$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: +co88Xp5ZUkyb1kVpZ6eVe0dR1oQPxburiJU3Ltj0EU= Subject key identifier: 22:58:4A:02:62:E7:49:AF:5D:D6:3D:07:96:B4:CF:88:FA:54:04:5E Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 663A71FD2C4938D989D2153447C12AFAA20ECBAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 03:57:46 +0000 Manifest this update: Mon 27 Jul 2026 03:52:46 +0000 Manifest next update: Tue 28 Jul 2026 04:59:46 +0000 Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 2: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: P1Nur8nSLpZKOivpD9iqx2BptnVApImgrIRAaResAp4=) 3: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3a:71:fd:2c:49:38:d9:89:d2:15:34:47:c1:2a:fa:a2:0e:cb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Jul 27 03:52:46 2026 GMT Not After : Jul 28 04:59:46 2026 GMT Subject: CN=22584A0262E749AF5DD63D0796B4CF88FA54045E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:44:c8:8c:91:45:c5:62:e4:93:89:52:63: e0:fe:64:5f:28:dc:64:19:87:27:07:ea:1f:70:ba: a3:61:af:b6:ab:27:56:4d:cb:d0:6c:30:4c:53:e4: 54:fc:d3:42:0b:8e:18:d2:0d:80:dc:c0:64:0d:c2: b1:57:62:63:f8:40:a5:c8:12:62:c4:f4:7e:a2:13: e0:64:6d:48:e3:b5:88:15:b8:be:60:b2:64:bf:3b: 16:37:ef:33:1b:55:74:15:e1:b7:32:52:e3:4b:78: a4:ef:dd:66:51:3d:4b:9f:02:2d:8f:2b:f8:61:30: c3:bf:3b:f6:6e:7d:54:38:79:b8:ba:ce:27:ea:b9: a1:be:01:fd:98:4e:51:f8:23:20:55:57:95:6d:09: 83:9f:81:50:dc:f4:37:4b:0c:18:1a:17:78:96:c1: b9:70:a4:fd:9e:c3:bb:67:df:f8:c7:75:e7:5a:13: 88:97:29:41:62:28:dd:fa:74:71:73:c2:86:98:52: 37:e1:9b:59:9c:0b:fc:7d:d6:77:ad:b8:2b:70:a7: c6:88:80:a7:49:01:dc:a8:c8:45:73:c6:af:a5:ae: bf:61:25:2f:43:2d:1e:c8:de:76:1c:07:fd:51:02: 1a:0c:6a:fa:be:d5:ed:0c:bc:e0:da:e4:09:49:16: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:4A:02:62:E7:49:AF:5D:D6:3D:07:96:B4:CF:88:FA:54:04:5E X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:db:65:bc:a7:d5:46:35:10:14:8a:42:92:d7:1c:61:c6: f3:5e:92:5a:98:44:a6:27:2e:5f:dc:1d:27:60:cf:a0:a8:f4: 87:bd:ee:8a:2e:08:7a:4a:4a:ee:74:1c:8e:fb:d7:f7:2c:b8: 79:36:e4:42:f7:e0:1e:da:01:cd:10:b7:3c:b6:cc:40:81:20: 77:13:da:9d:a6:08:9b:3e:67:3b:7a:7c:44:44:cc:b0:85:ab: 0b:8a:9e:e2:cd:cf:78:8c:c6:fe:4c:9c:8a:bd:47:4f:88:21: 69:b7:3b:64:b5:b2:3b:c5:f1:5a:53:48:1f:03:f1:bb:7a:ff: 7e:3b:e7:90:2a:df:bf:d9:56:48:22:9b:6a:f7:c8:3e:e4:fa: e5:94:2d:f7:04:da:69:39:ae:99:bb:c9:bd:bc:20:50:43:ba: 47:98:12:d2:3e:de:ba:1b:b9:48:40:4a:c1:67:27:37:41:10: 86:9e:ba:44:48:61:66:c3:84:75:75:0f:fa:dd:6a:62:d4:37: 0d:64:3a:a7:26:28:49:a1:6e:23:ec:c9:74:23:5c:bc:fc:ba: e8:0f:94:20:1b:f0:fb:3b:bc:df:c1:f7:80:d8:50:7e:d4:8b: 7d:c1:d5:20:72:a9:7f:a1:57:84:5c:bc:2b:7f:6d:84:38:0d: ab:0c:da:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjpx/SxJONmJ0hU0R8Eq+qIOy6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA3MjcwMzUyNDZaFw0yNjA3MjgwNDU5NDZaMDMxMTAvBgNV BAMTKDIyNTg0QTAyNjJFNzQ5QUY1REQ2M0QwNzk2QjRDRjg4RkE1NDA0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSU0TIjJFFxWLkk4lSY+D+ZF8o 3GQZhycH6h9wuqNhr7arJ1ZNy9BsMExT5FT800ILjhjSDYDcwGQNwrFXYmP4QKXI EmLE9H6iE+BkbUjjtYgVuL5gsmS/OxY37zMbVXQV4bcyUuNLeKTv3WZRPUufAi2P K/hhMMO/O/ZufVQ4ebi6zifquaG+Af2YTlH4IyBVV5VtCYOfgVDc9DdLDBgaF3iW wblwpP2ew7tn3/jHdedaE4iXKUFiKN36dHFzwoaYUjfhm1mcC/x91netuCtwp8aI gKdJAdyoyEVzxq+lrr9hJS9DLR7I3nYcB/1RAhoMavq+1e0MvODa5AlJFqrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlhKAmLnSa9d1j0HlrTPiPpUBF4wHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz822W8p9VGNRAUikKS1xxhxvNeklqYRKYn Ll/cHSdgz6Co9Ie97oouCHpKSu50HI771/csuHk25EL34B7aAc0Qtzy2zECBIHcT 2p2mCJs+Zzt6fEREzLCFqwuKnuLNz3iMxv5MnIq9R0+IIWm3O2S1sjvF8VpTSB8D 8bt6/34755Aq37/ZVkgim2r3yD7k+uWULfcE2mk5rpm7yb28IFBDukeYEtI+3rob uUhASsFnJzdBEIaeukRIYWbDhHV1D/rdamLUNw1kOqcmKEmhbiPsyXQjXLz8uugP lCAb8Ps7vN/B94DYUH7Ui33B1SByqX+hV4RcvCt/bYQ4DasM2nI= -----END CERTIFICATE-----Generated at Mon Jul 27 11:01:14 2026 by rpki-client