: 53:4e:01:c5:11:89:f4:83:23:b8:57:d1:30:ef:8b:30:ad:62: 35:38:af:1b:fa:23:e8:56:7f:29:62:73:a5:d2:74:39:78:b2: cb:a6:45:b4:d8:68:ae:db:a3:be:88:b8:c6:a0:fb:9d:e6:22: 57:ed:9f:e3:55:ca:8d:29:00:bc:0c:aa:93:28:e6:ce:15:62: de:14:a7:45:7e:34:6c:fd:41:8a:e5:cd:35:29:ff:4f:5f:22: 85:67:cf:9d:d7:3d:a5:92:e3:02:3f:b2:28:5f:77:92:70:c1: f7:db:39:ff:7d:53:3a:d8:c0:5d:b8:5f:6c:46:fc:2d:cb:58: 1b:9d:6f:57:4b:e5:4c:9b:3e:71:30:5b:4d:4c:ab:34:1c:6d: bc:ea:71:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKOICEZlqKT5kRobo9x6cVfhMn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA3MjcxMDEwNDNaFw0yNjA3MjgxMDM1NDNaMDMxMTAvBgNV BAMTKDFBRDk5NzJFMTAzRTEwMTlFOUUxQTY1NzVBNTVFNkY0NzVDQUMyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrrTEpjtJfU7HZuz/89EvZfTE EPgYM0ObbwUynZnO2JPrsepfXVnNZmFpGF5nA3PEWZuHx8Lv353c18cmQ2hKzj2M TwYFgYMvw9k+fnzI3gE8Nhzzj49v0vL+o/ylQkszmsvo6VjDyGxuq34gLN5oX2+B 42Jq/WaSo38A/7ZE9vm8fWwHI1oRarfJX84kC5TQvKexIn11yp0glbvMLP40PuXM 7onn8+zTy+HNJC6AISBZyIGceJ90xy1UCkX2CQ024BvfDa371bhjLqTFd7VxOan2 sEd7z1AU29OGwM/tf/7Omez29UzAsHvmB//oaSpk4GZ1/gdL3Oby9t9jDF9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGtmXLhA+EBnp4aZXWlXm9HXKwuAwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJneHtfevpK4jzZBBHD0N9zbeRwCS3TVeJ+D kV0/rXb5NoGk0KTZbgEImo32au9g00LQJfKgH0RdeKrzze9YrLdm7kYZqsk55dBl FHMr8zRKiLOsWDzJoI6zY1hYZpW/dUAFcFwbfmn78xwcmlNOAcURifSDI7hX0TDv izCtYjU4rxv6I+hWfylic6XSdDl4ssumRbTYaK7bo76IuMag+53mIlftn+NVyo0p ALwMqpMo5s4VYt4Up0V+NGz9QYrlzTUp/09fIoVnz53XPaWS4wI/sihfd5Jwwffb Of99UzrYwF24X2xG/C3LWBudb1dL5UybPnEwW01MqzQcbbzqcf8= -----END CERTIFICATE-----Generated at Mon Jul 27 14:32:30 2026 by rpki-client