$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: Lloz06ME3X5X/T9O8jOe1iUfg674M6F7J/Y6064YQ1g= Subject key identifier: D3:97:B3:71:48:7E:04:FE:CA:2F:C4:94:ED:1D:AD:F8:03:10:62:32 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 74DD8A4231D6438795E206AA80808FC0309D9523 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:05:24 +0000 Manifest this update: Fri 24 Jul 2026 01:00:24 +0000 Manifest next update: Sat 25 Jul 2026 04:21:24 +0000 Files and hashes: 1: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) 2: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 3: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 4: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: xGtqL5utG0LIUerzuFP3tdNhRQfk0L/MLsXCntD5j3g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:8a:42:31:d6:43:87:95:e2:06:aa:80:80:8f:c0:30:9d:95:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Jul 24 01:00:24 2026 GMT Not After : Jul 25 04:21:24 2026 GMT Subject: CN=D397B371487E04FECA2FC494ED1DADF803106232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:2a:64:ef:6e:10:8b:25:2f:a1:69:2d:00: 05:2e:35:ae:04:b6:c8:af:95:83:0e:e1:c9:aa:ca: fa:ba:d7:f4:61:57:dc:98:e8:15:ac:51:e3:39:da: d7:43:82:8e:10:c9:f5:c2:e3:26:81:d0:e9:0d:4d: 7c:71:6c:22:d9:f2:62:a0:e3:66:d8:36:c1:d2:1e: 83:8b:d1:9a:e6:f6:e2:fb:64:62:99:41:cf:2c:59: 77:f1:00:ad:f2:da:63:d9:55:49:c7:5a:97:72:19: 92:d6:7f:8b:6f:3d:c6:9c:f8:fa:99:e8:a4:64:02: 03:a9:87:a2:b6:23:08:fd:a3:85:b2:6f:7a:83:1e: 16:3f:a0:a3:b4:a5:f8:58:66:d3:c8:34:00:c2:26: a4:03:f0:0c:dc:ba:ae:10:5f:fd:ab:62:a4:b1:4f: 05:90:16:13:14:da:30:f0:34:a4:93:94:41:a9:22: 28:48:ef:ef:ae:6c:9c:91:4a:a3:1c:ef:48:5b:96: 0e:03:02:a5:c5:8e:c0:2a:9b:ef:48:28:77:6e:21: 40:a3:f4:d0:c4:0b:80:75:fe:72:8e:3b:68:73:6d: ff:89:e2:1d:44:9c:57:b2:7d:c9:e4:64:93:4b:5c: 88:ba:d1:35:57:db:c4:8e:8e:1b:93:6f:29:01:a4: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:B3:71:48:7E:04:FE:CA:2F:C4:94:ED:1D:AD:F8:03:10:62:32 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:ca:87:be:1c:42:a0:4f:93:e7:81:f7:76:7c:52:1f:86: b2:27:d3:d2:73:0d:59:14:af:4c:f1:fa:78:6c:28:bf:4a:49: 49:71:32:65:75:61:02:b0:ea:9f:83:b3:f8:f9:12:9b:97:65: 95:64:c5:82:38:70:75:8c:b7:a4:a9:ff:5c:12:7e:cd:44:9d: 74:28:1f:70:f3:e7:ec:fc:83:cf:61:f3:87:62:8b:fc:00:dc: 07:fb:b1:23:45:d6:8c:66:63:ae:89:4b:2e:6d:ed:a4:4f:5e: dd:ae:cd:cb:e9:9f:bc:20:0c:9a:6d:a8:37:08:32:b1:d0:19: 52:3c:4b:53:e9:2d:41:58:d7:1e:96:83:c2:fc:53:87:35:1e: 7c:ac:e1:34:31:d7:6a:f2:9a:3c:94:62:b1:3f:f4:48:dd:60: 32:f7:39:0a:12:4b:69:f4:7a:f6:06:81:df:70:cc:e0:8b:14: 87:fb:85:e5:b5:df:97:84:57:45:01:70:ca:9c:75:c1:44:96: c1:9d:42:a3:f2:8b:46:59:af:74:c3:3d:a9:ad:15:74:e5:65: 55:ae:55:ec:55:4a:c6:81:e4:fe:19:87:2e:18:cf:28:17:2f: 8a:82:d8:42:c9:ba:0d:76:7b:5a:70:1f:5f:bd:e0:f3:fd:27: 83:e5:06:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN2KQjHWQ4eV4gaqgICPwDCdlSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA3MjQwMTAwMjRaFw0yNjA3MjUwNDIxMjRaMDMxMTAvBgNV BAMTKEQzOTdCMzcxNDg3RTA0RkVDQTJGQzQ5NEVEMURBREY4MDMxMDYyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHypk724QiyUvoWktAAUuNa4E tsivlYMO4cmqyvq61/RhV9yY6BWsUeM52tdDgo4QyfXC4yaB0OkNTXxxbCLZ8mKg 42bYNsHSHoOL0Zrm9uL7ZGKZQc8sWXfxAK3y2mPZVUnHWpdyGZLWf4tvPcac+PqZ 6KRkAgOph6K2Iwj9o4Wyb3qDHhY/oKO0pfhYZtPINADCJqQD8Azcuq4QX/2rYqSx TwWQFhMU2jDwNKSTlEGpIihI7++ubJyRSqMc70hblg4DAqXFjsAqm+9IKHduIUCj 9NDEC4B1/nKOO2hzbf+J4h1EnFeyfcnkZJNLXIi60TVX28SOjhuTbykBpKb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05ezcUh+BP7KL8SU7R2t+AMQYjIwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXeyoe+HEKgT5Pngfd2fFIfhrIn09JzDVkU r0zx+nhsKL9KSUlxMmV1YQKw6p+Ds/j5EpuXZZVkxYI4cHWMt6Sp/1wSfs1EnXQo H3Dz5+z8g89h84dii/wA3Af7sSNF1oxmY66JSy5t7aRPXt2uzcvpn7wgDJptqDcI MrHQGVI8S1PpLUFY1x6Wg8L8U4c1Hnys4TQx12rymjyUYrE/9EjdYDL3OQoSS2n0 evYGgd9wzOCLFIf7heW135eEV0UBcMqcdcFElsGdQqPyi0ZZr3TDPamtFXTlZVWu VexVSsaB5P4Zhy4YzygXL4qC2ELJug12e1pwH1+94PP9J4PlBoU= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:53 2026 by rpki-client