$ rpki-client -vvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: yAVb/5APtUYoKyubeKbo9zZO+YEf7bdcFHEGbHdCLj8= Subject key identifier: 95:24:3D:BA:00:85:68:7C:23:AE:99:DC:B2:9F:36:82:2E:4B:C7:66 Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 7AF9F89C9CF166863DCFA5B680120355474B5C5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 04:09:29 +0000 Manifest this update: Fri 24 Jul 2026 04:04:29 +0000 Manifest next update: Sat 25 Jul 2026 04:52:29 +0000 Files and hashes: 1: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 2: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) 3: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: orf7WcKIJLckXqsshGXm+HeT3Fxuf++qNhiY8/MjO68=) 4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f9:f8:9c:9c:f1:66:86:3d:cf:a5:b6:80:12:03:55:47:4b:5c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Jul 24 04:04:29 2026 GMT Not After : Jul 25 04:52:29 2026 GMT Subject: CN=95243DBA0085687C23AE99DCB29F36822E4BC766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:ff:1b:f1:53:54:93:dd:59:ac:00:0d:d1: 87:17:d3:a0:41:c1:90:8a:a2:75:54:e9:dc:3d:e5: 24:40:5d:a9:ab:07:70:68:5d:f3:40:6c:c0:0c:38: 0a:35:56:a3:e8:47:72:76:88:65:78:2a:93:11:85: 1f:d6:5f:f2:d9:b9:19:64:4e:6c:7b:66:d4:25:2d: 7f:ba:52:72:ef:25:03:17:4d:dd:84:04:ce:3a:43: 24:b0:20:ba:6a:8c:51:e5:57:b4:c0:9e:f7:e9:a8: a3:e6:08:eb:e9:a0:08:b3:ef:2e:90:31:f1:f9:79: a4:25:d7:72:42:29:0d:2e:38:35:f4:9e:6e:eb:7c: 85:8c:69:95:29:1a:24:a9:cf:ea:38:b5:1d:d7:2d: 69:22:60:d7:90:a7:37:4e:70:9f:b7:dd:34:ab:5c: e6:be:95:4c:0d:3e:2e:27:df:68:a0:98:da:f9:cf: 4b:85:89:f9:37:62:77:4e:1b:2b:4b:67:dc:43:a6: 71:00:af:3a:e6:5e:19:1b:9c:db:e1:d8:ca:c7:a6: a3:17:fe:5a:66:4c:5c:61:32:93:a8:f2:86:3c:65: 21:01:80:34:7c:ae:cb:85:0a:95:a2:03:e3:7c:80: 94:a5:cc:c2:03:e3:f3:32:ac:2d:97:9e:7d:f7:b8: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:3D:BA:00:85:68:7C:23:AE:99:DC:B2:9F:36:82:2E:4B:C7:66 X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:73:e8:35:4a:12:bb:da:6f:c5:af:df:8e:5b:f8:34:42:86: e9:39:be:80:0a:c4:23:4a:84:0d:42:3f:70:b1:ee:4f:a3:0a: 0f:64:04:da:81:e4:c1:c1:4c:d7:b3:c4:ea:af:db:ee:7b:74: 91:93:03:3b:b9:19:74:54:12:07:7d:b0:99:f4:bb:e9:90:b0: cd:c9:d4:ee:63:72:b4:17:37:68:e0:be:ad:e4:6b:42:95:23: 71:a1:1d:b6:f9:79:1c:d3:7c:60:da:43:f8:20:ba:f1:3d:1a: b4:37:c5:c2:0d:31:a9:66:33:f4:00:14:67:de:2e:f6:e8:f9: c7:c2:56:e7:95:d2:79:57:17:7e:6c:bc:aa:23:f4:42:ee:2d: f0:33:cb:50:e1:ca:54:d3:80:8a:d3:fe:0f:28:da:84:3a:68: 7c:15:5e:e3:ba:c9:53:a0:fd:3b:6c:a7:0a:32:5d:ae:42:61: 8f:ee:64:d8:d4:40:cf:6e:69:c3:b7:d0:21:ab:60:8a:d5:86: 02:22:37:ef:49:3d:7a:b7:e8:91:51:c2:18:9a:cb:15:35:ac: 3e:9b:4b:86:44:ee:f8:c3:13:7b:b6:28:aa:ef:8f:e6:20:d5: 7d:ce:01:91:47:47:1a:b9:b9:aa:e5:83:4d:7e:f2:3f:76:b2: 30:7a:7c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevn4nJzxZoY9z6W2gBIDVUdLXF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA3MjQwNDA0MjlaFw0yNjA3MjUwNDUyMjlaMDMxMTAvBgNV BAMTKDk1MjQzREJBMDA4NTY4N0MyM0FFOTlEQ0IyOUYzNjgyMkU0QkM3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqv/8b8VNUk91ZrAAN0YcX06BB wZCKonVU6dw95SRAXamrB3BoXfNAbMAMOAo1VqPoR3J2iGV4KpMRhR/WX/LZuRlk Tmx7ZtQlLX+6UnLvJQMXTd2EBM46QySwILpqjFHlV7TAnvfpqKPmCOvpoAiz7y6Q MfH5eaQl13JCKQ0uODX0nm7rfIWMaZUpGiSpz+o4tR3XLWkiYNeQpzdOcJ+33TSr XOa+lUwNPi4n32igmNr5z0uFifk3YndOGytLZ9xDpnEArzrmXhkbnNvh2MrHpqMX /lpmTFxhMpOo8oY8ZSEBgDR8rsuFCpWiA+N8gJSlzMID4/MyrC2Xnn33uIhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSQ9ugCFaHwjrpncsp82gi5Lx2YwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5z6DVKErvab8Wv345b+DRChuk5voAKxCNK hA1CP3Cx7k+jCg9kBNqB5MHBTNezxOqv2+57dJGTAzu5GXRUEgd9sJn0u+mQsM3J 1O5jcrQXN2jgvq3ka0KVI3GhHbb5eRzTfGDaQ/gguvE9GrQ3xcINMalmM/QAFGfe Lvbo+cfCVueV0nlXF35svKoj9ELuLfAzy1DhylTTgIrT/g8o2oQ6aHwVXuO6yVOg /TtspwoyXa5CYY/uZNjUQM9uacO30CGrYIrVhgIiN+9JPXq36JFRwhiayxU1rD6b S4ZE7vjDE3u2KKrvj+Yg1X3OAZFHRxq5uarlg01+8j92sjB6fPA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:53:21 2026 by rpki-client