$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: aH88VpAG3qEYBnLsbi+vyDElwo6Gj7eYD/w/3Yd84Os= Subject key identifier: 0A:AF:76:58:12:07:72:50:8E:4E:71:E8:A0:88:5E:A4:AE:DC:93:BB Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 3C9771061C4A61AC2EB88E3E67D4813070A1DB35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 23:10:22 +0000 Manifest this update: Tue 28 Jul 2026 23:05:22 +0000 Manifest next update: Thu 30 Jul 2026 01:35:22 +0000 Files and hashes: 1: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: Q4ROxXzPPf0xRo/3YEUIw43UHD3e8JvuvufRNgMLG3Y=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) 3: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 5: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:97:71:06:1c:4a:61:ac:2e:b8:8e:3e:67:d4:81:30:70:a1:db:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: Jul 28 23:05:22 2026 GMT Not After : Jul 30 01:35:22 2026 GMT Subject: CN=0AAF7658120772508E4E71E8A0885EA4AEDC93BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:95:03:28:8d:d4:7e:5d:75:44:1c:27:9d: 6d:05:44:b5:ce:67:df:82:94:5d:43:09:a2:b5:0a: c6:e9:79:1f:95:bc:55:f2:0c:cb:2a:78:07:1b:df: d8:2c:3e:57:40:4d:c6:b9:a2:58:be:7a:5e:3c:4a: 14:d9:9c:4c:87:dc:11:82:83:da:f3:7f:82:b4:20: 94:17:29:26:2a:17:ac:5f:c1:fa:d8:a8:3c:09:13: a9:37:46:7f:30:29:43:97:e3:e9:c8:da:ea:4a:ac: 33:c3:4b:00:61:25:2a:0d:74:f4:98:75:38:fb:28: 45:db:c1:7c:02:9f:ef:e3:3e:e1:6c:da:e5:df:a2: b3:6d:c6:91:d8:bc:05:db:7e:c0:dc:03:45:5f:be: 1a:7a:39:d5:3a:2f:0b:3c:26:ef:e9:a1:ba:7d:6a: 95:09:c2:5c:f1:ee:70:81:ff:73:85:f0:bc:f1:11: 15:aa:33:0a:0e:6e:b5:4c:2e:b9:05:24:1c:e4:a8: a8:2f:c3:42:b0:38:8a:e4:d4:91:f1:5e:81:4a:3a: 9b:be:ff:0e:45:d2:1a:e0:81:8f:06:46:a7:f6:a2: 5a:9f:8e:88:89:af:06:0c:a8:2d:42:14:f6:d7:a5: 5a:64:d6:01:b7:0e:0d:7d:0e:7c:e8:a6:53:8e:c7: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AF:76:58:12:07:72:50:8E:4E:71:E8:A0:88:5E:A4:AE:DC:93:BB X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:53:9b:76:f3:24:e7:f6:4b:77:6e:f9:02:13:dc:84:ad:ee: 1f:c5:ce:48:25:fe:26:e0:bf:ca:2e:2b:b2:02:b2:6c:5c:9e: 99:d3:a9:67:af:ef:02:b8:0c:f0:8f:a1:32:7f:d6:69:4c:29: 45:41:3f:a4:d5:de:5b:71:b9:ba:4a:e2:a7:f7:01:81:92:04: 7e:4f:fe:c5:ba:ed:b0:1e:ec:39:0a:d4:5f:99:68:37:dc:10: db:1a:d5:d1:c1:8f:6d:94:5c:69:d2:51:6f:d5:e5:53:3c:7c: 3a:9b:98:3e:2b:96:49:ee:d8:7f:f2:22:df:45:74:d4:51:2c: a0:79:b6:c9:e9:de:11:c2:ba:8c:00:0b:db:55:2a:b1:48:15: a4:cf:72:dd:15:dc:e7:5a:05:9c:af:ae:d0:79:c3:21:f0:01: ac:ab:53:78:7b:e1:d8:3f:e6:1d:27:2a:94:b5:ac:ef:e7:22: af:96:02:ea:73:19:5b:f7:34:ff:1e:fc:65:c3:6c:2d:be:b6: 68:be:83:aa:86:db:30:0b:6b:b9:29:02:d9:dc:58:9d:4d:d3: 66:6d:91:90:5e:40:9b:2d:c7:d1:d5:2b:59:19:1c:5b:8c:f3: 56:92:8c:4a:96:73:f5:78:f1:dc:32:94:b5:1a:64:fa:6e:85: 79:dd:5d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJdxBhxKYawuuI4+Z9SBMHCh2zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA3MjgyMzA1MjJaFw0yNjA3MzAwMTM1MjJaMDMxMTAvBgNV BAMTKDBBQUY3NjU4MTIwNzcyNTA4RTRFNzFFOEEwODg1RUE0QUVEQzkzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTJUDKI3Ufl11RBwnnW0FRLXO Z9+ClF1DCaK1CsbpeR+VvFXyDMsqeAcb39gsPldATca5oli+el48ShTZnEyH3BGC g9rzf4K0IJQXKSYqF6xfwfrYqDwJE6k3Rn8wKUOX4+nI2upKrDPDSwBhJSoNdPSY dTj7KEXbwXwCn+/jPuFs2uXforNtxpHYvAXbfsDcA0Vfvhp6OdU6Lws8Ju/pobp9 apUJwlzx7nCB/3OF8LzxERWqMwoObrVMLrkFJBzkqKgvw0KwOIrk1JHxXoFKOpu+ /w5F0hrggY8GRqf2olqfjoiJrwYMqC1CFPbXpVpk1gG3Dg19DnzoplOOx7uNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCq92WBIHclCOTnHooIhepK7ck7swHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdTm3bzJOf2S3du+QIT3ISt7h/Fzkgl/ibg v8ouK7ICsmxcnpnTqWev7wK4DPCPoTJ/1mlMKUVBP6TV3ltxubpK4qf3AYGSBH5P /sW67bAe7DkK1F+ZaDfcENsa1dHBj22UXGnSUW/V5VM8fDqbmD4rlknu2H/yIt9F dNRRLKB5tsnp3hHCuowAC9tVKrFIFaTPct0V3OdaBZyvrtB5wyHwAayrU3h74dg/ 5h0nKpS1rO/nIq+WAupzGVv3NP8e/GXDbC2+tmi+g6qG2zALa7kpAtncWJ1N02Zt kZBeQJstx9HVK1kZHFuM81aSjEqWc/V48dwylLUaZPpuhXndXcM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:15:46 2026 by rpki-client