$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: E0ZdXM6E2YCt/bOupuY6DEjX51wt2S0RZQchJGUrVqc= Subject key identifier: 0E:DB:6E:73:8A:8E:9C:E6:B7:85:E5:A2:71:58:7E:50:E4:95:28:5D Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 74571C249502E28271DCD49426E69581A30F1ED0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 07:26:41 +0000 Manifest this update: Sun 02 Aug 2026 07:21:41 +0000 Manifest next update: Mon 03 Aug 2026 08:29:41 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 2: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: niFhVFuEfOwE4Am+H+HAc9YBIGg333pQLvua0rJt1h4=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:57:1c:24:95:02:e2:82:71:dc:d4:94:26:e6:95:81:a3:0f:1e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Aug 2 07:21:41 2026 GMT Not After : Aug 3 08:29:41 2026 GMT Subject: CN=0EDB6E738A8E9CE6B785E5A271587E50E495285D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:c0:2d:73:6b:fb:9d:38:ab:5c:db:02:e5: 83:e7:0b:4e:cd:d3:a1:47:92:1a:36:08:ca:d6:f0: ec:0a:cb:3f:b3:0d:d2:ca:2f:8a:38:22:77:b9:ae: f5:f2:a1:eb:72:31:c9:a2:26:a2:83:c7:75:91:ca: 53:94:f9:0f:21:38:f8:aa:c2:08:f6:03:8d:f8:26: 77:c9:7f:16:81:e2:6b:e0:31:71:e6:e2:68:fa:62: 37:c0:c0:30:58:93:a2:62:15:7b:4e:af:4e:ff:2e: 9f:e1:04:b0:33:87:6e:82:57:f1:41:48:00:8c:e3: 59:4f:0e:44:9b:5a:df:ff:c5:96:e8:06:b4:aa:62: 36:db:96:6b:d8:1e:3c:3a:6b:2f:80:d5:cf:4a:c4: 2a:f1:60:af:64:57:a6:f3:2e:1d:63:2c:ab:c7:f0: c0:08:4c:f6:06:3e:ac:99:0b:14:78:61:62:78:bc: 72:15:49:cb:83:3c:0b:71:c6:0e:ad:6b:a6:f0:9c: cd:6f:6a:47:77:ed:9c:f0:c5:35:87:97:b1:4f:34: 8c:57:56:60:a0:8f:89:16:53:cb:bc:c0:3d:59:1e: 82:68:e1:ca:be:a0:18:a6:64:c6:e4:d1:a2:3e:42: c6:d9:cf:b9:0d:47:90:0e:f1:6a:e6:23:28:ef:b8: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DB:6E:73:8A:8E:9C:E6:B7:85:E5:A2:71:58:7E:50:E4:95:28:5D X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:7a:c6:ac:21:2e:6e:9e:6f:f1:d4:87:0b:43:66:77:01: 2e:ba:48:c5:24:3f:7a:57:9b:71:35:c2:11:3d:93:d1:25:9c: 39:99:41:34:6e:f9:94:81:35:46:51:9a:84:26:7d:8c:e8:fb: 37:a5:d9:ad:9d:37:6c:4f:08:dc:b1:08:bf:bd:13:e3:b3:42: 94:15:70:cf:65:d8:7d:86:24:27:cc:a6:c2:60:21:e5:ec:9f: fb:c8:6f:17:14:b6:cc:35:81:59:2c:b8:b8:69:ad:bb:6a:2b: 0b:88:72:bb:e2:24:e4:b6:15:aa:6e:9a:f7:33:b7:96:26:c0: c9:e7:e2:35:d0:bd:6d:b3:a8:fe:64:09:10:c8:2b:68:d1:ba: 4a:f1:bc:1e:c2:f3:d5:57:f8:c7:5b:e4:55:d3:a4:bb:79:f9: 09:e9:38:78:5f:d5:75:9d:4f:36:63:a4:8f:74:a6:8d:e3:81: b7:8e:4d:4e:1d:ea:4e:73:10:d0:03:4f:3d:c1:77:c8:cf:52: 9c:c9:28:a0:73:51:41:69:7e:d7:66:66:e7:7c:58:30:2d:fb: 8c:02:97:6a:ac:b6:a8:ce:0a:bc:45:7a:5a:fc:f7:98:e7:29: 67:27:22:47:b3:63:17:73:1a:65:87:6b:08:42:a9:fd:39:ea: a7:b9:38:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFccJJUC4oJx3NSUJuaVgaMPHtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA4MDIwNzIxNDFaFw0yNjA4MDMwODI5NDFaMDMxMTAvBgNV BAMTKDBFREI2RTczOEE4RTlDRTZCNzg1RTVBMjcxNTg3RTUwRTQ5NTI4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8a8Atc2v7nTirXNsC5YPnC07N 06FHkho2CMrW8OwKyz+zDdLKL4o4Ine5rvXyoetyMcmiJqKDx3WRylOU+Q8hOPiq wgj2A434JnfJfxaB4mvgMXHm4mj6YjfAwDBYk6JiFXtOr07/Lp/hBLAzh26CV/FB SACM41lPDkSbWt//xZboBrSqYjbblmvYHjw6ay+A1c9KxCrxYK9kV6bzLh1jLKvH 8MAITPYGPqyZCxR4YWJ4vHIVScuDPAtxxg6ta6bwnM1vakd37ZzwxTWHl7FPNIxX VmCgj4kWU8u8wD1ZHoJo4cq+oBimZMbk0aI+QsbZz7kNR5AO8WrmIyjvuPJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDttuc4qOnOa3heWicVh+UOSVKF0wHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGEesasIS5unm/x1IcLQ2Z3AS66SMUkP3pX m3E1whE9k9ElnDmZQTRu+ZSBNUZRmoQmfYzo+zel2a2dN2xPCNyxCL+9E+OzQpQV cM9l2H2GJCfMpsJgIeXsn/vIbxcUtsw1gVksuLhprbtqKwuIcrviJOS2Fapumvcz t5YmwMnn4jXQvW2zqP5kCRDIK2jRukrxvB7C89VX+Mdb5FXTpLt5+QnpOHhf1XWd TzZjpI90po3jgbeOTU4d6k5zENADTz3Bd8jPUpzJKKBzUUFpftdmZud8WDAt+4wC l2qstqjOCrxFelr895jnKWcnIkezYxdzGmWHawhCqf056qe5OEk= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:37 2026 by rpki-client