$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft (raw, json) Hash identifier: y6tDv9reRj3zrcxpQf0zu/KfRx4/DDt8CCnMEqdaKmw= Subject key identifier: F9:54:C5:5E:F8:57:5D:06:0D:3E:19:64:1B:42:66:01:3F:88:07:57 Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Certificate serial: 24C32EFE7B36B7B360A05B7379E6D1C1CA767C44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft Manifest number: 5F Signing time: Sun 12 Jul 2026 05:01:19 +0000 Manifest this update: Sun 12 Jul 2026 04:56:19 +0000 Manifest next update: Mon 13 Jul 2026 08:29:19 +0000 Files and hashes: 1: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: +LMzTIT3HAm9qO4qM7ZOTI2OEw2Fm2hgpEAqo+PYvZw=) 2: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=) 3: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl (hash: 32i741Wn3mfn53BdFGBByv2dVplxpsNjyQBuAXKphaA=) 4: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 08:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c3:2e:fe:7b:36:b7:b3:60:a0:5b:73:79:e6:d1:c1:ca:76:7c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Validity Not Before: Jul 12 04:56:19 2026 GMT Not After : Jul 13 08:29:19 2026 GMT Subject: CN=F954C55EF8575D060D3E19641B4266013F880757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:75:09:7b:65:f5:23:20:84:ac:35:89:82: bc:01:5a:fc:29:b2:86:d4:73:55:28:ae:26:3a:17: 3b:2e:80:04:1a:79:1e:87:16:96:93:f8:df:bb:8a: 23:46:f3:8d:d2:4d:65:af:33:42:1c:14:db:3a:52: bc:ca:30:b3:93:dc:ff:8c:99:9f:85:92:de:eb:21: ef:fa:d1:26:99:9f:bc:33:7f:49:f9:cb:2c:38:dc: c6:5f:99:75:0b:b0:f2:80:bc:66:cd:30:d3:98:dc: af:6d:bc:c7:db:ff:d0:2a:15:fc:4a:3a:bf:42:9e: 1c:54:b3:fc:3c:2e:38:31:21:54:66:b5:96:cc:98: 94:a4:fb:ac:37:3c:f4:e5:0d:3b:5c:91:63:c2:a7: 07:2a:8c:71:0d:a3:ea:91:24:ef:d5:cd:85:ac:75: 0a:7f:52:58:1e:4d:08:7f:08:1b:93:50:9b:fb:7c: 2c:25:87:41:01:42:0b:23:59:45:16:a8:25:68:68: 4b:ed:10:3a:10:f8:7c:44:12:1c:60:4b:5e:70:94: 3c:54:19:4e:a9:3c:ad:74:b1:e4:78:90:b9:97:cb: 47:c4:bc:40:f7:b2:ff:4e:8e:2d:cc:c2:bd:62:d6: 64:2d:1e:2c:39:e8:26:5f:76:3d:ca:16:a3:d3:22: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:C5:5E:F8:57:5D:06:0D:3E:19:64:1B:42:66:01:3F:88:07:57 X509v3 Authority Key Identifier: keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:49:5a:35:46:69:76:4a:d2:33:57:c9:d0:03:0c:29:2b: bf:92:27:8a:c0:89:3e:56:c7:6e:63:46:ca:88:aa:36:77:20: 55:62:7c:81:96:b3:04:fd:a8:1d:79:00:3f:a3:8d:dd:28:41: cd:e0:e4:00:96:d2:fe:92:fc:07:f2:5e:91:9b:80:0f:0d:c2: 5d:73:28:24:a3:07:89:70:cc:91:43:a6:84:34:7f:a2:af:dd: 44:40:be:6d:b5:81:f6:f3:dc:54:73:5c:15:6d:63:69:f2:75: 88:2f:53:6a:3d:60:03:3d:8b:e4:fa:09:46:fb:3e:24:74:1c: 44:93:47:3b:09:e1:3f:97:16:67:5b:a5:a2:b5:9c:e1:29:9d: 34:ab:b4:cd:bf:c0:0a:26:ca:e2:eb:4c:a0:18:be:3e:24:56: b8:75:23:58:f0:4e:d0:3b:27:ce:21:5e:d1:51:e6:e9:8a:8b: 66:a6:ad:13:1e:98:4a:89:ef:97:d7:9a:b4:f2:00:aa:99:98: 62:71:e7:4d:df:57:85:9e:31:61:2c:47:63:7b:62:fb:72:51: 60:40:f3:05:c1:5e:d4:95:83:83:7d:93:64:2d:8b:33:18:8f: 73:74:cf:db:21:bf:a3:af:82:2d:f1:15:ef:cf:fe:ed:10:68: 47:19:d1:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMMu/ns2t7NgoFtzeebRwcp2fEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNC RkE5RUYwMzAeFw0yNjA3MTIwNDU2MTlaFw0yNjA3MTMwODI5MTlaMDMxMTAvBgNV BAMTKEY5NTRDNTVFRjg1NzVEMDYwRDNFMTk2NDFCNDI2NjAxM0Y4ODA3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsXUJe2X1IyCErDWJgrwBWvwp sobUc1UoriY6FzsugAQaeR6HFpaT+N+7iiNG843STWWvM0IcFNs6UrzKMLOT3P+M mZ+Fkt7rIe/60SaZn7wzf0n5yyw43MZfmXULsPKAvGbNMNOY3K9tvMfb/9AqFfxK Or9CnhxUs/w8LjgxIVRmtZbMmJSk+6w3PPTlDTtckWPCpwcqjHENo+qRJO/VzYWs dQp/UlgeTQh/CBuTUJv7fCwlh0EBQgsjWUUWqCVoaEvtEDoQ+HxEEhxgS15wlDxU GU6pPK10seR4kLmXy0fEvED3sv9Oji3Mwr1i1mQtHiw56CZfdj3KFqPTIv5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+VTFXvhXXQYNPhlkG0JmAT+IB1cwHwYDVR0j BBgwFoAU9199jfpg/It3+Ki1m0T1vL+p7wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzNjc0YTYtMTE0Zi00YmI1LTg1YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERG QTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNCRkE5RUYwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzVGN0Q4REZBNjBGQzhCNzdGOEE4QjU5QjQ0RjVCQ0JGQTlF RjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1 QkNCRkE5RUYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe0SVo1Rml2StIzV8nQAwwpK7+SJ4rAiT5W x25jRsqIqjZ3IFVifIGWswT9qB15AD+jjd0oQc3g5ACW0v6S/AfyXpGbgA8Nwl1z KCSjB4lwzJFDpoQ0f6Kv3URAvm21gfbz3FRzXBVtY2nydYgvU2o9YAM9i+T6CUb7 PiR0HESTRzsJ4T+XFmdbpaK1nOEpnTSrtM2/wAomyuLrTKAYvj4kVrh1I1jwTtA7 J84hXtFR5umKi2amrRMemEqJ75fXmrTyAKqZmGJx503fV4WeMWEsR2N7YvtyUWBA 8wXBXtSVg4N9k2QtizMYj3N0z9shv6Ovgi3xFe/P/u0QaEcZ0VU= -----END CERTIFICATE-----Generated at Sun Jul 12 20:24:12 2026 by rpki-client