$ rpki-client -vvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: WxHc4OGA03umQ+Uiuvful9wdnRhbAWpFrqZ3S+5q87Y= Subject key identifier: 50:B2:27:36:03:FB:F1:8D:4B:2C:61:F8:2A:B8:20:AD:AE:D1:9B:1D Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 1C9CF5B47875045E118B92806513290116631D34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:35:12 +0000 Manifest this update: Mon 20 Jul 2026 23:30:12 +0000 Manifest next update: Wed 22 Jul 2026 02:18:12 +0000 Files and hashes: 1: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: Wro87T+FBZ11d+mXYMr6ilHBRrl+SotbnLrbeGcvHHs=) 2: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 3: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9c:f5:b4:78:75:04:5e:11:8b:92:80:65:13:29:01:16:63:1d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Jul 20 23:30:12 2026 GMT Not After : Jul 22 02:18:12 2026 GMT Subject: CN=50B2273603FBF18D4B2C61F82AB820ADAED19B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:20:5b:7c:1c:5c:8c:6d:3b:77:74:44:d6: 7e:46:4c:ca:63:ab:f2:11:f0:8b:f8:b6:70:54:73: 01:f2:8c:7b:d2:15:44:2d:c8:a7:5a:2b:a5:50:c5: 8e:9e:98:d4:2b:a7:11:40:f9:7f:1c:4f:3e:01:84: 52:96:2f:f3:13:e3:44:56:73:c6:6d:36:7d:fc:b4: 92:f7:13:03:34:4e:fe:7e:c1:39:66:f9:9b:53:15: fa:2c:5d:92:db:94:9b:3d:2c:00:da:74:38:21:0c: fd:a2:ef:39:93:34:45:90:fc:87:ef:b9:ee:53:45: b8:f8:57:79:2c:ad:e3:e6:be:47:e9:84:df:d9:db: 88:65:e8:ad:2d:d8:82:30:84:85:41:94:63:fb:6a: 5e:77:89:bd:82:95:ce:97:db:0a:ef:d7:ba:c7:64: 2f:8e:ca:bc:97:ab:fb:e3:44:a5:47:8d:b6:5f:a8: 49:05:89:01:ac:71:f1:a5:31:1b:2c:79:2c:18:21: f0:90:35:62:b0:41:4c:55:09:b1:51:60:bc:00:9b: ff:a5:4c:d9:e9:b7:46:51:96:4f:54:60:e1:b0:90: 41:6d:f6:a2:22:7c:7d:65:2e:ed:ff:d1:49:36:eb: 31:81:d2:5e:1e:56:30:63:d7:5d:1a:ad:28:d1:cd: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B2:27:36:03:FB:F1:8D:4B:2C:61:F8:2A:B8:20:AD:AE:D1:9B:1D X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:70:20:fc:50:4d:08:8f:78:f8:f3:fc:40:70:b5:ce:f1:3f: 1d:66:5b:02:7e:b4:da:9f:5b:ca:ff:9e:e1:76:7e:2b:68:1f: 63:95:bf:24:ca:7e:e8:3c:e0:e7:a9:8a:2e:ee:0b:35:3b:f8: 1d:46:e7:25:df:85:3a:5a:34:5f:b5:cd:2d:91:59:a4:c6:55: 40:86:5a:93:f1:71:a9:a3:88:32:21:3e:f8:a3:d2:3f:1b:50: 50:55:bb:26:64:11:57:1a:ea:ac:c0:38:19:51:40:2e:81:5c: 58:0a:46:e6:69:04:16:ed:f8:9a:a1:ff:02:0e:d1:b4:79:f8: a0:d3:7e:58:9f:f4:fb:66:fd:71:95:38:6a:c9:cd:4b:b1:94: 38:9c:3e:9f:d0:99:e7:de:1a:af:1a:bc:65:f7:08:96:bb:0a: d9:e0:50:1b:8d:54:68:ab:21:09:c4:6f:be:76:d7:a7:46:3b: a7:27:31:fd:07:6f:01:90:78:c7:1e:be:c1:08:26:9a:05:f2: 1f:7f:4d:4d:33:0f:4a:4f:59:d6:1a:25:79:81:c9:e0:72:41: d7:51:54:be:08:72:43:0e:c9:93:90:1e:c2:81:2a:02:8d:ff: 79:a4:11:9e:14:9b:72:53:da:a4:2e:7b:ed:70:1d:a7:68:42: dc:ff:15:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJz1tHh1BF4Ri5KAZRMpARZjHTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA3MjAyMzMwMTJaFw0yNjA3MjIwMjE4MTJaMDMxMTAvBgNV BAMTKDUwQjIyNzM2MDNGQkYxOEQ0QjJDNjFGODJBQjgyMEFEQUVEMTlCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpkSBbfBxcjG07d3RE1n5GTMpj q/IR8Iv4tnBUcwHyjHvSFUQtyKdaK6VQxY6emNQrpxFA+X8cTz4BhFKWL/MT40RW c8ZtNn38tJL3EwM0Tv5+wTlm+ZtTFfosXZLblJs9LADadDghDP2i7zmTNEWQ/Ifv ue5TRbj4V3ksrePmvkfphN/Z24hl6K0t2IIwhIVBlGP7al53ib2Clc6X2wrv17rH ZC+OyryXq/vjRKVHjbZfqEkFiQGscfGlMRsseSwYIfCQNWKwQUxVCbFRYLwAm/+l TNnpt0ZRlk9UYOGwkEFt9qIifH1lLu3/0Uk26zGB0l4eVjBj110arSjRzcv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULInNgP78Y1LLGH4Krggra7Rmx0wHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlwIPxQTQiPePjz/EBwtc7xPx1mWwJ+tNqf W8r/nuF2fitoH2OVvyTKfug84Oepii7uCzU7+B1G5yXfhTpaNF+1zS2RWaTGVUCG WpPxcamjiDIhPvij0j8bUFBVuyZkEVca6qzAOBlRQC6BXFgKRuZpBBbt+Jqh/wIO 0bR5+KDTflif9Ptm/XGVOGrJzUuxlDicPp/QmefeGq8avGX3CJa7CtngUBuNVGir IQnEb75216dGO6cnMf0HbwGQeMcevsEIJpoF8h9/TU0zD0pPWdYaJXmByeByQddR VL4IckMOyZOQHsKBKgKN/3mkEZ4Um3JT2qQue+1wHadoQtz/FQ4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:28 2026 by rpki-client