$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json) Hash identifier: tvChPzEm1jHbtIiNQsiPr8LNKGjM2uYN46hrHzAsRBk= Subject key identifier: 0E:E1:8D:A5:BD:EA:0E:5C:8D:E1:95:13:61:5B:9E:13:B7:61:2D:14 Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Certificate serial: 1F2447F5026D586BB790B20321EF342AA05B026B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:24:36 +0000 Manifest this update: Fri 24 Jul 2026 00:19:36 +0000 Manifest next update: Sat 25 Jul 2026 01:23:36 +0000 Files and hashes: 1: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: DhMonemRcXSoOgkvJNQWlMH4o8G2i8zWpu4aycKGAvA=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:24:47:f5:02:6d:58:6b:b7:90:b2:03:21:ef:34:2a:a0:5b:02:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Validity Not Before: Jul 24 00:19:36 2026 GMT Not After : Jul 25 01:23:36 2026 GMT Subject: CN=0EE18DA5BDEA0E5C8DE19513615B9E13B7612D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:03:78:39:52:43:28:c8:f7:24:aa:7f:27: 58:4a:20:c7:8c:cb:87:98:68:ad:c6:78:20:44:3e: 03:55:35:e6:15:b3:1a:df:0d:3d:e1:dc:a4:aa:6e: 7b:d4:7c:2c:12:30:3a:1e:0f:46:b8:2d:f2:67:b2: 81:ff:af:c0:fe:9f:02:f6:8b:1f:cd:4b:6f:a8:2c: 0c:d4:56:fc:75:ca:4c:fb:ef:e8:7f:20:78:42:77: 4b:7b:5a:d9:92:3c:88:0e:48:6c:24:a0:af:56:4a: b7:f7:2a:f9:8e:e0:34:a4:94:1f:45:14:d4:87:f3: 07:6f:79:64:05:86:1c:75:81:8d:4d:18:e6:ea:2f: 56:7c:91:6e:58:56:4a:4e:df:17:59:89:02:bf:e6: ee:06:b1:73:c1:16:b8:8e:d6:82:7b:27:79:65:36: fb:fa:40:2a:62:d1:9e:2e:6d:f7:8b:ae:d9:4d:c9: 38:dd:ee:ab:c4:c1:e6:4b:ea:ad:74:7d:40:47:03: 0f:2a:e3:d3:8b:59:55:c1:c7:cc:87:4d:35:74:e8: f4:26:5c:03:76:b2:bd:b6:19:b1:c2:2a:c8:92:20: 7f:61:eb:12:f5:cc:e0:85:5d:b3:52:e5:fe:e7:38: b2:7e:37:d2:36:ed:e2:c2:71:02:f5:29:6c:66:32: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:8D:A5:BD:EA:0E:5C:8D:E1:95:13:61:5B:9E:13:B7:61:2D:14 X509v3 Authority Key Identifier: keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:2a:b9:44:3b:42:15:fa:f5:2b:d9:d1:43:13:f3:98:71: 3a:61:6c:d7:76:85:6b:b1:cd:87:85:b4:6b:8f:fa:4d:55:92: d1:28:f8:2f:bb:45:a4:20:c3:b5:a6:32:98:7c:56:84:0a:1a: 9b:ef:95:37:f7:c5:f8:34:83:0d:33:bd:d3:15:54:00:6d:60: 21:d6:7e:9a:c7:b7:26:64:58:2a:a5:7c:2f:13:af:08:c0:ef: 00:db:a4:a9:f5:e3:da:6b:6b:ed:57:26:95:57:91:e5:77:29: a2:27:12:23:27:07:bd:9c:da:64:a0:98:e9:ae:7b:56:20:50: 7c:71:04:16:1b:1e:85:0a:f2:b6:c1:e2:e4:d6:d5:b4:a4:f3: f2:47:57:a3:9d:bb:df:18:84:25:29:eb:ab:57:64:e7:87:5d: 47:53:84:56:0c:9b:a7:d1:b7:c1:6c:48:67:8a:54:23:c6:69: 6e:a5:88:d8:e1:54:e3:4c:a2:c2:52:72:f3:55:cb:d8:bd:6b: db:92:f7:0c:78:50:a5:cc:97:1c:14:65:c4:9d:84:1f:ce:76: f8:66:69:2a:e5:b4:87:fc:9b:1f:21:fe:9a:4d:6c:6b:41:b0: ab:3d:96:d5:71:94:c7:46:3c:5e:36:ae:70:7d:f8:b3:01:30: 28:23:db:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyRH9QJtWGu3kLIDIe80KqBbAmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG MTJBNEExRjAeFw0yNjA3MjQwMDE5MzZaFw0yNjA3MjUwMTIzMzZaMDMxMTAvBgNV BAMTKDBFRTE4REE1QkRFQTBFNUM4REUxOTUxMzYxNUI5RTEzQjc2MTJEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgogN4OVJDKMj3JKp/J1hKIMeM y4eYaK3GeCBEPgNVNeYVsxrfDT3h3KSqbnvUfCwSMDoeD0a4LfJnsoH/r8D+nwL2 ix/NS2+oLAzUVvx1ykz77+h/IHhCd0t7WtmSPIgOSGwkoK9WSrf3KvmO4DSklB9F FNSH8wdveWQFhhx1gY1NGObqL1Z8kW5YVkpO3xdZiQK/5u4GsXPBFriO1oJ7J3ll Nvv6QCpi0Z4ubfeLrtlNyTjd7qvEweZL6q10fUBHAw8q49OLWVXBx8yHTTV06PQm XAN2sr22GbHCKsiSIH9h6xL1zOCFXbNS5f7nOLJ+N9I27eLCcQL1KWxmMlohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuGNpb3qDlyN4ZUTYVueE7dhLRQwHwYDVR0j BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4 OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0 QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9gKrlEO0IV+vUr2dFDE/OYcTphbNd2hWux zYeFtGuP+k1VktEo+C+7RaQgw7WmMph8VoQKGpvvlTf3xfg0gw0zvdMVVABtYCHW fprHtyZkWCqlfC8TrwjA7wDbpKn149pra+1XJpVXkeV3KaInEiMnB72c2mSgmOmu e1YgUHxxBBYbHoUK8rbB4uTW1bSk8/JHV6Odu98YhCUp66tXZOeHXUdThFYMm6fR t8FsSGeKVCPGaW6liNjhVONMosJScvNVy9i9a9uS9wx4UKXMlxwUZcSdhB/Odvhm aSrltIf8mx8h/ppNbGtBsKs9ltVxlMdGPF42rnB9+LMBMCgj2yc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:34:09 2026 by rpki-client