$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: nRDdJdYMB65tKDVMo/u4p4fpmCT/TldqgZLUEseZxMc= Subject key identifier: 0E:07:61:DD:DF:60:4D:21:78:30:E0:78:78:B0:97:DF:4C:C5:44:09 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 0CE069253A085BB05EE23A3C6814ED185AF41D5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:47:39 +0000 Manifest this update: Thu 23 Jul 2026 22:42:39 +0000 Manifest next update: Sat 25 Jul 2026 01:43:39 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 2: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 3: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) 4: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 5: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: oSgxyGIkckwJDl0dnExDzuNaJsfxs6hf4tQ3ZG3Jsl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e0:69:25:3a:08:5b:b0:5e:e2:3a:3c:68:14:ed:18:5a:f4:1d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Jul 23 22:42:39 2026 GMT Not After : Jul 25 01:43:39 2026 GMT Subject: CN=0E0761DDDF604D217830E07878B097DF4CC54409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:9f:66:00:27:cb:a2:39:00:6b:64:a3:c5: 27:b3:56:da:f4:31:4f:f9:55:b1:c7:cc:b9:2c:23: 0d:9f:3a:e8:61:f8:b1:fe:d2:25:8f:88:a3:f6:57: 5c:82:5f:1a:d4:dd:5a:5b:5d:c6:68:50:b8:55:d9: c6:12:99:45:7d:7a:ad:00:46:f8:fc:1b:2f:57:a6: 71:2b:35:67:a7:71:93:33:ed:d1:51:ab:72:2a:ba: d8:fe:f8:d0:7d:b4:33:2c:52:db:92:e2:ac:3f:2f: da:dd:d5:95:88:6a:a3:9c:85:02:72:c4:05:9a:6a: 87:83:2e:65:60:d4:26:5e:36:7f:83:c8:9a:26:71: dc:5b:50:2d:c8:8f:cb:11:af:5e:93:7f:31:a0:74: a0:c1:0d:c8:9f:14:13:f4:a2:47:1d:46:d8:f4:71: 26:29:6c:9b:ed:11:a5:8c:dc:3b:f2:f2:40:31:f9: 63:06:a4:94:6d:bc:80:54:b1:bb:c7:3b:2a:bf:7d: ca:e1:2b:31:9c:27:43:a0:64:73:5b:39:af:bc:9f: 2b:91:35:3f:75:3a:d6:8f:06:1b:98:b4:b8:f0:cc: 71:52:6e:4d:d2:c1:6a:1e:ed:d8:21:dc:c4:64:c9: 57:62:11:0c:33:34:51:a7:dd:60:92:16:13:5d:ce: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:07:61:DD:DF:60:4D:21:78:30:E0:78:78:B0:97:DF:4C:C5:44:09 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:87:2d:5d:ea:44:d7:8b:79:e6:d7:ee:3a:a8:15:e2:71: 7c:46:a3:5c:4f:88:88:b3:8c:75:79:58:98:4a:46:c7:5e:35: 79:d7:3a:dc:4e:8f:f9:d9:da:dd:86:45:18:a4:e8:77:9f:53: a0:64:a4:4e:ff:3a:85:38:e1:cc:4e:93:dc:d8:d6:8d:57:d0: 8d:68:7f:92:ef:28:6a:4a:93:7b:f1:94:e2:45:e7:01:ab:a6: d7:d0:92:1f:d9:8d:53:82:58:9a:32:4a:27:4b:39:88:85:72: 33:d8:a6:45:de:33:76:3f:4d:3f:e4:38:02:e8:d8:61:7f:b6: 16:03:12:fa:36:e1:bc:29:28:90:c2:63:fa:f7:d2:86:72:3d: fd:cd:f3:3f:99:5e:86:b3:d2:84:c0:b1:df:39:79:b9:f3:4d: 21:e9:03:15:ec:1d:29:cd:0b:be:69:12:21:b4:e3:80:7c:03: 8e:79:be:63:ca:fc:4a:37:cc:0b:c2:93:17:b9:62:16:00:6c: 3b:f5:11:71:bf:97:af:8d:1c:29:fe:f9:6e:b9:27:26:30:6c: 20:cb:32:4c:5b:a3:a0:df:6f:93:bc:c8:a5:21:fa:ff:8e:6e: db:28:b9:86:db:eb:ff:90:cf:63:e8:de:dc:c3:0e:20:9b:85: c3:e1:56:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOBpJToIW7Be4jo8aBTtGFr0HV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA3MjMyMjQyMzlaFw0yNjA3MjUwMTQzMzlaMDMxMTAvBgNV BAMTKDBFMDc2MUREREY2MDREMjE3ODMwRTA3ODc4QjA5N0RGNENDNTQ0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZp9mACfLojkAa2SjxSezVtr0 MU/5VbHHzLksIw2fOuhh+LH+0iWPiKP2V1yCXxrU3VpbXcZoULhV2cYSmUV9eq0A Rvj8Gy9XpnErNWencZMz7dFRq3Iqutj++NB9tDMsUtuS4qw/L9rd1ZWIaqOchQJy xAWaaoeDLmVg1CZeNn+DyJomcdxbUC3Ij8sRr16TfzGgdKDBDcifFBP0okcdRtj0 cSYpbJvtEaWM3Dvy8kAx+WMGpJRtvIBUsbvHOyq/fcrhKzGcJ0OgZHNbOa+8nyuR NT91OtaPBhuYtLjwzHFSbk3SwWoe7dgh3MRkyVdiEQwzNFGn3WCSFhNdzoJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgdh3d9gTSF4MOB4eLCX30zFRAkwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoChy1d6kTXi3nm1+46qBXicXxGo1xPiIiz jHV5WJhKRsdeNXnXOtxOj/nZ2t2GRRik6HefU6BkpE7/OoU44cxOk9zY1o1X0I1o f5LvKGpKk3vxlOJF5wGrptfQkh/ZjVOCWJoySidLOYiFcjPYpkXeM3Y/TT/kOALo 2GF/thYDEvo24bwpKJDCY/r30oZyPf3N8z+ZXoaz0oTAsd85ebnzTSHpAxXsHSnN C75pEiG044B8A455vmPK/Eo3zAvCkxe5YhYAbDv1EXG/l6+NHCn++W65JyYwbCDL Mkxbo6Dfb5O8yKUh+v+ObtsouYbb6/+Qz2Po3tzDDiCbhcPhVls= -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:17 2026 by rpki-client