$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: YsJh/CSAtJ2WHBkvvpX2/X3mxB83g2n/ABzQRPBTXuU= Subject key identifier: C3:1E:36:38:49:AA:24:A4:8D:BC:22:DC:24:8C:57:F0:2E:36:F5:78 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 69A34E0DABAD471B48F641204DBB4B7BC1C51FF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 07:21:38 +0000 Manifest this update: Sun 02 Aug 2026 07:16:38 +0000 Manifest next update: Mon 03 Aug 2026 09:10:38 +0000 Files and hashes: 1: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: 3qUqXNfLr79AegIQL8kySH5Um9aJJZ3PkvayQLNy+rQ=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 3: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a3:4e:0d:ab:ad:47:1b:48:f6:41:20:4d:bb:4b:7b:c1:c5:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Aug 2 07:16:38 2026 GMT Not After : Aug 3 09:10:38 2026 GMT Subject: CN=C31E363849AA24A48DBC22DC248C57F02E36F578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:5b:bf:5a:71:4d:1b:9a:77:06:9a:8a:c5: 85:e9:7b:ef:82:ec:ee:8b:17:1a:bd:d9:14:10:b3: 5f:4c:4a:a9:37:03:1f:63:7f:45:67:c5:47:eb:68: 6e:f6:7d:d6:6d:f4:bc:8f:d4:6c:09:6d:e6:21:6d: 05:db:08:4d:46:f1:be:0b:3c:d5:ca:3e:3d:72:61: 57:25:4e:a6:bd:fd:5c:5f:cb:76:a6:88:da:2e:74: 90:92:ed:9f:d1:5e:34:6f:05:cb:89:d7:64:93:af: fd:0a:0e:29:95:2b:e7:35:3f:c1:ab:cf:de:e0:3f: 7a:50:39:23:aa:dd:a4:e3:ee:da:bc:a8:dd:e5:ad: e2:34:e9:84:af:7a:b7:df:84:68:14:b7:41:c4:14: e7:83:e2:a5:3f:7f:d9:71:46:dc:4f:35:d8:82:38: 6b:7c:0e:67:6e:23:00:98:2a:b4:e6:39:a9:ec:f1: 3f:10:18:ec:e3:0a:a3:fc:e7:1e:c0:ff:f3:3e:a6: 29:b9:83:74:8d:40:3c:58:54:89:c5:ce:48:e0:dc: 91:b3:26:63:22:e2:35:42:bc:7d:0c:33:2c:49:35: 39:db:ce:65:60:cb:bd:66:f8:f5:41:64:2d:f4:ef: d7:73:01:5d:48:6c:1a:50:3b:bc:8b:82:54:93:8f: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:36:38:49:AA:24:A4:8D:BC:22:DC:24:8C:57:F0:2E:36:F5:78 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7a:f1:bb:55:c9:66:53:6d:1b:e0:6c:61:84:fa:e6:1f:1f: 5e:55:02:79:e5:7f:a5:d7:f7:73:d4:db:27:56:ab:27:44:84: c2:f5:6d:9b:ab:ab:a0:70:e1:33:9b:5b:6a:4d:ce:16:be:34: f5:57:55:93:fa:61:a5:34:7b:27:6e:1a:66:f9:91:0e:93:9f: 68:93:44:f2:f1:ae:34:77:e5:41:34:c4:6b:d8:7a:fa:6c:c8: 81:c6:40:b2:60:41:aa:fc:41:3c:76:35:21:fb:2d:7a:ce:0b: 8b:e6:5e:50:6b:00:db:97:1c:8b:5d:77:ca:3c:f5:03:95:a8: 8a:9c:5e:a3:46:db:ff:54:af:7f:68:83:ea:be:ce:3b:4c:5c: b7:6f:11:18:1c:53:f2:43:45:f2:be:f1:f7:7d:7f:be:ae:0c: cc:8e:1c:83:06:9f:d9:0c:a0:c3:36:a2:2a:06:bd:a3:22:f5: 61:65:cc:c3:96:c5:48:07:91:e0:4c:76:b5:0d:7a:f8:09:5d: 0a:ba:0f:85:0c:9c:48:b3:42:bf:b1:47:80:b0:de:d7:85:5d: c0:aa:15:ea:61:b4:80:5d:cc:3b:39:a1:64:e4:eb:57:15:33: db:97:b7:96:e3:15:94:06:d6:1b:65:32:9e:e1:aa:9b:62:c5: ed:52:d3:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaNODautRxtI9kEgTbtLe8HFH/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA4MDIwNzE2MzhaFw0yNjA4MDMwOTEwMzhaMDMxMTAvBgNV BAMTKEMzMUUzNjM4NDlBQTI0QTQ4REJDMjJEQzI0OEM1N0YwMkUzNkY1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoVu/WnFNG5p3BpqKxYXpe++C 7O6LFxq92RQQs19MSqk3Ax9jf0VnxUfraG72fdZt9LyP1GwJbeYhbQXbCE1G8b4L PNXKPj1yYVclTqa9/Vxfy3amiNoudJCS7Z/RXjRvBcuJ12STr/0KDimVK+c1P8Gr z97gP3pQOSOq3aTj7tq8qN3lreI06YSverffhGgUt0HEFOeD4qU/f9lxRtxPNdiC OGt8DmduIwCYKrTmOans8T8QGOzjCqP85x7A//M+pim5g3SNQDxYVInFzkjg3JGz JmMi4jVCvH0MMyxJNTnbzmVgy71m+PVBZC3079dzAV1IbBpQO7yLglSTj7AhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwx42OEmqJKSNvCLcJIxX8C429XgwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl68btVyWZTbRvgbGGE+uYfH15VAnnlf6XX 93PU2ydWqydEhML1bZurq6Bw4TObW2pNzha+NPVXVZP6YaU0eyduGmb5kQ6Tn2iT RPLxrjR35UE0xGvYevpsyIHGQLJgQar8QTx2NSH7LXrOC4vmXlBrANuXHItdd8o8 9QOVqIqcXqNG2/9Ur39og+q+zjtMXLdvERgcU/JDRfK+8fd9f76uDMyOHIMGn9kM oMM2oioGvaMi9WFlzMOWxUgHkeBMdrUNevgJXQq6D4UMnEizQr+xR4Cw3teFXcCq FephtIBdzDs5oWTk61cVM9uXt5bjFZQG1htlMp7hqptixe1S07I= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:38 2026 by rpki-client