$ rpki-client -vvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: edmvZ3b/aUIKCkD/3IxV9HbFi4y8Nq3IXltiSK57UeQ= Subject key identifier: CB:06:20:92:AB:43:CD:68:89:67:62:70:7F:BC:F3:7B:CF:C9:1C:47 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 74665D1A92A592326CF2EFCA96EE2F86E03E60A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 08:33:05 +0000 Manifest this update: Sun 02 Aug 2026 08:28:05 +0000 Manifest next update: Mon 03 Aug 2026 09:38:05 +0000 Files and hashes: 1: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: qNx3VN1dAvQedeDWmCzF6O8CbwAAwP5meS5jNjL532U=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:5d:1a:92:a5:92:32:6c:f2:ef:ca:96:ee:2f:86:e0:3e:60:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Aug 2 08:28:05 2026 GMT Not After : Aug 3 09:38:05 2026 GMT Subject: CN=CB062092AB43CD68896762707FBCF37BCFC91C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:41:7d:db:2a:d4:35:30:55:0e:71:c3:9c: 4f:22:8e:aa:e7:e3:76:9e:30:aa:2b:6a:8b:89:93: e3:b4:98:b1:89:92:ee:1f:1f:c8:6d:3b:b6:e6:51: ce:9b:31:07:32:80:c4:ac:ef:27:bc:cc:1a:8d:d0: 3a:86:40:6d:61:8c:ec:20:67:06:f1:e1:68:da:d3: fe:07:e6:ca:4c:ae:d5:cc:df:fd:5c:a4:ea:e2:e0: e0:2e:13:e5:d1:6c:e6:8f:76:a7:f8:98:19:4c:ca: 02:3a:f9:a0:68:df:82:e4:26:c3:af:ff:97:4d:3b: ca:0f:c5:da:ff:42:d0:81:6d:d6:2d:9b:41:1c:c9: c0:7a:51:ca:63:d3:87:96:00:ef:7a:6c:c7:b9:86: 82:e8:a2:b9:af:08:28:32:f4:6d:bf:c2:8b:48:ba: 1e:87:ff:d2:0e:13:0a:65:06:90:ee:c3:5d:ad:14: 9a:15:97:c4:cc:c7:03:db:bd:29:34:5f:68:8b:48: 66:dc:b8:81:3f:e6:b7:b2:c5:0b:c5:16:01:8c:66: 69:6a:be:71:2e:07:85:d0:82:8a:20:69:34:66:50: 4b:e0:ef:8c:70:1c:dc:86:3f:1f:6f:68:7b:eb:7e: 9f:34:01:6f:f0:f5:b9:b3:4f:d1:c8:2d:ad:28:08: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:06:20:92:AB:43:CD:68:89:67:62:70:7F:BC:F3:7B:CF:C9:1C:47 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:54:3e:04:8e:0e:08:8c:92:39:f2:55:82:b9:a8:db:2a:b3: d1:3c:ac:36:d0:95:eb:88:40:b7:b6:72:68:83:11:fd:2e:e4: 97:d5:cc:6a:05:ce:61:f1:63:da:12:e4:95:2e:70:50:59:3a: 37:b1:4a:f6:e0:81:df:41:7e:0b:c6:f3:ef:82:c3:59:ac:f0: fd:d0:5a:9e:07:73:a1:5c:c3:62:ff:8a:91:9d:e9:e3:3d:f2: 4e:be:af:3e:44:58:d5:6a:92:0e:8b:28:de:2d:c3:af:09:2f: 82:e4:c0:3b:f2:a3:bd:a4:b9:89:9e:e6:a5:24:80:f2:62:f6: 10:73:ee:bc:9d:1a:bc:da:be:26:93:c4:83:13:5e:48:c2:a6: 0f:38:63:3f:48:68:b8:9c:13:53:e1:9f:d0:89:97:88:c3:8e: 65:fb:8b:36:23:bf:a7:16:9b:ac:50:9b:b6:8b:d2:7f:75:5d: 96:13:45:92:54:24:ba:f2:8d:fd:92:04:e8:4a:03:44:c2:4a: a9:75:37:1b:7c:17:49:cb:ca:45:f5:cb:5c:86:8d:f1:ee:b2: 6a:69:c2:55:98:91:bf:f5:7c:bf:02:8f:24:7f:77:96:ae:bf: 7f:5c:95:79:4b:ab:74:89:d8:0a:06:3f:70:e3:eb:c4:f2:ef: 20:31:da:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGZdGpKlkjJs8u/Klu4vhuA+YKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA4MDIwODI4MDVaFw0yNjA4MDMwOTM4MDVaMDMxMTAvBgNV BAMTKENCMDYyMDkyQUI0M0NENjg4OTY3NjI3MDdGQkNGMzdCQ0ZDOTFDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhkF92yrUNTBVDnHDnE8ijqrn 43aeMKoraouJk+O0mLGJku4fH8htO7bmUc6bMQcygMSs7ye8zBqN0DqGQG1hjOwg Zwbx4Wja0/4H5spMrtXM3/1cpOri4OAuE+XRbOaPdqf4mBlMygI6+aBo34LkJsOv /5dNO8oPxdr/QtCBbdYtm0EcycB6Ucpj04eWAO96bMe5hoLoormvCCgy9G2/wotI uh6H/9IOEwplBpDuw12tFJoVl8TMxwPbvSk0X2iLSGbcuIE/5reyxQvFFgGMZmlq vnEuB4XQgoogaTRmUEvg74xwHNyGPx9vaHvrfp80AW/w9bmzT9HILa0oCC3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywYgkqtDzWiJZ2Jwf7zze8/JHEcwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtUPgSODgiMkjnyVYK5qNsqs9E8rDbQleuI QLe2cmiDEf0u5JfVzGoFzmHxY9oS5JUucFBZOjexSvbggd9BfgvG8++Cw1ms8P3Q Wp4Hc6Fcw2L/ipGd6eM98k6+rz5EWNVqkg6LKN4tw68JL4LkwDvyo72kuYme5qUk gPJi9hBz7rydGrzaviaTxIMTXkjCpg84Yz9IaLicE1Phn9CJl4jDjmX7izYjv6cW m6xQm7aL0n91XZYTRZJUJLryjf2SBOhKA0TCSql1Nxt8F0nLykX1y1yGjfHusmpp wlWYkb/1fL8CjyR/d5auv39clXlLq3SJ2AoGP3Dj68Ty7yAx2gA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:35 2026 by rpki-client