$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: Dt80Q8SOVYz1jn8rkzfNVSVZcyfUheGM7Yc2HbbDA3w= Subject key identifier: 84:2B:A8:77:FA:03:C9:34:50:3A:6B:1E:7E:00:C4:A7:19:0A:61:01 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 1CEA4E613A65FFA7D7E876EAE6E1E766BE5D1503 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 17:38:42 +0000 Manifest this update: Sun 02 Aug 2026 17:33:42 +0000 Manifest next update: Mon 03 Aug 2026 18:46:42 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 3: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: hwxje1u+BDzqb22OzF+tDn6/xdYq+nzQeyawl1GQ6DE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ea:4e:61:3a:65:ff:a7:d7:e8:76:ea:e6:e1:e7:66:be:5d:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Aug 2 17:33:42 2026 GMT Not After : Aug 3 18:46:42 2026 GMT Subject: CN=842BA877FA03C934503A6B1E7E00C4A7190A6101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:e5:cf:6a:84:5d:91:ac:8c:14:c9:7d:0b: 4b:fc:27:ba:73:df:5f:30:a1:12:82:53:61:6b:5e: 7b:c9:ec:54:06:e1:20:0d:86:d1:b1:83:ef:6d:7a: 79:00:55:5c:c6:50:1d:5b:bf:5d:b5:26:34:6d:6c: 80:07:a3:b5:e4:95:c1:d1:31:b0:41:bd:0c:17:d6: d9:09:72:42:ab:4b:d4:7c:ba:33:ee:54:31:9d:bf: 73:e3:51:61:7e:d3:a0:1e:1f:cb:7e:d8:9a:4c:0e: d9:98:62:15:f0:2b:eb:43:65:14:45:7e:36:9f:90: 45:9e:63:27:59:2e:fa:14:e5:34:66:98:a2:c9:5f: 56:9e:31:ab:da:1a:27:60:18:35:3d:7e:73:a7:ea: 02:72:0f:23:65:27:24:b1:ac:89:71:82:1d:99:fe: 4f:8f:3b:33:68:89:65:1b:f8:91:c3:83:27:84:1b: 4f:ee:ab:7d:23:57:17:34:13:40:07:b1:2a:5c:41: 24:15:27:cc:39:47:43:50:84:cc:30:27:57:18:3a: ed:9b:50:6d:08:25:9f:66:ca:88:0d:5a:be:6b:6f: f6:5f:40:4a:98:d9:e7:cb:d4:95:d6:61:1b:3e:cd: 6f:eb:3f:fd:65:3e:04:c0:bc:a6:76:3a:7e:13:25: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:A8:77:FA:03:C9:34:50:3A:6B:1E:7E:00:C4:A7:19:0A:61:01 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:80:9f:4a:21:50:c4:c9:90:48:0e:b8:aa:f0:bc:c2:f9:8d: 73:9d:b1:c0:81:66:0e:37:4d:4b:94:7f:83:c9:40:69:fa:41: fe:8e:64:3d:f6:27:b3:3c:9b:89:92:d0:89:ce:50:af:33:5e: 37:2a:b4:84:e1:4d:0d:e3:70:41:b0:8b:a0:64:a9:5f:e4:7c: a0:82:cc:ee:b8:70:01:f7:7d:95:ca:1f:9c:6f:4d:f4:16:f3: ba:9c:89:77:6b:fe:d5:f9:5f:a0:50:65:10:8e:02:3a:0e:55: b2:e6:6c:aa:a4:bd:2b:0d:df:15:23:c6:70:ea:54:60:4a:3a: f5:c8:1a:04:f2:c6:f1:60:0a:87:b4:bb:a5:4b:bd:55:d5:6c: fe:fd:3f:3f:5d:63:0c:62:cc:0b:f0:97:72:4d:6b:7f:4b:b1: 2d:24:78:a4:77:e3:7b:4b:f0:dd:0f:a0:cd:1c:10:f0:a3:67: c0:7c:48:6e:75:5d:d4:15:bd:f9:ef:99:8d:d1:3a:e7:f9:4d: 93:80:2d:9d:a6:f5:0c:b9:00:ae:d2:8e:bc:98:60:b2:4d:f8: 81:5a:a5:10:23:c0:3f:75:d3:c5:33:a9:53:de:8f:e2:e4:91: a4:a0:70:9e:d4:9e:d5:d6:c4:5f:62:62:5a:bd:2c:b7:57:df: 55:d1:ca:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOpOYTpl/6fX6Hbq5uHnZr5dFQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA4MDIxNzMzNDJaFw0yNjA4MDMxODQ2NDJaMDMxMTAvBgNV BAMTKDg0MkJBODc3RkEwM0M5MzQ1MDNBNkIxRTdFMDBDNEE3MTkwQTYxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVuXPaoRdkayMFMl9C0v8J7pz 318woRKCU2FrXnvJ7FQG4SANhtGxg+9tenkAVVzGUB1bv121JjRtbIAHo7XklcHR MbBBvQwX1tkJckKrS9R8ujPuVDGdv3PjUWF+06AeH8t+2JpMDtmYYhXwK+tDZRRF fjafkEWeYydZLvoU5TRmmKLJX1aeMavaGidgGDU9fnOn6gJyDyNlJySxrIlxgh2Z /k+POzNoiWUb+JHDgyeEG0/uq30jVxc0E0AHsSpcQSQVJ8w5R0NQhMwwJ1cYOu2b UG0IJZ9myogNWr5rb/ZfQEqY2efL1JXWYRs+zW/rP/1lPgTAvKZ2On4TJfbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCuod/oDyTRQOmsefgDEpxkKYQEwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOAn0ohUMTJkEgOuKrwvML5jXOdscCBZg43 TUuUf4PJQGn6Qf6OZD32J7M8m4mS0InOUK8zXjcqtIThTQ3jcEGwi6BkqV/kfKCC zO64cAH3fZXKH5xvTfQW87qciXdr/tX5X6BQZRCOAjoOVbLmbKqkvSsN3xUjxnDq VGBKOvXIGgTyxvFgCoe0u6VLvVXVbP79Pz9dYwxizAvwl3JNa39LsS0keKR343tL 8N0PoM0cEPCjZ8B8SG51XdQVvfnvmY3ROuf5TZOALZ2m9Qy5AK7SjryYYLJN+IFa pRAjwD9108UzqVPej+LkkaSgcJ7UntXWxF9iYlq9LLdX31XRyrk= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:37 2026 by rpki-client