$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: sxuRAH20uCevwuo9i1JY8weELrw+lFAFfzlIgttDVIA= Subject key identifier: A5:64:70:8C:51:92:2F:A0:34:A8:14:E8:44:D9:97:A5:54:15:24:19 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 27AEFC0E892E0143652B8543282EE71B73C5B14F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:03:05 +0000 Manifest this update: Fri 24 Jul 2026 02:58:05 +0000 Manifest next update: Sat 25 Jul 2026 04:18:05 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) 2: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: 2jFoKu7Xe0x1/bE1ey0/DJ1DZ9bMpLpur3bOVUXW8uQ=) 3: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ae:fc:0e:89:2e:01:43:65:2b:85:43:28:2e:e7:1b:73:c5:b1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: Jul 24 02:58:05 2026 GMT Not After : Jul 25 04:18:05 2026 GMT Subject: CN=A564708C51922FA034A814E844D997A554152419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:ba:ed:03:8c:03:e9:5d:7e:aa:7c:fd:e2: f6:97:37:d6:2e:be:23:a7:fb:84:bd:d7:88:32:6b: 36:d8:d7:59:34:af:73:65:7e:02:ae:50:88:c7:16: 9a:61:df:22:e7:bd:2f:d4:96:3b:b6:69:5a:ed:5b: 09:85:2b:c8:90:26:dc:56:8d:0e:94:27:13:03:92: f9:f4:5a:02:b0:86:7b:65:05:e9:ab:0c:5a:88:35: e1:c0:db:46:cc:3c:a5:0c:40:f4:07:ec:3a:63:cc: aa:14:c0:c3:c3:77:39:4d:27:f6:81:35:45:c1:b2: 66:93:9d:79:50:8f:34:b1:43:c8:e7:75:22:ad:83: 26:3a:20:c4:b9:c4:2e:ef:1e:68:97:70:87:94:8d: de:37:3a:51:3c:2d:32:68:a3:6c:95:6f:2c:38:19: ac:35:8a:c3:9a:ed:28:3b:67:15:f0:6b:39:dd:7a: 53:0b:d3:9b:1c:93:fb:28:9b:50:63:a1:1b:df:eb: 8d:09:da:3b:be:d9:de:92:71:8f:0e:0c:83:20:3f: 54:bb:2b:37:35:55:c4:c7:a2:88:99:65:91:b7:11: fe:f5:f9:bc:3a:ce:55:9e:de:97:fc:ba:8f:ad:e1: d9:02:e5:82:38:98:d5:75:a5:8c:8d:69:fe:e6:4e: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:70:8C:51:92:2F:A0:34:A8:14:E8:44:D9:97:A5:54:15:24:19 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:58:0b:d1:55:d0:ce:23:7c:2e:60:2b:26:5f:51:10:f6:c0: c8:4d:df:37:6b:9a:c0:68:d1:e2:3e:87:09:60:48:27:88:a7: b0:21:da:82:39:c8:98:b5:39:90:0e:70:56:54:b8:eb:72:db: 53:f0:b2:ca:4c:f3:9c:58:0e:a9:f4:41:3b:ef:27:d0:4d:aa: 54:89:0b:5b:60:9d:6b:6c:84:f7:d6:3f:5e:ef:a2:c7:4a:a0: 69:03:ad:f7:96:2c:a9:ce:19:00:4e:b5:1e:ce:d4:13:1f:ab: e3:a8:cd:4e:97:fc:28:85:a8:61:fa:2d:53:51:c8:52:9d:14: c4:24:86:f6:08:11:1f:02:0c:1f:d3:c1:15:07:ad:8d:fe:3e: 65:73:8c:95:e4:98:e5:68:a9:27:f8:b0:d0:e7:9c:a1:83:f6: 1b:21:e4:2b:55:33:e0:75:da:29:f3:c5:28:39:b4:8f:75:d3: 71:7a:5b:3d:d4:ed:b7:56:9a:16:c4:6a:12:f4:cb:14:0f:72: 21:cb:98:b2:2d:9c:d7:82:34:45:71:5d:2f:19:eb:83:dc:f3: bb:31:e6:3f:64:bf:55:bc:a4:ce:d4:1b:3d:82:68:d0:27:76: 94:07:3e:8e:5c:90:12:22:67:ef:08:45:26:18:d1:0d:92:09: 67:9d:9a:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ678DokuAUNlK4VDKC7nG3PFsU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA3MjQwMjU4MDVaFw0yNjA3MjUwNDE4MDVaMDMxMTAvBgNV BAMTKEE1NjQ3MDhDNTE5MjJGQTAzNEE4MTRFODQ0RDk5N0E1NTQxNTI0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizrrtA4wD6V1+qnz94vaXN9Yu viOn+4S914gyazbY11k0r3NlfgKuUIjHFpph3yLnvS/Ulju2aVrtWwmFK8iQJtxW jQ6UJxMDkvn0WgKwhntlBemrDFqINeHA20bMPKUMQPQH7DpjzKoUwMPDdzlNJ/aB NUXBsmaTnXlQjzSxQ8jndSKtgyY6IMS5xC7vHmiXcIeUjd43OlE8LTJoo2yVbyw4 Gaw1isOa7Sg7ZxXwazndelML05sck/som1BjoRvf640J2ju+2d6ScY8ODIMgP1S7 Kzc1VcTHooiZZZG3Ef71+bw6zlWe3pf8uo+t4dkC5YI4mNV1pYyNaf7mTrj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWRwjFGSL6A0qBToRNmXpVQVJBkwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhYC9FV0M4jfC5gKyZfURD2wMhN3zdrmsBo 0eI+hwlgSCeIp7Ah2oI5yJi1OZAOcFZUuOty21PwsspM85xYDqn0QTvvJ9BNqlSJ C1tgnWtshPfWP17vosdKoGkDrfeWLKnOGQBOtR7O1BMfq+OozU6X/CiFqGH6LVNR yFKdFMQkhvYIER8CDB/TwRUHrY3+PmVzjJXkmOVoqSf4sNDnnKGD9hsh5CtVM+B1 2inzxSg5tI9103F6Wz3U7bdWmhbEahL0yxQPciHLmLItnNeCNEVxXS8Z64Pc87sx 5j9kv1W8pM7UGz2CaNAndpQHPo5ckBIiZ+8IRSYY0Q2SCWedms8= -----END CERTIFICATE-----Generated at Fri Jul 24 14:23:57 2026 by rpki-client