$ rpki-client -vvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: 5MtgDwkaivMzsDlGoP5L6EzQgCOdblT+/Qs2Vsyc//E= Subject key identifier: 07:B8:04:EE:00:78:05:F6:22:4B:C0:11:AB:79:A9:9B:11:F1:4B:A1 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 0D1C7B09D4C59E3197729E30319E1C87049A245D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:57:49 +0000 Manifest this update: Thu 23 Jul 2026 22:52:49 +0000 Manifest next update: Sat 25 Jul 2026 00:57:49 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: FDlE2ZVTb3nVUZnbN1W7IQTaOVGM5t7M8u3B2mCuhHA=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1c:7b:09:d4:c5:9e:31:97:72:9e:30:31:9e:1c:87:04:9a:24:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Jul 23 22:52:49 2026 GMT Not After : Jul 25 00:57:49 2026 GMT Subject: CN=07B804EE007805F6224BC011AB79A99B11F14BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:ae:fb:04:93:58:59:0c:68:cc:89:b6:38: 5f:b6:fb:74:b4:5f:95:0b:02:bc:16:57:8b:c0:03: 2d:6d:f9:e7:69:5d:78:dc:86:ed:7c:81:de:67:b8: 7b:bc:41:ea:c5:3b:c5:d0:9a:97:30:0c:d4:5d:10: 05:55:08:8c:92:6d:36:4c:44:a1:81:5e:e0:85:2d: 80:ee:60:e5:b0:7f:c3:ae:f3:a0:b0:af:95:20:e7: e7:ec:b1:dd:3c:a4:0b:8a:e6:4a:44:b5:52:d4:6a: 60:81:f9:7d:ae:62:92:fc:a4:23:e9:81:81:39:c7: df:f0:82:ff:d0:98:f6:1d:2f:03:6e:c2:ff:42:0b: 4a:92:9e:6f:bc:e9:ab:36:b6:02:75:3d:7e:6a:25: 7f:48:94:1a:88:bb:52:61:4a:3f:a0:f8:1e:62:73: 55:ea:c6:9a:d3:86:cb:20:bb:ed:b8:38:0a:c2:65: 6f:a0:37:70:30:1a:cc:c4:62:db:87:da:8f:5e:da: 99:36:93:89:02:dd:d7:cd:f8:74:7f:8e:87:6a:ae: c9:c8:61:4f:52:a8:dc:18:38:94:52:ef:00:85:88: c3:bb:62:d5:ca:28:7a:d9:30:1a:59:16:42:1a:e8: 04:c3:5c:05:a8:e3:d4:21:0f:cf:ce:04:2e:b7:5b: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B8:04:EE:00:78:05:F6:22:4B:C0:11:AB:79:A9:9B:11:F1:4B:A1 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:e2:27:4a:74:b4:ba:57:53:73:6b:bf:82:47:e7:25:6b: a7:fb:92:da:9d:0e:d3:32:e2:42:98:9d:8a:d2:33:14:1b:4e: 0f:8e:3d:34:16:ec:a4:62:5d:df:b1:82:6c:2e:85:56:ad:ef: 13:09:3f:87:58:ea:25:5f:b5:0d:97:d6:25:b0:5f:4a:61:08: c5:05:ec:f1:55:19:42:da:06:2e:2d:39:91:9d:e6:73:fc:57: 9a:62:9f:58:d3:d5:51:5b:cc:3c:fd:89:01:c5:b9:d8:fb:2f: a7:5e:29:fa:a5:d7:eb:32:b0:2e:5e:48:ec:2c:4f:c7:a2:ab: 69:76:4a:0d:7b:f7:6c:1c:13:ca:c2:78:11:01:f6:df:e2:5c: 0f:61:35:0f:4c:bc:9f:3d:c5:59:47:af:a0:f0:96:eb:22:30: ef:9e:a7:4e:33:80:7d:ec:83:e4:8f:88:f9:a1:50:b9:84:94: 03:11:f3:f6:93:51:8d:0c:29:cb:66:68:92:55:cf:b9:5b:ad: c1:66:ce:c4:21:94:06:3c:13:c9:68:85:39:d1:8b:c7:52:ef: f2:3d:38:78:d2:36:ca:01:6e:c3:b9:4d:72:4c:86:5b:65:c9: c5:77:cf:d9:45:25:b4:91:e7:50:b6:4e:7a:e9:8f:11:ee:da: 95:81:a6:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRx7CdTFnjGXcp4wMZ4chwSaJF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA3MjMyMjUyNDlaFw0yNjA3MjUwMDU3NDlaMDMxMTAvBgNV BAMTKDA3QjgwNEVFMDA3ODA1RjYyMjRCQzAxMUFCNzlBOTlCMTFGMTRCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYq77BJNYWQxozIm2OF+2+3S0 X5ULArwWV4vAAy1t+edpXXjchu18gd5nuHu8QerFO8XQmpcwDNRdEAVVCIySbTZM RKGBXuCFLYDuYOWwf8Ou86Cwr5Ug5+fssd08pAuK5kpEtVLUamCB+X2uYpL8pCPp gYE5x9/wgv/QmPYdLwNuwv9CC0qSnm+86as2tgJ1PX5qJX9IlBqIu1JhSj+g+B5i c1XqxprThssgu+24OArCZW+gN3AwGszEYtuH2o9e2pk2k4kC3dfN+HR/jodqrsnI YU9SqNwYOJRS7wCFiMO7YtXKKHrZMBpZFkIa6ATDXAWo49QhD8/OBC63WyxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7gE7gB4BfYiS8ARq3mpmxHxS6EwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo74idKdLS6V1Nza7+CR+cla6f7ktqdDtMy 4kKYnYrSMxQbTg+OPTQW7KRiXd+xgmwuhVat7xMJP4dY6iVftQ2X1iWwX0phCMUF 7PFVGULaBi4tOZGd5nP8V5pin1jT1VFbzDz9iQHFudj7L6deKfql1+sysC5eSOws T8eiq2l2Sg1792wcE8rCeBEB9t/iXA9hNQ9MvJ89xVlHr6DwlusiMO+ep04zgH3s g+SPiPmhULmElAMR8/aTUY0MKctmaJJVz7lbrcFmzsQhlAY8E8lohTnRi8dS7/I9 OHjSNsoBbsO5TXJMhltlycV3z9lFJbSR51C2TnrpjxHu2pWBphA= -----END CERTIFICATE-----Generated at Fri Jul 24 08:45:36 2026 by rpki-client