$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json) Hash identifier: +m2i7WdQCzneqYZcNBPQQE2Q/LnAShYiVDE8O39H/nY= Subject key identifier: 96:23:1D:20:10:9A:E7:21:D9:96:AC:CC:9E:8E:69:CD:50:A8:4B:AA Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Certificate serial: 04D993E22D59BD70457EBD8F5199203E934380D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:25:39 +0000 Manifest this update: Tue 28 Jul 2026 15:20:39 +0000 Manifest next update: Wed 29 Jul 2026 17:37:39 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=) 2: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: IIzEinKAKf8Zba4Eu3QELYQIJnz6W+OieObypnj2tds=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d9:93:e2:2d:59:bd:70:45:7e:bd:8f:51:99:20:3e:93:43:80:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA Validity Not Before: Jul 28 15:20:39 2026 GMT Not After : Jul 29 17:37:39 2026 GMT Subject: CN=96231D20109AE721D996ACCC9E8E69CD50A84BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:8d:ad:3d:14:45:98:4b:98:8b:e2:bf:8c: 60:13:4d:48:70:4d:e3:1b:96:7e:ef:37:41:aa:5a: c5:1d:2a:c0:36:3b:46:f4:f1:bb:98:71:0a:5b:25: 60:32:79:df:f0:3c:c0:3f:43:e0:a3:45:cf:d1:7e: ac:eb:79:16:c5:70:e1:d5:b8:e7:40:db:a7:5b:d6: 68:29:2e:2f:31:f4:d9:be:82:94:46:22:ce:b8:5c: 41:5f:3b:cd:d8:59:da:47:3f:98:1f:8b:ee:af:70: fb:dc:8b:4a:08:ac:cf:74:c7:79:29:03:38:db:65: b1:c2:30:c5:35:d3:d0:61:77:ff:70:b8:a0:8f:0f: 7d:a7:2a:f0:0f:60:9a:a7:6f:bc:87:ed:ee:cb:06: 61:87:f6:55:20:50:e2:20:18:96:46:ed:7a:f6:13: ad:af:3c:57:20:32:c2:ff:b7:2b:64:30:94:57:cd: 57:64:c4:42:5c:1f:f0:4f:fa:c8:40:81:c6:a9:5f: a2:32:98:3a:fb:84:44:9d:4b:71:04:91:a9:1e:ae: fa:af:84:d2:93:36:79:2c:11:17:90:6e:37:84:ef: 52:f6:04:41:e9:1b:23:c2:e7:01:40:0d:49:07:31: fd:8c:cc:6b:39:c7:b6:af:1e:ff:24:1d:65:a6:a1: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:1D:20:10:9A:E7:21:D9:96:AC:CC:9E:8E:69:CD:50:A8:4B:AA X509v3 Authority Key Identifier: keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bb:98:9d:0a:53:75:21:02:7e:5a:df:c2:ab:b9:c8:e2:4b: 3a:6d:a6:1a:ab:57:50:fe:41:c5:f0:60:f4:0a:9f:d4:8d:9b: 34:63:46:87:d2:cf:c2:97:fe:86:48:f1:ed:4c:0b:dc:b7:37: c1:d2:53:7a:eb:d8:c9:f1:0a:53:c8:a4:79:c5:8a:cc:b3:77: 11:24:8d:a2:16:77:ff:47:62:83:a2:5a:30:98:3d:6c:21:4e: 1a:95:b1:32:92:d9:81:f5:00:66:f7:08:67:fd:fb:5d:88:f9: 80:83:b6:a8:a5:82:3b:01:d0:23:c6:05:5b:7d:c5:16:3c:33: fb:b7:e3:5b:5b:f4:76:d8:9b:d8:6e:2a:ca:dd:3f:2f:55:17: 6e:c4:a1:81:8b:7c:f7:5f:e1:64:b8:13:26:04:04:a4:fe:30: 6d:d3:9c:df:30:02:80:81:74:fb:f1:b8:3f:b6:0b:70:1b:b9: 07:ed:72:04:84:35:26:33:04:03:62:81:0b:c2:32:34:10:07: 93:2b:ad:1f:8e:06:71:c3:28:75:50:83:9d:9a:96:ae:22:a5: 0f:0b:31:66:8d:ce:e0:8c:8a:b6:f7:45:2a:74:e6:f0:1b:c4: 5c:35:00:70:38:90:5a:31:a8:d6:ee:32:c3:85:09:1a:9a:82: 5a:aa:4f:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNmT4i1ZvXBFfr2PUZkgPpNDgNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD M0JBMDVFQTAeFw0yNjA3MjgxNTIwMzlaFw0yNjA3MjkxNzM3MzlaMDMxMTAvBgNV BAMTKDk2MjMxRDIwMTA5QUU3MjFEOTk2QUNDQzlFOEU2OUNENTBBODRCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aI2tPRRFmEuYi+K/jGATTUhw TeMbln7vN0GqWsUdKsA2O0b08buYcQpbJWAyed/wPMA/Q+CjRc/RfqzreRbFcOHV uOdA26db1mgpLi8x9Nm+gpRGIs64XEFfO83YWdpHP5gfi+6vcPvci0oIrM90x3kp AzjbZbHCMMU109Bhd/9wuKCPD32nKvAPYJqnb7yH7e7LBmGH9lUgUOIgGJZG7Xr2 E62vPFcgMsL/tytkMJRXzVdkxEJcH/BP+shAgcapX6IymDr7hESdS3EEkakervqv hNKTNnksEReQbjeE71L2BEHpGyPC5wFADUkHMf2MzGs5x7avHv8kHWWmoZWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUliMdIBCa5yHZlqzMno5pzVCoS6owHwYDVR0j BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4 REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5 NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq7mJ0KU3UhAn5a38KrucjiSzptphqrV1D+ QcXwYPQKn9SNmzRjRofSz8KX/oZI8e1MC9y3N8HSU3rr2MnxClPIpHnFisyzdxEk jaIWd/9HYoOiWjCYPWwhThqVsTKS2YH1AGb3CGf9+12I+YCDtqilgjsB0CPGBVt9 xRY8M/u341tb9HbYm9huKsrdPy9VF27EoYGLfPdf4WS4EyYEBKT+MG3TnN8wAoCB dPvxuD+2C3AbuQftcgSENSYzBANigQvCMjQQB5MrrR+OBnHDKHVQg52alq4ipQ8L MWaNzuCMirb3RSp05vAbxFw1AHA4kFoxqNbuMsOFCRqaglqqT2o= -----END CERTIFICATE-----Generated at Wed Jul 29 00:34:29 2026 by rpki-client