$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: BIPQcmHJG3Y4aD6bcd8m+JrUo3zK8RwG/6larLUomjs= Subject key identifier: F3:3C:30:3F:AE:77:F1:B1:79:11:D0:66:7A:25:60:80:AC:30:74:87 Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 2951E71791F6581A40D605A9ABC2FC4FAC7C8B68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 17:09:09 +0000 Manifest this update: Fri 17 Jul 2026 17:04:09 +0000 Manifest next update: Sat 18 Jul 2026 18:22:09 +0000 Files and hashes: 1: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=) 2: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=) 3: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=) 4: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: FzleQtPrwk+vRkN52/r1S98EX17jbmbzD2gEjmuCi3g=) 5: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 18:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:51:e7:17:91:f6:58:1a:40:d6:05:a9:ab:c2:fc:4f:ac:7c:8b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Jul 17 17:04:09 2026 GMT Not After : Jul 18 18:22:09 2026 GMT Subject: CN=F33C303FAE77F1B17911D0667A256080AC307487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:c0:a8:0f:d8:36:68:11:e0:4d:72:24:64: 68:b5:22:00:26:28:21:b9:6b:e2:a9:8e:82:9d:95: 65:ec:68:5b:18:18:45:66:19:42:01:cf:98:0d:f9: 26:06:86:5e:10:d5:19:f7:54:1b:e2:d7:1d:1f:8f: 33:90:37:8c:8b:e7:30:50:b9:0c:8b:80:13:25:94: 71:57:30:52:57:35:06:94:f4:90:23:82:96:9c:19: db:6d:ac:52:52:65:9a:7b:a2:53:99:46:78:c9:ee: 9f:c8:d5:80:17:2f:f9:27:f4:f7:11:c3:73:ad:52: 68:f7:ab:0e:d4:f1:a3:71:73:39:c3:9d:98:56:32: a2:e9:1c:51:16:d6:1a:2b:60:40:83:82:00:24:d1: 10:ef:46:15:73:64:14:e1:d5:d0:4c:99:43:0d:e6: 46:c6:81:69:1f:5c:6c:42:7d:4e:cb:91:95:ad:ca: b9:2f:10:17:ce:b3:c6:c6:d6:12:ba:02:17:75:a8: ca:d0:18:b2:b0:d7:b8:44:79:ae:f7:13:92:24:ef: cc:f9:61:c5:68:42:26:cb:d2:68:c0:96:60:48:be: ca:0d:4e:95:aa:ad:3b:b7:22:13:41:ba:53:46:10: ee:9a:56:46:d8:64:98:ce:d5:5f:03:c0:5d:d0:0f: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:30:3F:AE:77:F1:B1:79:11:D0:66:7A:25:60:80:AC:30:74:87 X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:67:2a:04:26:4c:2b:84:a5:6d:93:51:7e:71:11:a9:94:b1: 3c:38:46:79:0a:5b:46:77:ac:1f:f2:ad:33:ba:c1:e3:d7:9b: fa:6c:29:cb:58:73:e1:a5:b1:63:8a:c7:55:64:e0:e6:f7:c0: d6:30:7c:8a:b4:47:06:ec:3d:97:4b:93:82:ec:ae:83:f2:f7: 05:90:0a:e2:9b:e4:97:1a:68:27:b8:a1:06:9d:d4:15:f4:73: 93:70:49:e5:3b:cb:01:2f:db:8c:5e:c9:74:d5:95:8d:ed:8d: 6b:87:6e:bf:7d:d2:9f:13:5e:f4:eb:dc:5c:0b:a7:34:28:94: ad:f9:97:97:8f:a2:6b:85:0b:10:17:2f:c7:17:80:fe:c6:4d: 43:5b:62:25:70:19:e9:cb:19:2f:36:97:57:56:f4:ae:aa:59: 63:b9:be:a1:f7:3e:ce:f0:c5:27:fa:2f:14:1b:8b:88:6a:39: c4:b4:7c:2a:80:de:55:4c:d8:12:02:1f:a1:bc:4f:e2:fb:2b: 0a:06:90:ef:2e:03:bc:c9:9a:36:8e:d7:98:44:dc:7f:e1:62: 23:1f:1d:e7:23:70:0a:d8:e1:5a:27:04:18:bd:d6:4e:b4:c1: f5:67:fe:25:e5:8c:29:df:ce:6c:ce:6b:af:b1:8a:94:bb:7f: 25:51:99:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVHnF5H2WBpA1gWpq8L8T6x8i2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA3MTcxNzA0MDlaFw0yNjA3MTgxODIyMDlaMDMxMTAvBgNV BAMTKEYzM0MzMDNGQUU3N0YxQjE3OTExRDA2NjdBMjU2MDgwQUMzMDc0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpGcCoD9g2aBHgTXIkZGi1IgAm KCG5a+KpjoKdlWXsaFsYGEVmGUIBz5gN+SYGhl4Q1Rn3VBvi1x0fjzOQN4yL5zBQ uQyLgBMllHFXMFJXNQaU9JAjgpacGdttrFJSZZp7olOZRnjJ7p/I1YAXL/kn9PcR w3OtUmj3qw7U8aNxcznDnZhWMqLpHFEW1horYECDggAk0RDvRhVzZBTh1dBMmUMN 5kbGgWkfXGxCfU7LkZWtyrkvEBfOs8bG1hK6Ahd1qMrQGLKw17hEea73E5Ik78z5 YcVoQibL0mjAlmBIvsoNTpWqrTu3IhNBulNGEO6aVkbYZJjO1V8DwF3QD/3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zwwP6538bF5EdBmeiVggKwwdIcwHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBnKgQmTCuEpW2TUX5xEamUsTw4RnkKW0Z3 rB/yrTO6wePXm/psKctYc+GlsWOKx1Vk4Ob3wNYwfIq0RwbsPZdLk4LsroPy9wWQ CuKb5JcaaCe4oQad1BX0c5NwSeU7ywEv24xeyXTVlY3tjWuHbr990p8TXvTr3FwL pzQolK35l5ePomuFCxAXL8cXgP7GTUNbYiVwGenLGS82l1dW9K6qWWO5vqH3Ps7w xSf6LxQbi4hqOcS0fCqA3lVM2BICH6G8T+L7KwoGkO8uA7zJmjaO15hE3H/hYiMf HecjcArY4VonBBi91k60wfVn/iXljCnfzmzOa6+xipS7fyVRmfA= -----END CERTIFICATE-----Generated at Sat Jul 18 02:17:21 2026 by rpki-client