$ rpki-client -vvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: Fxgxvh5+P18y5Iy/dD/frAIqWFsMan9HvJY6kL9Cmyk= Subject key identifier: 28:9E:9C:34:18:E3:8B:52:23:52:B5:72:D7:A8:80:85:E3:83:CF:C2 Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 2EDE9744F34F5BF3E5C0D215DB8DAAD77B0C91DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:04:13 +0000 Manifest this update: Thu 23 Jul 2026 23:59:13 +0000 Manifest next update: Sat 25 Jul 2026 03:27:13 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: UdDX4fsB/hTdgOz7efbZZv/Y6V0PsWhzF8mHuJ0k/ws=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:de:97:44:f3:4f:5b:f3:e5:c0:d2:15:db:8d:aa:d7:7b:0c:91:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Jul 23 23:59:13 2026 GMT Not After : Jul 25 03:27:13 2026 GMT Subject: CN=289E9C3418E38B522352B572D7A88085E383CFC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:a4:06:d8:fd:69:be:07:08:b1:e9:3a:78: 79:b5:0c:bc:6b:c4:cc:f7:9e:90:23:0a:a9:ee:45: fe:67:35:c4:20:7f:4c:4e:ea:7d:20:e4:c9:7e:00: 86:da:cf:2c:60:4b:9a:e5:e2:a6:f2:08:67:8c:b2: 3a:31:6e:cf:9e:39:3d:c9:25:b9:cf:48:5b:ad:63: 5e:fd:0a:6f:6a:4b:c9:40:da:92:8d:55:72:28:16: 3c:bb:fd:96:b8:cc:1b:ac:15:20:52:ab:e4:19:db: 21:a8:10:ce:b7:c7:84:5d:00:13:47:80:39:68:9a: 8d:ce:41:61:3d:69:27:a4:15:00:d4:aa:20:b5:d0: 1b:2c:db:28:9f:75:c2:b9:d8:4b:04:29:ac:60:6b: 5a:21:f2:66:20:cd:79:06:ea:1a:ab:34:5e:e7:2a: 09:fb:d7:77:6b:24:4f:87:a4:24:d0:56:bc:6b:1d: f1:3f:2b:94:eb:13:2d:47:0c:d2:9d:a0:e7:55:b9: bb:c0:8f:91:89:d0:1b:e8:e7:f0:c1:47:18:6b:83: ef:38:ed:93:fe:07:b0:d8:00:64:5f:67:95:36:4f: 91:fd:00:da:c2:11:e2:25:40:fa:63:35:59:ef:97: 6f:d4:7e:53:c8:87:43:5b:29:14:0c:ab:98:ee:67: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9E:9C:34:18:E3:8B:52:23:52:B5:72:D7:A8:80:85:E3:83:CF:C2 X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0f:0e:cd:26:f6:2b:16:25:80:fd:4e:70:73:cf:06:5e:8e: cf:88:e7:d7:e5:e9:75:ed:80:d9:6f:e8:3c:18:7c:92:a5:78: ce:83:c4:45:0e:a1:a4:45:1a:d4:ba:4c:a1:e2:9c:d9:f7:cc: cf:56:2a:44:92:be:27:6d:65:16:0d:cd:c1:41:9c:f5:60:60: 9b:ef:9e:1f:77:a8:e7:4b:17:bd:ef:b3:19:37:f3:a1:cd:61: 53:0b:a7:07:9f:cc:1b:b8:5b:a5:87:8f:8c:43:ac:34:57:f9: 35:b5:bc:16:d7:c1:c8:20:39:15:6e:52:2d:78:06:cb:66:56: b4:14:48:77:ee:13:91:2e:93:60:9b:94:b1:ae:e7:d2:8c:4b: ca:b9:04:da:86:58:5e:47:9a:f8:65:50:db:2a:5b:15:ad:19: ec:0f:5a:99:4f:35:e8:39:a1:77:f6:4b:e5:2a:f1:dc:8a:55: 3d:aa:dc:0f:80:3a:52:42:61:58:fc:ad:06:5b:46:39:41:69: 65:f0:c0:2e:8d:4a:a7:ca:3c:70:a6:dc:4f:85:76:4a:ef:d8: 60:40:ee:7f:50:a6:ee:97:c6:14:6f:77:aa:9c:39:a4:79:cf: 8c:9a:b9:0e:17:ce:49:47:0c:a4:79:86:c3:f6:20:50:fc:37: ed:a7:f8:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULt6XRPNPW/PlwNIV242q13sMkd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA3MjMyMzU5MTNaFw0yNjA3MjUwMzI3MTNaMDMxMTAvBgNV BAMTKDI4OUU5QzM0MThFMzhCNTIyMzUyQjU3MkQ3QTg4MDg1RTM4M0NGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJ6QG2P1pvgcIsek6eHm1DLxr xMz3npAjCqnuRf5nNcQgf0xO6n0g5Ml+AIbazyxgS5rl4qbyCGeMsjoxbs+eOT3J JbnPSFutY179Cm9qS8lA2pKNVXIoFjy7/Za4zBusFSBSq+QZ2yGoEM63x4RdABNH gDlomo3OQWE9aSekFQDUqiC10Bss2yifdcK52EsEKaxga1oh8mYgzXkG6hqrNF7n Kgn713drJE+HpCTQVrxrHfE/K5TrEy1HDNKdoOdVubvAj5GJ0Bvo5/DBRxhrg+84 7ZP+B7DYAGRfZ5U2T5H9ANrCEeIlQPpjNVnvl2/UflPIh0NbKRQMq5juZ9NdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJ6cNBjji1IjUrVy16iAheODz8IwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQPDs0m9isWJYD9TnBzzwZejs+I59fl6XXt gNlv6DwYfJKleM6DxEUOoaRFGtS6TKHinNn3zM9WKkSSvidtZRYNzcFBnPVgYJvv nh93qOdLF73vsxk386HNYVMLpwefzBu4W6WHj4xDrDRX+TW1vBbXwcggORVuUi14 BstmVrQUSHfuE5Euk2CblLGu59KMS8q5BNqGWF5HmvhlUNsqWxWtGewPWplPNeg5 oXf2S+Uq8dyKVT2q3A+AOlJCYVj8rQZbRjlBaWXwwC6NSqfKPHCm3E+Fdkrv2GBA 7n9Qpu6XxhRvd6qcOaR5z4yauQ4XzklHDKR5hsP2IFD8N+2n+A4= -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:55 2026 by rpki-client