$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: 5gbcKnH4ymge1eSIT2ZT8RQBzZ9ojuOtHtIfVkLvTg4= Subject key identifier: D9:A4:02:FC:16:42:31:F7:02:5C:14:67:2C:EB:EB:38:12:1A:39:AE Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 299921A4DDCDD10B41883AD374E6C4763080862F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:03:04 +0000 Manifest this update: Fri 24 Jul 2026 02:58:04 +0000 Manifest next update: Sat 25 Jul 2026 06:15:04 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) 2: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: iSFsT3NNAYG4uRokQZZ6SjkEYNziGUWaNbTNyumb7RA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:99:21:a4:dd:cd:d1:0b:41:88:3a:d3:74:e6:c4:76:30:80:86:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Jul 24 02:58:04 2026 GMT Not After : Jul 25 06:15:04 2026 GMT Subject: CN=D9A402FC164231F7025C14672CEBEB38121A39AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:cf:d4:17:dc:34:4d:fc:b3:27:70:f1:2b: 4a:2e:77:28:b3:84:1d:1b:c5:5d:79:fb:64:d9:05: b0:c6:11:00:ac:8c:f9:f0:d9:81:a6:7a:31:f9:d5: 64:f3:ae:48:1d:d8:d6:a5:d8:db:d4:76:d7:56:3e: a1:47:07:9c:5d:57:a0:1d:7e:92:49:1f:b0:1a:15: c8:21:1f:a9:e8:01:e7:fe:9a:4c:74:10:46:b6:3f: ac:e1:79:52:36:f0:bf:cd:e7:4c:7a:49:13:01:81: f3:cd:d1:5f:28:ad:c4:0c:3f:ec:81:ef:aa:2d:93: 4e:90:f1:c1:68:61:a9:2e:6b:d9:40:42:ec:96:8c: 02:d6:a7:19:51:79:58:06:b0:d9:3f:a0:4e:11:e4: 09:ef:cf:db:a2:18:15:7b:fb:41:1d:41:09:5c:51: 0f:09:09:d9:c3:cf:44:c6:d7:38:74:40:c6:84:96: 17:92:be:e8:44:94:be:7d:84:28:11:7d:9e:8d:d4: e4:16:13:67:e8:fc:5d:da:0b:2e:25:8d:e4:0d:22: 58:a6:50:06:26:0a:33:90:47:a7:0e:ae:8e:0e:3e: 7a:4c:c0:cb:b4:36:12:44:20:61:a4:a6:41:9d:7a: d3:31:2a:d1:a7:72:d2:92:dd:50:6a:93:1c:f7:50: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:02:FC:16:42:31:F7:02:5C:14:67:2C:EB:EB:38:12:1A:39:AE X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:76:d4:2b:f5:9f:93:d2:a0:99:37:b6:3f:8f:b7:89:a3:8a: c0:13:70:94:1c:4a:d4:4a:88:c3:fc:8f:c2:0e:4e:71:a2:81: 5f:a1:fd:ad:e3:05:92:c6:22:8d:ce:4b:75:65:ff:f1:32:b0: 94:92:2a:55:24:85:3c:a1:54:67:83:f7:c6:5e:7c:63:16:7d: fd:19:09:d6:b7:f7:a9:18:37:f1:71:67:e0:ca:b2:2b:54:d7: 76:98:6c:34:51:1f:db:fb:ae:00:4f:47:63:ac:c7:d1:75:31: 56:1b:e8:26:ea:78:36:cd:ea:30:ee:70:02:1e:9a:ed:fc:64: 07:eb:60:92:c5:e0:ac:38:a1:ff:73:8e:89:e7:ef:a9:98:ee: cc:72:cc:2a:e1:c7:21:85:cf:d6:19:51:d0:e9:93:05:6a:69: 47:84:d2:da:3e:2e:58:2a:cf:71:c3:ef:10:79:e5:00:50:7b: 07:f5:31:a5:98:09:b5:2b:2f:11:22:06:4d:b8:8e:76:83:68: 13:cf:16:54:7b:9f:d6:13:5d:77:d5:4e:9b:af:99:13:69:ca: a6:97:2f:f9:cd:20:31:19:37:d5:b2:a9:75:cf:6d:a2:a3:1f: a5:27:73:c8:1f:f2:6b:e9:83:3a:00:f0:f9:14:8c:31:f6:3d: 37:8f:7f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZkhpN3N0QtBiDrTdObEdjCAhi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA3MjQwMjU4MDRaFw0yNjA3MjUwNjE1MDRaMDMxMTAvBgNV BAMTKEQ5QTQwMkZDMTY0MjMxRjcwMjVDMTQ2NzJDRUJFQjM4MTIxQTM5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5s/UF9w0TfyzJ3DxK0oudyiz hB0bxV15+2TZBbDGEQCsjPnw2YGmejH51WTzrkgd2Nal2NvUdtdWPqFHB5xdV6Ad fpJJH7AaFcghH6noAef+mkx0EEa2P6zheVI28L/N50x6SRMBgfPN0V8orcQMP+yB 76otk06Q8cFoYakua9lAQuyWjALWpxlReVgGsNk/oE4R5Anvz9uiGBV7+0EdQQlc UQ8JCdnDz0TG1zh0QMaElheSvuhElL59hCgRfZ6N1OQWE2fo/F3aCy4ljeQNIlim UAYmCjOQR6cOro4OPnpMwMu0NhJEIGGkpkGdetMxKtGnctKS3VBqkxz3UBMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2aQC/BZCMfcCXBRnLOvrOBIaOa4wHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI521Cv1n5PSoJk3tj+Pt4mjisATcJQcStRK iMP8j8IOTnGigV+h/a3jBZLGIo3OS3Vl//EysJSSKlUkhTyhVGeD98ZefGMWff0Z Cda396kYN/FxZ+DKsitU13aYbDRRH9v7rgBPR2Osx9F1MVYb6CbqeDbN6jDucAIe mu38ZAfrYJLF4Kw4of9zjonn76mY7sxyzCrhxyGFz9YZUdDpkwVqaUeE0to+Llgq z3HD7xB55QBQewf1MaWYCbUrLxEiBk24jnaDaBPPFlR7n9YTXXfVTpuvmRNpyqaX L/nNIDEZN9WyqXXPbaKjH6Unc8gf8mvpgzoA8PkUjDH2PTePfxw= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:42 2026 by rpki-client