$ rpki-client -vvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: wNqoVwthfCajyTnrfTSrgWzgc1uHYwzWjo7nuEh2oFg= Subject key identifier: 28:81:1F:93:7B:57:08:6F:E1:E6:EA:6A:23:91:5F:03:9B:F3:CE:71 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 4F474CD51563224EFB22C732210B4B608BECC4B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 09:39:19 +0000 Manifest this update: Sun 02 Aug 2026 09:34:19 +0000 Manifest next update: Mon 03 Aug 2026 11:16:19 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 4: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: LLmxDbBSkDcqlHBTOlDAoF/+HhvTP0RM1CoRW9AOnZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:47:4c:d5:15:63:22:4e:fb:22:c7:32:21:0b:4b:60:8b:ec:c4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Aug 2 09:34:19 2026 GMT Not After : Aug 3 11:16:19 2026 GMT Subject: CN=28811F937B57086FE1E6EA6A23915F039BF3CE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:b9:3e:95:1e:86:2f:d2:26:ef:d3:9d:77: 20:98:de:51:22:e7:80:d0:2a:72:68:ee:7e:98:38: c3:f2:42:44:1a:5d:bd:d7:23:1f:28:2a:9f:70:f4: 56:01:e3:ad:ef:f9:0d:bf:84:9c:e0:b9:92:e5:0e: f8:52:02:42:53:09:c5:5b:c3:56:7e:17:18:1d:ef: ef:94:5d:f9:c6:d1:08:88:d2:94:a3:cf:6a:cc:94: b3:c4:48:ae:f3:c1:5a:47:0b:49:da:5a:ed:9a:79: 08:38:82:dd:5f:c6:31:2b:6d:92:76:31:c5:d4:1c: 4c:de:79:95:1a:74:a6:85:c9:84:db:8f:6a:a8:de: d1:c9:e2:66:54:e2:4e:f1:a0:80:d2:a8:3e:4e:7f: eb:2f:71:24:1c:8e:2b:27:13:b5:b8:9f:4d:79:7f: dc:04:d4:12:8d:63:e0:e2:76:58:58:e4:4f:a7:c6: be:d2:39:e7:3a:f9:b1:6c:fa:a4:d5:9b:7e:47:f8: 99:1d:e6:2b:03:34:dd:26:3c:80:b8:e5:f8:c5:ab: 20:0f:c1:17:d4:ed:23:01:0d:c0:4c:82:9f:34:38: 35:e4:c3:9d:f8:4a:b0:cd:95:19:9a:76:68:ed:b0: 2a:c5:20:e8:89:16:68:09:66:c3:a0:aa:65:e0:69: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:81:1F:93:7B:57:08:6F:E1:E6:EA:6A:23:91:5F:03:9B:F3:CE:71 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:2e:98:d2:a7:0a:5b:71:fc:5b:9b:ed:4a:c7:9a:68:06: 15:ec:60:ec:e6:86:fe:19:ae:43:92:7e:89:e3:d7:2e:91:a7: ee:ae:a5:a0:07:e0:c4:b5:73:29:bc:54:09:df:8f:81:92:ea: 48:33:97:f2:fd:86:af:64:73:ef:ce:17:95:33:cf:81:9b:5a: c9:9b:33:37:7f:eb:39:9a:97:d4:83:3d:f6:3b:da:7e:5b:89: 10:21:ec:16:5c:57:03:6b:5d:d0:e3:0c:13:b4:e5:9a:43:c3: b5:4d:a7:24:70:db:74:0e:ff:5f:89:17:8b:61:3e:9c:5b:77: 16:17:f3:c8:2d:0d:7c:30:13:d4:53:a0:68:e3:5e:db:03:ed: f8:87:64:34:5b:7d:6d:e5:37:a2:d2:e0:48:c2:fb:9c:c5:5e: e9:51:d2:f0:8c:f3:4b:f0:73:54:5b:9e:d0:9e:dd:7a:91:83: a5:0a:28:05:9c:4f:d0:94:97:dc:02:55:bc:5d:69:69:a9:4e: 79:13:39:f0:cf:e7:b3:a4:23:f9:df:9d:bb:ec:93:9b:60:9e: 7b:55:be:ed:29:9c:bb:9d:52:6e:57:5a:6d:33:54:20:5d:6d: 73:f3:a0:20:4e:e5:80:08:8c:27:d7:d0:7f:ee:8d:52:62:e6: d2:61:32:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0dM1RVjIk77IscyIQtLYIvsxLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA4MDIwOTM0MTlaFw0yNjA4MDMxMTE2MTlaMDMxMTAvBgNV BAMTKDI4ODExRjkzN0I1NzA4NkZFMUU2RUE2QTIzOTE1RjAzOUJGM0NFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUurk+lR6GL9Im79OddyCY3lEi 54DQKnJo7n6YOMPyQkQaXb3XIx8oKp9w9FYB463v+Q2/hJzguZLlDvhSAkJTCcVb w1Z+Fxgd7++UXfnG0QiI0pSjz2rMlLPESK7zwVpHC0naWu2aeQg4gt1fxjErbZJ2 McXUHEzeeZUadKaFyYTbj2qo3tHJ4mZU4k7xoIDSqD5Of+svcSQcjisnE7W4n015 f9wE1BKNY+DidlhY5E+nxr7SOec6+bFs+qTVm35H+Jkd5isDNN0mPIC45fjFqyAP wRfU7SMBDcBMgp80ODXkw534SrDNlRmadmjtsCrFIOiJFmgJZsOgqmXgaeCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIEfk3tXCG/h5upqI5FfA5vzznEwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWjLpjSpwpbcfxbm+1Kx5poBhXsYOzmhv4Z rkOSfonj1y6Rp+6upaAH4MS1cym8VAnfj4GS6kgzl/L9hq9kc+/OF5Uzz4GbWsmb Mzd/6zmal9SDPfY72n5biRAh7BZcVwNrXdDjDBO05ZpDw7VNpyRw23QO/1+JF4th PpxbdxYX88gtDXwwE9RToGjjXtsD7fiHZDRbfW3lN6LS4EjC+5zFXulR0vCM80vw c1RbntCe3XqRg6UKKAWcT9CUl9wCVbxdaWmpTnkTOfDP57OkI/nfnbvsk5tgnntV vu0pnLudUm5XWm0zVCBdbXPzoCBO5YAIjCfX0H/ujVJi5tJhMkI= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:33 2026 by rpki-client