$ rpki-client -vvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: d0IUD2lQGFErYs3XiSSZ/husyNd9C1Cf0s7kvRtUXyw= Subject key identifier: 85:84:AD:BC:A1:28:7F:2C:7C:CD:57:93:D6:55:22:85:23:01:27:8D Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 158A063167704D13324E675371205B630BD512CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 21:48:05 +0000 Manifest this update: Mon 20 Jul 2026 21:43:05 +0000 Manifest next update: Tue 21 Jul 2026 23:23:05 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: 5PE0jYmDPLBqrIwusZmNw4/3xCdUH92k3fj5DzZ5Q70=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8a:06:31:67:70:4d:13:32:4e:67:53:71:20:5b:63:0b:d5:12:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Jul 20 21:43:05 2026 GMT Not After : Jul 21 23:23:05 2026 GMT Subject: CN=8584ADBCA1287F2C7CCD5793D65522852301278D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:97:d4:42:58:b8:ee:31:8b:a8:a5:ef:73: f2:e6:52:eb:3a:7e:f8:d5:bb:ce:23:aa:34:84:06: 6e:cd:e6:a0:dd:ec:88:74:00:e4:f6:57:65:f4:c2: 6d:de:44:65:74:e9:d2:ab:ed:8e:be:1e:4f:1f:70: 7b:71:06:a2:bb:50:a1:41:de:37:9b:45:d4:20:0f: d7:e3:7d:e3:4f:3b:3d:c4:25:a0:b7:76:ba:72:ca: c7:83:20:95:0f:31:bd:15:86:0d:bf:88:f9:bb:3c: 40:76:cf:e4:49:3d:ee:a9:d2:85:eb:51:26:68:7d: f7:29:5b:14:6f:87:2e:63:85:32:e5:23:a8:43:b5: 16:66:db:56:e2:88:10:7c:c9:85:05:ac:73:06:37: a7:30:2a:38:f8:6e:66:13:99:08:e1:20:52:db:ab: d2:bf:a0:e2:79:91:7d:d0:18:ea:df:14:f1:c0:e6: 06:1d:16:9b:75:b5:26:fb:3e:d8:97:1f:88:c9:09: ce:03:7f:34:38:f9:8f:49:c1:08:9b:f4:05:20:4c: fa:50:18:05:5f:0d:d3:72:7a:76:f6:b9:66:c6:bd: 9d:9b:ec:6b:4f:e3:2e:a4:02:a8:b1:30:6c:0e:7c: 12:f3:ad:e1:66:dc:d2:18:fc:1a:62:cd:bd:db:cb: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:84:AD:BC:A1:28:7F:2C:7C:CD:57:93:D6:55:22:85:23:01:27:8D X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:be:d4:29:d0:6f:b0:25:c0:49:46:af:78:3e:c2:fa:ae:b5: f0:56:71:8a:a4:37:26:15:6d:c2:2a:64:a0:5c:db:69:94:d2: 4c:3a:e2:26:2e:f1:17:23:0b:e2:75:c7:cd:53:35:9b:25:08: 01:26:f6:a1:32:ea:31:4c:0b:95:c0:2a:fe:f7:76:f2:d6:72: 3a:6a:06:32:be:df:ff:e3:07:07:c9:d0:c9:49:9f:dc:da:01: a5:f0:d6:54:ea:9a:43:72:43:c7:6f:31:3a:00:0e:ea:8c:b2: f4:4a:32:19:c6:ba:e1:81:c7:12:bf:05:ef:bf:c8:7b:ea:54: fd:a1:22:31:27:54:26:9f:b1:be:d9:27:bc:e5:fe:fd:ee:a3: 7f:bc:e0:9f:43:73:b7:2f:0c:30:69:3d:67:1e:31:70:5e:bc: 16:44:33:4a:2e:c1:31:1b:66:d9:b7:ad:8e:1b:33:b9:a9:e0: d3:69:d3:51:0f:bf:31:f1:b4:c3:87:3e:81:84:db:84:19:94: af:3c:c7:69:fa:df:ee:72:63:8e:a6:0a:01:de:49:a9:9f:d1: cf:dd:22:e4:58:22:ac:8c:51:7a:06:c8:9f:ba:7c:4d:1c:e7: b0:29:ac:17:ba:01:b0:60:cd:fa:dd:8b:44:9b:77:8b:06:94: 65:f2:2a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYoGMWdwTRMyTmdTcSBbYwvVEsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA3MjAyMTQzMDVaFw0yNjA3MjEyMzIzMDVaMDMxMTAvBgNV BAMTKDg1ODRBREJDQTEyODdGMkM3Q0NENTc5M0Q2NTUyMjg1MjMwMTI3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCJfUQli47jGLqKXvc/LmUus6 fvjVu84jqjSEBm7N5qDd7Ih0AOT2V2X0wm3eRGV06dKr7Y6+Hk8fcHtxBqK7UKFB 3jebRdQgD9fjfeNPOz3EJaC3drpyyseDIJUPMb0Vhg2/iPm7PEB2z+RJPe6p0oXr USZoffcpWxRvhy5jhTLlI6hDtRZm21biiBB8yYUFrHMGN6cwKjj4bmYTmQjhIFLb q9K/oOJ5kX3QGOrfFPHA5gYdFpt1tSb7PtiXH4jJCc4DfzQ4+Y9JwQib9AUgTPpQ GAVfDdNyenb2uWbGvZ2b7GtP4y6kAqixMGwOfBLzreFm3NIY/Bpizb3by2QxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYStvKEofyx8zVeT1lUihSMBJ40wHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK+1CnQb7AlwElGr3g+wvqutfBWcYqkNyYV bcIqZKBc22mU0kw64iYu8RcjC+J1x81TNZslCAEm9qEy6jFMC5XAKv73dvLWcjpq BjK+3//jBwfJ0MlJn9zaAaXw1lTqmkNyQ8dvMToADuqMsvRKMhnGuuGBxxK/Be+/ yHvqVP2hIjEnVCafsb7ZJ7zl/v3uo3+84J9Dc7cvDDBpPWceMXBevBZEM0ouwTEb Ztm3rY4bM7mp4NNp01EPvzHxtMOHPoGE24QZlK88x2n63+5yY46mCgHeSamf0c/d IuRYIqyMUXoGyJ+6fE0c57AprBe6AbBgzfrdi0Sbd4sGlGXyKrs= -----END CERTIFICATE-----Generated at Tue Jul 21 07:07:39 2026 by rpki-client