$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft File: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft (raw, json) Hash identifier: vIHqqa8POAtKDWGxkUxotSU5wJEPKww8Ka/V5402dT4= Subject key identifier: F2:7B:AA:91:CF:99:FE:92:FD:B5:84:CE:11:E8:9B:5E:10:EC:47:11 Authority key identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 Certificate issuer: /CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Certificate serial: 4FA465AE15030BF5F79E411A3497AC4FCD311C18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft Manifest number: 6D Signing time: Tue 21 Jul 2026 00:26:23 +0000 Manifest this update: Tue 21 Jul 2026 00:21:23 +0000 Manifest next update: Wed 22 Jul 2026 03:27:23 +0000 Files and hashes: 1: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl (hash: b7dh43USoPL/4nEzbjEUDsHU3vWPZNm2aLcyQS4dPtw=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: 3r/oL3v96CsKMiLkeLyMHXAfkZUhV+Od6ORlJoNOIZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a4:65:ae:15:03:0b:f5:f7:9e:41:1a:34:97:ac:4f:cd:31:1c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Validity Not Before: Jul 21 00:21:23 2026 GMT Not After : Jul 22 03:27:23 2026 GMT Subject: CN=F27BAA91CF99FE92FDB584CE11E89B5E10EC4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:ae:cf:ec:38:27:bb:3b:a0:bf:53:72:65: ed:3b:6e:2b:59:01:91:7e:af:2c:d0:dd:fe:8a:45: e0:e3:ee:f4:a6:20:ad:70:11:c4:fe:4d:d8:cf:70: bf:0c:ea:c2:f7:6c:04:af:4c:d6:4b:5f:b2:67:1e: d5:b5:3d:24:7d:12:ea:4f:0f:39:51:0f:4a:bb:e2: c3:52:92:54:99:d4:97:a3:fd:07:2b:76:7d:3d:ca: da:67:60:08:08:13:02:17:42:06:24:5a:b1:87:fa: 77:f0:c9:4c:90:c9:f5:5a:df:60:3d:5f:9b:f8:f7: ce:8c:ac:0f:05:c9:e0:aa:96:d4:56:0e:b4:8b:ac: d5:b5:b3:07:69:53:ea:4f:8c:e0:c7:23:95:3d:6c: 8b:f5:15:7a:f1:fa:b1:e9:7b:9f:dc:26:1c:6b:e5: 5b:66:d1:ee:ba:9d:22:1d:aa:2b:e1:6e:c5:32:96: 5d:72:dd:9e:29:80:55:37:92:cd:06:de:e5:e7:8c: 6e:06:76:6d:70:d4:03:26:61:a5:15:04:62:c7:4d: 68:17:b2:3f:19:09:7a:84:45:1c:ed:79:82:84:65: 90:39:be:56:b1:9a:3c:72:9f:93:84:6f:bc:4c:79: ea:30:9b:a4:85:ba:7b:11:ef:5e:24:1f:98:4e:a6: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:AA:91:CF:99:FE:92:FD:B5:84:CE:11:E8:9B:5E:10:EC:47:11 X509v3 Authority Key Identifier: keyid:A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:3d:e7:3a:bc:ce:bd:92:19:5d:f3:53:1a:e0:b0:a8:ee: a7:39:1e:20:7c:04:ef:9e:5c:ee:54:ae:fc:0e:76:ee:57:87: b0:5c:9f:3d:65:cb:68:6d:2d:2e:d2:48:b0:ea:b7:18:3f:81: 9d:25:9f:b3:31:5b:8b:ca:df:79:34:85:5c:72:f8:5b:58:ea: 47:85:b2:fd:c6:b7:2d:be:de:d0:1b:b8:88:70:42:a6:42:99: 09:80:f7:10:a2:52:40:1b:08:5a:32:0a:d0:4e:bf:0e:ed:ca: 01:30:9b:3a:5b:97:b5:5e:4d:ed:3b:3f:29:03:d5:c5:e8:0e: 37:75:8f:e3:86:e9:8f:0f:4e:2f:17:ad:6a:aa:db:7a:a4:54: 13:ce:53:75:e2:54:82:13:55:d1:4c:90:a6:e6:14:d3:f7:aa: 8e:70:70:a3:6d:0d:3f:1b:0c:81:d0:a2:6f:de:bb:0e:3f:97: 13:8a:42:77:a6:10:bf:22:d2:3f:8a:fa:90:cf:f0:ed:54:3a: a1:ab:d1:e3:bc:94:ad:89:42:3b:94:5c:09:a9:c2:49:49:05: bf:ea:ed:b7:9a:ff:48:a1:e3:98:e2:0e:ea:58:ec:3a:3e:3d: c9:bb:a3:3d:2f:39:a9:0e:5f:8d:e2:70:b2:2b:9d:4d:92:70: 41:0e:a5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6RlrhUDC/X3nkEaNJesT80xHBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4MjFF QUZFRjEyMDAeFw0yNjA3MjEwMDIxMjNaFw0yNjA3MjIwMzI3MjNaMDMxMTAvBgNV BAMTKEYyN0JBQTkxQ0Y5OUZFOTJGREI1ODRDRTExRTg5QjVFMTBFQzQ3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCq7P7Dgnuzugv1NyZe07bitZ AZF+ryzQ3f6KReDj7vSmIK1wEcT+TdjPcL8M6sL3bASvTNZLX7JnHtW1PSR9EupP DzlRD0q74sNSklSZ1Jej/Qcrdn09ytpnYAgIEwIXQgYkWrGH+nfwyUyQyfVa32A9 X5v4986MrA8FyeCqltRWDrSLrNW1swdpU+pPjODHI5U9bIv1FXrx+rHpe5/cJhxr 5Vtm0e66nSIdqivhbsUyll1y3Z4pgFU3ks0G3uXnjG4Gdm1w1AMmYaUVBGLHTWgX sj8ZCXqERRzteYKEZZA5vlaxmjxyn5OEb7xMeeowm6SFunsR714kH5hOpj/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nuqkc+Z/pL9tYTOEeibXhDsRxEwHwYDVR0j BBgwFoAUonawja5/ol3hoD+3EvV4Ier+8SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZhODFlNmUtNGIxNi00YjYyLThmMTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERB RTdGQTI1REUxQTAzRkI3MTJGNTc4MjFFQUZFRjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjc2QjA4REFFN0ZBMjVERTFBMDNGQjcxMkY1NzgyMUVBRkVG MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4 MjFFQUZFRjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXhPec6vM69khld81Ma4LCo7qc5HiB8BO+e XO5UrvwOdu5Xh7Bcnz1ly2htLS7SSLDqtxg/gZ0ln7MxW4vK33k0hVxy+FtY6keF sv3Gty2+3tAbuIhwQqZCmQmA9xCiUkAbCFoyCtBOvw7tygEwmzpbl7VeTe07PykD 1cXoDjd1j+OG6Y8PTi8XrWqq23qkVBPOU3XiVIITVdFMkKbmFNP3qo5wcKNtDT8b DIHQom/euw4/lxOKQnemEL8i0j+K+pDP8O1UOqGr0eO8lK2JQjuUXAmpwklJBb/q 7bea/0ih45jiDupY7Do+Pcm7oz0vOakOX43icLIrnU2ScEEOpfA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:17 2026 by rpki-client