$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json) Hash identifier: O9FkK2kyIY15SUarJROJCej1SG/Xp7OKQz+tV+/ii1I= Subject key identifier: 5F:64:11:71:8A:B1:BB:7A:68:89:B8:B7:BB:53:F1:1A:01:A2:F6:D0 Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 34D251CCEB3F05723FACA22293A7DE1C263A1A48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 08:45:36 +0000 Manifest this update: Thu 23 Jul 2026 08:40:36 +0000 Manifest next update: Fri 24 Jul 2026 10:36:36 +0000 Files and hashes: 1: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=) 2: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=) 3: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=) 4: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=) 5: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: t3Db9awrafKhxwc6inR20anCH+wv1iblnqm+owTqb2k=) 6: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=) 7: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=) 8: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=) 9: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=) 10: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=) 11: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=) 12: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:51:cc:eb:3f:05:72:3f:ac:a2:22:93:a7:de:1c:26:3a:1a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: Jul 23 08:40:36 2026 GMT Not After : Jul 24 10:36:36 2026 GMT Subject: CN=5F6411718AB1BB7A6889B8B7BB53F11A01A2F6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:d7:e5:9e:f8:26:e5:0c:e3:ae:97:fa:8e: 63:51:1d:96:d6:39:ed:0b:cd:82:25:58:08:1a:a5: 52:13:9b:67:e2:8b:9e:d2:09:66:78:5c:e7:59:4a: d5:16:f4:6f:9f:06:ea:a3:36:d4:f7:96:48:c5:87: cd:c6:c0:c9:3d:97:df:04:6a:67:b4:a9:fa:e1:fa: 50:e4:60:25:5b:0a:c6:85:db:99:15:50:d3:1a:04: f2:16:0f:03:b1:21:ac:b3:22:ff:05:71:b7:9b:86: 90:6a:14:1f:4d:4d:da:06:43:d5:ed:2d:cc:3b:ed: 2e:ff:2d:fe:3a:6d:32:e2:e7:fc:26:77:a6:b0:7c: 35:b9:ee:c2:81:79:44:0e:e1:27:a0:88:2e:a9:6c: 6a:62:ae:4f:77:03:83:b9:f4:b9:55:dc:d0:d4:a7: 96:7e:e9:2d:84:72:a5:df:42:1b:6d:bf:24:2e:65: 1f:a9:ae:44:99:bc:b4:37:6b:de:ee:00:3c:13:5e: 00:df:a9:59:f5:50:70:fc:78:67:fa:1e:5a:c5:dc: 0c:ce:31:10:18:41:eb:b7:e9:f5:b7:83:7c:7a:d0: e5:cd:97:bc:98:fa:90:01:c1:78:da:f2:bc:e3:cf: 2b:71:32:5a:21:e3:7c:f3:39:eb:62:28:3a:ec:3e: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:64:11:71:8A:B1:BB:7A:68:89:B8:B7:BB:53:F1:1A:01:A2:F6:D0 X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:01:e5:70:56:f5:6f:f6:d7:55:79:85:a8:82:f2:ff:e9:ed: a1:b0:61:62:1a:39:f9:54:b5:72:a9:26:06:1a:7f:4b:bb:3c: 2c:5a:b5:21:39:2a:06:bb:80:c6:c8:59:1d:cb:3a:dc:59:46: e9:a6:63:d6:52:e7:ad:d4:53:fa:8e:8e:06:4e:cf:2a:45:52: 13:c3:75:7a:43:5a:7d:95:aa:de:b8:7d:71:95:43:4e:06:7c: 26:fd:bc:cf:bb:88:18:63:ed:bf:91:c3:a7:84:7f:40:54:7a: 0e:86:c0:de:0d:4a:72:2b:a7:13:95:61:3c:d9:40:dc:23:ce: 06:56:36:6a:d8:77:3d:65:09:b1:bc:2b:0a:38:08:94:82:2f: 84:2a:a0:4e:e3:8c:d6:0c:ff:72:e6:8f:8a:bc:da:60:25:db: 5f:00:60:95:9c:9a:33:b9:20:05:c4:c0:81:57:62:81:10:f3: bb:d7:c9:62:3a:64:4a:98:48:e8:06:e6:d3:b7:32:19:1b:67: bb:a8:7d:7f:94:59:5c:53:c6:8f:11:97:04:61:69:55:f6:7a: e9:4c:7e:22:d6:53:cc:6d:3e:b0:7d:0a:e5:34:f9:bd:a3:37: 55:ee:a3:4f:6f:95:83:4e:c0:f7:4a:86:9f:de:ca:11:fd:6d: 6d:9c:82:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNJRzOs/BXI/rKIik6feHCY6GkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA3MjMwODQwMzZaFw0yNjA3MjQxMDM2MzZaMDMxMTAvBgNV BAMTKDVGNjQxMTcxOEFCMUJCN0E2ODg5QjhCN0JCNTNGMTFBMDFBMkY2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjtflnvgm5Qzjrpf6jmNRHZbW Oe0LzYIlWAgapVITm2fii57SCWZ4XOdZStUW9G+fBuqjNtT3lkjFh83GwMk9l98E ame0qfrh+lDkYCVbCsaF25kVUNMaBPIWDwOxIayzIv8FcbebhpBqFB9NTdoGQ9Xt Lcw77S7/Lf46bTLi5/wmd6awfDW57sKBeUQO4SegiC6pbGpirk93A4O59LlV3NDU p5Z+6S2EcqXfQhttvyQuZR+prkSZvLQ3a97uADwTXgDfqVn1UHD8eGf6HlrF3AzO MRAYQeu36fW3g3x60OXNl7yY+pABwXja8rzjzytxMloh43zzOetiKDrsPh5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2QRcYqxu3poibi3u1PxGgGi9tAwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5 RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkB5XBW9W/211V5haiC8v/p7aGwYWIaOflU tXKpJgYaf0u7PCxatSE5Kga7gMbIWR3LOtxZRummY9ZS563UU/qOjgZOzypFUhPD dXpDWn2Vqt64fXGVQ04GfCb9vM+7iBhj7b+Rw6eEf0BUeg6GwN4NSnIrpxOVYTzZ QNwjzgZWNmrYdz1lCbG8Kwo4CJSCL4QqoE7jjNYM/3Lmj4q82mAl218AYJWcmjO5 IAXEwIFXYoEQ87vXyWI6ZEqYSOgG5tO3MhkbZ7uofX+UWVxTxo8RlwRhaVX2eulM fiLWU8xtPrB9CuU0+b2jN1Xuo09vlYNOwPdKhp/eyhH9bW2cglc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:31 2026 by rpki-client