$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: AEtj7Om76n+1t7b0Sk1xR6sTrGAu7RN54uyfNliSAl0= Subject key identifier: 15:67:D0:04:CB:90:8A:16:AD:97:87:DC:80:16:D2:7F:85:6D:EE:51 Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 48F4C5A33AD6A346970319B1BEC78C9FE9181528 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:27:17 +0000 Manifest this update: Fri 24 Jul 2026 02:22:17 +0000 Manifest next update: Sat 25 Jul 2026 03:06:17 +0000 Files and hashes: 1: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: WQ8VolK1oe3kPAyFVWQNEoRihXqWUAaDFHwP7Lj+4eE=) 2: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 3: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) 4: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f4:c5:a3:3a:d6:a3:46:97:03:19:b1:be:c7:8c:9f:e9:18:15:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Jul 24 02:22:17 2026 GMT Not After : Jul 25 03:06:17 2026 GMT Subject: CN=1567D004CB908A16AD9787DC8016D27F856DEE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:fe:8f:05:da:72:dd:b6:9a:df:09:e4:fa: 37:ac:8a:42:e8:d5:09:8b:2e:df:3e:4e:cc:c5:13: cb:3c:6a:2c:c7:a6:f6:bb:35:f2:15:3b:fd:f6:0d: 02:c6:dc:7d:ed:b7:e1:a5:ff:fe:8d:96:04:78:86: 9c:3f:1c:20:bd:c2:be:cc:0c:60:fe:d1:86:e4:e5: cf:5e:c9:a8:7e:cc:90:88:eb:be:d7:7d:3c:05:f7: 9c:b7:e7:4b:1f:41:9c:5c:cf:84:64:fe:dd:11:77: 03:3d:55:29:db:21:33:0a:83:6a:af:02:cb:16:65: d9:d8:bc:d7:76:f7:80:41:22:b7:e4:9d:55:06:31: a5:38:5f:42:06:8d:58:c9:ad:12:6a:2b:62:61:17: b7:a1:cb:82:cc:37:b0:c2:2a:58:ce:b2:33:97:c9: 71:5f:97:6a:f5:cb:d2:6d:e3:bb:87:36:0c:22:4c: 21:7d:19:1b:57:85:dd:60:0f:5b:76:3a:c8:99:e6: 05:d7:70:c0:bb:f4:7a:5b:06:a1:71:22:58:91:3c: 73:25:7d:b1:cc:1e:fc:70:32:7c:27:f4:aa:fa:55: 2f:8b:5c:5c:b9:40:33:63:f9:7f:15:ee:7b:6f:ae: a8:0b:1a:00:f0:66:99:64:0b:97:48:37:05:9e:bc: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:67:D0:04:CB:90:8A:16:AD:97:87:DC:80:16:D2:7F:85:6D:EE:51 X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bf:03:82:08:2e:1d:da:6a:ed:92:7b:41:8f:e6:1e:12:39: 0a:83:40:d1:fd:9e:ae:ef:93:13:17:c2:ce:5f:24:91:38:6d: 79:76:79:87:ff:6a:ce:ec:e0:39:f3:bf:d6:1c:a0:fa:50:37: 86:b0:ad:6d:6c:5a:fa:3b:6c:c1:64:e5:5d:04:55:c6:0f:2b: a2:f1:5b:1d:a5:1e:9b:c3:07:33:d1:1e:7b:b3:f5:90:8b:60: 4b:1a:69:61:e9:f5:83:cf:9a:ec:c3:70:56:9d:96:fd:fb:44: a4:37:95:8f:59:2d:50:d1:60:41:4c:63:3e:fb:08:b0:ab:55: ce:cc:88:13:7f:50:41:e1:ae:b8:8c:83:0c:99:cd:fe:cf:83: 72:8c:dd:f1:e5:8d:da:60:b6:27:b1:a0:3d:0b:c0:83:92:8e: cf:3a:60:24:07:c4:56:43:6e:11:af:71:a7:d7:13:06:99:1c: e3:4b:19:42:02:3b:a6:df:b0:0a:71:99:47:2f:3a:66:67:a5: 78:73:03:8e:ba:a3:ac:81:75:ad:8a:80:bf:d9:15:c4:d9:3a: b1:e0:f9:34:9c:ed:c4:6c:e2:cf:e8:13:a4:4f:a0:45:a8:e2: fc:3d:a8:4a:68:ac:79:e2:d0:62:9b:bd:ce:65:27:6d:3b:17: a2:3e:6d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPTFozrWo0aXAxmxvseMn+kYFSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA3MjQwMjIyMTdaFw0yNjA3MjUwMzA2MTdaMDMxMTAvBgNV BAMTKDE1NjdEMDA0Q0I5MDhBMTZBRDk3ODdEQzgwMTZEMjdGODU2REVFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbE/6PBdpy3baa3wnk+jesikLo 1QmLLt8+TszFE8s8aizHpva7NfIVO/32DQLG3H3tt+Gl//6NlgR4hpw/HCC9wr7M DGD+0Ybk5c9eyah+zJCI677XfTwF95y350sfQZxcz4Rk/t0RdwM9VSnbITMKg2qv AssWZdnYvNd294BBIrfknVUGMaU4X0IGjVjJrRJqK2JhF7ehy4LMN7DCKljOsjOX yXFfl2r1y9Jt47uHNgwiTCF9GRtXhd1gD1t2OsiZ5gXXcMC79HpbBqFxIliRPHMl fbHMHvxwMnwn9Kr6VS+LXFy5QDNj+X8V7ntvrqgLGgDwZplkC5dINwWevDBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWfQBMuQihatl4fcgBbSf4Vt7lEwHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm/A4IILh3aau2Se0GP5h4SOQqDQNH9nq7v kxMXws5fJJE4bXl2eYf/as7s4Dnzv9YcoPpQN4awrW1sWvo7bMFk5V0EVcYPK6Lx Wx2lHpvDBzPRHnuz9ZCLYEsaaWHp9YPPmuzDcFadlv37RKQ3lY9ZLVDRYEFMYz77 CLCrVc7MiBN/UEHhrriMgwyZzf7Pg3KM3fHljdpgtiexoD0LwIOSjs86YCQHxFZD bhGvcafXEwaZHONLGUICO6bfsApxmUcvOmZnpXhzA466o6yBda2KgL/ZFcTZOrHg +TSc7cRs4s/oE6RPoEWo4vw9qEporHni0GKbvc5lJ207F6I+bUk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:28 2026 by rpki-client