$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: OnfOa46xBDd6TAWHSVleA8jt91nvAUGbTADuqjInJWA= Subject key identifier: CC:EE:68:AB:15:67:B4:D1:F5:1D:33:AF:47:9C:A3:B7:00:2C:F9:0F Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 29B93D8C581E5353BC88904A708EAB6257321F7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 21:22:57 +0000 Manifest this update: Tue 28 Jul 2026 21:17:57 +0000 Manifest next update: Wed 29 Jul 2026 21:35:57 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 2: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: 9RgmRtjC3MRKX+i8XmlS0OMWzdI6MvTiRg6NHzwSaoo=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:3d:8c:58:1e:53:53:bc:88:90:4a:70:8e:ab:62:57:32:1f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Jul 28 21:17:57 2026 GMT Not After : Jul 29 21:35:57 2026 GMT Subject: CN=CCEE68AB1567B4D1F51D33AF479CA3B7002CF90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:11:be:f4:3a:d8:29:1b:96:6a:cb:b7:e3: 27:48:27:d8:93:56:73:28:eb:ba:82:73:f3:8f:3b: 87:e6:e1:e0:c4:dc:c3:e3:a5:50:d9:63:a2:d5:4e: e6:95:2d:ca:9f:a1:98:74:8e:0d:57:ba:1b:50:51: 19:80:f4:47:28:4e:ff:1b:df:2f:ad:29:64:cc:81: d5:98:cf:8c:d7:32:c3:7f:c1:76:8d:e9:18:2d:7b: a9:01:2e:ac:88:56:cc:ff:24:9f:23:db:d5:fb:99: 88:53:d2:d5:46:a0:bd:c0:4d:23:4b:4f:ab:ee:63: 30:e1:75:6f:98:4f:dd:1b:f9:db:84:fa:85:84:58: 3e:61:4d:54:11:38:5d:6a:ca:56:fc:0d:7a:94:6a: f0:da:b7:9d:57:67:d3:1e:a4:99:9e:34:2b:4d:68: 47:65:92:28:a2:db:e4:de:a0:d3:0a:82:a4:49:3c: 78:e2:a4:b6:3d:95:ae:97:8d:f8:f5:a5:0c:b1:7f: 79:69:db:ff:f0:f5:34:10:38:16:1d:b9:aa:ec:ce: ba:70:6e:20:d5:81:6f:8c:39:fb:79:fd:3e:78:be: b7:b2:6e:ca:62:2c:91:40:8f:8f:e9:bf:be:be:c5: d6:de:67:de:ff:34:d3:c3:b9:72:58:c4:00:fa:6f: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:68:AB:15:67:B4:D1:F5:1D:33:AF:47:9C:A3:B7:00:2C:F9:0F X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:86:48:b6:fd:18:65:57:36:db:ec:e0:f4:cd:f6:68:d0:5c: d1:e3:bb:b6:00:76:ce:7d:46:69:52:cf:cc:08:56:b3:15:16: 15:96:36:4d:9d:ab:90:cb:9b:a7:24:3b:8e:3f:71:d6:39:99: f8:4f:67:5c:1d:af:8b:8a:69:df:d1:03:bd:42:37:6f:fd:a0: 57:91:a5:11:a9:68:e2:1a:c8:4f:c3:fe:ba:02:96:58:a2:45: 9c:c1:bd:63:73:9d:ce:88:4f:81:30:ee:b4:a8:69:5b:07:86: 84:a2:82:21:d5:96:4f:0a:45:29:d2:42:15:06:f3:e5:2f:52: bc:c8:ba:5a:5e:dc:a6:58:7e:99:27:c1:06:63:47:9f:a9:d3: 1f:e9:e2:d9:84:5e:d4:b0:91:ab:0d:70:f6:7e:85:fe:60:cd: 98:0f:f3:c7:64:09:17:1d:b0:5b:9c:6d:d6:7e:e2:e0:43:32: c9:d7:b8:86:ad:9b:11:91:42:f1:1f:05:dc:f8:8a:4d:12:d8: b6:77:55:3a:61:52:ed:ef:94:6a:ae:04:15:56:06:06:75:73: 01:60:89:6b:38:7a:69:a0:c0:fd:5a:03:92:04:8b:40:14:f4: 69:42:05:7c:c6:47:62:08:92:99:80:ed:a6:1e:52:63:48:a0: a4:26:ba:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbk9jFgeU1O8iJBKcI6rYlcyH30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA3MjgyMTE3NTdaFw0yNjA3MjkyMTM1NTdaMDMxMTAvBgNV BAMTKENDRUU2OEFCMTU2N0I0RDFGNTFEMzNBRjQ3OUNBM0I3MDAyQ0Y5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XhG+9DrYKRuWasu34ydIJ9iT VnMo67qCc/OPO4fm4eDE3MPjpVDZY6LVTuaVLcqfoZh0jg1XuhtQURmA9EcoTv8b 3y+tKWTMgdWYz4zXMsN/wXaN6Rgte6kBLqyIVsz/JJ8j29X7mYhT0tVGoL3ATSNL T6vuYzDhdW+YT90b+duE+oWEWD5hTVQROF1qylb8DXqUavDat51XZ9MepJmeNCtN aEdlkiii2+TeoNMKgqRJPHjipLY9la6Xjfj1pQyxf3lp2//w9TQQOBYduarszrpw biDVgW+MOft5/T54vreybspiLJFAj4/pv76+xdbeZ97/NNPDuXJYxAD6b8pLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzO5oqxVntNH1HTOvR5yjtwAs+Q8wHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCGSLb9GGVXNtvs4PTN9mjQXNHju7YAds59 RmlSz8wIVrMVFhWWNk2dq5DLm6ckO44/cdY5mfhPZ1wdr4uKad/RA71CN2/9oFeR pRGpaOIayE/D/roClliiRZzBvWNznc6IT4Ew7rSoaVsHhoSigiHVlk8KRSnSQhUG 8+UvUrzIulpe3KZYfpknwQZjR5+p0x/p4tmEXtSwkasNcPZ+hf5gzZgP88dkCRcd sFucbdZ+4uBDMsnXuIatmxGRQvEfBdz4ik0S2LZ3VTphUu3vlGquBBVWBgZ1cwFg iWs4emmgwP1aA5IEi0AU9GlCBXzGR2IIkpmA7aYeUmNIoKQmukg= -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:10 2026 by rpki-client