$ rpki-client -vvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: oeuGgKXuNCTy+VMHPWj1NdXoTldlbee/YHk9vIGtIV0= Subject key identifier: 25:51:3D:8C:D7:07:B8:F0:BA:C8:3E:C8:F0:AC:D1:70:A0:EB:11:77 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 2D13BC1874D9612A17CCC38A19BF037E33A280E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:26:29 +0000 Manifest this update: Thu 23 Jul 2026 13:21:29 +0000 Manifest next update: Fri 24 Jul 2026 14:51:29 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) 2: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: +I9qNa9h44lON6iMKbFg+kxUnDX4JAeqn00jrh6ft9U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:13:bc:18:74:d9:61:2a:17:cc:c3:8a:19:bf:03:7e:33:a2:80:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Jul 23 13:21:29 2026 GMT Not After : Jul 24 14:51:29 2026 GMT Subject: CN=25513D8CD707B8F0BAC83EC8F0ACD170A0EB1177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:a4:f2:3a:1d:0c:e3:65:0a:d0:78:e9:16: 48:8d:60:a8:b2:89:0d:0f:1f:ef:34:91:6e:58:4a: 78:e1:55:30:6d:29:f2:c7:80:2b:03:70:3c:9e:8a: 23:68:81:1d:de:93:62:1b:dd:97:a4:f2:79:02:39: 6f:fd:9e:cb:82:23:20:d7:88:9c:4c:6a:41:dc:7a: 28:13:0b:b8:6b:50:ea:09:5f:4e:41:bc:13:6f:8e: 83:52:ea:55:58:fe:6a:66:a2:28:ff:51:ac:98:82: 31:a3:9e:6f:47:89:f9:7a:5a:64:20:e9:01:3c:52: cb:ed:af:cf:57:bd:06:f9:1d:f5:31:31:7b:2a:b2: b6:b3:8b:e6:59:07:d0:ca:3c:22:c7:65:a9:8f:10: 96:7e:9d:1c:0e:d3:c3:95:14:1c:f9:ca:f7:08:44: 6c:5a:c2:f2:f0:08:c3:3c:ef:a9:3c:e2:46:13:ca: db:48:a6:47:50:8d:77:88:58:4d:78:ff:9a:2f:04: 27:5e:2e:2e:85:45:72:1c:8d:b4:8a:0c:3d:d8:57: 10:26:9c:fc:41:34:25:f4:f5:ad:27:43:3b:cf:3e: b3:09:bb:3d:a4:9c:a0:a2:e7:48:86:13:90:c8:91: f8:f5:3e:d9:be:55:76:8b:c1:64:62:ef:86:04:a5: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:51:3D:8C:D7:07:B8:F0:BA:C8:3E:C8:F0:AC:D1:70:A0:EB:11:77 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ea:90:bb:37:29:aa:9b:77:25:65:71:c0:38:3f:e9:8f:68: 17:0a:ac:fa:62:bb:c7:d6:b5:be:0c:55:ca:11:df:d1:66:d2: 0e:59:80:bf:6a:95:bc:d6:19:1b:42:8d:07:3b:1a:d9:73:b2: c3:e0:66:e2:86:f2:b7:cc:4e:40:de:00:94:dc:d4:d7:dc:47: 93:72:b9:6b:d0:60:3f:b3:ad:f7:37:19:ad:b4:88:9b:d7:0f: 52:91:79:0c:82:f6:1e:71:99:60:22:cf:ba:2c:ec:d7:66:50: 05:6b:2a:b2:12:3c:e2:4c:1c:3f:72:a6:79:c4:d0:66:9a:77: 27:0d:fa:98:cf:d8:60:c5:12:bb:00:07:37:14:eb:29:12:f3: c2:59:54:6d:0c:c9:54:60:6e:96:37:29:1f:fd:d3:40:09:36: f2:df:2a:08:ea:3b:65:03:7b:26:09:c5:31:96:65:31:47:a7: 77:2c:61:1c:79:73:cc:0d:20:ac:3a:da:90:c7:ee:14:38:77: 23:ab:f8:93:5c:74:57:84:1c:e0:6a:c1:4a:8b:f6:89:1b:7e: f6:13:df:bd:d2:77:d8:d8:77:bc:89:3f:9c:8d:c4:77:8f:f6: 6e:bd:47:1b:80:9b:1b:66:94:96:47:74:f7:a8:b2:60:3b:6a: 3f:41:db:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRO8GHTZYSoXzMOKGb8DfjOigOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA3MjMxMzIxMjlaFw0yNjA3MjQxNDUxMjlaMDMxMTAvBgNV BAMTKDI1NTEzRDhDRDcwN0I4RjBCQUM4M0VDOEYwQUNEMTcwQTBFQjExNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9aTyOh0M42UK0HjpFkiNYKiy iQ0PH+80kW5YSnjhVTBtKfLHgCsDcDyeiiNogR3ek2Ib3Zek8nkCOW/9nsuCIyDX iJxMakHceigTC7hrUOoJX05BvBNvjoNS6lVY/mpmoij/UayYgjGjnm9Hifl6WmQg 6QE8Usvtr89XvQb5HfUxMXsqsrazi+ZZB9DKPCLHZamPEJZ+nRwO08OVFBz5yvcI RGxawvLwCMM876k84kYTyttIpkdQjXeIWE14/5ovBCdeLi6FRXIcjbSKDD3YVxAm nPxBNCX09a0nQzvPPrMJuz2knKCi50iGE5DIkfj1Ptm+VXaLwWRi74YEpVv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJVE9jNcHuPC6yD7I8KzRcKDrEXcwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnqkLs3KaqbdyVlccA4P+mPaBcKrPpiu8fW tb4MVcoR39Fm0g5ZgL9qlbzWGRtCjQc7GtlzssPgZuKG8rfMTkDeAJTc1NfcR5Ny uWvQYD+zrfc3Ga20iJvXD1KReQyC9h5xmWAiz7os7NdmUAVrKrISPOJMHD9ypnnE 0GaadycN+pjP2GDFErsABzcU6ykS88JZVG0MyVRgbpY3KR/900AJNvLfKgjqO2UD eyYJxTGWZTFHp3csYRx5c8wNIKw62pDH7hQ4dyOr+JNcdFeEHOBqwUqL9okbfvYT 373Sd9jYd7yJP5yNxHeP9m69RxuAmxtmlJZHdPeosmA7aj9B25E= -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:04 2026 by rpki-client