$ rpki-client -vvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: f46FytRjvkRDbiMiRZ8jZ3z82LrSQP+qr3xLFoHkPjE= Subject key identifier: F3:77:BA:8B:23:19:7D:EB:97:3E:97:D0:AD:10:4E:B9:1C:4A:13:65 Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 589CC7065DFA7690B50FC0D8AA3E74C1B28A1578 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 02:38:59 +0000 Manifest this update: Tue 21 Jul 2026 02:33:59 +0000 Manifest next update: Wed 22 Jul 2026 04:56:59 +0000 Files and hashes: 1: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: 594PSbZH5mLm5sjyy4G2uNH0GOrvD7JRm6s6IpxIKL4=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9c:c7:06:5d:fa:76:90:b5:0f:c0:d8:aa:3e:74:c1:b2:8a:15:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: Jul 21 02:33:59 2026 GMT Not After : Jul 22 04:56:59 2026 GMT Subject: CN=F377BA8B23197DEB973E97D0AD104EB91C4A1365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:5c:b8:a5:8c:2f:4d:f6:40:78:1a:ae:94: 28:0e:3d:b4:c3:cc:7a:de:0a:af:87:8b:54:11:a9: c1:50:db:c5:02:9b:f9:25:6c:88:dd:6f:30:27:18: 0a:ca:08:97:c2:b5:e1:71:e0:89:91:3a:94:92:24: d9:b8:57:26:cf:1f:83:9b:92:f7:b6:6d:6c:df:83: 4b:77:80:cf:41:bd:be:5c:01:53:4e:9c:86:f9:cd: 7e:55:78:e1:86:a2:32:6a:cf:a4:f7:14:ad:3e:95: 4c:fe:34:18:c9:bc:5e:83:46:c0:60:3a:79:ce:2c: 0b:97:05:b1:2d:ce:3f:47:6f:1f:4d:18:d8:b8:38: 80:de:28:2d:d8:78:d8:04:a9:dd:74:04:31:ec:c3: 8c:cf:0d:ee:45:65:e6:3d:c5:a0:51:41:4a:65:46: 90:13:31:e7:e7:a0:ee:20:ce:b2:ea:5d:cd:94:69: 2c:7e:50:fe:ca:38:72:1f:9a:30:92:79:d4:66:09: f6:b4:9b:1e:94:63:3b:d9:1a:14:e8:64:2f:9b:7d: 3b:c3:f2:59:ee:26:3e:e0:1a:a6:af:f6:5c:77:e6: de:b7:73:ee:d4:3c:81:a1:cf:fe:e7:3d:0a:4c:bc: 30:d9:c2:10:68:5f:84:1d:58:fa:16:5b:fc:08:c1: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:BA:8B:23:19:7D:EB:97:3E:97:D0:AD:10:4E:B9:1C:4A:13:65 X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a7:5c:fb:fa:43:5a:37:27:61:0b:f9:6d:b1:ef:fd:b2:0a: 51:c3:46:f7:9c:7b:ea:26:40:8a:1e:06:59:2a:64:fc:1f:b7: 39:8d:41:14:bb:78:f8:00:bd:21:fa:6b:17:92:0c:3c:e1:25: 53:81:3a:81:44:55:ff:23:57:ba:fe:2c:4b:d6:16:b3:a5:42: c7:68:f7:34:4b:e5:91:20:65:2a:90:a8:b4:9e:ca:c6:64:05: a5:a3:93:8a:1b:f7:74:a7:f7:bd:9f:25:94:bf:55:80:b7:a8: 3c:4d:30:ec:db:17:9f:f3:73:04:5e:6e:07:74:a0:75:f2:e0: 51:1a:5b:05:08:31:5f:30:6a:f5:83:27:a4:46:30:f6:be:70: 02:c0:9d:4c:05:f8:7c:7f:5b:ef:b7:98:bd:55:89:76:ea:30: 91:f3:03:2e:66:a7:a5:37:b6:87:09:ab:b8:b2:2d:f0:91:6b: 87:9e:e5:f2:e8:03:fc:77:b0:72:fc:32:9a:95:f7:bc:e2:7f: e3:a5:eb:c0:a7:2a:15:7b:5f:9e:b6:8d:8e:06:fe:f6:66:03: c8:41:30:1c:b5:a9:59:94:7e:d4:02:a5:49:68:8a:e4:8a:0d: eb:eb:d0:74:dc:81:9d:1e:c4:e9:73:72:a9:b7:68:2f:98:d5: 19:8e:6a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJzHBl36dpC1D8DYqj50wbKKFXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjA3MjEwMjMzNTlaFw0yNjA3MjIwNDU2NTlaMDMxMTAvBgNV BAMTKEYzNzdCQThCMjMxOTdERUI5NzNFOTdEMEFEMTA0RUI5MUM0QTEzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hFy4pYwvTfZAeBqulCgOPbTD zHreCq+Hi1QRqcFQ28UCm/klbIjdbzAnGArKCJfCteFx4ImROpSSJNm4VybPH4Ob kve2bWzfg0t3gM9Bvb5cAVNOnIb5zX5VeOGGojJqz6T3FK0+lUz+NBjJvF6DRsBg OnnOLAuXBbEtzj9Hbx9NGNi4OIDeKC3YeNgEqd10BDHsw4zPDe5FZeY9xaBRQUpl RpATMefnoO4gzrLqXc2UaSx+UP7KOHIfmjCSedRmCfa0mx6UYzvZGhToZC+bfTvD 8lnuJj7gGqav9lx35t63c+7UPIGhz/7nPQpMvDDZwhBoX4QdWPoWW/wIwdQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU83e6iyMZfeuXPpfQrRBOuRxKE2UwHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOnXPv6Q1o3J2EL+W2x7/2yClHDRvece+om QIoeBlkqZPwftzmNQRS7ePgAvSH6axeSDDzhJVOBOoFEVf8jV7r+LEvWFrOlQsdo 9zRL5ZEgZSqQqLSeysZkBaWjk4ob93Sn972fJZS/VYC3qDxNMOzbF5/zcwRebgd0 oHXy4FEaWwUIMV8wavWDJ6RGMPa+cALAnUwF+Hx/W++3mL1ViXbqMJHzAy5mp6U3 tocJq7iyLfCRa4ee5fLoA/x3sHL8MpqV97zif+Ol68CnKhV7X562jY4G/vZmA8hB MBy1qVmUftQCpUloiuSKDevr0HTcgZ0exOlzcqm3aC+Y1RmOatY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:10 2026 by rpki-client