$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: JHXgua7HZgYzMMxVAALSGAE2b37OUuuUL5qOc/UqfMI= Subject key identifier: A4:17:51:72:47:B6:9D:94:8B:4F:35:C6:F1:B1:3D:F5:4C:32:F5:71 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 56003105F110B9602D97708A1A9B59CBB515E9DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:11:25 +0000 Manifest this update: Mon 20 Jul 2026 12:06:25 +0000 Manifest next update: Tue 21 Jul 2026 14:36:25 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 3: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) 4: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: xY+HDSGOLixvJlmlISZrnG2RoqgvJwMNXrdfXH9tJYk=) 5: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 6: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:00:31:05:f1:10:b9:60:2d:97:70:8a:1a:9b:59:cb:b5:15:e9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Jul 20 12:06:25 2026 GMT Not After : Jul 21 14:36:25 2026 GMT Subject: CN=A417517247B69D948B4F35C6F1B13DF54C32F571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:20:b9:3b:d8:dc:87:40:a9:d8:fb:7e:42: c8:89:3d:24:4d:df:35:a8:86:ab:a5:6c:13:1d:d0: bd:b3:32:03:fd:77:7d:03:5d:b7:dd:b4:f2:16:dd: c8:6c:53:e9:7d:25:d9:74:0c:45:36:ca:d2:cc:01: 08:a2:9a:30:a6:d4:d5:2a:4c:7b:69:f5:0b:0a:e7: 3f:16:2e:41:3f:04:dd:ed:2b:93:42:8e:ae:5e:92: 62:67:ef:62:d2:7f:d5:61:93:4a:af:10:10:bf:88: f8:30:3e:78:92:09:5b:ce:14:e4:01:ba:fb:c1:24: 04:f5:0a:04:97:eb:c4:68:f6:35:78:28:dd:fa:03: e0:20:c7:c4:d4:13:c8:d6:49:70:36:d6:87:d1:20: 54:47:a6:38:c3:9f:dd:79:07:0c:a4:63:7a:74:57: 05:d1:f8:34:5a:54:f5:55:e4:b5:bc:84:86:ec:9c: 4f:24:01:6b:1d:94:0b:45:d1:c7:fd:67:83:10:b9: 80:e9:34:dd:54:5c:a9:00:f5:db:a2:24:ce:aa:58: 94:6e:57:5f:1d:f1:8b:7e:1f:ae:ca:b4:48:32:47: 6a:ea:0b:fa:49:ba:ac:74:64:e7:9c:73:4e:96:3b: 55:8d:84:fa:7e:ea:0c:42:78:1d:ca:ab:71:5f:ce: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:17:51:72:47:B6:9D:94:8B:4F:35:C6:F1:B1:3D:F5:4C:32:F5:71 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ef:de:f6:83:31:fb:db:4b:da:8e:a3:44:92:ed:38:9b:47: 6d:19:0c:e1:67:a3:5f:78:aa:4e:36:58:35:25:4f:65:b9:5e: a6:c5:3f:5c:57:d8:9d:90:04:fd:d2:70:36:f2:c1:2c:ca:ef: 78:22:b5:f4:e5:58:04:fb:1f:b5:9b:b9:23:cf:4a:18:48:8b: 1f:30:54:1f:ad:77:60:7d:48:b1:25:f7:a9:9c:da:a7:39:74: 8d:39:15:30:c2:a0:d7:2f:86:b0:61:75:e7:e4:4d:aa:34:ae: ee:cd:15:5a:ad:e0:a2:f9:4f:29:58:91:4b:4f:b5:e5:c4:8b: 17:9f:9f:ce:88:96:5d:e0:6b:a5:c9:16:12:4d:bf:84:c6:50: 4e:6f:87:51:39:72:78:ed:66:71:d6:45:36:d5:10:aa:77:c7: 75:e3:04:97:bb:68:45:69:8a:21:70:49:7b:c0:ec:d4:b4:1a: 30:64:85:e2:15:e0:c7:d0:ed:61:b8:f8:36:9a:65:f3:52:dd: 5a:9f:2d:88:d0:99:28:de:9a:1f:dc:70:8b:7f:d4:45:33:03: 33:46:19:c1:7d:4f:88:a1:2a:3b:01:27:48:67:67:f1:f0:85: 7f:b6:60:48:07:99:d9:72:f7:1e:c6:07:ce:8f:50:c4:1f:72: d5:e7:b7:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgAxBfEQuWAtl3CKGptZy7UV6dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA3MjAxMjA2MjVaFw0yNjA3MjExNDM2MjVaMDMxMTAvBgNV BAMTKEE0MTc1MTcyNDdCNjlEOTQ4QjRGMzVDNkYxQjEzREY1NEMzMkY1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYUSC5O9jch0Cp2Pt+QsiJPSRN 3zWohqulbBMd0L2zMgP9d30DXbfdtPIW3chsU+l9Jdl0DEU2ytLMAQiimjCm1NUq THtp9QsK5z8WLkE/BN3tK5NCjq5ekmJn72LSf9Vhk0qvEBC/iPgwPniSCVvOFOQB uvvBJAT1CgSX68Ro9jV4KN36A+Agx8TUE8jWSXA21ofRIFRHpjjDn915BwykY3p0 VwXR+DRaVPVV5LW8hIbsnE8kAWsdlAtF0cf9Z4MQuYDpNN1UXKkA9duiJM6qWJRu V18d8Yt+H67KtEgyR2rqC/pJuqx0ZOecc06WO1WNhPp+6gxCeB3Kq3Ffzk1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBdRcke2nZSLTzXG8bE99Uwy9XEwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLv3vaDMfvbS9qOo0SS7TibR20ZDOFno194 qk42WDUlT2W5XqbFP1xX2J2QBP3ScDbywSzK73gitfTlWAT7H7WbuSPPShhIix8w VB+td2B9SLEl96mc2qc5dI05FTDCoNcvhrBhdefkTao0ru7NFVqt4KL5TylYkUtP teXEixefn86Ill3ga6XJFhJNv4TGUE5vh1E5cnjtZnHWRTbVEKp3x3XjBJe7aEVp iiFwSXvA7NS0GjBkheIV4MfQ7WG4+DaaZfNS3VqfLYjQmSjemh/ccIt/1EUzAzNG GcF9T4ihKjsBJ0hnZ/HwhX+2YEgHmdly9x7GB86PUMQfctXnt+w= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:00 2026 by rpki-client