$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: 7nDQzJae9sHmdUSf6TBc+QJYKDppC4jXl7dLYQJbQO4= Subject key identifier: 1B:0F:98:CE:F1:39:26:FD:D3:62:30:03:C6:6B:D4:B0:C9:C2:55:59 Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 4BAEB2F43749BA39D292217358204551A3FD167C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 18:09:22 +0000 Manifest this update: Sun 02 Aug 2026 18:04:22 +0000 Manifest next update: Mon 03 Aug 2026 19:09:22 +0000 Files and hashes: 1: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: 7C0SPkD/RxkqUMWkIwrYNM7HSBo1ApnhR67iHWx8dbw=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ae:b2:f4:37:49:ba:39:d2:92:21:73:58:20:45:51:a3:fd:16:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Aug 2 18:04:22 2026 GMT Not After : Aug 3 19:09:22 2026 GMT Subject: CN=1B0F98CEF13926FDD3623003C66BD4B0C9C25559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:bc:15:98:61:fa:d9:cd:d3:9b:ef:33:a9: 5a:7b:11:b7:a0:72:30:77:af:39:48:a8:fc:3c:cf: 10:75:7b:bb:cf:9e:78:c9:ea:4a:df:74:73:d9:bd: 00:58:4b:4a:97:53:d1:cb:d1:80:c1:68:e0:8a:da: 04:ce:ce:8d:c4:69:01:9f:41:5b:94:c2:6f:1a:2f: d5:ff:28:4f:04:d0:30:84:c4:90:66:3c:b5:6d:a3: a7:46:33:9c:90:03:9a:42:1d:3b:6d:79:82:92:d9: b1:99:a2:19:6f:ea:e3:e5:0f:68:a3:5f:42:d9:22: 5f:b9:b9:a7:05:81:f8:f5:0b:4a:4c:39:34:3e:5e: b0:d1:49:a3:ba:62:36:e5:19:e1:3a:d7:f5:05:1e: a0:78:00:96:01:52:36:60:0b:b5:cb:23:bc:d7:a4: cf:8e:25:1a:ab:13:ba:8b:b1:2a:2d:d6:f8:ab:2c: c8:0c:bd:c2:4e:d5:4e:2a:e9:87:b2:93:f3:ee:34: d6:f0:7e:ee:10:71:b8:1b:fc:ef:f5:4d:15:cd:9e: 22:f5:e1:d6:f4:f4:89:72:5a:47:f4:a8:d7:a7:10: 78:5c:67:c9:1f:c3:94:ac:ed:49:3e:ea:7c:a7:4b: 51:97:cd:bf:31:7a:fc:2d:38:21:bb:6b:a1:68:da: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0F:98:CE:F1:39:26:FD:D3:62:30:03:C6:6B:D4:B0:C9:C2:55:59 X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c9:c6:32:88:99:73:31:69:be:ac:5f:e1:c9:10:33:76:d2: 0c:97:c1:ed:77:9f:1e:67:77:62:e1:31:cc:63:07:3a:15:f8: 38:96:7b:32:b7:8b:7b:23:07:cc:95:ba:34:56:8b:88:0a:92: 3a:85:a1:81:ac:85:a1:70:43:07:68:6c:d4:c8:90:2f:ad:94: 54:45:54:fd:4b:22:97:2d:b5:1c:d5:a3:23:a7:26:d7:90:20: a2:43:b8:9e:4d:a5:f9:b6:d2:ad:08:92:bd:5c:93:99:56:7b: ce:8e:8a:3c:fd:95:87:60:7b:d8:d1:55:c7:1b:69:47:c5:32: 66:32:13:9d:cd:e5:4f:b8:66:09:7d:69:ca:7f:ae:7a:83:e2: ba:4b:2d:0f:eb:bb:ca:e2:c3:b0:78:81:6b:14:f9:b1:42:d0: 5c:d5:03:22:d1:f5:98:c3:d7:79:50:7f:87:2d:94:93:7b:cf: 01:87:4e:6e:f6:d8:8b:fe:43:82:3f:69:58:8c:fd:d3:5a:f9: 69:4f:c0:29:f9:2f:58:aa:35:77:5f:4c:5b:25:31:b9:54:8d: d5:a2:e5:38:81:50:d2:5b:93:cf:0a:ee:af:a4:c7:9e:2b:99: f2:bf:ae:be:a5:a7:c3:65:00:af:a9:7d:7a:95:21:6e:14:f0: e5:82:f7:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS66y9DdJujnSkiFzWCBFUaP9FnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjA4MDIxODA0MjJaFw0yNjA4MDMxOTA5MjJaMDMxMTAvBgNV BAMTKDFCMEY5OENFRjEzOTI2RkREMzYyMzAwM0M2NkJENEIwQzlDMjU1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp7wVmGH62c3Tm+8zqVp7Ebeg cjB3rzlIqPw8zxB1e7vPnnjJ6krfdHPZvQBYS0qXU9HL0YDBaOCK2gTOzo3EaQGf QVuUwm8aL9X/KE8E0DCExJBmPLVto6dGM5yQA5pCHTtteYKS2bGZohlv6uPlD2ij X0LZIl+5uacFgfj1C0pMOTQ+XrDRSaO6YjblGeE61/UFHqB4AJYBUjZgC7XLI7zX pM+OJRqrE7qLsSot1virLMgMvcJO1U4q6Yeyk/PuNNbwfu4Qcbgb/O/1TRXNniL1 4db09IlyWkf0qNenEHhcZ8kfw5Ss7Uk+6nynS1GXzb8xevwtOCG7a6Fo2neRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGw+YzvE5Jv3TYjADxmvUsMnCVVkwHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXJxjKImXMxab6sX+HJEDN20gyXwe13nx5n d2LhMcxjBzoV+DiWezK3i3sjB8yVujRWi4gKkjqFoYGshaFwQwdobNTIkC+tlFRF VP1LIpcttRzVoyOnJteQIKJDuJ5Npfm20q0Ikr1ck5lWe86Oijz9lYdge9jRVccb aUfFMmYyE53N5U+4Zgl9acp/rnqD4rpLLQ/ru8riw7B4gWsU+bFC0FzVAyLR9ZjD 13lQf4ctlJN7zwGHTm722Iv+Q4I/aViM/dNa+WlPwCn5L1iqNXdfTFslMblUjdWi 5TiBUNJbk88K7q+kx54rmfK/rr6lp8NlAK+pfXqVIW4U8OWC96Q= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client