$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: il8kpdx6TQeXeeXTL4M6oUG8Jj975hT357ritf6b8Y8= Subject key identifier: 08:E7:91:78:8D:F3:11:6C:CC:12:4F:D3:BC:33:C9:46:22:31:3A:9A Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 265809C7AFFAA4CAC371E7E2C82EE8609FEFA0F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 22:59:21 +0000 Manifest this update: Mon 20 Jul 2026 22:54:21 +0000 Manifest next update: Wed 22 Jul 2026 02:30:21 +0000 Files and hashes: 1: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: gjcnxyOzDPkUTU5W0O5D8SIlcd7SRf72TikVMs3QD9A=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:58:09:c7:af:fa:a4:ca:c3:71:e7:e2:c8:2e:e8:60:9f:ef:a0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Jul 20 22:54:21 2026 GMT Not After : Jul 22 02:30:21 2026 GMT Subject: CN=08E791788DF3116CCC124FD3BC33C94622313A9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:2a:29:55:eb:01:7e:62:1f:78:ff:72:1a: 55:d5:1a:81:f6:80:83:6d:42:3d:a5:38:65:b2:a0: cc:60:c2:e8:f4:d4:20:3d:6f:2a:bb:65:3d:eb:b0: 22:f6:24:e9:dd:10:8f:72:66:59:5d:25:e9:10:3b: 07:4b:1b:37:f0:1f:c2:65:8f:fe:03:de:bd:b6:79: 48:32:6c:3b:65:5e:bf:7c:02:2a:ea:2c:62:18:fb: e3:17:7c:d1:87:cb:f0:54:cc:94:15:0b:0e:09:16: f1:f4:2e:df:de:40:f7:4f:25:02:6d:d5:da:10:7a: 86:90:f8:e8:08:4f:69:d2:ef:7a:25:9a:3c:f3:bb: fe:c8:9a:64:28:a6:6e:bd:7b:64:40:59:b7:c3:c3: c5:c6:68:56:97:8b:b7:92:45:b3:96:83:3b:a1:c0: 44:a6:ea:cb:82:52:16:62:05:d7:67:4b:7a:8c:8d: bd:34:67:a4:1b:41:2b:aa:47:ec:f8:ea:ed:49:e5: b8:48:a3:d2:6e:80:54:8a:e4:0d:d9:aa:db:b4:ef: 57:2e:7b:77:7f:7c:32:b5:6d:bc:3b:9f:cc:f8:84: 46:65:7e:70:9a:e7:43:7a:4c:05:ab:0c:1f:45:40: 83:95:8e:10:f8:c7:4e:85:79:30:2b:b1:e1:f8:02: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:91:78:8D:F3:11:6C:CC:12:4F:D3:BC:33:C9:46:22:31:3A:9A X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e3:a3:05:a3:83:f3:f5:87:9c:82:83:6f:aa:7b:c7:49:38: 72:f2:6f:1d:c0:a2:8b:11:f4:96:eb:71:4d:de:7b:e7:7d:f3: ba:0d:ab:9f:0c:fe:30:5e:e9:b7:05:42:06:fa:93:71:19:b7: 5e:e9:53:40:aa:87:ae:77:c8:d1:65:ec:dd:9d:fe:02:f7:cc: 94:7c:ff:fb:98:2e:ea:cc:3a:e5:2e:80:6d:35:52:1b:59:f2: d2:3f:97:4a:36:de:a6:a1:9c:8f:6f:69:e4:0a:27:43:05:06: f2:ac:99:f0:ea:fd:6c:68:f4:34:62:5a:bf:d3:07:4c:85:39: 77:c7:27:e8:98:03:37:58:27:1c:e1:31:19:10:1a:28:3f:a1: ae:bd:ff:88:9a:50:c2:cf:49:02:75:71:6c:aa:14:70:dd:bd: ea:0d:c3:40:09:e8:c1:31:8f:64:20:44:0d:11:a7:a9:66:3b: c2:c0:4b:cb:7f:7c:5e:1f:ef:0c:d8:64:ac:98:a9:9f:41:c7: f4:11:5d:5f:bd:46:a3:83:1d:7f:62:7d:94:07:67:6d:bb:be: 2e:84:cb:97:a3:00:80:f3:ce:06:c9:00:02:f2:5e:98:0f:61: 69:40:40:d9:fa:e2:76:98:5b:25:fa:24:f6:e2:da:bb:88:9f: 23:d5:c7:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlgJx6/6pMrDcefiyC7oYJ/voPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA3MjAyMjU0MjFaFw0yNjA3MjIwMjMwMjFaMDMxMTAvBgNV BAMTKDA4RTc5MTc4OERGMzExNkNDQzEyNEZEM0JDMzNDOTQ2MjIzMTNBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+yopVesBfmIfeP9yGlXVGoH2 gINtQj2lOGWyoMxgwuj01CA9byq7ZT3rsCL2JOndEI9yZlldJekQOwdLGzfwH8Jl j/4D3r22eUgybDtlXr98AirqLGIY++MXfNGHy/BUzJQVCw4JFvH0Lt/eQPdPJQJt 1doQeoaQ+OgIT2nS73olmjzzu/7ImmQopm69e2RAWbfDw8XGaFaXi7eSRbOWgzuh wESm6suCUhZiBddnS3qMjb00Z6QbQSuqR+z46u1J5bhIo9JugFSK5A3Zqtu071cu e3d/fDK1bbw7n8z4hEZlfnCa50N6TAWrDB9FQIOVjhD4x06FeTArseH4Au5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOeReI3zEWzMEk/TvDPJRiIxOpowHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXjowWjg/P1h5yCg2+qe8dJOHLybx3AoosR 9JbrcU3ee+d987oNq58M/jBe6bcFQgb6k3EZt17pU0Cqh653yNFl7N2d/gL3zJR8 //uYLurMOuUugG01UhtZ8tI/l0o23qahnI9vaeQKJ0MFBvKsmfDq/Wxo9DRiWr/T B0yFOXfHJ+iYAzdYJxzhMRkQGig/oa69/4iaUMLPSQJ1cWyqFHDdveoNw0AJ6MEx j2QgRA0Rp6lmO8LAS8t/fF4f7wzYZKyYqZ9Bx/QRXV+9RqODHX9ifZQHZ227vi6E y5ejAIDzzgbJAALyXpgPYWlAQNn64naYWyX6JPbi2ruInyPVx4k= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:17 2026 by rpki-client