$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: /E48ITc+AtEAGbD6Obhb9IUZT+8Rro2CY1mEvEUHYs4= Subject key identifier: EB:68:87:74:4E:4D:32:C3:9B:8D:39:3A:5C:D8:CB:17:1B:14:DB:70 Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 3F812FF4ED79304A6A03277C527BF5C09D4AAE43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 05:27:36 +0000 Manifest this update: Wed 29 Jul 2026 05:22:36 +0000 Manifest next update: Thu 30 Jul 2026 06:19:36 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) 2: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: MrUxDiX2BdDEA03u/jD3FgEIxVKLRFoTc7BeEvXAuJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:81:2f:f4:ed:79:30:4a:6a:03:27:7c:52:7b:f5:c0:9d:4a:ae:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: Jul 29 05:22:36 2026 GMT Not After : Jul 30 06:19:36 2026 GMT Subject: CN=EB6887744E4D32C39B8D393A5CD8CB171B14DB70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:50:ba:a6:10:6e:10:fc:46:55:7b:0b:9f: cb:92:a1:91:75:dc:3a:63:18:fa:db:ab:1e:e0:ff: e5:15:d2:30:f4:be:7b:f4:ad:50:7c:15:34:ed:86: 95:8a:46:5c:dd:ec:b0:bd:61:f8:e7:d8:8c:0b:73: 45:bd:f3:9e:e8:99:fd:d9:db:a9:99:e4:29:70:ce: b1:89:dd:0f:f3:17:ed:00:2b:66:d0:ad:8a:df:35: 09:54:7c:9a:c0:e2:71:29:bc:65:0e:5e:6c:b5:92: bd:f6:1d:8b:c6:4b:f0:3a:27:40:88:2a:a4:9c:fe: bf:26:ab:4c:de:d5:46:92:74:d2:a5:71:b7:2c:55: 7f:60:3b:5a:18:cb:0e:57:77:fa:c5:f0:e5:4c:24: 24:69:76:71:81:65:2f:88:08:06:fb:d4:5d:de:05: 9f:83:66:89:3d:fc:45:7a:8c:a4:8b:2e:59:9d:d1: 62:05:f3:77:47:bd:54:34:73:c2:c4:14:3e:29:39: 96:49:df:5a:ba:9f:7c:f8:37:42:72:6d:f9:9a:e6: 12:9f:0f:d1:62:79:bd:c6:de:20:92:a9:e7:27:c0: e1:2c:72:3c:9d:74:2a:cd:76:0a:ef:6e:4b:47:25: 17:17:f3:ef:24:e3:68:07:9b:15:da:98:f9:a3:e4: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:68:87:74:4E:4D:32:C3:9B:8D:39:3A:5C:D8:CB:17:1B:14:DB:70 X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:80:28:3b:d4:69:ff:0c:77:d0:37:42:ce:ab:3a:be:8b:73: ff:f9:0e:b2:58:c7:2f:41:39:09:75:b2:46:81:b6:4e:ef:c9: ae:0d:5f:6d:d4:2d:6d:db:aa:5e:45:80:67:9d:60:a2:bd:84: e4:eb:6a:09:f2:18:cc:c9:72:c3:24:75:47:22:e5:b5:4e:6f: 31:9f:cc:b3:69:9a:3f:fa:04:dc:67:8a:48:bc:12:60:2a:4d: c7:c7:58:24:b6:9c:6f:37:21:ad:74:ba:9b:f4:2f:09:c3:44: 90:bf:9c:49:a4:01:a5:33:18:0d:3f:f1:d8:8f:90:81:1a:9b: f1:bf:d1:22:59:8c:2a:dd:78:76:e2:57:e0:6f:72:bf:c4:f1: 40:29:bb:10:95:b1:81:bd:3c:72:c6:3f:85:cf:9a:ea:36:53: 9c:5b:21:b7:50:aa:49:e4:a4:0a:5e:99:32:7e:bc:4f:16:84: 06:35:4c:70:fa:53:28:ff:fb:f4:a8:e4:62:66:8f:6e:39:b7: be:61:a4:32:9a:82:5c:26:df:65:05:d0:82:22:cb:4f:d5:1f: 7c:3f:ac:b3:2d:e3:2c:da:e8:6a:da:34:09:23:7a:eb:26:a5: 64:3d:3e:60:2b:7a:97:63:b4:42:7f:15:e7:19:81:c4:14:4b: 20:4d:b6:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4Ev9O15MEpqAyd8Unv1wJ1KrkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA3MjkwNTIyMzZaFw0yNjA3MzAwNjE5MzZaMDMxMTAvBgNV BAMTKEVCNjg4Nzc0NEU0RDMyQzM5QjhEMzkzQTVDRDhDQjE3MUIxNERCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBFC6phBuEPxGVXsLn8uSoZF1 3DpjGPrbqx7g/+UV0jD0vnv0rVB8FTTthpWKRlzd7LC9Yfjn2IwLc0W9857omf3Z 26mZ5ClwzrGJ3Q/zF+0AK2bQrYrfNQlUfJrA4nEpvGUOXmy1kr32HYvGS/A6J0CI KqSc/r8mq0ze1UaSdNKlcbcsVX9gO1oYyw5Xd/rF8OVMJCRpdnGBZS+ICAb71F3e BZ+DZok9/EV6jKSLLlmd0WIF83dHvVQ0c8LEFD4pOZZJ31q6n3z4N0Jybfma5hKf D9Fieb3G3iCSqecnwOEscjyddCrNdgrvbktHJRcX8+8k42gHmxXamPmj5DJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU62iHdE5NMsObjTk6XNjLFxsU23AwHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECAKDvUaf8Md9A3Qs6rOr6Lc//5DrJYxy9B OQl1skaBtk7vya4NX23ULW3bql5FgGedYKK9hOTragnyGMzJcsMkdUci5bVObzGf zLNpmj/6BNxniki8EmAqTcfHWCS2nG83Ia10upv0LwnDRJC/nEmkAaUzGA0/8diP kIEam/G/0SJZjCrdeHbiV+Bvcr/E8UApuxCVsYG9PHLGP4XPmuo2U5xbIbdQqknk pApemTJ+vE8WhAY1THD6Uyj/+/So5GJmj245t75hpDKaglwm32UF0IIiy0/VH3w/ rLMt4yza6GraNAkjeusmpWQ9PmArepdjtEJ/FecZgcQUSyBNtoI= -----END CERTIFICATE-----Generated at Wed Jul 29 13:57:30 2026 by rpki-client