$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: 6i05Zzy0iAbiHdU1BFHqrK8zFzXBOALPx2qJPWCvHfQ= Subject key identifier: CE:44:25:C0:42:CF:5E:39:C8:CB:64:AF:AB:30:1F:9C:FF:55:13:09 Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 6F76ADFC6FD647939E662F846F9BF291B7A7EEFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:19:29 +0000 Manifest this update: Fri 24 Jul 2026 00:14:29 +0000 Manifest next update: Sat 25 Jul 2026 03:52:29 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 2: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: wtSnSvmzqSyRSlBFReh2Z5HvjoNYmjGA7BBr0Y38Q+g=) 3: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:76:ad:fc:6f:d6:47:93:9e:66:2f:84:6f:9b:f2:91:b7:a7:ee:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Jul 24 00:14:29 2026 GMT Not After : Jul 25 03:52:29 2026 GMT Subject: CN=CE4425C042CF5E39C8CB64AFAB301F9CFF551309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:37:b2:f2:d2:ff:b1:c0:8f:d9:27:da:54: 69:b4:ca:f0:0e:08:e8:eb:49:f8:a0:af:47:ed:b5: 56:96:5b:48:fd:45:01:9c:8c:4b:3b:24:d9:31:26: eb:59:95:aa:5d:af:80:24:6d:85:03:b6:f0:09:9a: 43:24:f4:26:01:ea:8f:d4:bf:03:77:88:53:65:8f: 50:af:88:99:f8:1e:fd:02:d1:dd:d3:a8:53:d9:d0: 26:3e:a4:d8:02:3e:f4:ba:e6:b5:ce:0c:93:b0:2e: 6d:59:31:54:04:36:b4:41:d3:77:3e:6a:1c:ff:45: 6f:5b:b9:0a:ff:d6:f6:02:11:3f:bd:db:c7:16:9f: 86:b4:6d:8e:11:0a:f3:c1:78:c0:70:23:44:4f:9a: 49:77:b3:76:43:82:ce:0d:2a:7a:9a:3a:05:4f:fc: 5a:61:c9:32:36:75:ba:92:80:9f:02:b0:9d:a8:01: ea:3f:30:f4:7b:d7:06:17:37:5e:66:f8:75:e1:8a: f6:21:95:57:57:8e:af:bf:95:4c:15:4b:f0:a6:a6: c9:e0:f5:03:ba:1e:a2:e1:43:96:ae:05:4a:4d:58: 51:53:a2:cb:7e:6f:76:0a:a7:d1:1f:3b:74:e3:c4: ec:92:e2:9e:54:4d:25:c4:d0:22:35:b9:9b:b4:26: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:25:C0:42:CF:5E:39:C8:CB:64:AF:AB:30:1F:9C:FF:55:13:09 X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:b8:3a:6f:3f:58:4e:cf:09:a6:26:f4:13:b2:5c:62:fd: 80:c9:b8:c3:99:bb:1f:a1:85:f5:be:ce:b1:36:a2:24:59:18: 4d:01:74:d3:7c:17:4d:ce:70:55:38:36:64:4e:13:40:bb:88: a0:b1:91:8f:67:34:17:f9:e0:dd:09:fc:cc:49:36:4d:1c:c2: 01:55:e7:b4:2d:f2:d5:5a:b2:ca:10:c2:69:98:fe:11:63:2a: 70:d3:67:d1:0f:34:2c:7f:5c:c8:1e:9a:d0:5a:2a:78:fb:5d: 60:76:96:34:68:d9:bf:1a:a8:d6:6e:9b:eb:bc:b2:fe:d1:b0: d7:9d:7d:5f:48:5d:5b:5c:97:b6:66:d1:73:c1:44:d2:47:20: 20:80:82:08:c4:bb:ca:e7:eb:89:c4:44:e0:4d:a7:cd:5c:86: d5:ec:2e:dc:4e:cf:89:f6:1d:b4:45:07:b8:45:90:5f:53:68: 5b:74:2e:5f:35:8e:73:56:7d:e6:51:ad:2d:ab:1b:bc:01:2b: d1:2d:3b:48:06:62:30:f8:01:e8:52:8b:e5:68:ec:28:63:e4: 1d:39:17:d0:11:65:b8:79:7c:35:b0:fe:0d:a0:37:7b:b7:bf: 09:af:0d:ca:ab:2f:5e:d5:e1:6f:67:db:6b:83:58:68:64:59: cf:6a:9c:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3at/G/WR5OeZi+Eb5vykben7vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA3MjQwMDE0MjlaFw0yNjA3MjUwMzUyMjlaMDMxMTAvBgNV BAMTKENFNDQyNUMwNDJDRjVFMzlDOENCNjRBRkFCMzAxRjlDRkY1NTEzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsDey8tL/scCP2SfaVGm0yvAO COjrSfigr0fttVaWW0j9RQGcjEs7JNkxJutZlapdr4AkbYUDtvAJmkMk9CYB6o/U vwN3iFNlj1CviJn4Hv0C0d3TqFPZ0CY+pNgCPvS65rXODJOwLm1ZMVQENrRB03c+ ahz/RW9buQr/1vYCET+928cWn4a0bY4RCvPBeMBwI0RPmkl3s3ZDgs4NKnqaOgVP /FphyTI2dbqSgJ8CsJ2oAeo/MPR71wYXN15m+HXhivYhlVdXjq+/lUwVS/Cmpsng 9QO6HqLhQ5auBUpNWFFTost+b3YKp9EfO3TjxOyS4p5UTSXE0CI1uZu0JuA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkQlwELPXjnIy2SvqzAfnP9VEwkwHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABefuDpvP1hOzwmmJvQTslxi/YDJuMOZux+h hfW+zrE2oiRZGE0BdNN8F03OcFU4NmROE0C7iKCxkY9nNBf54N0J/MxJNk0cwgFV 57Qt8tVassoQwmmY/hFjKnDTZ9EPNCx/XMgemtBaKnj7XWB2ljRo2b8aqNZum+u8 sv7RsNedfV9IXVtcl7Zm0XPBRNJHICCAggjEu8rn64nEROBNp81chtXsLtxOz4n2 HbRFB7hFkF9TaFt0Ll81jnNWfeZRrS2rG7wBK9EtO0gGYjD4AehSi+Vo7Chj5B05 F9ARZbh5fDWw/g2gN3u3vwmvDcqrL17V4W9n22uDWGhkWc9qnNQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:13 2026 by rpki-client