$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: 4ei2XDyIXCQqYP1Kewd4v7z9/X5LhDWJZNkOk/Qekp4= Subject key identifier: 1F:88:9A:B2:C5:A4:5D:5F:99:E4:8F:F4:81:AE:3B:48:13:63:6B:DC Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 53BEF9F81D666CACA9FEF12F4CF9A17009147C05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:16:23 +0000 Manifest this update: Sun 02 Aug 2026 11:11:23 +0000 Manifest next update: Mon 03 Aug 2026 12:08:23 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: YS6ri3R5+TqZmT/yT6lgyGWkVyzWAdGddG4x2mUGZgI=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:be:f9:f8:1d:66:6c:ac:a9:fe:f1:2f:4c:f9:a1:70:09:14:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Aug 2 11:11:23 2026 GMT Not After : Aug 3 12:08:23 2026 GMT Subject: CN=1F889AB2C5A45D5F99E48FF481AE3B4813636BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:2d:79:24:50:8a:d7:1b:1a:01:0a:ce:9c: 95:a7:52:92:9c:6a:a5:97:82:0d:6f:3b:08:99:b6: 27:8d:71:0b:1a:8b:d0:a6:f2:1b:32:d9:fb:4d:ed: 61:52:d7:91:0e:5a:cb:48:82:5f:97:f6:5d:b3:91: 59:f0:a7:ac:9a:03:c8:28:bf:cc:38:28:e1:9d:22: 60:cb:4e:a4:96:d2:27:40:a4:07:8a:48:4e:e9:5f: fa:63:c3:d7:5f:a9:1d:68:91:0e:0a:7e:ee:b0:27: 8a:7a:e9:e5:b0:fc:81:6e:02:2c:af:bc:31:19:85: 04:89:f4:3d:86:ab:2f:31:74:b3:9f:90:0d:bb:2d: 2f:a3:24:6e:85:63:e1:28:3a:51:ff:c5:9b:72:56: ab:ac:6d:b9:62:03:65:02:f4:68:c9:87:f4:24:16: 78:0d:23:37:17:41:87:48:6f:2e:e3:f4:bc:d4:e6: 81:0d:e0:9b:d1:e8:5a:dd:16:33:bc:95:89:e2:74: d0:59:39:d9:9a:38:3b:f8:b6:23:3f:44:67:30:0b: 59:30:93:3c:02:fb:ed:b3:63:af:94:4c:86:70:6a: 9d:95:31:1d:44:26:b0:6f:00:e7:46:af:58:68:7a: cc:0a:63:ac:23:ad:46:bc:d0:f6:8e:37:6b:d4:bd: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:88:9A:B2:C5:A4:5D:5F:99:E4:8F:F4:81:AE:3B:48:13:63:6B:DC X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:5f:5c:ef:51:b4:9a:83:ca:e1:97:5e:cf:d7:3e:23:c5: 67:cb:eb:49:20:b2:b6:95:e4:47:35:a4:e8:5e:f0:f5:86:66: ee:72:2f:85:ed:92:57:48:0b:0d:1a:6b:91:58:91:fe:a4:2f: a0:c9:00:09:a6:1a:90:1b:83:b9:34:9d:3f:ed:fd:ad:9d:bf: f7:16:71:86:fc:03:e7:21:68:61:1c:d3:a5:13:9f:a3:37:e5: 56:a7:1b:cd:81:60:32:ea:92:d3:af:ff:85:a5:4f:23:2d:4c: 03:0a:7f:6e:97:1c:19:41:38:56:fb:a5:10:f9:48:aa:91:03: 3d:34:1c:56:d2:6d:51:74:c9:e8:fe:1c:96:dd:8c:da:1a:d0: 9a:de:e8:8a:4b:26:2e:d3:cd:06:a4:7c:c3:ea:d7:e6:b1:2a: 3b:37:e7:6c:53:c1:ac:1f:76:d2:fe:39:15:a1:1a:ed:83:b4: 3b:99:16:6c:c8:cd:56:ef:49:ee:99:0a:10:9c:d8:c5:dc:c0: cd:8e:b2:1e:75:31:75:5b:9a:02:03:ad:35:34:ce:75:a7:d1: ad:09:71:62:59:6f:bb:d1:02:a8:d2:d9:60:2b:49:70:6a:74: c6:b4:ce:3f:58:88:c1:90:0b:91:aa:98:f5:66:d9:b1:b0:7c: 54:6f:6b:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU775+B1mbKyp/vEvTPmhcAkUfAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA4MDIxMTExMjNaFw0yNjA4MDMxMjA4MjNaMDMxMTAvBgNV BAMTKDFGODg5QUIyQzVBNDVENUY5OUU0OEZGNDgxQUUzQjQ4MTM2MzZCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYy15JFCK1xsaAQrOnJWnUpKc aqWXgg1vOwiZtieNcQsai9Cm8hsy2ftN7WFS15EOWstIgl+X9l2zkVnwp6yaA8go v8w4KOGdImDLTqSW0idApAeKSE7pX/pjw9dfqR1okQ4Kfu6wJ4p66eWw/IFuAiyv vDEZhQSJ9D2Gqy8xdLOfkA27LS+jJG6FY+EoOlH/xZtyVqusbbliA2UC9GjJh/Qk FngNIzcXQYdIby7j9LzU5oEN4JvR6FrdFjO8lYnidNBZOdmaODv4tiM/RGcwC1kw kzwC++2zY6+UTIZwap2VMR1EJrBvAOdGr1hoeswKY6wjrUa80PaON2vUvbOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4iassWkXV+Z5I/0ga47SBNja9wwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB3X1zvUbSag8rhl17P1z4jxWfL60kgsraV 5Ec1pOhe8PWGZu5yL4XtkldICw0aa5FYkf6kL6DJAAmmGpAbg7k0nT/t/a2dv/cW cYb8A+chaGEc06UTn6M35VanG82BYDLqktOv/4WlTyMtTAMKf26XHBlBOFb7pRD5 SKqRAz00HFbSbVF0yej+HJbdjNoa0Jre6IpLJi7TzQakfMPq1+axKjs352xTwawf dtL+ORWhGu2DtDuZFmzIzVbvSe6ZChCc2MXcwM2Osh51MXVbmgIDrTU0znWn0a0J cWJZb7vRAqjS2WArSXBqdMa0zj9YiMGQC5GqmPVm2bGwfFRva9s= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:37 2026 by rpki-client