$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: ExxUjb7mO3zLkOnTsQMHYnTnqu/AVRZZzHC11fpMNe0= Subject key identifier: 6A:23:DF:F3:29:E8:7A:FB:82:07:EA:30:F3:46:3C:06:3B:6B:53:D5 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 6DC10523C3A73D14A4B78EF6818093744C74A608 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:44:27 +0000 Manifest this update: Wed 29 Jul 2026 02:39:27 +0000 Manifest next update: Thu 30 Jul 2026 05:11:27 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=) 2: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: 3ovO8PPPSo7EMcH5nrhtx6Oni3P7Z7UOYDS5mURN7ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c1:05:23:c3:a7:3d:14:a4:b7:8e:f6:81:80:93:74:4c:74:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Jul 29 02:39:27 2026 GMT Not After : Jul 30 05:11:27 2026 GMT Subject: CN=6A23DFF329E87AFB8207EA30F3463C063B6B53D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:fc:c5:ff:18:47:79:4a:d5:b2:f1:d5:9e: 5b:36:34:1c:f9:74:fa:76:7b:6f:03:8a:e0:0a:e5: 85:2f:5e:f0:fe:68:27:e1:1c:3b:88:c8:ab:d1:ab: 9d:42:c1:b2:23:b6:1a:0d:b7:0b:1c:78:8f:78:16: d7:09:af:33:95:86:7d:ce:98:b9:b6:87:d3:aa:fa: 1d:33:f3:5d:3f:38:7d:0f:6e:89:e1:76:9a:05:02: e8:70:6d:f5:70:ce:8d:c2:7a:6f:6c:0d:b4:5a:3f: 40:f0:af:17:d7:cd:eb:8d:9b:12:b7:6a:ae:0e:a9: b8:8b:c0:14:96:50:c7:63:33:b5:d8:30:50:3c:04: 60:f7:3b:6d:de:b5:36:f1:1b:36:fa:9d:74:36:fc: 84:36:63:94:b1:18:7b:a2:41:06:eb:c4:c7:41:90: 2e:b9:91:c4:74:8a:db:30:19:57:25:12:ae:fc:a7: 67:d0:b0:65:6c:6b:e1:1a:26:a1:c7:33:06:67:6b: 8a:10:9c:fb:60:70:d8:e6:61:4e:5b:d3:88:d8:3e: cc:61:02:68:11:52:4e:43:76:18:95:b6:a0:e6:f7: b9:f6:1d:28:d9:9d:b2:ab:d1:96:22:8d:9c:7d:83: 00:82:dd:2b:8e:e4:56:97:62:7d:9a:33:a6:fb:e7: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:DF:F3:29:E8:7A:FB:82:07:EA:30:F3:46:3C:06:3B:6B:53:D5 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:59:94:69:c7:e0:cd:e7:d8:20:51:d8:bf:bf:a6:a5:f9: bc:4b:73:06:85:8f:6b:0e:d5:6b:08:7c:93:60:33:b2:9c:f7: c3:ac:91:2f:96:7e:cb:44:f0:a3:e9:41:0f:63:d7:fb:2e:99: 26:8c:48:c3:36:7d:ea:9b:8a:9e:68:76:79:a3:8f:48:c2:70: b9:48:0d:04:0b:fa:11:54:15:9a:29:e8:ab:d8:cc:b7:14:53: ee:41:4a:73:3e:ee:fa:87:87:1c:1e:97:33:41:a4:e7:97:ac: 17:a8:ff:20:c5:4b:db:eb:f0:3a:cf:e7:e5:5b:cb:82:e1:0d: 4d:26:f9:87:52:29:b3:1d:2a:d3:c2:65:96:1d:31:c4:26:8a: 9f:61:11:ae:76:5f:11:74:de:13:f5:12:f3:2b:82:d4:10:9f: 48:26:70:85:ed:00:46:40:7c:5b:7d:7b:39:51:d6:e7:8c:d3: 26:cd:16:ad:0a:0f:fa:7a:ec:03:c8:2e:a1:3e:c7:79:d8:72: da:23:c2:40:5b:fd:77:6b:96:c3:bf:e3:47:0e:14:23:5e:7e: d0:c3:ad:12:8f:1d:8f:22:0e:82:3b:d6:17:cf:2c:ca:db:59: 80:52:e8:21:bf:f5:4b:4a:61:80:18:e2:62:6f:6e:7e:90:e2: 92:54:d6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcEFI8OnPRSkt472gYCTdEx0pggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA3MjkwMjM5MjdaFw0yNjA3MzAwNTExMjdaMDMxMTAvBgNV BAMTKDZBMjNERkYzMjlFODdBRkI4MjA3RUEzMEYzNDYzQzA2M0I2QjUzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ePzF/xhHeUrVsvHVnls2NBz5 dPp2e28DiuAK5YUvXvD+aCfhHDuIyKvRq51CwbIjthoNtwsceI94FtcJrzOVhn3O mLm2h9Oq+h0z810/OH0PbonhdpoFAuhwbfVwzo3Cem9sDbRaP0DwrxfXzeuNmxK3 aq4OqbiLwBSWUMdjM7XYMFA8BGD3O23etTbxGzb6nXQ2/IQ2Y5SxGHuiQQbrxMdB kC65kcR0itswGVclEq78p2fQsGVsa+EaJqHHMwZna4oQnPtgcNjmYU5b04jYPsxh AmgRUk5DdhiVtqDm97n2HSjZnbKr0ZYijZx9gwCC3SuO5FaXYn2aM6b75z7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaiPf8ynoevuCB+ow80Y8BjtrU9UwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa1WZRpx+DN59ggUdi/v6al+bxLcwaFj2sO 1WsIfJNgM7Kc98OskS+WfstE8KPpQQ9j1/sumSaMSMM2feqbip5odnmjj0jCcLlI DQQL+hFUFZop6KvYzLcUU+5BSnM+7vqHhxwelzNBpOeXrBeo/yDFS9vr8DrP5+Vb y4LhDU0m+YdSKbMdKtPCZZYdMcQmip9hEa52XxF03hP1EvMrgtQQn0gmcIXtAEZA fFt9ezlR1ueM0ybNFq0KD/p67APILqE+x3nYctojwkBb/XdrlsO/40cOFCNeftDD rRKPHY8iDoI71hfPLMrbWYBS6CG/9UtKYYAY4mJvbn6Q4pJU1so= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:08 2026 by rpki-client