$ rpki-client -vvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json) Hash identifier: Y+kDtLSCGZHIA9VmQBORXfErclTi+8UJXPRZyQkJLUw= Subject key identifier: 74:FF:A2:B2:E4:CA:FA:2D:B9:AB:FB:48:88:8E:F5:6F:5D:DB:9B:F0 Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2 Certificate serial: 0B7073A3E08E7B100C96016D71C8D2052EB6EDEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 16:35:13 +0000 Manifest this update: Thu 23 Jul 2026 16:30:13 +0000 Manifest next update: Fri 24 Jul 2026 20:17:13 +0000 Files and hashes: 1: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: IWldDSucWaZgjrm3AhTPeZjJIi6tbgGpHx01bo0sjCg=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:70:73:a3:e0:8e:7b:10:0c:96:01:6d:71:c8:d2:05:2e:b6:ed:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2 Validity Not Before: Jul 23 16:30:13 2026 GMT Not After : Jul 24 20:17:13 2026 GMT Subject: CN=74FFA2B2E4CAFA2DB9ABFB48888EF56F5DDB9BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:e3:d8:9c:86:98:91:31:31:29:53:a9:fa: f2:db:42:e9:1e:f1:18:4e:48:72:c0:35:bf:54:b4: 03:c1:62:08:27:77:77:af:6f:85:f7:e8:3d:81:16: 76:44:83:1a:34:f1:8a:dc:6d:dc:f8:7f:5c:7d:d9: 2f:45:ea:27:27:3f:ed:96:03:b7:d4:8f:0a:79:e6: 9b:a8:be:9a:7e:a9:a1:d5:bc:86:5f:43:82:73:af: be:bf:c3:52:71:db:f7:c8:8f:2c:a8:80:df:86:ba: ca:9f:3e:ba:cd:cb:5f:50:ac:84:1a:d7:38:df:c3: 67:b8:8d:a6:c5:d4:44:77:d0:91:fa:a6:ed:b9:df: 23:2c:a9:37:a5:23:6b:4b:a9:26:ee:6f:99:50:72: 6d:cc:73:dd:65:7c:56:04:a3:24:15:4a:9f:c5:e9: 4c:b2:77:e0:3f:f3:8e:3c:8d:a0:5e:e1:51:64:2d: 7a:42:d9:32:bc:13:ce:3e:92:75:db:8d:55:e5:c6: 0b:93:37:bb:1d:d4:70:cd:37:a9:a0:5d:30:31:de: 3b:78:b6:ca:0f:50:4c:f0:c4:df:a0:06:2a:ca:44: 7e:18:42:31:12:cd:b1:fc:60:92:e6:1e:bf:c5:9c: ac:5b:0e:96:b7:3a:db:51:9b:f1:77:8e:64:da:72: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FF:A2:B2:E4:CA:FA:2D:B9:AB:FB:48:88:8E:F5:6F:5D:DB:9B:F0 X509v3 Authority Key Identifier: keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e1:9d:b8:d4:58:6c:dd:3c:5b:5b:dd:ef:e2:87:33:77:f6: 55:d4:e8:cc:28:61:f9:93:b4:09:a3:15:bc:54:68:e6:ea:d6: 1d:84:68:57:93:1f:be:03:35:17:5b:b4:ce:99:71:56:2b:67: 7f:5b:17:93:97:e3:4b:7c:89:34:f6:eb:40:bb:50:c6:90:f7: 20:41:45:e3:c7:93:99:db:25:1f:27:cb:17:98:96:16:3d:c4: b8:c7:30:aa:ff:dd:27:95:22:c0:d0:f6:a5:ad:41:8a:b7:2b: 9f:ae:c6:10:ff:17:70:2b:27:23:08:c4:e6:e6:a7:e3:98:bf: 67:0e:a0:78:73:0d:1e:91:b3:8e:26:8e:00:00:00:9c:fd:c7: d8:e2:e9:24:af:91:fd:33:12:b2:c9:62:78:fe:6c:1e:a1:4c: 71:f1:31:6a:17:65:5a:6e:67:61:a4:38:97:b8:45:81:d3:48: 2c:16:1d:d3:dd:b5:2b:70:05:c9:1f:73:3a:8f:e0:9a:16:cd: c7:44:4a:9c:7c:12:d6:f5:d1:19:c3:c1:2a:c8:e9:55:dc:69: a2:0b:0b:98:8d:95:37:40:3b:a7:41:d0:46:cc:61:98:0d:0c: bd:6d:4c:ea:08:e7:53:37:2c:6d:ed:d4:06:c5:3f:b0:c2:93: 0f:68:08:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3Bzo+COexAMlgFtccjSBS627eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEw N0I1MTBCMjAeFw0yNjA3MjMxNjMwMTNaFw0yNjA3MjQyMDE3MTNaMDMxMTAvBgNV BAMTKDc0RkZBMkIyRTRDQUZBMkRCOUFCRkI0ODg4OEVGNTZGNUREQjlCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutePYnIaYkTExKVOp+vLbQuke 8RhOSHLANb9UtAPBYggnd3evb4X36D2BFnZEgxo08Yrcbdz4f1x92S9F6icnP+2W A7fUjwp55puovpp+qaHVvIZfQ4Jzr76/w1Jx2/fIjyyogN+GusqfPrrNy19QrIQa 1zjfw2e4jabF1ER30JH6pu253yMsqTelI2tLqSbub5lQcm3Mc91lfFYEoyQVSp/F 6Uyyd+A/8448jaBe4VFkLXpC2TK8E84+knXbjVXlxguTN7sd1HDNN6mgXTAx3jt4 tsoPUEzwxN+gBirKRH4YQjESzbH8YJLmHr/FnKxbDpa3OttRm/F3jmTacsQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdP+isuTK+i25q/tIiI71b13bm/AwHwYDVR0j BBgwFoAU1p3zAkefR3epoIkhVCBK8Qe1ELIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRmNDI5NmYtMWNhOS00NWZjLWJiMDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0 NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEwN0I1MTBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjlERjMwMjQ3OUY0Nzc3QTlBMDg5MjE1NDIwNEFGMTA3QjUx MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRB RjEwN0I1MTBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvhnbjUWGzdPFtb3e/ihzN39lXU6MwoYfmT tAmjFbxUaObq1h2EaFeTH74DNRdbtM6ZcVYrZ39bF5OX40t8iTT260C7UMaQ9yBB RePHk5nbJR8nyxeYlhY9xLjHMKr/3SeVIsDQ9qWtQYq3K5+uxhD/F3ArJyMIxObm p+OYv2cOoHhzDR6Rs44mjgAAAJz9x9ji6SSvkf0zErLJYnj+bB6hTHHxMWoXZVpu Z2GkOJe4RYHTSCwWHdPdtStwBckfczqP4JoWzcdESpx8Etb10RnDwSrI6VXcaaIL C5iNlTdAO6dB0EbMYZgNDL1tTOoI51M3LG3t1AbFP7DCkw9oCKY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:09 2026 by rpki-client