$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: Sesbrxth0pBPQ6JY6TAcGmZbvaWDc/4dhwYe5g0B5rk= Subject key identifier: 76:94:9D:FD:51:03:8A:8B:18:D6:8F:A5:EC:58:39:77:BB:78:A9:A5 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 3087F320F9F577426B965CC6BB6329868F8BCAA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 16:57:47 +0000 Manifest this update: Sun 02 Aug 2026 16:52:47 +0000 Manifest next update: Mon 03 Aug 2026 19:21:47 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) 2: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: CW1ps1NQnKaaxIRz/quHfITLFoAZwnyu9Y4o0+bP2MA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:87:f3:20:f9:f5:77:42:6b:96:5c:c6:bb:63:29:86:8f:8b:ca:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Aug 2 16:52:47 2026 GMT Not After : Aug 3 19:21:47 2026 GMT Subject: CN=76949DFD51038A8B18D68FA5EC583977BB78A9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:ec:94:de:06:62:8c:53:f5:4c:85:c6:fa: 36:ac:63:5f:97:9a:8f:dd:20:ce:ab:93:1b:01:ad: f8:ca:b3:19:10:57:a7:81:3e:f5:2e:bd:ed:3e:a1: 68:28:8e:d4:d9:49:98:c3:87:15:dd:17:be:61:3f: 21:11:99:33:85:62:bc:d7:a2:95:b8:71:f5:c5:d5: a8:89:10:56:48:6c:c4:d1:92:e4:f8:d3:98:e3:4e: b7:10:9d:a3:68:c0:cc:3c:21:ba:59:41:11:be:77: 60:ce:85:27:f7:65:4f:a0:a0:35:65:0a:e7:3b:2e: f3:22:f6:e8:32:5b:29:ed:5c:27:90:14:49:aa:9e: 63:f0:ac:0c:bf:84:3d:a6:35:51:33:37:a1:bd:7d: d8:25:31:08:dd:dc:5c:4d:2d:da:32:8b:ec:e6:3b: 3c:2a:28:0f:a8:7e:63:ab:c3:d9:d6:ef:6e:ff:72: d7:9d:e9:11:06:a7:ba:ce:31:61:d6:a4:02:77:b4: 0a:88:5e:6e:af:e8:8c:83:81:7a:9e:d2:06:99:c2: 7c:a1:da:01:70:b6:cf:0f:50:92:04:54:43:eb:64: 40:43:0b:da:09:fd:19:34:af:25:df:31:6f:ff:2b: dd:45:a1:cd:9e:e7:01:13:9b:92:ff:52:58:36:cd: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:9D:FD:51:03:8A:8B:18:D6:8F:A5:EC:58:39:77:BB:78:A9:A5 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6e:c2:58:4a:bd:da:33:52:c1:15:c0:f0:c4:59:f4:ad:19: c8:ba:d6:ef:bc:58:8b:be:dd:f5:7a:0e:4c:e2:b0:7c:82:e9: 0a:2e:4f:2b:59:54:71:99:c6:ea:d2:e1:1f:dd:26:f8:28:00: 44:e0:40:cf:90:9f:e2:f1:55:b0:9a:ba:a0:35:4e:0d:a6:8a: 3a:37:2d:03:f8:a3:24:6e:33:fd:8b:61:d6:48:16:d8:2e:99: f9:e4:6f:84:6f:af:8e:5d:74:8f:b6:82:0c:a7:77:24:8c:6e: a5:d5:13:7c:cc:f1:45:2a:0c:e2:18:e9:ef:c2:5e:22:13:5e: 69:ee:cb:a7:cf:07:98:a2:c4:bd:a0:11:89:7c:77:d6:4a:c9: d0:92:34:f1:4b:21:13:b2:dd:8c:71:17:04:4e:c7:d7:4b:57: 91:5d:22:25:33:26:95:ef:2c:80:4d:c1:b6:cc:7a:6b:48:25: e4:ee:d5:a8:d7:a4:9b:32:8a:7e:54:02:58:54:00:de:16:29: 3e:f7:16:fa:39:aa:c7:3f:b9:33:61:f6:1b:68:06:37:11:f5: 53:56:9f:95:0b:27:fd:18:14:3b:8e:a9:99:6b:9e:6e:12:82: 9c:9d:de:b4:51:c1:49:e6:7e:25:7f:25:29:e4:e9:17:8e:41: 3c:bc:65:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIfzIPn1d0JrllzGu2Mpho+LyqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA4MDIxNjUyNDdaFw0yNjA4MDMxOTIxNDdaMDMxMTAvBgNV BAMTKDc2OTQ5REZENTEwMzhBOEIxOEQ2OEZBNUVDNTgzOTc3QkI3OEE5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTjOyU3gZijFP1TIXG+jasY1+X mo/dIM6rkxsBrfjKsxkQV6eBPvUuve0+oWgojtTZSZjDhxXdF75hPyERmTOFYrzX opW4cfXF1aiJEFZIbMTRkuT405jjTrcQnaNowMw8IbpZQRG+d2DOhSf3ZU+goDVl Cuc7LvMi9ugyWyntXCeQFEmqnmPwrAy/hD2mNVEzN6G9fdglMQjd3FxNLdoyi+zm OzwqKA+ofmOrw9nW727/cted6REGp7rOMWHWpAJ3tAqIXm6v6IyDgXqe0gaZwnyh 2gFwts8PUJIEVEPrZEBDC9oJ/Rk0ryXfMW//K91Foc2e5wETm5L/Ulg2zdxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpSd/VEDiosY1o+l7Fg5d7t4qaUwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVuwlhKvdozUsEVwPDEWfStGci61u+8WIu+ 3fV6DkzisHyC6QouTytZVHGZxurS4R/dJvgoAETgQM+Qn+LxVbCauqA1Tg2mijo3 LQP4oyRuM/2LYdZIFtgumfnkb4Rvr45ddI+2ggyndySMbqXVE3zM8UUqDOIY6e/C XiITXmnuy6fPB5iixL2gEYl8d9ZKydCSNPFLIROy3YxxFwROx9dLV5FdIiUzJpXv LIBNwbbMemtIJeTu1ajXpJsyin5UAlhUAN4WKT73Fvo5qsc/uTNh9htoBjcR9VNW n5ULJ/0YFDuOqZlrnm4Sgpyd3rRRwUnmfiV/JSnk6ReOQTy8ZQM= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:53 2026 by rpki-client