$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: LZ08pA90N2NrhdkBh5l7FsdPtjMxJ2d9oJ4HxEVZxSg= Subject key identifier: 0B:89:8C:75:CC:93:81:41:4B:34:68:2A:A7:02:96:0B:9C:B0:2C:7B Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 566654DE0E08D0213BD80303C20E431DC5C5EFAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 03:16:30 +0000 Manifest this update: Sun 02 Aug 2026 03:11:30 +0000 Manifest next update: Mon 03 Aug 2026 06:25:30 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) 2: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: sYuu+oa4nTNFoFaq7BS8Lvf3E0LLYa5Zio+J1CdZUjI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:66:54:de:0e:08:d0:21:3b:d8:03:03:c2:0e:43:1d:c5:c5:ef:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Aug 2 03:11:30 2026 GMT Not After : Aug 3 06:25:30 2026 GMT Subject: CN=0B898C75CC9381414B34682AA702960B9CB02C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:f9:6c:af:ef:72:a3:5d:49:6e:2d:a5:3b: b7:4a:c0:a1:12:ad:57:53:06:65:fc:75:a9:98:9f: f3:59:8e:d7:02:31:c2:5f:2e:d9:6e:5a:cb:b4:07: a8:10:1a:b0:da:c2:f8:37:7f:bc:a1:dc:1e:c9:1b: 5a:81:a7:ca:a9:52:43:93:29:fa:b5:bf:61:78:4d: f5:61:fb:40:d1:76:23:39:d3:9e:70:c7:bd:cc:78: 4a:08:e9:a8:8f:ab:8f:5e:9a:47:79:f1:9c:62:3a: 9a:0c:64:59:c4:b8:60:4d:42:48:2e:bd:aa:13:ae: 59:df:d2:1c:00:0c:a3:74:1c:13:a9:c3:53:07:c2: c6:06:68:3e:af:72:e6:2a:fd:8b:39:07:85:13:6a: 85:07:f8:dc:2b:c8:72:68:80:23:85:f9:80:b1:b2: d2:72:e3:72:f7:50:67:65:5a:a2:ea:c0:0f:57:ca: 99:d0:c5:11:1e:65:02:28:df:00:7c:71:d0:7a:28: 72:e5:47:85:40:85:ef:47:c7:9e:9a:5f:1f:60:df: 1a:06:69:9c:0f:ae:5c:57:b5:a7:80:d0:e6:2c:e9: 36:81:d1:29:f5:1e:26:3e:05:97:8c:db:7f:b1:31: 8c:95:4e:3a:88:33:72:d1:fc:ee:a1:9e:81:6c:ce: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:8C:75:CC:93:81:41:4B:34:68:2A:A7:02:96:0B:9C:B0:2C:7B X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:fb:c9:e9:30:13:8c:de:fa:a8:7b:57:87:8e:ea:ab:6e: 6d:d0:1f:bf:9d:02:f8:10:b8:64:23:84:a3:3e:cb:d9:db:64: 65:30:c5:57:4e:39:9c:41:17:9e:80:15:c3:9b:19:95:e4:17: 40:25:4b:cc:31:9a:5b:01:e1:34:43:de:45:cc:17:7d:4b:35: 83:6a:0b:6a:8b:b8:7b:38:33:36:07:e8:a9:67:07:ee:fa:2c: 6c:fa:a0:a4:94:a5:4b:36:45:fc:d9:bc:8c:84:51:63:4d:dd: c0:27:0a:4f:9e:5e:9a:79:5b:c5:60:3b:c4:55:60:59:9a:bc: 9f:b3:c1:5d:9c:cc:18:e5:0b:8b:5f:bb:68:6f:02:01:c1:db: 10:33:d6:aa:3a:2f:00:16:6c:2b:22:79:30:16:bb:9d:8b:55: ad:6c:16:1d:90:6a:0f:67:6c:92:fa:8a:8b:6d:64:b7:28:73: 8d:ea:e3:c8:e3:43:81:c9:89:6e:07:f2:85:d0:e2:09:b7:4d: de:c1:dc:d9:13:02:c0:d6:61:87:b9:27:02:74:d4:e3:7c:f4: a5:36:78:5c:fc:92:d4:ee:d9:0c:db:fd:ef:ee:a0:52:d3:51: e1:ae:0f:d1:92:16:6c:88:f4:0a:6b:60:42:91:74:79:f0:ac: b1:bb:30:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmZU3g4I0CE72AMDwg5DHcXF76owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA4MDIwMzExMzBaFw0yNjA4MDMwNjI1MzBaMDMxMTAvBgNV BAMTKDBCODk4Qzc1Q0M5MzgxNDE0QjM0NjgyQUE3MDI5NjBCOUNCMDJDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVUvlsr+9yo11Jbi2lO7dKwKES rVdTBmX8damYn/NZjtcCMcJfLtluWsu0B6gQGrDawvg3f7yh3B7JG1qBp8qpUkOT Kfq1v2F4TfVh+0DRdiM5055wx73MeEoI6aiPq49emkd58ZxiOpoMZFnEuGBNQkgu vaoTrlnf0hwADKN0HBOpw1MHwsYGaD6vcuYq/Ys5B4UTaoUH+NwryHJogCOF+YCx stJy43L3UGdlWqLqwA9XypnQxREeZQIo3wB8cdB6KHLlR4VAhe9Hx56aXx9g3xoG aZwPrlxXtaeA0OYs6TaB0Sn1HiY+BZeM23+xMYyVTjqIM3LR/O6hnoFszkbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4mMdcyTgUFLNGgqpwKWC5ywLHswHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcj+8npMBOM3vqoe1eHjuqrbm3QH7+dAvgQ uGQjhKM+y9nbZGUwxVdOOZxBF56AFcObGZXkF0AlS8wxmlsB4TRD3kXMF31LNYNq C2qLuHs4MzYH6KlnB+76LGz6oKSUpUs2RfzZvIyEUWNN3cAnCk+eXpp5W8VgO8RV YFmavJ+zwV2czBjlC4tfu2hvAgHB2xAz1qo6LwAWbCsieTAWu52LVa1sFh2Qag9n bJL6iottZLcoc43q48jjQ4HJiW4H8oXQ4gm3Td7B3NkTAsDWYYe5JwJ01ON89KU2 eFz8ktTu2Qzb/e/uoFLTUeGuD9GSFmyI9AprYEKRdHnwrLG7MEY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:42 2026 by rpki-client