$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft File: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft (raw, json) Hash identifier: IK2ntUkMfZQfBeJsN/Iy2Ss2soGYg3nQaBg9x/MzlIQ= Subject key identifier: 37:45:63:D9:DB:3C:90:CB:11:D3:2E:1E:46:5D:0A:7B:B8:58:73:68 Authority key identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 Certificate issuer: /CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Certificate serial: 5C756842A166367B647B725CCD8FA50DC74D2B23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft Manifest number: 71 Signing time: Thu 23 Jul 2026 23:53:57 +0000 Manifest this update: Thu 23 Jul 2026 23:48:57 +0000 Manifest next update: Sat 25 Jul 2026 03:13:57 +0000 Files and hashes: 1: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl (hash: oJRG/vZ1pvtjVJQlKD6aE1N1cmE1hmA0U/nvi1D2cXY=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: 3r/oL3v96CsKMiLkeLyMHXAfkZUhV+Od6ORlJoNOIZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:75:68:42:a1:66:36:7b:64:7b:72:5c:cd:8f:a5:0d:c7:4d:2b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Validity Not Before: Jul 23 23:48:57 2026 GMT Not After : Jul 25 03:13:57 2026 GMT Subject: CN=374563D9DB3C90CB11D32E1E465D0A7BB8587368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:69:4c:3c:0d:d5:26:29:b8:06:8e:c5:d5: 81:af:f2:30:db:08:c8:bd:51:55:b3:73:28:ed:7e: fe:b1:1b:40:18:ec:77:94:1a:97:2c:c4:7c:0c:b0: 2f:ed:b7:97:af:dc:68:09:7d:68:5c:7a:da:0d:f0: 94:b4:57:99:fa:bc:ae:3b:05:23:69:e2:7e:d9:e5: 5b:bd:aa:fc:4c:5e:8d:dd:d6:49:62:c0:0e:c0:75: 8b:57:ae:95:9c:7c:46:47:de:9f:84:d7:dd:56:66: e1:9c:01:67:be:2c:36:72:2f:44:ba:65:5e:8f:a1: 2b:62:89:13:4e:83:69:c0:74:e2:d7:81:73:95:52: 8c:34:73:61:8d:67:57:f0:42:c8:4e:61:9b:70:83: d5:3c:71:11:ba:ec:18:f7:e6:e8:26:79:49:e3:19: e0:0e:25:cf:43:8c:c8:ec:54:0a:45:04:6a:52:3c: 25:c1:db:f4:df:04:f1:3e:9a:89:ac:fb:a9:92:cb: 70:e4:06:fe:56:a5:02:3c:37:06:5d:e1:49:cd:f5: 05:9c:94:04:9d:07:a2:df:ba:6f:65:75:69:e6:0b: 7b:a7:a7:c6:71:d1:aa:e9:ca:a4:f1:27:c5:ec:af: 05:92:f8:3a:11:84:1a:ca:21:e2:d1:b3:f4:ae:2d: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:45:63:D9:DB:3C:90:CB:11:D3:2E:1E:46:5D:0A:7B:B8:58:73:68 X509v3 Authority Key Identifier: keyid:A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:05:96:9c:a6:87:63:94:76:61:5e:17:67:21:18:92:20:f7: cd:dc:63:e7:75:6d:c8:12:cd:45:1b:bd:42:59:81:b5:14:0b: 06:b1:46:34:d5:cb:97:a7:96:53:b4:35:bc:b9:d6:64:e1:65: 12:31:34:44:1e:38:e6:7a:b4:51:72:fe:56:67:4d:43:4e:10: a2:b4:56:cd:7f:15:4b:93:c3:e3:ab:9e:64:29:80:7b:e0:6f: 7d:7b:6d:4b:da:d0:07:a2:50:cf:54:1e:0f:45:99:76:b2:60: dc:c6:1d:74:cb:4f:21:65:d3:9f:36:9f:c7:3e:91:d3:79:44: ce:1a:44:a3:e1:03:16:89:e6:a6:86:da:37:fa:67:be:c1:d8: 14:a9:fc:8d:87:60:fd:fa:f6:66:2b:22:c2:dd:63:aa:36:3b: f1:4e:ed:2d:1a:49:88:66:66:03:22:66:5c:93:b5:85:98:4f: 9a:f2:f4:3d:2c:1c:41:0f:5a:c4:13:26:8f:b7:9f:f9:05:71: 12:c4:80:d0:a9:13:5e:7f:55:ba:4c:55:95:9d:73:fa:91:fa: 9b:0d:a8:7d:73:51:d4:4a:ab:06:87:9e:7c:eb:06:81:af:87: b5:3a:59:60:98:3c:b1:28:14:11:c7:7e:89:09:ab:23:6e:8a: 49:06:97:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHVoQqFmNntke3JczY+lDcdNKyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4MjFF QUZFRjEyMDAeFw0yNjA3MjMyMzQ4NTdaFw0yNjA3MjUwMzEzNTdaMDMxMTAvBgNV BAMTKDM3NDU2M0Q5REIzQzkwQ0IxMUQzMkUxRTQ2NUQwQTdCQjg1ODczNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNGlMPA3VJim4Bo7F1YGv8jDb CMi9UVWzcyjtfv6xG0AY7HeUGpcsxHwMsC/tt5ev3GgJfWhcetoN8JS0V5n6vK47 BSNp4n7Z5Vu9qvxMXo3d1kliwA7AdYtXrpWcfEZH3p+E191WZuGcAWe+LDZyL0S6 ZV6PoStiiRNOg2nAdOLXgXOVUow0c2GNZ1fwQshOYZtwg9U8cRG67Bj35ugmeUnj GeAOJc9DjMjsVApFBGpSPCXB2/TfBPE+moms+6mSy3DkBv5WpQI8NwZd4UnN9QWc lASdB6Lfum9ldWnmC3unp8Zx0arpyqTxJ8XsrwWS+DoRhBrKIeLRs/SuLRffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0Vj2ds8kMsR0y4eRl0Ke7hYc2gwHwYDVR0j BBgwFoAUonawja5/ol3hoD+3EvV4Ier+8SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZhODFlNmUtNGIxNi00YjYyLThmMTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERB RTdGQTI1REUxQTAzRkI3MTJGNTc4MjFFQUZFRjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjc2QjA4REFFN0ZBMjVERTFBMDNGQjcxMkY1NzgyMUVBRkVG MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4 MjFFQUZFRjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYFlpymh2OUdmFeF2chGJIg983cY+d1bcgS zUUbvUJZgbUUCwaxRjTVy5enllO0Nby51mThZRIxNEQeOOZ6tFFy/lZnTUNOEKK0 Vs1/FUuTw+OrnmQpgHvgb317bUva0AeiUM9UHg9FmXayYNzGHXTLTyFl0582n8c+ kdN5RM4aRKPhAxaJ5qaG2jf6Z77B2BSp/I2HYP369mYrIsLdY6o2O/FO7S0aSYhm ZgMiZlyTtYWYT5ry9D0sHEEPWsQTJo+3n/kFcRLEgNCpE15/VbpMVZWdc/qR+psN qH1zUdRKqwaHnnzrBoGvh7U6WWCYPLEoFBHHfokJqyNuikkGl94= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:11 2026 by rpki-client