$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: oyCuzsmEiWsQ4Rfv7JZrIFHrZt9JbldanE6rqUPXHos= Subject key identifier: DE:6E:54:ED:7D:E5:55:13:75:FD:25:4E:CD:CA:FB:1D:FC:B5:42:15 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 116F46E87E091171FBC1C7F3DCBE5DA8DF863067 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 08:14:33 +0000 Manifest this update: Fri 24 Jul 2026 08:09:33 +0000 Manifest next update: Sat 25 Jul 2026 08:35:33 +0000 Files and hashes: 1: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: /1c0Wyuqhp5Swi69qXuu0CjMImiEB4XFDapsId8x2Rs=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) 3: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6f:46:e8:7e:09:11:71:fb:c1:c7:f3:dc:be:5d:a8:df:86:30:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Jul 24 08:09:33 2026 GMT Not After : Jul 25 08:35:33 2026 GMT Subject: CN=DE6E54ED7DE5551375FD254ECDCAFB1DFCB54215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:c4:6c:75:96:4d:ba:ea:1d:f0:a1:33:c6: 6c:9f:5e:f4:57:f8:34:d6:c7:92:36:19:97:2a:8d: 22:e7:d5:bf:61:e4:4b:14:e6:fe:50:50:3f:89:6f: 96:40:25:5b:9a:b6:00:4a:bb:dc:8c:6d:98:de:9d: c6:3f:e8:c5:42:eb:8e:fd:b0:7d:1f:b9:91:c7:8e: d1:26:6e:75:b6:28:83:61:a8:4a:69:72:36:99:e8: 8b:12:16:18:c6:9b:23:f4:7a:f9:aa:54:7d:1b:44: 0a:15:c6:7d:98:aa:93:bb:83:b2:a7:14:02:47:07: a1:dc:f0:65:cd:f6:a5:b3:7b:6c:87:53:49:0f:73: 0b:c9:7c:62:79:d6:c1:2d:04:e3:00:2a:4c:b1:b7: 7f:ff:d6:f5:db:1c:84:3a:3d:34:cd:aa:2d:cb:01: f1:34:5b:17:56:2e:c1:5d:5e:58:17:78:5e:e0:b4: 5b:b1:ef:f0:ab:15:fe:8c:a2:87:68:39:f5:64:7c: c3:65:f5:32:a4:c3:3d:b9:56:f7:02:34:11:45:8f: 18:a2:cc:bc:32:8b:aa:f3:c6:56:53:68:d2:9d:7f: 3e:bf:12:d1:34:e3:94:09:96:46:df:99:94:30:bd: c6:62:f2:9d:34:4d:68:5a:66:ca:21:b6:ee:97:a7: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6E:54:ED:7D:E5:55:13:75:FD:25:4E:CD:CA:FB:1D:FC:B5:42:15 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:af:d3:7b:e0:85:c8:39:39:b1:b7:87:cb:fd:91:7f:4e:df: f7:57:ba:fd:71:dc:41:36:7e:5b:b1:df:51:d7:41:bc:bd:27: 1f:c2:29:fa:0f:f3:f1:73:69:72:a3:33:2c:f2:9e:23:67:0d: 29:14:08:24:78:e8:ac:ec:7c:4d:63:23:1b:40:63:99:79:d3: f9:13:77:cd:33:2f:52:50:f7:cb:b9:fd:7f:8d:b7:e3:72:15: f7:52:ea:56:f1:19:cc:f1:88:b6:bb:f8:63:f5:71:7e:3f:a8: 73:cf:63:1f:c3:d2:ed:f5:dd:a7:3b:52:e0:cb:8a:81:f5:65: 31:e9:aa:5d:88:53:c0:ca:ff:e3:32:16:61:f8:3c:ba:e6:6d: 4b:9e:cf:b0:9e:eb:1c:28:cd:ad:f7:f5:9c:35:62:32:7b:9d: cb:c0:bc:5c:d1:62:6c:42:a5:45:54:50:49:29:ac:3f:c4:71: 1a:93:d3:09:dc:e7:66:cc:c8:0b:03:4c:dc:8c:f3:8a:1f:bf: cd:a4:2f:2a:96:20:4f:02:35:47:99:26:d8:49:ff:c9:5d:12: fc:19:d5:ca:c9:50:fe:e3:73:65:19:ca:9c:df:b8:05:70:36: 0a:65:b8:fe:23:8e:19:ed:a7:88:fa:2c:9b:eb:cc:9e:2e:a3: c8:97:29:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEW9G6H4JEXH7wcfz3L5dqN+GMGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA3MjQwODA5MzNaFw0yNjA3MjUwODM1MzNaMDMxMTAvBgNV BAMTKERFNkU1NEVEN0RFNTU1MTM3NUZEMjU0RUNEQ0FGQjFERkNCNTQyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15cRsdZZNuuod8KEzxmyfXvRX +DTWx5I2GZcqjSLn1b9h5EsU5v5QUD+Jb5ZAJVuatgBKu9yMbZjencY/6MVC6479 sH0fuZHHjtEmbnW2KINhqEppcjaZ6IsSFhjGmyP0evmqVH0bRAoVxn2YqpO7g7Kn FAJHB6Hc8GXN9qWze2yHU0kPcwvJfGJ51sEtBOMAKkyxt3//1vXbHIQ6PTTNqi3L AfE0WxdWLsFdXlgXeF7gtFux7/CrFf6MoodoOfVkfMNl9TKkwz25VvcCNBFFjxii zLwyi6rzxlZTaNKdfz6/EtE045QJlkbfmZQwvcZi8p00TWhaZsohtu6Xp8MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3m5U7X3lVRN1/SVOzcr7Hfy1QhUwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICv03vghcg5ObG3h8v9kX9O3/dXuv1x3EE2 flux31HXQby9Jx/CKfoP8/FzaXKjMyzyniNnDSkUCCR46KzsfE1jIxtAY5l50/kT d80zL1JQ98u5/X+Nt+NyFfdS6lbxGczxiLa7+GP1cX4/qHPPYx/D0u313ac7UuDL ioH1ZTHpql2IU8DK/+MyFmH4PLrmbUuez7Ce6xwoza339Zw1YjJ7ncvAvFzRYmxC pUVUUEkprD/EcRqT0wnc52bMyAsDTNyM84ofv82kLyqWIE8CNUeZJthJ/8ldEvwZ 1crJUP7jc2UZypzfuAVwNgpluP4jjhntp4j6LJvrzJ4uo8iXKdg= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:38 2026 by rpki-client