$ rpki-client -vvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: gzSGlz8Q7t5wqADoUR+TkqY7JJiXTfNk8QUWJwZ4IX4= Subject key identifier: 8F:42:BC:28:4E:18:68:C6:8A:EA:EE:D5:6B:86:92:38:E9:2B:7E:0A Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 2D1E8664DBA177F4EBAB44B415EED3D36DF75013 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 07:49:04 +0000 Manifest this update: Fri 24 Jul 2026 07:44:04 +0000 Manifest next update: Sat 25 Jul 2026 08:25:04 +0000 Files and hashes: 1: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) 2: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: DjgYUcNvriFb3Jw5WPp2MFBDpI7SOH0ZIiRGbz78WEU=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1e:86:64:db:a1:77:f4:eb:ab:44:b4:15:ee:d3:d3:6d:f7:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: Jul 24 07:44:04 2026 GMT Not After : Jul 25 08:25:04 2026 GMT Subject: CN=8F42BC284E1868C68AEAEED56B869238E92B7E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:20:c3:c6:1d:42:ab:c9:a8:0c:00:d2:cd: 50:4e:40:61:d2:6e:99:4e:81:52:62:57:78:1e:07: b9:e5:6d:dc:d1:04:ef:d4:84:b4:ab:84:4c:85:5f: aa:78:b9:bd:3c:63:42:e4:0a:b4:1a:34:ef:31:4f: 92:81:f1:e7:6c:04:19:80:24:33:f5:38:aa:4c:bf: 07:0a:cc:82:dc:e6:08:f2:98:b2:20:37:48:ba:61: ac:64:37:f7:cd:b8:08:91:71:c9:2f:9d:eb:be:aa: c7:19:30:6c:6e:45:1a:86:8a:76:54:95:d9:5a:c6: b9:e8:f1:a2:9a:e5:e4:82:07:61:ad:6a:d5:57:14: 46:2c:2b:66:a4:6c:a4:7a:9d:1e:6b:9d:1a:5e:e9: 38:80:6f:c1:c6:9c:fa:5f:1a:16:01:76:77:d7:96: c5:b3:a9:32:6d:77:5b:03:e2:b8:18:d0:67:6e:10: 2e:67:00:aa:6f:8b:34:17:e7:21:10:f6:a1:2c:9b: 4f:97:e2:db:6b:16:9c:7a:6c:39:85:14:fb:fd:2e: 0e:ad:ca:3a:f2:3d:70:e6:eb:88:c3:1f:8d:28:5e: 27:27:79:53:ed:fe:11:f9:ff:83:24:54:d9:e8:59: 06:33:29:24:02:3f:1e:c8:71:4c:a4:2c:4d:29:a9: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:BC:28:4E:18:68:C6:8A:EA:EE:D5:6B:86:92:38:E9:2B:7E:0A X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d1:04:a5:ba:39:7f:c6:1a:4d:df:fe:42:87:0b:7e:78:d0: 51:e7:0f:33:37:4c:27:1e:23:13:1e:90:f1:9a:0c:65:5a:64: 98:5d:04:66:5a:6e:1b:97:28:5a:8e:e8:f7:9f:ac:6c:87:92: ab:f2:78:ec:03:df:a5:d8:40:4b:d1:9c:03:f3:91:46:e9:2c: 6a:99:50:45:7e:ad:0d:56:f3:1a:bb:13:fb:a1:cd:40:32:0f: 5b:bb:b8:7b:5b:a6:3b:5b:30:bb:07:a0:2d:3a:82:e4:1e:14: 25:6f:50:03:31:a9:ee:64:4a:74:c8:3a:49:6a:95:f8:38:20: 65:1f:6d:16:cd:76:dd:99:46:e9:1a:b4:20:36:c8:74:45:3f: 2b:90:db:d8:1c:6f:e1:f5:83:2e:ed:ab:4b:39:36:ea:b3:b0: f2:75:44:3b:bc:08:88:f2:a2:84:66:1a:1d:f7:47:f3:e8:95: 9f:3f:7d:d0:50:b9:69:62:63:46:78:8a:da:d9:16:82:a3:c8: 66:b4:b7:06:eb:3c:71:0e:d2:a1:f8:a3:91:1f:26:51:8a:63: bd:a8:73:4c:ad:13:97:4b:58:ba:fb:c8:bb:55:f1:ee:aa:05: fb:e8:43:7c:ae:27:99:a7:b0:0c:5e:bc:35:5c:bf:86:86:de: 29:3f:3d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULR6GZNuhd/Trq0S0Fe7T0233UBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA3MjQwNzQ0MDRaFw0yNjA3MjUwODI1MDRaMDMxMTAvBgNV BAMTKDhGNDJCQzI4NEUxODY4QzY4QUVBRUVENTZCODY5MjM4RTkyQjdFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yyDDxh1Cq8moDADSzVBOQGHS bplOgVJiV3geB7nlbdzRBO/UhLSrhEyFX6p4ub08Y0LkCrQaNO8xT5KB8edsBBmA JDP1OKpMvwcKzILc5gjymLIgN0i6YaxkN/fNuAiRcckvneu+qscZMGxuRRqGinZU ldlaxrno8aKa5eSCB2GtatVXFEYsK2akbKR6nR5rnRpe6TiAb8HGnPpfGhYBdnfX lsWzqTJtd1sD4rgY0GduEC5nAKpvizQX5yEQ9qEsm0+X4ttrFpx6bDmFFPv9Lg6t yjryPXDm64jDH40oXicneVPt/hH5/4MkVNnoWQYzKSQCPx7IcUykLE0pqchNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0K8KE4YaMaK6u7Va4aSOOkrfgowHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7RBKW6OX/GGk3f/kKHC3540FHnDzM3TCce IxMekPGaDGVaZJhdBGZabhuXKFqO6PefrGyHkqvyeOwD36XYQEvRnAPzkUbpLGqZ UEV+rQ1W8xq7E/uhzUAyD1u7uHtbpjtbMLsHoC06guQeFCVvUAMxqe5kSnTIOklq lfg4IGUfbRbNdt2ZRukatCA2yHRFPyuQ29gcb+H1gy7tq0s5NuqzsPJ1RDu8CIjy ooRmGh33R/PolZ8/fdBQuWliY0Z4itrZFoKjyGa0twbrPHEO0qH4o5EfJlGKY72o c0ytE5dLWLr7yLtV8e6qBfvoQ3yuJ5mnsAxevDVcv4aG3ik/PSg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:16 2026 by rpki-client