$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: mDLrprHUckv0yunvjNT7MXhD9qFaPRqSA1XocfC6gZM= Subject key identifier: 09:C1:35:EB:62:CC:8C:F4:04:78:EA:FD:6F:5B:81:6D:C2:F4:D1:31 Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 23438863A8721688DBAD78D7AD3FA4069627E341 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:03:26 +0000 Manifest this update: Thu 23 Jul 2026 18:58:26 +0000 Manifest next update: Fri 24 Jul 2026 20:57:26 +0000 Files and hashes: 1: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: IfJ1rLSn67aOf6h0chTWXvf43hqFefVOFs+Hqx4hoQA=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 4: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 5: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:43:88:63:a8:72:16:88:db:ad:78:d7:ad:3f:a4:06:96:27:e3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Jul 23 18:58:26 2026 GMT Not After : Jul 24 20:57:26 2026 GMT Subject: CN=09C135EB62CC8CF40478EAFD6F5B816DC2F4D131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:4a:ea:a4:e3:05:1d:2a:57:17:ab:7d:67: f5:f4:ae:d6:9b:f7:b8:74:e6:b8:1d:0c:92:45:0c: f9:6f:44:c1:7d:51:14:25:ec:c4:b6:54:6f:ec:9a: 2c:8f:33:b7:29:ca:de:4e:00:c4:3c:c7:d8:f9:11: 55:37:ab:d6:b2:44:86:8d:08:66:9c:ce:4e:69:44: 77:2b:c2:a4:e7:9d:3b:3d:da:b8:63:52:f6:13:2d: 01:cb:3d:8d:67:70:55:53:bf:1d:49:3a:77:ac:81: 3c:98:4f:ea:03:6f:5f:78:bb:62:cc:b2:1a:25:34: b3:70:0e:f6:af:c2:f1:5a:44:6f:54:3a:56:7d:7e: 37:34:96:8b:cb:c9:40:1c:0e:a9:de:18:7e:df:e5: f4:84:07:bb:31:1d:65:cf:15:39:20:c1:f8:73:fd: 98:a9:56:98:91:22:fb:73:11:cb:e7:9e:d1:92:fe: 9b:c1:ce:ec:0b:c8:3b:40:3f:cd:cf:46:d1:ad:4a: 1b:e6:d5:a3:8b:59:3c:36:84:07:de:24:30:0d:d0: b5:d6:b0:bd:b8:38:d3:47:d3:72:47:e0:c9:9c:a0: c5:e9:39:38:5b:df:28:fa:b1:f5:59:f1:89:ed:74: ca:69:36:ba:43:8e:54:67:61:9e:18:e9:c2:7f:68: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:35:EB:62:CC:8C:F4:04:78:EA:FD:6F:5B:81:6D:C2:F4:D1:31 X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6e:72:d6:e6:be:6f:ef:e4:b6:4b:b5:8a:7c:61:8c:82:e5: 4e:d4:15:18:0d:34:fa:63:6d:4f:04:56:94:72:ea:77:be:2f: af:38:9c:75:93:a0:95:86:9e:a3:b4:dc:43:ea:af:a2:4a:36: 3c:30:b8:1a:24:40:19:c2:54:39:45:1b:60:cf:f1:1d:2f:6f: d6:23:36:22:ca:e1:0d:21:1c:ec:7d:e5:68:57:71:23:1b:19: ee:1c:22:27:d0:09:83:de:ec:95:ac:99:f4:61:d2:19:36:f3: 6d:12:be:b5:26:64:01:fc:b7:30:56:15:ac:04:14:ae:ba:bc: af:79:ff:f2:91:46:b4:d5:0a:32:37:5a:eb:16:25:61:8a:ae: cb:74:44:f6:77:e2:d5:e8:52:b6:61:d2:58:64:6d:0f:77:af: 28:d2:c7:3e:fd:c3:2c:b1:0a:22:39:aa:a2:74:c4:a3:f6:b6: 8b:b0:bf:04:e8:70:f2:af:2c:98:84:4b:66:26:d8:61:90:59: 35:26:69:a2:12:7a:ff:5a:da:50:36:bc:0e:f7:e1:21:88:87: 17:a5:2d:96:70:6e:c0:f3:42:a7:46:d9:4f:fd:f6:36:2e:28: 77:19:8e:53:da:0b:56:55:95:17:f4:15:3f:2c:e4:6c:43:91: c4:89:0f:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0OIY6hyFojbrXjXrT+kBpYn40EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA3MjMxODU4MjZaFw0yNjA3MjQyMDU3MjZaMDMxMTAvBgNV BAMTKDA5QzEzNUVCNjJDQzhDRjQwNDc4RUFGRDZGNUI4MTZEQzJGNEQxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0krqpOMFHSpXF6t9Z/X0rtab 97h05rgdDJJFDPlvRMF9URQl7MS2VG/smiyPM7cpyt5OAMQ8x9j5EVU3q9ayRIaN CGaczk5pRHcrwqTnnTs92rhjUvYTLQHLPY1ncFVTvx1JOnesgTyYT+oDb194u2LM sholNLNwDvavwvFaRG9UOlZ9fjc0lovLyUAcDqneGH7f5fSEB7sxHWXPFTkgwfhz /ZipVpiRIvtzEcvnntGS/pvBzuwLyDtAP83PRtGtShvm1aOLWTw2hAfeJDAN0LXW sL24ONNH03JH4MmcoMXpOThb3yj6sfVZ8YntdMppNrpDjlRnYZ4Y6cJ/aFMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcE162LMjPQEeOr9b1uBbcL00TEwHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpuctbmvm/v5LZLtYp8YYyC5U7UFRgNNPpj bU8EVpRy6ne+L684nHWToJWGnqO03EPqr6JKNjwwuBokQBnCVDlFG2DP8R0vb9Yj NiLK4Q0hHOx95WhXcSMbGe4cIifQCYPe7JWsmfRh0hk2820SvrUmZAH8tzBWFawE FK66vK95//KRRrTVCjI3WusWJWGKrst0RPZ34tXoUrZh0lhkbQ93ryjSxz79wyyx CiI5qqJ0xKP2touwvwTocPKvLJiES2Ym2GGQWTUmaaISev9a2lA2vA734SGIhxel LZZwbsDzQqdG2U/99jYuKHcZjlPaC1ZVlRf0FT8s5GxDkcSJD7g= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:54 2026 by rpki-client