$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: 6wQqZbnfwu4l/Fl8EMPh3/itPxT0t8SinD+S7F5uJaM= Subject key identifier: 29:03:EE:6D:0E:7B:07:26:DC:5B:60:8C:6C:16:30:E2:32:64:78:DF Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 51E479386238B3106AFE526F12EFED2B40C2DD04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:12:14 +0000 Manifest this update: Tue 21 Jul 2026 01:07:14 +0000 Manifest next update: Wed 22 Jul 2026 04:13:14 +0000 Files and hashes: 1: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: KF7BJkZwIhfkLp49Kxh7i+0WeMw+Z5ryGQiMObypy1c=) 2: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 4: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e4:79:38:62:38:b3:10:6a:fe:52:6f:12:ef:ed:2b:40:c2:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Jul 21 01:07:14 2026 GMT Not After : Jul 22 04:13:14 2026 GMT Subject: CN=2903EE6D0E7B0726DC5B608C6C1630E2326478DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:13:57:79:dc:4a:2c:b0:53:e5:dd:69:b6: bd:45:cb:db:44:da:cc:d2:30:ea:06:4a:bc:b3:45: 06:60:a6:5c:88:e3:06:4b:a5:e4:c7:8a:c4:23:c7: ec:01:db:ff:e6:03:0a:10:94:dc:4a:5d:97:d2:94: 9d:af:73:11:42:06:9b:a9:66:c4:d7:a1:43:45:49: f7:e2:e2:b3:41:e8:2e:00:5a:cf:9f:f8:08:dc:5c: 54:d7:2d:fe:32:19:60:62:07:0e:7b:21:65:fd:d8: e4:4a:32:93:3c:32:36:34:b2:6c:48:c3:7d:ef:fe: a5:25:f4:57:f9:c2:eb:c7:35:5d:7f:2d:ba:84:3b: c4:2d:b2:f9:a7:44:b4:b2:c9:3e:a0:15:4c:86:0a: df:d1:aa:e9:11:69:1f:ef:f8:4e:9e:fe:fd:1e:9b: 45:55:13:9b:21:fb:cf:e6:25:20:d1:4d:ca:75:14: 14:89:3e:12:19:7f:39:29:78:a7:3b:2f:ee:13:f9: 45:0d:78:96:5e:a5:3e:f3:e3:dc:7c:49:ad:96:2c: 08:bc:89:91:fd:16:47:2f:56:0e:0a:38:e7:25:d7: 0e:27:ff:f2:10:15:34:c7:f8:2a:a2:01:4d:68:3c: 7f:8b:f7:7c:dd:8d:30:17:f5:e2:18:88:38:2e:0b: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:EE:6D:0E:7B:07:26:DC:5B:60:8C:6C:16:30:E2:32:64:78:DF X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2f:99:d8:90:54:86:a9:4b:be:76:66:f3:7e:a8:04:52:e1: d5:ab:38:09:a0:25:c1:41:ad:96:56:bb:60:92:7f:d4:6b:0b: 28:c7:ae:b3:b5:ab:3d:dc:be:fb:f6:6f:b1:c3:d7:1b:40:49: a4:a4:4e:43:16:37:d3:c2:9f:1a:2c:07:5f:f6:34:3f:81:3d: 09:41:ce:59:a3:11:6d:c1:7c:2f:be:36:f6:59:27:45:52:da: 23:6d:f9:8d:90:e0:21:4f:74:e4:c1:e1:39:92:1a:39:3b:b7: 0e:15:91:db:ba:6f:fa:88:0a:e4:6b:44:57:f9:98:c0:21:b6: aa:97:df:f4:56:80:a1:3e:79:e4:b3:3f:99:98:4b:31:47:20: b0:05:21:55:40:fe:7f:fd:c6:c0:b4:93:d3:10:76:23:ed:b4: fd:9c:1d:e6:23:17:ac:61:df:23:d2:1d:c1:3b:18:a5:df:50: af:bc:7a:8a:7f:67:54:8b:9b:2e:71:e9:95:b7:04:cd:78:7c: 2c:af:ea:59:d6:29:d0:ab:1f:ba:0a:66:d3:86:30:cb:d9:8d: d3:72:c6:a7:dd:af:73:6e:94:eb:64:f4:2a:71:b2:80:22:b2: 6b:1c:85:2d:b9:e5:b1:24:e0:a0:09:a8:37:55:2d:17:3b:2c: fb:29:46:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeR5OGI4sxBq/lJvEu/tK0DC3QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA3MjEwMTA3MTRaFw0yNjA3MjIwNDEzMTRaMDMxMTAvBgNV BAMTKDI5MDNFRTZEMEU3QjA3MjZEQzVCNjA4QzZDMTYzMEUyMzI2NDc4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwRNXedxKLLBT5d1ptr1Fy9tE 2szSMOoGSryzRQZgplyI4wZLpeTHisQjx+wB2//mAwoQlNxKXZfSlJ2vcxFCBpup ZsTXoUNFSffi4rNB6C4AWs+f+AjcXFTXLf4yGWBiBw57IWX92ORKMpM8MjY0smxI w33v/qUl9Ff5wuvHNV1/LbqEO8QtsvmnRLSyyT6gFUyGCt/RqukRaR/v+E6e/v0e m0VVE5sh+8/mJSDRTcp1FBSJPhIZfzkpeKc7L+4T+UUNeJZepT7z49x8Sa2WLAi8 iZH9FkcvVg4KOOcl1w4n//IQFTTH+CqiAU1oPH+L93zdjTAX9eIYiDguCz+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQPubQ57BybcW2CMbBYw4jJkeN8wHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEvmdiQVIapS752ZvN+qARS4dWrOAmgJcFB rZZWu2CSf9RrCyjHrrO1qz3cvvv2b7HD1xtASaSkTkMWN9PCnxosB1/2ND+BPQlB zlmjEW3BfC++NvZZJ0VS2iNt+Y2Q4CFPdOTB4TmSGjk7tw4Vkdu6b/qICuRrRFf5 mMAhtqqX3/RWgKE+eeSzP5mYSzFHILAFIVVA/n/9xsC0k9MQdiPttP2cHeYjF6xh 3yPSHcE7GKXfUK+8eop/Z1SLmy5x6ZW3BM14fCyv6lnWKdCrH7oKZtOGMMvZjdNy xqfdr3NulOtk9CpxsoAismschS255bEk4KAJqDdVLRc7LPspRjA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:22:29 2026 by rpki-client