$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json) Hash identifier: hcxAK+VTBlfe0+57pUSjX2FOksm14NTvnONm+vWIWdc= Subject key identifier: 5A:34:3B:DE:62:07:12:87:73:B6:FC:5E:36:6A:D6:17:A1:9A:EA:1D Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A Certificate issuer: /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Certificate serial: 7A3926DB9DCAE82BEA85067B372A6175BA6B7E2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:25:23 +0000 Manifest this update: Mon 20 Jul 2026 19:20:23 +0000 Manifest next update: Tue 21 Jul 2026 19:35:23 +0000 Files and hashes: 1: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: qiz4I63vk4dzGlJO3J0AvFq53x60gOwtzV7O7hkeuGI=) 2: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:39:26:db:9d:ca:e8:2b:ea:85:06:7b:37:2a:61:75:ba:6b:7e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Validity Not Before: Jul 20 19:20:23 2026 GMT Not After : Jul 21 19:35:23 2026 GMT Subject: CN=5A343BDE6207128773B6FC5E366AD617A19AEA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:3d:3f:54:ee:be:1f:47:6d:7b:5f:74:8e: 99:c9:1b:6e:7f:3c:0e:7f:7f:1c:d0:8d:14:0e:76: a9:7c:3b:b0:75:a1:4c:45:81:80:79:8f:50:05:f4: 04:bf:4e:35:19:a8:ab:8c:1b:d4:7b:b6:07:e5:b3: 1b:45:f6:47:54:94:ab:98:70:7b:b3:16:a9:3e:3d: 1d:8c:69:69:b0:48:a6:de:b8:40:e0:f6:91:cd:cb: 16:5f:07:fa:ba:ea:4a:62:51:f2:ce:ee:13:c7:4b: d3:d8:0a:a2:1c:f1:22:36:29:c5:20:48:73:48:b0: e7:fd:d8:d8:ab:bc:65:bc:0b:dd:bb:96:f4:01:19: e5:d5:18:09:d2:c3:4e:2e:ee:c8:98:f6:e2:1e:7e: 23:20:a4:fb:19:29:e4:83:36:a6:e9:d5:54:86:b0: bf:42:4b:f9:78:63:de:49:84:c5:69:4d:9d:04:e1: aa:5d:3e:f1:c0:d5:7f:bb:86:fe:3c:1b:46:fb:08: 21:ad:73:b1:90:4b:72:8a:66:e5:ee:21:14:bb:5c: 69:90:35:77:40:bd:c9:07:fe:be:ce:66:75:57:87: fe:9e:e8:5f:79:bf:d9:2f:52:31:48:73:5f:db:8e: e6:99:4f:02:2e:df:e0:4e:af:9e:04:95:d7:8f:2f: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:3B:DE:62:07:12:87:73:B6:FC:5E:36:6A:D6:17:A1:9A:EA:1D X509v3 Authority Key Identifier: keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fd:5c:1d:b9:a8:14:b5:13:01:e7:f8:ff:e1:d5:87:17:a7: c2:35:6f:ed:4b:3a:93:84:59:65:82:81:37:47:25:a4:a1:96: ee:a8:ec:b9:92:d8:55:73:e8:70:5e:57:d9:12:e2:c1:df:e8: 6c:8b:b5:e7:71:36:11:da:12:6c:47:10:a3:1f:90:de:b8:4e: 00:1f:c7:69:5c:99:c7:b7:3a:5b:33:d0:8a:86:04:43:2f:ec: cb:e6:e1:bb:bd:f4:b9:0c:27:9b:01:cd:ca:78:f9:82:e3:0d: 11:2e:84:50:af:4b:f4:b5:86:84:f5:6e:9c:0f:25:19:48:03: 1a:42:25:46:3b:52:df:43:bb:47:d9:a5:ae:5b:e7:d4:90:05: d6:ea:f4:38:57:36:6d:41:fc:53:ef:cb:4b:b9:d4:46:58:27: 3e:e9:79:1c:1f:a0:2a:94:5e:6e:fd:6a:95:20:12:61:66:66: f9:bb:cf:12:60:21:e8:05:5a:c6:f1:85:09:16:da:7e:67:d4: fd:8e:b3:b1:91:b4:9d:5a:36:b4:58:63:e5:86:8c:65:57:f7: 01:05:cc:1b:39:ef:7a:f9:0b:9a:a7:cc:e1:55:42:a2:c0:24: e8:e5:d8:e1:4a:88:0c:62:be:7e:59:29:e7:b4:ad:0a:b9:26: 0f:34:ab:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejkm253K6CvqhQZ7NyphdbprfiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFB QkEyOTc5QTAeFw0yNjA3MjAxOTIwMjNaFw0yNjA3MjExOTM1MjNaMDMxMTAvBgNV BAMTKDVBMzQzQkRFNjIwNzEyODc3M0I2RkM1RTM2NkFENjE3QTE5QUVBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhz0/VO6+H0dte190jpnJG25/ PA5/fxzQjRQOdql8O7B1oUxFgYB5j1AF9AS/TjUZqKuMG9R7tgflsxtF9kdUlKuY cHuzFqk+PR2MaWmwSKbeuEDg9pHNyxZfB/q66kpiUfLO7hPHS9PYCqIc8SI2KcUg SHNIsOf92NirvGW8C927lvQBGeXVGAnSw04u7siY9uIefiMgpPsZKeSDNqbp1VSG sL9CS/l4Y95JhMVpTZ0E4apdPvHA1X+7hv48G0b7CCGtc7GQS3KKZuXuIRS7XGmQ NXdAvckH/r7OZnVXh/6e6F95v9kvUjFIc1/bjuaZTwIu3+BOr54EldePL3CJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjQ73mIHEodztvxeNmrWF6Ga6h0wHwYDVR0j BBgwFoAU+Z+8wNfBqkeU2V1wZBuQEauil5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM5NDFmYmQtYWQ0MC00MzI3LTkzZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBE N0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFBQkEyOTc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTlGQkNDMEQ3QzFBQTQ3OTREOTVENzA2NDFCOTAxMUFCQTI5 NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkw MTFBQkEyOTc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr9XB25qBS1EwHn+P/h1YcXp8I1b+1LOpOE WWWCgTdHJaShlu6o7LmS2FVz6HBeV9kS4sHf6GyLtedxNhHaEmxHEKMfkN64TgAf x2lcmce3Olsz0IqGBEMv7Mvm4bu99LkMJ5sBzcp4+YLjDREuhFCvS/S1hoT1bpwP JRlIAxpCJUY7Ut9Du0fZpa5b59SQBdbq9DhXNm1B/FPvy0u51EZYJz7peRwfoCqU Xm79apUgEmFmZvm7zxJgIegFWsbxhQkW2n5n1P2Os7GRtJ1aNrRYY+WGjGVX9wEF zBs573r5C5qnzOFVQqLAJOjl2OFKiAxivn5ZKee0rQq5Jg80qyQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:23 2026 by rpki-client