$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: b9xacGntY5uwPn3Od/zQtNgshPgIiAm2zH3kKtTThuM= Subject key identifier: E0:31:B0:B2:FC:38:28:FE:1C:FE:51:37:C4:F9:35:62:56:20:23:B8 Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 4AE12D39B4D057F078C8BE3323FD481DC1FA0A1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:20:17 +0000 Manifest this update: Mon 20 Jul 2026 19:15:17 +0000 Manifest next update: Tue 21 Jul 2026 23:02:17 +0000 Files and hashes: 1: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 3: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) 4: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: OqDq8BsHnEb1MO8XRKqOuT13Y6W7IUNM+0Ii2QiX83c=) 5: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:2d:39:b4:d0:57:f0:78:c8:be:33:23:fd:48:1d:c1:fa:0a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Jul 20 19:15:17 2026 GMT Not After : Jul 21 23:02:17 2026 GMT Subject: CN=E031B0B2FC3828FE1CFE5137C4F93562562023B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:c3:20:48:6e:f5:c9:62:b3:dd:0e:6e:a1: 34:4a:1a:3b:d8:5a:81:54:2d:ff:95:51:bd:30:57: b2:bf:8a:71:cc:c6:f0:49:b3:75:ce:1d:22:90:ab: bf:5b:b0:34:9a:97:fc:30:7c:97:2f:45:54:c9:ae: 64:68:16:c8:8f:53:bc:00:20:c4:ad:49:77:1c:91: 3d:46:44:54:d6:69:2d:92:60:3f:6b:a2:01:ed:27: b4:2f:b4:9d:f5:ab:4e:fe:52:65:bf:da:19:44:04: 1b:f8:6a:ed:1b:23:23:b5:64:71:e0:4c:87:e2:0f: 21:3e:bd:3a:d0:bd:57:c5:51:48:dc:20:89:b9:90: 30:d2:0a:3b:fd:4e:5f:44:61:7a:8d:5d:48:ea:35: 40:28:84:27:b0:98:75:89:e6:40:2a:e0:a6:48:06: 58:99:0f:ac:e1:a7:a9:f9:72:fc:d8:89:c1:f3:ca: f7:d6:49:ea:49:79:4e:0d:ce:f9:09:e0:31:f0:0c: 16:d1:59:f3:0e:6b:ef:5f:bd:bb:03:71:ed:73:aa: 48:32:18:6d:11:0e:aa:12:fa:c2:32:b8:e4:83:4e: 91:c6:aa:5c:fc:49:15:c1:a5:3d:c5:90:d7:a0:7f: 29:46:55:a5:87:a6:f2:83:89:cf:c1:49:d9:ca:a5: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:31:B0:B2:FC:38:28:FE:1C:FE:51:37:C4:F9:35:62:56:20:23:B8 X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:88:c9:9b:26:07:87:43:01:d5:95:9f:42:64:91:3b:fc:0d: 70:fe:4e:58:01:7b:f5:aa:da:8e:bd:c0:57:d8:cd:d7:9e:43: 91:52:68:12:e4:59:e3:3d:97:f8:22:fc:3b:2c:cb:78:af:f8: 04:5d:5d:ab:b1:98:c3:c7:50:50:bb:f0:ff:12:da:58:0d:4a: 8a:8e:7d:84:d4:cf:8f:3e:29:f4:c7:37:ea:a6:19:3a:d8:7f: e5:c6:f4:72:da:ef:63:3f:c5:44:62:a7:f5:48:aa:13:13:7c: 49:29:78:ab:db:b6:d2:a9:fe:a1:83:53:7e:07:9b:fc:6d:73: 3e:7e:61:44:58:f1:4c:24:fe:94:e4:f2:56:9a:c6:f4:e8:29: fd:e7:d6:3c:ea:69:9c:a3:ee:c5:7c:66:c1:08:8d:6e:98:f7: 50:24:ae:54:8a:27:3b:e6:b5:47:ec:2c:ec:0e:20:f6:09:21: 74:ea:5f:f2:6d:27:68:cd:bf:d9:dd:96:36:60:24:3d:2a:3e: bc:15:47:99:7c:b6:62:02:95:0c:6a:cf:7e:d2:88:ab:d0:8e: c4:f5:86:bf:74:1a:73:bc:cc:3f:04:fc:cb:03:b2:4c:b3:82: 6a:49:71:7b:1e:11:10:d4:8d:4a:89:50:0c:76:19:2a:57:9c: b1:9c:e8:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuEtObTQV/B4yL4zI/1IHcH6ChowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA3MjAxOTE1MTdaFw0yNjA3MjEyMzAyMTdaMDMxMTAvBgNV BAMTKEUwMzFCMEIyRkMzODI4RkUxQ0ZFNTEzN0M0RjkzNTYyNTYyMDIzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IMMgSG71yWKz3Q5uoTRKGjvY WoFULf+VUb0wV7K/inHMxvBJs3XOHSKQq79bsDSal/wwfJcvRVTJrmRoFsiPU7wA IMStSXcckT1GRFTWaS2SYD9rogHtJ7QvtJ31q07+UmW/2hlEBBv4au0bIyO1ZHHg TIfiDyE+vTrQvVfFUUjcIIm5kDDSCjv9Tl9EYXqNXUjqNUAohCewmHWJ5kAq4KZI BliZD6zhp6n5cvzYicHzyvfWSepJeU4NzvkJ4DHwDBbRWfMOa+9fvbsDce1zqkgy GG0RDqoS+sIyuOSDTpHGqlz8SRXBpT3FkNegfylGVaWHpvKDic/BSdnKpSQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DGwsvw4KP4c/lE3xPk1YlYgI7gwHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCIyZsmB4dDAdWVn0JkkTv8DXD+TlgBe/Wq 2o69wFfYzdeeQ5FSaBLkWeM9l/gi/Dssy3iv+ARdXauxmMPHUFC78P8S2lgNSoqO fYTUz48+KfTHN+qmGTrYf+XG9HLa72M/xURip/VIqhMTfEkpeKvbttKp/qGDU34H m/xtcz5+YURY8Uwk/pTk8laaxvToKf3n1jzqaZyj7sV8ZsEIjW6Y91AkrlSKJzvm tUfsLOwOIPYJIXTqX/JtJ2jNv9ndljZgJD0qPrwVR5l8tmIClQxqz37SiKvQjsT1 hr90GnO8zD8E/MsDskyzgmpJcXseERDUjUqJUAx2GSpXnLGc6DU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:51 2026 by rpki-client