$ rpki-client -vvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: a7rKnh7AlphQKchLANFBQUhCzk+0+A6PePbZQ3r1Im8= Subject key identifier: EC:73:D5:CB:E5:E2:87:0D:16:BA:6E:E8:3D:EF:B4:2E:7E:21:71:5F Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 205539566B51DF98DA942C98E214D04AD79AD30A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 20:24:55 +0000 Manifest this update: Thu 23 Jul 2026 20:19:55 +0000 Manifest next update: Fri 24 Jul 2026 20:54:55 +0000 Files and hashes: 1: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: 7vKYsOkRNhAoR+cvRi578gEHwPY9beJG+6Hpw6ZB2DE=) 2: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:55:39:56:6b:51:df:98:da:94:2c:98:e2:14:d0:4a:d7:9a:d3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Jul 23 20:19:55 2026 GMT Not After : Jul 24 20:54:55 2026 GMT Subject: CN=EC73D5CBE5E2870D16BA6EE83DEFB42E7E21715F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:d5:e5:46:7a:d0:21:93:0c:03:84:bd:1d: 98:a0:cf:ea:ad:7f:9c:31:16:0a:0e:7f:90:0c:41: 69:b4:f0:53:bb:3f:c0:7a:0f:4f:53:2d:ad:c4:45: 5b:7f:e0:d2:e2:4c:73:b1:a0:5e:20:22:ca:2b:19: 5c:d2:68:03:93:ee:db:38:27:88:69:f1:10:ed:cc: 37:d3:69:d7:7f:99:e1:ea:aa:ea:4e:f6:15:64:93: 51:72:36:25:c7:33:1e:15:e7:87:29:da:44:ca:99: 9f:6d:05:74:b4:76:c8:1f:8b:b4:7e:55:02:41:a0: 88:ce:8f:c7:e1:f4:92:3a:cf:b1:45:b2:07:3b:26: 81:4c:f8:be:76:79:3d:58:9f:18:53:71:42:97:ac: c0:7a:7b:c2:fe:a3:60:61:ba:bd:0e:42:67:14:db: 95:e4:13:9e:07:37:1c:7a:1f:c0:fb:c7:49:9d:a5: a7:ef:db:25:a8:64:e3:3a:f8:db:ff:39:a4:31:27: f2:b9:97:ca:14:6c:39:42:83:73:e3:6b:dd:30:af: 83:e6:cc:db:8a:e6:4b:56:09:7e:21:9c:bf:33:6c: 5f:e8:a9:d1:de:a4:ae:7d:63:13:87:30:4e:9d:be: e7:84:c0:95:58:46:3d:ec:a8:f2:e8:6a:7c:7f:df: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:D5:CB:E5:E2:87:0D:16:BA:6E:E8:3D:EF:B4:2E:7E:21:71:5F X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:35:00:5b:2c:a3:68:92:84:f5:a8:2b:03:b2:23:e2:32:ff: b9:be:8c:1f:43:c5:d2:14:86:57:ba:8d:f3:e5:55:16:61:36: 6d:cf:60:a7:4c:f5:ad:17:12:e8:69:b9:0d:8e:7f:09:95:d4: 63:4f:45:71:56:87:8a:c5:db:72:c2:2f:a8:bd:11:a4:3d:68: 1a:0e:a7:1c:73:76:db:e6:8f:f9:9a:21:4c:54:5f:b7:b0:3a: 7b:32:34:f9:88:af:3f:94:25:32:60:a7:b4:c2:e7:10:ce:6e: a1:66:62:48:44:ee:4e:76:88:bd:c1:11:5f:d1:90:be:b7:4b: 3a:c5:4b:35:81:05:73:c4:23:41:3c:96:32:13:c4:58:38:cb: b1:d8:1b:35:c4:2e:5c:1d:5f:32:ba:43:4d:d4:9a:19:2c:ea: be:a6:9d:b4:a3:74:80:4b:c8:39:5b:2c:6a:12:8a:d6:2f:f2: 03:f2:d5:67:71:18:c5:97:6d:56:9b:9f:a4:2a:d6:bb:c3:db: 5f:22:52:27:79:d6:20:c9:5c:1b:31:52:15:ed:7f:8c:45:7f: 98:04:c2:b0:db:13:ec:95:b1:29:20:03:d8:ff:c2:9b:f8:8e: 77:ad:64:b3:23:16:22:b8:d0:d3:dd:31:52:26:03:f3:81:e9: 35:f2:35:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFU5VmtR35jalCyY4hTQStea0wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA3MjMyMDE5NTVaFw0yNjA3MjQyMDU0NTVaMDMxMTAvBgNV BAMTKEVDNzNENUNCRTVFMjg3MEQxNkJBNkVFODNERUZCNDJFN0UyMTcxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZudXlRnrQIZMMA4S9HZigz+qt f5wxFgoOf5AMQWm08FO7P8B6D09TLa3ERVt/4NLiTHOxoF4gIsorGVzSaAOT7ts4 J4hp8RDtzDfTadd/meHqqupO9hVkk1FyNiXHMx4V54cp2kTKmZ9tBXS0dsgfi7R+ VQJBoIjOj8fh9JI6z7FFsgc7JoFM+L52eT1YnxhTcUKXrMB6e8L+o2Bhur0OQmcU 25XkE54HNxx6H8D7x0mdpafv2yWoZOM6+Nv/OaQxJ/K5l8oUbDlCg3Pja90wr4Pm zNuK5ktWCX4hnL8zbF/oqdHepK59YxOHME6dvueEwJVYRj3sqPLoanx/38CbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HPVy+Xihw0Wum7oPe+0Ln4hcV8wHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE1AFsso2iShPWoKwOyI+Iy/7m+jB9DxdIU hle6jfPlVRZhNm3PYKdM9a0XEuhpuQ2OfwmV1GNPRXFWh4rF23LCL6i9EaQ9aBoO pxxzdtvmj/maIUxUX7ewOnsyNPmIrz+UJTJgp7TC5xDObqFmYkhE7k52iL3BEV/R kL63SzrFSzWBBXPEI0E8ljITxFg4y7HYGzXELlwdXzK6Q03Umhks6r6mnbSjdIBL yDlbLGoSitYv8gPy1WdxGMWXbVabn6Qq1rvD218iUid51iDJXBsxUhXtf4xFf5gE wrDbE+yVsSkgA9j/wpv4jnetZLMjFiK40NPdMVImA/OB6TXyNec= -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:34 2026 by rpki-client