$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: leWF8CGD4iA/u4r4fBkn4uk78MFJxV5n+fx2hut5z84= Subject key identifier: 17:AF:46:73:9E:7E:72:67:31:CB:42:88:48:29:F0:80:02:54:B2:0B Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 593136E49D1C1C53E900B1183C1DEA94841BB9EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:08:10 +0000 Manifest this update: Fri 24 Jul 2026 03:03:10 +0000 Manifest next update: Sat 25 Jul 2026 03:23:10 +0000 Files and hashes: 1: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: TtyhHrIpVcO30gi3IvX3qu407ibF/EvlvimVfioJVzI=) 2: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:31:36:e4:9d:1c:1c:53:e9:00:b1:18:3c:1d:ea:94:84:1b:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: Jul 24 03:03:10 2026 GMT Not After : Jul 25 03:23:10 2026 GMT Subject: CN=17AF46739E7E726731CB42884829F0800254B20B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:c8:1e:33:a3:ab:3f:5e:36:d2:65:07:90: bf:99:f3:5b:27:1c:91:c5:c5:c4:ea:76:c2:35:98: 1b:e9:4d:82:ab:5f:8a:6a:c3:4a:27:e0:40:5a:c6: 8d:68:63:c7:59:22:6e:80:55:ef:de:7c:f0:0a:da: 34:fa:3f:27:e8:d3:15:08:da:d5:87:18:84:89:de: fa:86:f1:fa:f7:b0:b5:1b:4a:96:d6:83:1c:90:b2: 95:0b:3d:f7:21:0c:0a:b9:39:4c:2b:38:1c:71:6a: 08:ad:c9:8b:b5:66:44:d4:2c:94:c4:b4:8f:1e:18: 37:b6:a3:85:d8:47:ca:29:30:1d:b1:c8:d5:07:87: 14:84:91:03:c4:23:0a:35:82:ce:e1:64:83:e7:0d: cb:af:81:08:e9:7a:52:80:b5:10:e3:56:06:9f:a1: d6:66:46:cd:fc:07:bb:6d:76:3d:6c:d0:82:8a:a5: 80:c4:25:de:88:72:a4:a5:fe:ef:d6:e2:80:d6:71: 99:4f:52:43:b7:a1:f6:ee:15:31:9e:61:a0:a9:52: 7a:84:4f:d8:99:46:7c:21:38:b6:7d:76:4a:45:34: 1f:78:ca:14:50:75:82:fe:d4:ce:cd:5b:61:ae:8c: 95:a4:e9:1e:21:5a:0c:af:d0:ca:ba:73:39:8d:94: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:46:73:9E:7E:72:67:31:CB:42:88:48:29:F0:80:02:54:B2:0B X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:5b:9c:f5:81:f8:70:b3:8c:47:dd:6b:84:18:2f:45:dc: 61:bb:44:85:b9:94:95:07:bf:83:e3:7b:00:63:77:fe:dd:da: 16:95:54:42:c1:dd:b9:8e:a5:0b:15:bb:af:b2:2d:3d:a5:48: 36:77:77:64:8f:a9:9c:c1:53:5b:d2:74:a7:ba:69:a4:9c:32: b7:1b:4b:94:ce:27:b6:68:10:8b:b3:5e:c7:7e:72:76:5c:7e: dc:b5:8f:ce:9b:c6:c1:b2:57:9c:f4:4d:57:83:f9:6f:3c:16: 9e:9b:aa:28:9c:cc:fa:83:d7:b2:46:8c:e2:cd:17:d8:7a:77: b7:a2:a3:fa:91:2e:e6:b7:6b:63:f6:51:de:6a:ef:f5:5b:ba: 1c:c0:91:8a:fa:88:8a:ee:fb:70:42:e1:a9:ab:20:7a:0f:3f: 7c:be:6f:f9:88:18:ac:f1:a7:40:cf:85:cf:f4:21:39:05:b5: 6f:07:b6:2c:1e:ff:fa:73:e6:11:32:45:e0:fa:50:64:c8:fb: f6:66:11:7c:c5:51:ce:d9:03:7b:60:87:cd:0a:81:18:38:58: bc:3a:12:b7:08:c3:00:a5:8c:f8:7a:d3:2c:69:50:ae:86:91: 3e:9c:f9:43:09:5a:cb:93:27:8e:b2:67:44:ba:bc:41:2f:16: c4:6e:82:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTE25J0cHFPpALEYPB3qlIQbue4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA3MjQwMzAzMTBaFw0yNjA3MjUwMzIzMTBaMDMxMTAvBgNV BAMTKDE3QUY0NjczOUU3RTcyNjczMUNCNDI4ODQ4MjlGMDgwMDI1NEIyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZsgeM6OrP1420mUHkL+Z81sn HJHFxcTqdsI1mBvpTYKrX4pqw0on4EBaxo1oY8dZIm6AVe/efPAK2jT6Pyfo0xUI 2tWHGISJ3vqG8fr3sLUbSpbWgxyQspULPfchDAq5OUwrOBxxagityYu1ZkTULJTE tI8eGDe2o4XYR8opMB2xyNUHhxSEkQPEIwo1gs7hZIPnDcuvgQjpelKAtRDjVgaf odZmRs38B7ttdj1s0IKKpYDEJd6IcqSl/u/W4oDWcZlPUkO3ofbuFTGeYaCpUnqE T9iZRnwhOLZ9dkpFNB94yhRQdYL+1M7NW2GujJWk6R4hWgyv0Mq6czmNlOkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF69Gc55+cmcxy0KISCnwgAJUsgswHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILUW5z1gfhws4xH3WuEGC9F3GG7RIW5lJUH v4PjewBjd/7d2haVVELB3bmOpQsVu6+yLT2lSDZ3d2SPqZzBU1vSdKe6aaScMrcb S5TOJ7ZoEIuzXsd+cnZcfty1j86bxsGyV5z0TVeD+W88Fp6bqiiczPqD17JGjOLN F9h6d7eio/qRLua3a2P2Ud5q7/VbuhzAkYr6iIru+3BC4amrIHoPP3y+b/mIGKzx p0DPhc/0ITkFtW8Htiwe//pz5hEyReD6UGTI+/ZmEXzFUc7ZA3tgh80KgRg4WLw6 ErcIwwCljPh60yxpUK6GkT6c+UMJWsuTJ46yZ0S6vEEvFsRugo4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:36 2026 by rpki-client