$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: pIOR3uzf8KlnJyeq4lrtZRsBlYq0GfC0YQE2Y1cO1BE= Subject key identifier: C9:95:C9:12:7C:50:3C:21:BF:07:19:EA:47:7E:D7:72:5D:46:BD:98 Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 69E2BA722529467EB95422A5695E9027C4C05F3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:43:51 +0000 Manifest this update: Fri 24 Jul 2026 03:38:51 +0000 Manifest next update: Sat 25 Jul 2026 05:32:51 +0000 Files and hashes: 1: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: 1pVl8KHI2xXOiv8Tfmr4E7YGeAgZBVqN2WCOIZebXaU=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e2:ba:72:25:29:46:7e:b9:54:22:a5:69:5e:90:27:c4:c0:5f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Jul 24 03:38:51 2026 GMT Not After : Jul 25 05:32:51 2026 GMT Subject: CN=C995C9127C503C21BF0719EA477ED7725D46BD98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:59:08:b2:4c:c0:8d:d9:18:17:9b:21:d9: 30:9e:10:0c:83:c0:63:7b:77:0b:6a:e6:2b:45:a3: 9c:60:66:b3:a6:63:93:50:1a:6b:db:99:b6:4f:ae: 34:0e:42:dd:2b:18:8b:e2:12:8d:9f:8f:1a:03:8e: 5e:e1:d7:00:ae:36:c5:90:29:bc:cb:96:ac:54:b6: c8:d4:a1:72:61:ce:09:ae:1e:fe:64:7d:5a:e0:b9: e2:bc:a0:fb:8a:c1:df:f8:6e:10:24:41:a5:ed:26: 04:f4:a0:69:39:40:76:7c:d1:48:9b:3c:65:60:a6: 2a:40:e4:1a:29:fa:44:11:22:2b:46:65:3d:e7:eb: 95:93:5c:2e:bb:c8:1d:b8:c0:8b:81:7e:f9:51:41: 58:73:d0:71:d4:e5:b9:35:04:b2:8a:58:2f:1b:de: 65:78:ef:bd:6a:2a:19:48:49:6c:eb:c0:16:33:8c: 5b:68:da:4d:d1:0a:99:38:95:65:d5:02:54:5e:1f: 49:ba:d0:cc:e0:32:4b:83:c7:b6:c3:b7:84:f7:ef: 2b:fa:e2:ba:71:e7:d9:6e:8a:4d:c5:48:2c:b1:42: 10:c8:63:84:0f:8e:55:4b:5e:a9:22:14:66:97:21: a1:89:ed:d2:31:2d:1d:48:ad:73:5c:26:7e:9d:76: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:C9:12:7C:50:3C:21:BF:07:19:EA:47:7E:D7:72:5D:46:BD:98 X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9e:cd:d9:fc:77:81:7c:b8:a5:a4:74:93:68:c7:96:26:18: 27:3e:9d:14:e1:54:2d:db:d7:a8:37:a9:83:c7:f2:b6:46:dc: e8:20:04:c2:59:0f:8b:2a:ca:ef:eb:7c:13:ae:53:1b:78:3e: 32:68:0e:44:70:fb:4b:09:d3:13:0a:63:d6:1b:25:c9:60:d8: d7:72:6b:52:d4:52:7c:dd:9e:a4:ce:6c:fc:de:1d:64:b1:72: 5e:7c:53:aa:7d:12:12:47:78:c4:c5:1e:11:b8:b7:51:52:82: 07:4d:58:3e:2b:af:e7:b9:fd:66:5b:fb:27:27:da:1a:4e:95: 80:55:b6:d7:5e:f8:49:71:b5:e5:07:2f:fd:83:b9:0e:c3:0f: 66:1e:69:74:c5:e8:d9:50:3a:58:77:a7:fd:4f:9c:7e:65:50: 11:46:0c:57:ab:d5:f3:82:02:b9:d5:a6:0a:9f:85:53:8f:6c: e4:74:d6:53:bd:e0:af:a6:9e:4b:a7:4b:57:44:a8:d5:57:80: 38:c8:8a:96:d7:df:b8:00:b8:9d:10:a9:1d:83:d2:1c:6c:f2: 5c:3e:82:7a:df:bc:e3:0b:ca:bd:31:40:3e:f9:85:5f:a2:09: 09:28:9f:d4:26:21:1f:72:3f:45:14:b6:3a:ce:9a:8c:7c:cc: 98:42:b5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeK6ciUpRn65VCKlaV6QJ8TAXz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA3MjQwMzM4NTFaFw0yNjA3MjUwNTMyNTFaMDMxMTAvBgNV BAMTKEM5OTVDOTEyN0M1MDNDMjFCRjA3MTlFQTQ3N0VENzcyNUQ0NkJEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnq1kIskzAjdkYF5sh2TCeEAyD wGN7dwtq5itFo5xgZrOmY5NQGmvbmbZPrjQOQt0rGIviEo2fjxoDjl7h1wCuNsWQ KbzLlqxUtsjUoXJhzgmuHv5kfVrgueK8oPuKwd/4bhAkQaXtJgT0oGk5QHZ80Uib PGVgpipA5Bop+kQRIitGZT3n65WTXC67yB24wIuBfvlRQVhz0HHU5bk1BLKKWC8b 3mV4771qKhlISWzrwBYzjFto2k3RCpk4lWXVAlReH0m60MzgMkuDx7bDt4T37yv6 4rpx59luik3FSCyxQhDIY4QPjlVLXqkiFGaXIaGJ7dIxLR1IrXNcJn6ddtgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZXJEnxQPCG/BxnqR37Xcl1GvZgwHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyezdn8d4F8uKWkdJNox5YmGCc+nRThVC3b 16g3qYPH8rZG3OggBMJZD4sqyu/rfBOuUxt4PjJoDkRw+0sJ0xMKY9YbJclg2Ndy a1LUUnzdnqTObPzeHWSxcl58U6p9EhJHeMTFHhG4t1FSggdNWD4rr+e5/WZb+ycn 2hpOlYBVttde+ElxteUHL/2DuQ7DD2YeaXTF6NlQOlh3p/1PnH5lUBFGDFer1fOC ArnVpgqfhVOPbOR01lO94K+mnkunS1dEqNVXgDjIipbX37gAuJ0QqR2D0hxs8lw+ gnrfvOMLyr0xQD75hV+iCQkon9QmIR9yP0UUtjrOmox8zJhCtTE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:43 2026 by rpki-client