$ rpki-client -vvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: 2KVrpAiCPsGAh/kZaItz/LN1xqiXfg9jsITWIMrpPgM= Subject key identifier: 9E:EF:97:A1:25:1E:D9:BF:BD:9C:41:3B:F7:9F:B4:75:6C:D1:F0:36 Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 592D0BED72542B101F2B9FBA41097ED040B6ACFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:55:34 +0000 Manifest this update: Thu 23 Jul 2026 16:50:34 +0000 Manifest next update: Fri 24 Jul 2026 19:00:34 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: jDIDl1zoN4lDxU2GM+EN/huPnLiHKj6F4zw2MNVxqTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2d:0b:ed:72:54:2b:10:1f:2b:9f:ba:41:09:7e:d0:40:b6:ac:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Jul 23 16:50:34 2026 GMT Not After : Jul 24 19:00:34 2026 GMT Subject: CN=9EEF97A1251ED9BFBD9C413BF79FB4756CD1F036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:dc:d0:30:3d:33:90:c4:9f:3d:3f:36:ba: 0d:2e:4a:69:a3:f0:b0:ed:cb:d3:e7:bd:20:f6:e5: ea:de:1f:c2:04:59:b7:01:8f:6b:7b:87:f5:ba:b2: 4b:74:77:80:9e:05:7d:58:da:67:18:bc:26:6a:04: 4a:99:88:51:30:ec:cf:6d:dd:0f:c0:37:48:ca:36: 78:a1:d3:38:1a:b4:fa:e2:d8:8e:6f:46:d6:32:4a: b5:fd:e3:8e:39:2f:84:6c:bb:da:1b:6f:ff:95:4a: d4:57:9d:35:2c:bd:f1:90:65:bb:b9:17:d9:0f:85: de:cb:c3:64:cb:3c:59:f3:af:22:47:85:85:b4:f0: da:61:df:92:76:95:82:ce:23:6c:1f:c3:62:f2:b7: ee:2f:fb:34:5c:38:d1:a2:22:59:d8:4d:de:28:b8: ee:41:11:0c:30:46:6b:79:2c:e1:da:08:07:da:58: fb:3c:12:ca:f6:cd:07:49:e4:7c:bb:d0:f4:e3:a1: 58:dc:e3:a8:9e:65:c1:d6:c8:b9:a6:79:b8:93:42: ee:f6:a7:50:2f:b6:70:d3:a2:8e:e7:88:b2:27:2f: cf:53:2f:af:f6:0c:d0:95:a0:00:94:05:bc:1c:b6: 08:78:ce:8d:9e:2b:7f:10:5e:4a:fd:da:51:d1:8a: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:97:A1:25:1E:D9:BF:BD:9C:41:3B:F7:9F:B4:75:6C:D1:F0:36 X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b7:9f:af:41:d2:4a:a0:29:fd:20:d1:1e:62:6d:0a:55:1d: cf:48:c2:87:bb:dc:5c:2a:05:02:b9:68:4c:51:27:b0:3e:17: 43:86:fd:c1:5f:0c:a0:8c:3a:b5:54:e5:a3:65:9d:1b:61:5d: 5e:2b:65:22:e4:75:3e:3d:25:a8:c7:c6:95:ad:95:0c:fe:bf: c7:c7:8b:78:2a:94:4d:39:af:fb:65:40:af:a5:4c:74:73:34: 4c:cc:12:ff:46:f2:24:2c:3e:3b:c3:7b:c8:fe:12:75:73:bf: 23:bf:33:bf:68:11:18:b6:df:42:52:d0:ff:9c:6e:b3:9f:50: b0:3f:c1:af:75:2c:dd:78:61:3d:dc:bf:84:7e:ca:a5:da:f3: 0f:1e:54:e3:25:63:3c:3e:c9:89:ca:ab:5c:d5:7d:d6:4d:c4: ee:70:d3:90:a7:57:48:9e:81:4e:76:33:d1:8a:a1:c1:dd:00: 2a:e2:60:b2:b5:ca:51:7b:eb:e4:6b:ca:16:07:99:95:9b:11: 12:ea:1f:13:74:60:3c:ff:ce:91:47:ef:cd:83:d9:39:66:14: 9d:00:5c:34:cf:fa:46:ca:ec:06:55:fb:02:26:81:19:ee:15: 59:c8:62:f6:e9:3d:8a:23:37:22:6e:09:52:3b:5b:7f:bf:e1: 42:f4:dd:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS0L7XJUKxAfK5+6QQl+0EC2rPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA3MjMxNjUwMzRaFw0yNjA3MjQxOTAwMzRaMDMxMTAvBgNV BAMTKDlFRUY5N0ExMjUxRUQ5QkZCRDlDNDEzQkY3OUZCNDc1NkNEMUYwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvM9zQMD0zkMSfPT82ug0uSmmj 8LDty9PnvSD25ereH8IEWbcBj2t7h/W6skt0d4CeBX1Y2mcYvCZqBEqZiFEw7M9t 3Q/AN0jKNnih0zgatPri2I5vRtYySrX94445L4Rsu9obb/+VStRXnTUsvfGQZbu5 F9kPhd7Lw2TLPFnzryJHhYW08Nph35J2lYLOI2wfw2Lyt+4v+zRcONGiIlnYTd4o uO5BEQwwRmt5LOHaCAfaWPs8Esr2zQdJ5Hy70PTjoVjc46ieZcHWyLmmebiTQu72 p1AvtnDToo7niLInL89TL6/2DNCVoACUBbwctgh4zo2eK38QXkr92lHRisdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnu+XoSUe2b+9nEE795+0dWzR8DYwHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK23n69B0kqgKf0g0R5ibQpVHc9Iwoe73Fwq BQK5aExRJ7A+F0OG/cFfDKCMOrVU5aNlnRthXV4rZSLkdT49JajHxpWtlQz+v8fH i3gqlE05r/tlQK+lTHRzNEzMEv9G8iQsPjvDe8j+EnVzvyO/M79oERi230JS0P+c brOfULA/wa91LN14YT3cv4R+yqXa8w8eVOMlYzw+yYnKq1zVfdZNxO5w05CnV0ie gU52M9GKocHdACriYLK1ylF76+RryhYHmZWbERLqHxN0YDz/zpFH782D2TlmFJ0A XDTP+kbK7AZV+wImgRnuFVnIYvbpPYojNyJuCVI7W3+/4UL03Q4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:19 2026 by rpki-client