$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: m7L8cGL/Agm03p8LvNqYHZxGdqoMS5uN/yn2RThPYk0= Subject key identifier: 19:8A:6B:06:B4:36:81:76:7D:C9:A3:A1:98:11:93:9E:3C:03:34:F4 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 5BF088F6F417591FE126A60F763BC9E6F88F745D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 09:42:31 +0000 Manifest this update: Wed 29 Jul 2026 09:37:31 +0000 Manifest next update: Thu 30 Jul 2026 13:38:31 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) 2: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: pHtG85KfsD2cB99TqpY2rklRpeKBJZ6eC2nbIAN8F38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f0:88:f6:f4:17:59:1f:e1:26:a6:0f:76:3b:c9:e6:f8:8f:74:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Jul 29 09:37:31 2026 GMT Not After : Jul 30 13:38:31 2026 GMT Subject: CN=198A6B06B43681767DC9A3A19811939E3C0334F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:87:11:bb:ef:76:f1:3f:89:fd:c3:85:c1: b9:2c:f1:68:63:df:e7:b5:0c:00:b5:16:93:df:d5: 0d:ff:ce:25:ef:c9:b0:73:3b:15:96:a6:cd:64:51: 2e:c3:b5:d5:5d:9f:37:55:59:3b:f4:ea:d2:94:f7: 56:ba:b5:cc:4b:a4:ef:92:a4:29:27:81:bc:43:cb: f4:9c:de:72:14:b5:ee:c6:37:9c:21:23:a6:a1:2f: c0:84:40:aa:16:ee:c8:db:a6:a0:69:a4:97:9b:36: c7:71:36:6c:73:7a:88:61:ee:40:67:bd:33:2b:a2: 14:b6:ff:39:c9:c2:a4:5a:e4:04:a8:21:01:0b:76: 5c:54:f5:b8:e7:d3:1e:55:e1:1c:cb:06:6d:d8:be: 77:4e:e1:f1:22:27:e2:c8:46:27:78:3c:ee:81:aa: ca:bc:72:47:39:60:f3:1a:e8:1b:95:2f:3e:64:4c: da:5f:a7:7a:82:32:dd:b5:b6:1f:fa:af:0e:ab:92: ee:28:b9:c4:70:c4:21:4a:04:86:00:ca:7d:94:8e: 32:cc:05:78:b1:a7:93:2e:c6:bd:62:09:b5:c9:c0: 93:c0:17:d1:03:bc:d4:c8:42:90:27:67:84:ed:a8: d2:27:68:3d:a8:4e:2e:fb:59:fd:be:ad:81:dd:44: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:6B:06:B4:36:81:76:7D:C9:A3:A1:98:11:93:9E:3C:03:34:F4 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:36:26:fd:f5:36:0d:43:7d:26:bc:bf:0e:4f:5e:8a:ce:28: eb:3f:ca:d2:76:a4:e7:d0:03:8c:10:d2:e6:69:05:5a:9f:59: 33:e1:42:ea:88:5a:0e:83:4f:7d:ac:14:5f:ac:52:5d:77:a8: 03:c5:88:75:c7:df:5d:00:2e:85:ed:c1:9b:69:17:2f:0f:6b: 1b:5a:22:59:d8:f6:62:8d:6a:ad:79:5f:9b:b3:d9:a4:a7:2d: ad:a8:94:b9:2a:c8:6b:19:b0:05:8d:1c:6b:73:df:34:75:e5: f9:4f:9f:32:79:72:88:11:cf:26:fc:f8:2e:0f:6d:ea:17:9c: 14:92:93:7f:d4:b3:cf:5f:30:52:42:89:d9:b7:4f:09:d7:d5: d6:c4:20:1b:4c:57:ff:b9:3f:40:c2:43:9f:dd:82:16:55:9a: e1:a0:09:9c:cb:ee:8a:da:bc:a2:9a:36:68:c9:83:30:89:f3: ea:5e:ab:f8:5d:d1:93:b9:34:da:a5:3f:e9:5b:f8:08:8f:0b: 76:c0:3e:6c:76:9b:04:d3:f4:0c:e0:3b:3f:19:da:ad:ab:c2: e3:03:e9:c7:bb:1a:1f:97:a6:5d:45:cf:45:64:79:ea:d8:da: 8c:49:9d:06:75:58:0e:d1:81:ef:c0:4d:c2:5c:a4:bb:8f:21: 3f:c9:d0:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/CI9vQXWR/hJqYPdjvJ5viPdF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA3MjkwOTM3MzFaFw0yNjA3MzAxMzM4MzFaMDMxMTAvBgNV BAMTKDE5OEE2QjA2QjQzNjgxNzY3REM5QTNBMTk4MTE5MzlFM0MwMzM0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwYcRu+928T+J/cOFwbks8Whj 3+e1DAC1FpPf1Q3/ziXvybBzOxWWps1kUS7DtdVdnzdVWTv06tKU91a6tcxLpO+S pCkngbxDy/Sc3nIUte7GN5whI6ahL8CEQKoW7sjbpqBppJebNsdxNmxzeohh7kBn vTMrohS2/znJwqRa5ASoIQELdlxU9bjn0x5V4RzLBm3YvndO4fEiJ+LIRid4PO6B qsq8ckc5YPMa6BuVLz5kTNpfp3qCMt21th/6rw6rku4oucRwxCFKBIYAyn2UjjLM BXixp5Muxr1iCbXJwJPAF9EDvNTIQpAnZ4TtqNInaD2oTi77Wf2+rYHdRFXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYprBrQ2gXZ9yaOhmBGTnjwDNPQwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY2Jv31Ng1DfSa8vw5PXorOKOs/ytJ2pOfQ A4wQ0uZpBVqfWTPhQuqIWg6DT32sFF+sUl13qAPFiHXH310ALoXtwZtpFy8Paxta IlnY9mKNaq15X5uz2aSnLa2olLkqyGsZsAWNHGtz3zR15flPnzJ5cogRzyb8+C4P beoXnBSSk3/Us89fMFJCidm3TwnX1dbEIBtMV/+5P0DCQ5/dghZVmuGgCZzL7ora vKKaNmjJgzCJ8+peq/hd0ZO5NNqlP+lb+AiPC3bAPmx2mwTT9AzgOz8Z2q2rwuMD 6ce7Gh+Xpl1Fz0VkeerY2oxJnQZ1WA7Rge/ATcJcpLuPIT/J0OY= -----END CERTIFICATE-----Generated at Wed Jul 29 16:09:57 2026 by rpki-client