$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json) Hash identifier: G+27Na+zE4o2VZGV6c4QImV0F2vPmdQikbBuiZScpFM= Subject key identifier: 8E:AF:16:18:EF:36:6B:51:FD:49:D5:7F:8D:D7:8C:7B:21:AF:87:8E Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Certificate issuer: /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Certificate serial: 5D3C68AB03C4FF992AA82DDB9E0A137FC1331323 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 15:56:40 +0000 Manifest this update: Sun 02 Aug 2026 15:51:40 +0000 Manifest next update: Mon 03 Aug 2026 17:45:40 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=) 2: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: zvfR6g1RjqM2q+zxgW02VolW3p0nvJjd0fXTMY5TSHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3c:68:ab:03:c4:ff:99:2a:a8:2d:db:9e:0a:13:7f:c1:33:13:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Validity Not Before: Aug 2 15:51:40 2026 GMT Not After : Aug 3 17:45:40 2026 GMT Subject: CN=8EAF1618EF366B51FD49D57F8DD78C7B21AF878E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:79:7b:04:b4:12:67:3f:40:d3:4d:fc:66: 78:80:df:93:30:7a:73:30:6b:cd:69:38:2d:e0:77: 9f:da:b7:04:80:e1:eb:07:21:75:83:f8:8d:07:56: c6:73:a9:da:e0:7c:ec:fd:0a:98:7c:e5:1e:07:4a: f8:77:00:3c:ca:a2:cd:f8:ea:29:0d:4a:ce:73:1a: 6f:67:e7:c2:a8:79:79:4c:69:a5:61:01:9e:c5:3c: 50:6d:77:80:0d:2e:45:2e:8a:78:6e:29:8a:47:98: ff:dd:e5:67:66:e2:4a:4c:ec:49:c1:0d:14:2d:00: 5d:0c:1b:06:ab:3a:4b:ee:15:6c:e4:67:cd:bc:c1: ea:76:0c:51:62:a7:9c:ca:cb:6c:59:61:b8:50:cf: 8c:cb:78:9d:da:db:0b:f9:b5:50:5f:28:0a:19:0f: f9:0f:5b:a8:5d:f9:60:bf:7c:dd:5e:c0:32:50:f7: c5:c1:94:41:da:19:4e:be:41:a8:6d:d3:13:b2:c8: 94:a1:48:ca:55:2d:9d:83:7d:ad:73:a9:91:a1:8d: a9:66:c2:de:fe:22:19:f8:e2:10:79:5b:4a:a2:38: 51:22:27:1f:84:0d:5d:80:ee:cf:3a:8d:1b:20:54: ce:00:92:f1:c9:53:70:04:cc:3f:08:69:e5:f2:29: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:16:18:EF:36:6B:51:FD:49:D5:7F:8D:D7:8C:7B:21:AF:87:8E X509v3 Authority Key Identifier: keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:68:d6:be:d9:a8:05:f8:76:93:af:59:2c:4a:11:dd:37:bc: 5c:c4:03:4a:27:9b:ef:f1:c8:e6:74:f0:84:3e:59:fb:62:40: 61:10:f5:92:c4:15:e7:02:2c:de:1f:22:a9:53:bf:aa:d4:5e: a9:99:f9:ce:38:66:c0:7e:2c:a8:a1:ad:85:db:04:ce:1b:a1: 62:4b:92:98:a2:1f:a5:9f:53:d8:38:b6:8a:86:53:33:02:87: ce:81:5d:85:35:94:fb:9a:23:d0:b6:8d:5b:bc:37:b5:53:2f: f7:63:4d:c5:3f:66:13:78:51:51:be:77:30:2e:77:54:fa:70: 3a:6c:c3:cd:7d:f3:20:cf:b4:f6:da:cb:ec:a7:a3:df:1d:7b: 7d:c6:3e:18:ff:c5:f6:26:44:74:18:d8:37:e9:41:74:fe:58: f5:4c:2a:f0:30:42:58:7f:8a:41:48:6a:81:b6:20:ca:b6:f9: 26:f4:e9:c5:18:c0:eb:93:33:25:6e:16:0c:8d:c8:c3:ee:5e: ef:bc:63:da:df:1f:a3:16:8e:66:3a:dd:e8:45:6d:52:35:ba: 07:34:c0:f2:47:2c:ef:45:7d:55:8f:2e:e2:14:47:ef:b8:52: da:f6:2b:d5:01:71:d9:8a:15:f6:1f:21:02:28:a3:66:78:a6: 28:2f:b9:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTxoqwPE/5kqqC3bngoTf8EzEyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYyODU4 RUE4RDQ5MTAeFw0yNjA4MDIxNTUxNDBaFw0yNjA4MDMxNzQ1NDBaMDMxMTAvBgNV BAMTKDhFQUYxNjE4RUYzNjZCNTFGRDQ5RDU3RjhERDc4QzdCMjFBRjg3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm93l7BLQSZz9A0038ZniA35Mw enMwa81pOC3gd5/atwSA4esHIXWD+I0HVsZzqdrgfOz9Cph85R4HSvh3ADzKos34 6ikNSs5zGm9n58KoeXlMaaVhAZ7FPFBtd4ANLkUuinhuKYpHmP/d5Wdm4kpM7EnB DRQtAF0MGwarOkvuFWzkZ828wep2DFFip5zKy2xZYbhQz4zLeJ3a2wv5tVBfKAoZ D/kPW6hd+WC/fN1ewDJQ98XBlEHaGU6+Qaht0xOyyJShSMpVLZ2Dfa1zqZGhjalm wt7+Ihn44hB5W0qiOFEiJx+EDV2A7s86jRsgVM4AkvHJU3AEzD8IaeXyKcGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjq8WGO82a1H9SdV/jdeMeyGvh44wHwYDVR0j BBgwFoAU8DbCjrefPur+aHD9+2LyhY6o1JEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZjYzFlZjYtNzY5Zi00YWFmLTlkMTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVC NzlGM0VFQUZFNjg3MEZERkI2MkYyODU4RUE4RDQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDM2QzI4RUI3OUYzRUVBRkU2ODcwRkRGQjYyRjI4NThFQThE NDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYy ODU4RUE4RDQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFo1r7ZqAX4dpOvWSxKEd03vFzEA0onm+/x yOZ08IQ+WftiQGEQ9ZLEFecCLN4fIqlTv6rUXqmZ+c44ZsB+LKihrYXbBM4boWJL kpiiH6WfU9g4toqGUzMCh86BXYU1lPuaI9C2jVu8N7VTL/djTcU/ZhN4UVG+dzAu d1T6cDpsw8198yDPtPbay+yno98de33GPhj/xfYmRHQY2DfpQXT+WPVMKvAwQlh/ ikFIaoG2IMq2+Sb06cUYwOuTMyVuFgyNyMPuXu+8Y9rfH6MWjmY63ehFbVI1ugc0 wPJHLO9FfVWPLuIUR++4Utr2K9UBcdmKFfYfIQIoo2Z4pigvuTE= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:06 2026 by rpki-client