$ rpki-client -vvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json) Hash identifier: 3v9KdIluRCdjizcMSExg03wfYwvMuNtobJ52r605f20= Subject key identifier: 10:1A:4B:ED:1A:36:21:35:3B:9E:F7:33:F2:EB:A9:05:1C:FE:B1:B1 Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Certificate serial: 58A7857F1F236128005DC42E57406B2FCC382248 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:54:16 +0000 Manifest this update: Mon 20 Jul 2026 22:49:16 +0000 Manifest next update: Wed 22 Jul 2026 01:30:16 +0000 Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=) 2: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: KperbmcLIVDqMzWeJ0j50n6jcYGLdGgaid1Zh4J2XhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a7:85:7f:1f:23:61:28:00:5d:c4:2e:57:40:6b:2f:cc:38:22:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Validity Not Before: Jul 20 22:49:16 2026 GMT Not After : Jul 22 01:30:16 2026 GMT Subject: CN=101A4BED1A3621353B9EF733F2EBA9051CFEB1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:bb:19:56:35:77:c5:34:ef:06:f7:a1:e9: 08:ab:9c:ee:6a:c6:d6:12:a5:55:b1:d0:1b:e7:e9: 2d:fb:ec:1a:4f:6a:e8:5f:0c:10:fe:d5:8b:cb:3c: f3:d6:4d:52:06:26:f6:d4:b6:28:85:ba:65:98:d4: 13:19:75:56:bb:5e:8c:f8:5d:8e:54:5b:89:9d:87: 35:50:11:18:7e:a1:9d:f5:ae:ad:84:94:31:0e:1b: a8:22:a6:dc:f4:b6:17:f9:99:2a:75:21:ae:0c:b2: ae:4d:2e:45:de:38:5f:28:12:f0:7b:2f:08:df:ee: 28:bc:1b:07:37:b6:77:77:61:62:c1:ba:56:6f:bd: 59:90:a3:63:90:6b:ad:f5:8f:5e:da:ba:2d:38:3b: 43:56:c8:09:f0:fc:18:29:d4:58:9f:fb:e3:f8:30: 36:b6:3e:fc:0d:9f:d8:f7:cf:db:19:5f:d1:3f:07: 5e:4a:c0:8d:23:e4:0e:a0:ec:43:14:ec:6a:17:c2: b7:f0:71:26:73:9e:be:d6:63:ac:da:c4:ee:88:d2: df:8e:65:7f:27:35:5b:5a:0e:ba:d6:49:83:1e:ec: d7:0f:b9:6c:ee:5e:3f:b7:7f:c8:4c:9e:96:0b:06: 7e:a4:cb:ae:b7:ea:15:12:e5:5a:6d:7c:6f:74:7d: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1A:4B:ED:1A:36:21:35:3B:9E:F7:33:F2:EB:A9:05:1C:FE:B1:B1 X509v3 Authority Key Identifier: keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2b:60:1d:66:bc:6f:c5:dd:4d:3c:b9:84:2a:2d:0d:32:4b: 6d:96:d4:88:cf:e1:d1:01:da:0e:e2:32:d7:cd:eb:1f:b4:67: 18:62:de:1f:5a:38:7b:d9:d5:90:fd:45:e5:f5:1b:68:74:23: d5:24:74:ea:1e:b0:bf:a3:2e:b2:98:fa:8a:ab:64:a1:23:f5: 18:47:92:0b:9d:ea:cb:4e:ac:d1:24:56:71:fa:f1:e4:04:23: 4e:b1:0c:20:6a:3a:e9:33:5c:82:5c:14:6b:cf:f0:fa:a5:43: e0:bd:64:3a:b2:02:de:46:35:7a:b5:16:98:2a:8d:12:08:97: f4:65:4e:d2:34:f4:2b:28:8c:88:f8:60:ee:42:c9:56:a8:9b: 00:54:c1:51:dd:79:97:98:ba:bb:78:8e:84:9c:07:0b:de:7a: 67:15:b2:63:b4:d1:97:1b:57:51:c0:fe:3d:91:bd:92:84:98: 2f:04:e6:b7:2f:6a:33:d7:92:4c:ca:0d:0d:30:66:9d:e4:05: 21:dc:58:d5:44:cc:59:93:ce:db:65:cb:06:94:1b:15:05:9d: 92:3e:f7:22:6b:c3:15:23:42:04:a0:bd:3f:4b:b8:65:59:13: 66:98:e1:f2:a8:6f:d3:9d:aa:c5:1c:29:4d:ff:9a:42:f8:fa: 1e:aa:ce:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKeFfx8jYSgAXcQuV0BrL8w4IkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5RjE4 MzNCNTZDQTAeFw0yNjA3MjAyMjQ5MTZaFw0yNjA3MjIwMTMwMTZaMDMxMTAvBgNV BAMTKDEwMUE0QkVEMUEzNjIxMzUzQjlFRjczM0YyRUJBOTA1MUNGRUIxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuLsZVjV3xTTvBveh6QirnO5q xtYSpVWx0Bvn6S377BpPauhfDBD+1YvLPPPWTVIGJvbUtiiFumWY1BMZdVa7Xoz4 XY5UW4mdhzVQERh+oZ31rq2ElDEOG6giptz0thf5mSp1Ia4Msq5NLkXeOF8oEvB7 Lwjf7ii8Gwc3tnd3YWLBulZvvVmQo2OQa631j17aui04O0NWyAnw/Bgp1Fif++P4 MDa2PvwNn9j3z9sZX9E/B15KwI0j5A6g7EMU7GoXwrfwcSZznr7WY6zaxO6I0t+O ZX8nNVtaDrrWSYMe7NcPuWzuXj+3f8hMnpYLBn6ky6636hUS5VptfG90faetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBpL7Ro2ITU7nvcz8uupBRz+sbEwHwYDVR0j BBgwFoAU8PxX/yTa41fgeSsEGK358YM7VsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkY2YwYTQtYWQxYi00YjcyLTg0MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYy NERBRTM1N0UwNzkyQjA0MThBREY5RjE4MzNCNTZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEZDNTdGRjI0REFFMzU3RTA3OTJCMDQxOEFERjlGMTgzM0I1 NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5 RjE4MzNCNTZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsrYB1mvG/F3U08uYQqLQ0yS22W1IjP4dEB 2g7iMtfN6x+0Zxhi3h9aOHvZ1ZD9ReX1G2h0I9UkdOoesL+jLrKY+oqrZKEj9RhH kgud6stOrNEkVnH68eQEI06xDCBqOukzXIJcFGvP8PqlQ+C9ZDqyAt5GNXq1Fpgq jRIIl/RlTtI09CsojIj4YO5CyVaomwBUwVHdeZeYurt4joScBwveemcVsmO00Zcb V1HA/j2RvZKEmC8E5rcvajPXkkzKDQ0wZp3kBSHcWNVEzFmTzttlywaUGxUFnZI+ 9yJrwxUjQgSgvT9LuGVZE2aY4fKob9OdqsUcKU3/mkL4+h6qzsY= -----END CERTIFICATE-----Generated at Tue Jul 21 07:03:12 2026 by rpki-client