$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: +EOOzbFAfB8e4yULfRrvFT772gGI5kBWLHuuY8pHxBw= Subject key identifier: 23:D2:97:13:D9:16:0D:70:27:DF:BA:7D:85:5A:B8:B3:0E:27:6B:FD Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 1FCF72E838C49E3367B96CFEC07C7F80C016D3AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:52:30 +0000 Manifest this update: Tue 28 Jul 2026 16:47:30 +0000 Manifest next update: Wed 29 Jul 2026 17:50:30 +0000 Files and hashes: 1: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 2: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 3: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: fR619q+ZIk+iBGF/9xJ1kKaYEY1MeEKtM5ONW+9sTeM=) 4: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 5: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cf:72:e8:38:c4:9e:33:67:b9:6c:fe:c0:7c:7f:80:c0:16:d3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Jul 28 16:47:30 2026 GMT Not After : Jul 29 17:50:30 2026 GMT Subject: CN=23D29713D9160D7027DFBA7D855AB8B30E276BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:8b:8d:a9:bc:b1:43:00:f6:1a:21:e7:c1: 57:13:60:bd:64:c1:a2:55:55:40:ca:76:21:aa:0c: 00:a9:54:43:1c:38:64:dd:9a:f8:aa:30:c9:ea:fe: 53:40:36:73:b8:33:2f:9c:4f:88:d9:6a:b3:6f:61: 1e:d3:7a:ee:50:a8:21:35:db:e2:f7:ad:4e:c1:08: d4:a5:59:c8:2e:92:77:40:bc:7d:1f:44:aa:04:d5: 04:f0:63:3c:73:82:49:ad:cc:81:0a:a2:8c:0c:79: 83:6b:e1:ee:3f:07:c1:fe:e8:99:82:28:69:3e:68: da:ca:4a:73:f7:02:a7:80:54:29:dd:7e:50:61:69: 2d:af:fe:dc:b9:db:44:56:2e:3f:b7:9b:be:2b:81: 07:e9:84:8d:f3:a6:02:60:7c:e7:af:34:be:ad:75: 04:74:df:39:17:0c:1c:e1:dd:e3:e7:71:88:bc:12: 26:00:76:bb:31:88:40:7d:44:05:22:4e:2b:09:f3: 6d:e5:1e:51:2a:94:e3:ed:3a:0b:ed:9b:73:97:fe: 39:cb:8c:2c:f6:e3:46:6b:f9:d5:19:59:e8:89:f2: e6:c9:ef:5e:3b:f9:7b:28:f3:df:45:db:bb:f8:22: 0c:91:be:ec:2c:63:b3:78:38:c3:8b:fd:37:26:8b: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:97:13:D9:16:0D:70:27:DF:BA:7D:85:5A:B8:B3:0E:27:6B:FD X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e8:d5:8e:08:fa:15:f8:56:f0:b0:82:6f:c8:89:13:c2:62: d1:b2:7f:56:c4:8c:56:0a:22:07:c3:6d:4e:46:03:46:d7:19: 20:b0:74:8b:9e:aa:99:13:f4:a3:c5:ef:d0:fa:6b:9a:9f:9c: 96:57:ac:a3:de:b6:e0:0c:1a:2a:60:37:33:46:c9:a4:ea:d1: 75:3a:97:67:4b:a1:2b:8d:c8:f5:9a:90:29:ac:53:0f:43:ff: 83:91:29:db:ea:6c:6c:1c:18:fc:c4:26:8d:43:90:db:8b:4e: 02:7e:96:62:6c:83:ee:19:4b:97:41:78:8c:a8:a7:42:f1:4c: 5f:df:4d:3f:f1:58:63:c2:60:4d:ea:60:f0:d6:17:cd:02:0f: e9:07:2b:14:e8:a0:4c:3d:62:b3:68:ed:2a:d7:b3:a2:6f:7a: 0b:7c:e4:ab:c1:3f:65:42:73:7a:97:de:bf:ac:45:75:89:bf: 47:8c:19:8a:d8:fb:18:16:99:fe:e8:52:17:ce:5f:98:3b:d8: 0b:4a:82:86:d2:6e:4f:a3:bc:fc:18:83:32:7b:b5:ad:5f:f8: c5:4a:73:d4:be:53:e1:51:75:46:ed:e8:7b:aa:ea:f0:77:b1: b6:18:df:f1:5b:98:9d:32:31:73:8b:25:40:8f:d7:78:cc:c4: bb:78:9f:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH89y6DjEnjNnuWz+wHx/gMAW060wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA3MjgxNjQ3MzBaFw0yNjA3MjkxNzUwMzBaMDMxMTAvBgNV BAMTKDIzRDI5NzEzRDkxNjBENzAyN0RGQkE3RDg1NUFCOEIzMEUyNzZCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wouNqbyxQwD2GiHnwVcTYL1k waJVVUDKdiGqDACpVEMcOGTdmviqMMnq/lNANnO4My+cT4jZarNvYR7Teu5QqCE1 2+L3rU7BCNSlWcgukndAvH0fRKoE1QTwYzxzgkmtzIEKoowMeYNr4e4/B8H+6JmC KGk+aNrKSnP3AqeAVCndflBhaS2v/ty520RWLj+3m74rgQfphI3zpgJgfOevNL6t dQR03zkXDBzh3ePncYi8EiYAdrsxiEB9RAUiTisJ823lHlEqlOPtOgvtm3OX/jnL jCz240Zr+dUZWeiJ8ubJ7147+Xso899F27v4IgyRvuwsY7N4OMOL/Tcmi0tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9KXE9kWDXAn37p9hVq4sw4na/0wHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHo1Y4I+hX4VvCwgm/IiRPCYtGyf1bEjFYK IgfDbU5GA0bXGSCwdIueqpkT9KPF79D6a5qfnJZXrKPetuAMGipgNzNGyaTq0XU6 l2dLoSuNyPWakCmsUw9D/4ORKdvqbGwcGPzEJo1DkNuLTgJ+lmJsg+4ZS5dBeIyo p0LxTF/fTT/xWGPCYE3qYPDWF80CD+kHKxTooEw9YrNo7SrXs6Jvegt85KvBP2VC c3qX3r+sRXWJv0eMGYrY+xgWmf7oUhfOX5g72AtKgobSbk+jvPwYgzJ7ta1f+MVK c9S+U+FRdUbt6Huq6vB3sbYY3/FbmJ0yMXOLJUCP13jMxLt4n8U= -----END CERTIFICATE-----Generated at Wed Jul 29 04:28:22 2026 by rpki-client