$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: kSkL6XpA6CSELaaklZobiqfLhIcM3NzqWdGm+cPjJHE= Subject key identifier: 46:E4:DB:6B:1C:2F:F3:57:C6:05:66:19:71:A0:9B:FD:2B:95:99:60 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 24015394C8239BA7EB45D6C2EC02082EC5844A50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 05:39:05 +0000 Manifest this update: Tue 28 Jul 2026 05:34:05 +0000 Manifest next update: Wed 29 Jul 2026 05:59:05 +0000 Files and hashes: 1: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: tci2gQmTXQPFIxsI5O6T8lWMJbGu9XjnFC5GjHkfkmc=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:01:53:94:c8:23:9b:a7:eb:45:d6:c2:ec:02:08:2e:c5:84:4a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Jul 28 05:34:05 2026 GMT Not After : Jul 29 05:59:05 2026 GMT Subject: CN=46E4DB6B1C2FF357C605661971A09BFD2B959960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:c0:fd:0e:ab:2a:ac:db:d0:dd:a6:aa:4c: 04:ff:66:fc:fd:28:de:46:b7:00:85:6e:1e:c9:70: d3:14:1f:39:ae:e4:a7:80:a1:38:86:f2:b0:c3:92: 73:73:70:79:8b:f7:03:56:ea:2a:71:da:6e:b4:33: cb:f8:a7:09:7e:1c:41:d7:de:3e:eb:1d:69:f7:a3: d9:dd:10:c9:34:c4:ee:30:76:d5:15:9b:13:69:90: 32:69:4e:ed:2e:2c:95:5b:49:18:db:34:07:3d:59: 2f:36:51:2b:a0:3a:b1:64:f9:5b:fb:89:2e:bc:78: c8:a2:b3:d7:8e:bd:90:6e:bc:f9:7d:82:8f:a1:a9: bf:65:66:5a:1f:8a:00:89:30:a6:f1:d8:a4:90:34: 4e:ff:9c:3f:90:68:fa:b8:ab:03:3e:32:17:69:69: 8c:e9:ca:f1:27:68:bc:55:2b:4b:e1:80:54:4c:b2: eb:92:5b:12:d7:90:bc:e4:fe:5d:3e:54:5c:1f:af: b4:69:4e:38:7e:6f:74:7c:34:b6:fb:8c:b3:0c:c7: 5d:f0:ac:a4:ec:9b:1e:e6:bf:d3:d5:ff:db:ca:8d: 44:e7:74:ac:d7:ac:17:53:dd:4f:dd:aa:97:af:62: e7:78:d0:40:6c:b6:fa:e6:06:2a:62:5e:b3:37:11: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:DB:6B:1C:2F:F3:57:C6:05:66:19:71:A0:9B:FD:2B:95:99:60 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0d:35:1d:34:0d:d0:06:3e:bc:cb:4b:6f:c9:a3:83:35:ea: 92:01:dc:88:2b:26:7c:e1:85:2f:d1:a2:a1:f3:a3:1a:69:cf: 76:09:94:ad:30:7f:6d:00:f7:3c:7f:76:a5:f8:04:78:6d:66: 15:b7:a3:6b:fd:99:ab:86:61:4f:74:c6:e7:4a:4f:1e:86:c6: c4:6a:3d:21:b3:b9:50:fe:c1:a8:39:b1:24:d0:55:8e:69:14: e8:eb:d9:03:f9:b9:cc:d7:6b:d2:c3:8f:2b:98:ef:e9:63:2c: 74:3a:0c:73:c1:90:3e:2b:07:b6:f0:ef:31:7c:92:c3:aa:fb: e8:09:99:fe:13:80:d4:61:14:f7:26:08:56:4d:6d:2f:1f:f9: 22:b6:19:d8:ec:47:dd:60:92:0f:62:ba:44:7b:dc:44:b3:bc: 05:45:97:2c:4e:8c:a7:96:d6:34:c1:e2:07:2e:28:eb:d6:94: ed:b4:df:e3:bd:79:e3:d5:21:cd:a0:eb:62:a5:64:1d:31:10: 9c:2c:60:3f:b7:85:c6:32:32:51:46:48:6b:0d:78:24:f4:47: d5:9d:6f:13:9b:54:c4:f0:91:c4:c6:43:e4:f2:10:2c:9b:b5: 52:79:19:9f:c0:cb:c2:93:c4:20:9b:58:53:32:cc:27:30:5f: 6a:40:99:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAFTlMgjm6frRdbC7AIILsWESlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA3MjgwNTM0MDVaFw0yNjA3MjkwNTU5MDVaMDMxMTAvBgNV BAMTKDQ2RTREQjZCMUMyRkYzNTdDNjA1NjYxOTcxQTA5QkZEMkI5NTk5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq8D9DqsqrNvQ3aaqTAT/Zvz9 KN5GtwCFbh7JcNMUHzmu5KeAoTiG8rDDknNzcHmL9wNW6ipx2m60M8v4pwl+HEHX 3j7rHWn3o9ndEMk0xO4wdtUVmxNpkDJpTu0uLJVbSRjbNAc9WS82USugOrFk+Vv7 iS68eMiis9eOvZBuvPl9go+hqb9lZlofigCJMKbx2KSQNE7/nD+QaPq4qwM+Mhdp aYzpyvEnaLxVK0vhgFRMsuuSWxLXkLzk/l0+VFwfr7RpTjh+b3R8NLb7jLMMx13w rKTsmx7mv9PV/9vKjUTndKzXrBdT3U/dqpevYud40EBstvrmBipiXrM3EUb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuTbaxwv81fGBWYZcaCb/SuVmWAwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsNNR00DdAGPrzLS2/Jo4M16pIB3IgrJnzh hS/RoqHzoxppz3YJlK0wf20A9zx/dqX4BHhtZhW3o2v9mauGYU90xudKTx6GxsRq PSGzuVD+wag5sSTQVY5pFOjr2QP5uczXa9LDjyuY7+ljLHQ6DHPBkD4rB7bw7zF8 ksOq++gJmf4TgNRhFPcmCFZNbS8f+SK2GdjsR91gkg9iukR73ESzvAVFlyxOjKeW 1jTB4gcuKOvWlO203+O9eePVIc2g62KlZB0xEJwsYD+3hcYyMlFGSGsNeCT0R9Wd bxObVMTwkcTGQ+TyECybtVJ5GZ/Ay8KTxCCbWFMyzCcwX2pAmV8= -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:47 2026 by rpki-client