$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: 243+2yDJPZho7yBosnhVOQ6pkgA8XLd4pdl7CDdkSNU= Subject key identifier: 57:A2:F9:9C:34:7B:6E:8F:9F:00:09:CF:50:72:E8:18:EF:7D:04:F3 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 186336CAA9ED589E2077F888BAB08FB8B010DA83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:10:32 +0000 Manifest this update: Fri 24 Jul 2026 01:05:32 +0000 Manifest next update: Sat 25 Jul 2026 03:12:32 +0000 Files and hashes: 1: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: kU8VOz8HYMSxY22jV34p+PLlEZV6o6LbR3jbxp/8FGQ=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:63:36:ca:a9:ed:58:9e:20:77:f8:88:ba:b0:8f:b8:b0:10:da:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Jul 24 01:05:32 2026 GMT Not After : Jul 25 03:12:32 2026 GMT Subject: CN=57A2F99C347B6E8F9F0009CF5072E818EF7D04F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:30:f2:37:c1:dc:27:98:24:e2:28:1e:76: 04:dc:f8:b8:eb:0c:63:97:19:8e:e6:53:88:ab:5a: ce:a4:91:65:7c:f4:ee:b4:70:dc:6f:83:d8:f9:ed: be:5f:d2:5a:14:c9:a7:37:2e:d0:48:f7:ee:d5:e6: ad:ec:de:9d:83:3c:b0:43:20:92:58:57:4d:18:f4: 84:c7:03:63:4f:26:20:47:81:88:98:af:ca:45:cd: 3c:07:ac:4d:a0:01:aa:01:87:79:3b:f2:a5:8a:e8: 04:5d:0d:e4:1d:4f:f3:4b:7d:fc:db:c9:47:7a:84: 15:0c:24:3c:b2:bf:ce:dc:13:56:36:99:05:1b:0f: e6:e5:38:b8:df:21:96:ec:e6:bb:d3:3d:54:55:7b: 62:16:6e:b2:f8:f1:7f:92:94:b3:24:2e:15:82:53: cd:52:de:28:42:6f:1e:8b:6d:b8:ea:7a:ed:81:3c: fd:57:bb:bb:e7:72:33:f5:80:95:39:27:5b:0e:9d: 5a:bf:9d:2d:11:21:ce:aa:ba:bb:16:16:f1:4e:62: cf:05:3c:31:9e:95:26:02:49:35:52:ed:8a:e0:d0: 62:6b:63:49:90:d2:ed:af:b3:43:0b:83:f7:95:ae: b6:f6:82:65:85:ae:ad:ff:c3:43:e7:77:12:29:a2: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A2:F9:9C:34:7B:6E:8F:9F:00:09:CF:50:72:E8:18:EF:7D:04:F3 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5f:32:d5:7b:4f:b6:34:c0:9d:e2:ee:b2:e1:bb:9c:a7:22: 80:97:01:5f:af:9a:7c:58:dc:da:40:32:81:42:93:bc:fe:e1: ab:2b:62:20:0d:0e:e7:ea:ca:90:23:b5:fc:29:00:98:ae:4f: 74:ec:a8:e2:51:2e:a9:02:10:0b:72:10:cb:9b:81:bd:24:cb: 76:88:08:01:9b:f7:4c:94:a2:18:86:3c:bb:fc:d5:9a:19:b0: a6:0f:7f:4c:87:c0:90:79:f2:c2:1a:11:76:c0:74:b1:6a:ca: d5:32:1f:f4:24:77:84:33:cf:4f:c1:55:11:ae:af:e6:4a:c8: 08:ef:f1:42:b4:d4:9c:81:75:3b:c8:17:e7:78:22:9a:b3:1e: d1:72:a8:86:67:e8:2c:d2:f3:82:50:e5:5f:33:1d:1b:c0:a3: 6b:f9:52:60:f6:bb:0d:ad:f3:ec:54:ab:7b:23:1f:ca:26:fd: 85:bb:d3:1e:84:0e:4d:fc:81:80:dc:49:13:76:43:ae:06:2e: ec:ef:e8:45:f3:2c:ca:70:64:7f:75:78:9e:4a:e6:f0:08:a2: a2:f2:81:1e:69:c9:d1:52:51:e6:2b:d0:cd:b9:21:86:27:77: 6a:47:fb:86:4d:08:af:c4:0f:3b:ba:35:1b:78:2b:d3:12:a2: e2:1a:09:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGM2yqntWJ4gd/iIurCPuLAQ2oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA3MjQwMTA1MzJaFw0yNjA3MjUwMzEyMzJaMDMxMTAvBgNV BAMTKDU3QTJGOTlDMzQ3QjZFOEY5RjAwMDlDRjUwNzJFODE4RUY3RDA0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1zDyN8HcJ5gk4igedgTc+Ljr DGOXGY7mU4irWs6kkWV89O60cNxvg9j57b5f0loUyac3LtBI9+7V5q3s3p2DPLBD IJJYV00Y9ITHA2NPJiBHgYiYr8pFzTwHrE2gAaoBh3k78qWK6ARdDeQdT/NLffzb yUd6hBUMJDyyv87cE1Y2mQUbD+blOLjfIZbs5rvTPVRVe2IWbrL48X+SlLMkLhWC U81S3ihCbx6Lbbjqeu2BPP1Xu7vncjP1gJU5J1sOnVq/nS0RIc6qursWFvFOYs8F PDGelSYCSTVS7Yrg0GJrY0mQ0u2vs0MLg/eVrrb2gmWFrq3/w0PndxIpon6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6L5nDR7bo+fAAnPUHLoGO99BPMwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlfMtV7T7Y0wJ3i7rLhu5ynIoCXAV+vmnxY 3NpAMoFCk7z+4asrYiANDufqypAjtfwpAJiuT3TsqOJRLqkCEAtyEMubgb0ky3aI CAGb90yUohiGPLv81ZoZsKYPf0yHwJB58sIaEXbAdLFqytUyH/Qkd4Qzz0/BVRGu r+ZKyAjv8UK01JyBdTvIF+d4IpqzHtFyqIZn6CzS84JQ5V8zHRvAo2v5UmD2uw2t 8+xUq3sjH8om/YW70x6EDk38gYDcSRN2Q64GLuzv6EXzLMpwZH91eJ5K5vAIoqLy gR5pydFSUeYr0M25IYYnd2pH+4ZNCK/EDzu6NRt4K9MSouIaCZw= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:19 2026 by rpki-client