$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: Dk72H1iaZXV/FBNBnGhwDc34cppv6ZHWyHy1G8zLXz0= Subject key identifier: AE:45:0F:6B:2D:42:4A:53:08:E3:A2:2F:93:EA:C5:D8:14:4A:41:14 Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 5F093B2FD1638A98B7DF09500C51F36A7068188F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 01:49:48 +0000 Manifest this update: Sun 02 Aug 2026 01:44:48 +0000 Manifest next update: Mon 03 Aug 2026 05:20:48 +0000 Files and hashes: 1: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: rSzhpZJjahpA7JKaocNFwiUocf/40ulh8FXX6cdRbhQ=) 2: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 3: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 4: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:09:3b:2f:d1:63:8a:98:b7:df:09:50:0c:51:f3:6a:70:68:18:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Aug 2 01:44:48 2026 GMT Not After : Aug 3 05:20:48 2026 GMT Subject: CN=AE450F6B2D424A5308E3A22F93EAC5D8144A4114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:9c:95:06:20:5a:e1:25:7d:db:b1:9b:cb: e1:2a:02:2f:f3:84:94:a1:7e:77:64:5e:2f:c4:da: 18:49:f3:de:e4:b9:90:5d:af:e1:1e:e6:97:05:4b: 75:60:ba:ff:1b:40:89:3f:09:ad:48:3f:08:6d:97: 0e:82:08:8f:8c:78:61:b8:9c:01:d5:4c:b5:17:72: 49:2b:f7:5f:eb:d0:9d:9a:5f:ba:64:23:9a:5e:26: 53:22:6a:5e:79:17:15:7b:87:9f:20:57:bb:72:df: 89:44:08:28:c3:be:9b:c6:ca:3c:53:87:8f:50:68: f3:ee:c7:6e:72:53:db:ec:e4:a7:3a:60:bb:27:33: de:38:21:ad:3b:80:24:bf:f5:76:ce:41:bf:6b:ff: 1c:16:92:5c:a6:18:63:cd:b5:95:81:c0:c2:c8:e8: 2d:00:34:23:ff:b3:80:0e:f2:2b:9d:9a:4a:df:5c: de:e7:da:49:32:d0:bd:21:8b:c7:3a:a2:46:7f:72: 63:85:6f:bf:4e:fe:92:8f:18:8a:0b:15:f6:f5:b7: c1:66:98:8a:93:db:e6:c0:19:38:f3:a3:91:c1:3c: f0:bd:f5:7a:9f:d8:da:6e:69:55:1f:65:56:e7:ca: 2d:6a:9b:36:db:ed:7c:0a:db:cd:1b:66:44:c6:5d: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:0F:6B:2D:42:4A:53:08:E3:A2:2F:93:EA:C5:D8:14:4A:41:14 X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f9:0d:06:ae:ea:6b:ed:bf:39:f2:4c:28:01:ca:ef:51:85: 88:b0:a5:54:6d:da:b1:eb:b8:3f:a7:c3:09:e4:0b:cc:b9:51: a3:ce:2e:82:3f:b7:9b:45:73:58:fc:74:cd:a9:7c:3b:5a:f1: b3:e5:30:d0:34:d5:40:26:74:e1:93:30:f2:a7:23:77:8c:94: ce:75:ad:62:a6:22:49:ff:ed:4c:fc:80:f7:9d:f3:1c:13:06: 0d:77:be:ea:c1:72:ed:58:ba:85:33:bb:bf:6a:93:de:6a:ae: 50:b8:c0:b2:86:8c:c4:44:63:12:0b:6d:33:7e:7c:ff:63:f5: bb:a5:35:e9:d7:10:9d:f2:22:db:b6:28:d7:c0:7a:d7:69:fe: 4f:a6:77:01:fc:17:69:6c:71:19:57:71:fe:63:05:78:26:ce: 28:f2:ca:fc:4c:e5:3c:85:5a:c3:6a:8d:4d:99:94:c8:9e:7f: ac:14:a4:aa:44:66:c4:55:98:90:cf:29:19:c3:da:3f:eb:ea: 1d:d7:01:43:8b:2b:05:cc:1d:83:9e:fc:3a:15:00:d3:ce:e2: 4c:d6:d8:74:55:15:63:e6:eb:aa:1c:0b:3f:ba:b1:60:c8:c3: cd:2d:ac:2f:0b:83:de:1b:cb:48:92:12:fa:a2:9c:22:39:96: c3:df:f3:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwk7L9Fjipi33wlQDFHzanBoGI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA4MDIwMTQ0NDhaFw0yNjA4MDMwNTIwNDhaMDMxMTAvBgNV BAMTKEFFNDUwRjZCMkQ0MjRBNTMwOEUzQTIyRjkzRUFDNUQ4MTQ0QTQxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYA5yVBiBa4SV927Gby+EqAi/z hJShfndkXi/E2hhJ897kuZBdr+Ee5pcFS3Vguv8bQIk/Ca1IPwhtlw6CCI+MeGG4 nAHVTLUXckkr91/r0J2aX7pkI5peJlMial55FxV7h58gV7ty34lECCjDvpvGyjxT h49QaPPux25yU9vs5Kc6YLsnM944Ia07gCS/9XbOQb9r/xwWklymGGPNtZWBwMLI 6C0ANCP/s4AO8iudmkrfXN7n2kky0L0hi8c6okZ/cmOFb79O/pKPGIoLFfb1t8Fm mIqT2+bAGTjzo5HBPPC99Xqf2NpuaVUfZVbnyi1qmzbb7XwK280bZkTGXUipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrkUPay1CSlMI46Ivk+rF2BRKQRQwHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn5DQau6mvtvznyTCgByu9RhYiwpVRt2rHr uD+nwwnkC8y5UaPOLoI/t5tFc1j8dM2pfDta8bPlMNA01UAmdOGTMPKnI3eMlM51 rWKmIkn/7Uz8gPed8xwTBg13vurBcu1YuoUzu79qk95qrlC4wLKGjMREYxILbTN+ fP9j9bulNenXEJ3yItu2KNfAetdp/k+mdwH8F2lscRlXcf5jBXgmzijyyvxM5TyF WsNqjU2ZlMief6wUpKpEZsRVmJDPKRnD2j/r6h3XAUOLKwXMHYOe/DoVANPO4kzW 2HRVFWPm66ocCz+6sWDIw80trC8Lg94by0iSEvqinCI5lsPf8zE= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:37 2026 by rpki-client