$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json) Hash identifier: 7e40LhTbEVQ5f4rTMdlqGs339kHtxjGnRS1dOuRhGSU= Subject key identifier: B2:24:19:C1:57:B5:D1:F3:DD:46:7D:5D:AF:10:B2:0A:4B:F9:04:FC Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Certificate serial: 576FDCA812587C67A267CF7728A04402654B1F4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 09:16:54 +0000 Manifest this update: Wed 29 Jul 2026 09:11:54 +0000 Manifest next update: Thu 30 Jul 2026 11:54:54 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=) 2: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=) 3: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=) 4: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=) 5: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=) 6: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=) 7: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=) 8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=) 9: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: rYVgaYfYnPmoUaZXr/k2lN+v5q1iYYTgJY2aSOa3V3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6f:dc:a8:12:58:7c:67:a2:67:cf:77:28:a0:44:02:65:4b:1f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF Validity Not Before: Jul 29 09:11:54 2026 GMT Not After : Jul 30 11:54:54 2026 GMT Subject: CN=B22419C157B5D1F3DD467D5DAF10B20A4BF904FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:70:a2:54:27:0e:62:87:ef:b3:23:4f:1d: 26:1c:c9:bb:ef:21:fa:1c:fc:28:32:24:23:5f:02: 53:58:6e:d7:5c:8c:2b:85:f6:8f:c2:e6:0a:ad:86: bb:b2:33:44:1e:71:37:bb:28:6e:78:8e:79:b0:54: 0b:92:85:26:eb:ad:99:e1:86:43:de:de:4f:cf:fc: 50:03:75:72:66:81:7d:54:ae:7b:0e:8f:bd:03:ca: 3e:4c:50:76:ac:4e:5d:d3:74:96:59:46:ee:c5:ba: 52:0d:3d:9b:68:c3:bc:59:a3:f8:4b:7d:f9:44:6e: ba:b1:41:9a:38:5f:40:a5:6b:0b:0e:6b:ea:78:58: e4:8a:cf:94:fd:88:03:8a:56:b5:4c:40:a3:d2:8e: 4d:6e:98:35:02:ca:8d:b0:6a:e3:73:03:c3:d2:4f: 3e:bb:c9:83:3c:2a:56:8c:de:a1:a7:8d:2e:e1:2e: ee:1d:e3:37:52:c7:50:fd:3d:6b:22:95:37:fa:a0: 78:cb:31:b6:7b:f8:f5:e1:ff:32:ae:a5:1a:70:2d: 04:45:c6:e5:c6:02:58:42:65:36:ab:c6:60:45:3c: b9:e5:f4:cb:50:64:0d:95:74:f7:0c:45:43:19:7a: 0e:f6:40:95:5a:ae:65:e9:b4:67:2b:1c:ec:fc:ed: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:19:C1:57:B5:D1:F3:DD:46:7D:5D:AF:10:B2:0A:4B:F9:04:FC X509v3 Authority Key Identifier: keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:76:1b:c8:46:a2:4f:bf:f8:20:fd:c7:11:99:7a:6f:10: 9a:1f:31:b0:01:17:6f:24:68:13:ca:b1:3b:db:77:80:23:4b: 56:81:51:e2:1e:4c:9e:4e:18:a1:63:da:e0:36:4e:94:0e:ab: 30:9d:94:73:99:1f:7d:a4:9a:6f:26:e2:5f:21:35:c3:c4:cb: 3b:a6:08:dc:83:c4:b4:ae:c1:4e:5f:db:57:66:1a:1e:58:35: 16:ff:0c:e2:2f:40:22:90:f2:bf:f9:3c:a6:52:93:45:d0:58: 84:56:f2:06:d2:47:57:93:40:f7:d5:44:3c:d9:41:98:6c:70: ec:b9:b9:d3:7d:50:da:63:fc:ac:8e:b9:19:7d:ce:df:42:e1: bb:56:e8:f7:c2:06:34:ff:df:f0:38:07:9e:9c:ba:fb:d7:d8: 80:ea:80:ce:24:ee:9b:be:87:88:17:1e:3c:18:d0:a0:60:5a: 14:29:39:d8:05:81:89:a4:c5:71:4c:9c:51:84:a0:a7:75:6f: b3:b4:12:2c:f3:99:2a:50:25:47:17:5e:d7:d8:29:6b:43:7d: 02:4d:aa:17:ec:12:1c:97:6b:02:6c:f3:4b:bc:2f:d7:a4:10: fa:66:2f:b2:e4:cc:51:0e:ee:01:4b:7d:54:ee:66:df:23:48: e3:b5:6c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2/cqBJYfGeiZ893KKBEAmVLH08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5 NzlFRTdDRjAeFw0yNjA3MjkwOTExNTRaFw0yNjA3MzAxMTU0NTRaMDMxMTAvBgNV BAMTKEIyMjQxOUMxNTdCNUQxRjNERDQ2N0Q1REFGMTBCMjBBNEJGOTA0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKHCiVCcOYofvsyNPHSYcybvv Ifoc/CgyJCNfAlNYbtdcjCuF9o/C5gqthruyM0QecTe7KG54jnmwVAuShSbrrZnh hkPe3k/P/FADdXJmgX1UrnsOj70Dyj5MUHasTl3TdJZZRu7FulINPZtow7xZo/hL fflEbrqxQZo4X0ClawsOa+p4WOSKz5T9iAOKVrVMQKPSjk1umDUCyo2wauNzA8PS Tz67yYM8KlaM3qGnjS7hLu4d4zdSx1D9PWsilTf6oHjLMbZ7+PXh/zKupRpwLQRF xuXGAlhCZTarxmBFPLnl9MtQZA2VdPcMRUMZeg72QJVarmXptGcrHOz87QtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsiQZwVe10fPdRn1drxCyCkv5BPwwHwYDVR0j BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF N0NGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0Yx RjY5NzlFRTdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3GdhvIRqJPv/gg/ccRmXpvEJofMbABF28k aBPKsTvbd4AjS1aBUeIeTJ5OGKFj2uA2TpQOqzCdlHOZH32kmm8m4l8hNcPEyzum CNyDxLSuwU5f21dmGh5YNRb/DOIvQCKQ8r/5PKZSk0XQWIRW8gbSR1eTQPfVRDzZ QZhscOy5udN9UNpj/KyOuRl9zt9C4btW6PfCBjT/3/A4B56cuvvX2IDqgM4k7pu+ h4gXHjwY0KBgWhQpOdgFgYmkxXFMnFGEoKd1b7O0EizzmSpQJUcXXtfYKWtDfQJN qhfsEhyXawJs80u8L9ekEPpmL7LkzFEO7gFLfVTuZt8jSOO1bF8= -----END CERTIFICATE-----Generated at Wed Jul 29 17:22:21 2026 by rpki-client