$ rpki-client -vvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: rIP6yIkra4hAhUTq+ZwWielOwK+DRVsMmHd8uk09Z80= Subject key identifier: 70:C3:9F:D3:AE:40:F5:8D:B1:17:4B:5A:77:4E:21:03:7D:32:C6:A6 Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 5019769E8313FF6C88543B1451630FB7E4D32778 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:21:17 +0000 Manifest this update: Thu 23 Jul 2026 17:16:17 +0000 Manifest next update: Fri 24 Jul 2026 20:29:17 +0000 Files and hashes: 1: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: bcP3duDl0TxPJTUoNmylGY3FeLjQhoA514UAIj3KWA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:19:76:9e:83:13:ff:6c:88:54:3b:14:51:63:0f:b7:e4:d3:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Jul 23 17:16:17 2026 GMT Not After : Jul 24 20:29:17 2026 GMT Subject: CN=70C39FD3AE40F58DB1174B5A774E21037D32C6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:04:69:b3:f5:ca:06:57:66:03:a1:34:f2: 70:60:74:d7:29:2b:21:93:8e:8b:bc:5c:ae:b2:4d: da:35:ed:9a:fd:98:54:7a:78:8c:d9:1d:3c:60:42: 37:c4:6f:f7:6c:f8:37:9d:1e:18:b0:d4:0c:48:10: 1a:91:c7:fa:8e:2f:ae:70:60:40:d3:79:d3:19:de: da:e0:3b:58:e4:85:5e:1d:b6:93:1c:c4:f0:05:27: 74:c5:11:fb:05:55:c1:59:be:5b:6c:47:40:1e:6e: d6:d3:48:bb:70:80:47:1d:6e:f9:f5:ad:db:bd:49: 47:ab:dd:65:20:37:17:2e:1c:3a:aa:14:25:5b:b3: d4:d4:33:1e:14:11:57:27:a1:97:34:98:85:a7:4a: 18:66:85:21:f1:78:03:15:f2:64:cf:98:73:64:77: 3f:2b:d1:ff:61:2f:f1:7c:96:e2:11:1e:fc:d8:21: 25:31:93:d8:39:09:36:f1:48:c3:d6:5f:d7:7f:58: 13:3e:ed:f9:e6:18:d7:d5:fd:3e:89:3e:30:f9:70: 47:2b:8f:3c:77:e0:69:7c:8f:47:29:e9:75:07:07: 33:0b:23:7e:7a:0a:6a:7c:ac:5e:3e:4e:80:aa:6d: fe:b8:b6:81:53:57:b7:18:1d:4e:37:36:df:33:46: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:9F:D3:AE:40:F5:8D:B1:17:4B:5A:77:4E:21:03:7D:32:C6:A6 X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e8:1b:71:1e:87:6f:0a:f6:e3:24:c9:87:11:30:b2:b1:01: 9c:13:3e:0a:5c:d3:54:f4:ff:49:3c:7f:1a:fe:f3:7f:2d:3b: 37:b6:90:20:b2:03:18:a4:59:aa:38:67:eb:34:58:e4:47:91: 6d:c5:f3:6c:d1:43:66:f2:50:12:b2:91:9b:27:d6:09:1c:36: 8b:fd:11:60:f8:7a:81:0b:c9:b4:d7:17:6c:a8:13:a1:d8:72: 3e:2e:ed:85:82:ab:ec:2d:1c:ef:1e:4a:bb:2c:d2:2f:25:da: fc:2c:55:ef:5c:f9:c7:2d:92:2b:a5:18:1e:47:9d:74:44:1c: dc:0f:69:43:c2:f7:cc:4f:2f:7b:4f:8b:fc:0c:df:fb:c8:45: 40:33:a7:f7:a6:82:21:a3:fc:c6:e3:9c:97:8a:db:60:4e:3e: e2:05:5f:ef:b9:97:5f:39:41:b3:51:7f:5e:5e:76:05:81:3a: 33:14:bd:95:3a:c5:cf:b7:9e:3f:f0:e5:7a:5f:c4:0c:01:d1: c8:2b:fc:21:db:d0:e6:bc:09:95:7f:bc:00:f6:da:76:46:ae: a8:9b:9f:02:4a:4b:27:74:fb:6b:ae:6a:c4:52:8d:79:0b:46: 3d:c3:17:96:c1:92:ff:14:b6:7d:6e:92:70:a6:3f:7b:ba:c6: ad:06:b2:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBl2noMT/2yIVDsUUWMPt+TTJ3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA3MjMxNzE2MTdaFw0yNjA3MjQyMDI5MTdaMDMxMTAvBgNV BAMTKDcwQzM5RkQzQUU0MEY1OERCMTE3NEI1QTc3NEUyMTAzN0QzMkM2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXARps/XKBldmA6E08nBgdNcp KyGTjou8XK6yTdo17Zr9mFR6eIzZHTxgQjfEb/ds+DedHhiw1AxIEBqRx/qOL65w YEDTedMZ3trgO1jkhV4dtpMcxPAFJ3TFEfsFVcFZvltsR0AebtbTSLtwgEcdbvn1 rdu9SUer3WUgNxcuHDqqFCVbs9TUMx4UEVcnoZc0mIWnShhmhSHxeAMV8mTPmHNk dz8r0f9hL/F8luIRHvzYISUxk9g5CTbxSMPWX9d/WBM+7fnmGNfV/T6JPjD5cEcr jzx34Gl8j0cp6XUHBzMLI356Cmp8rF4+ToCqbf64toFTV7cYHU43Nt8zRrSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMOf065A9Y2xF0tad04hA30yxqYwHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvoG3Eeh28K9uMkyYcRMLKxAZwTPgpc01T0 /0k8fxr+838tOze2kCCyAxikWao4Z+s0WORHkW3F82zRQ2byUBKykZsn1gkcNov9 EWD4eoELybTXF2yoE6HYcj4u7YWCq+wtHO8eSrss0i8l2vwsVe9c+cctkiulGB5H nXREHNwPaUPC98xPL3tPi/wM3/vIRUAzp/emgiGj/MbjnJeK22BOPuIFX++5l185 QbNRf15edgWBOjMUvZU6xc+3nj/w5XpfxAwB0cgr/CHb0Oa8CZV/vAD22nZGrqib nwJKSyd0+2uuasRSjXkLRj3DF5bBkv8Utn1uknCmP3u6xq0GskA= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:06 2026 by rpki-client