$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: wd/RANgB9z1Yb+w9FS4anBwZYlM+snGf9uCYqRVUcuc= Subject key identifier: 8B:16:59:76:57:6A:06:51:29:37:BF:56:30:CE:AE:D4:D3:E1:22:D6 Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 332C22AFD5BE39768653192F0EE5910D4385D552 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:28:52 +0000 Manifest this update: Thu 23 Jul 2026 15:23:52 +0000 Manifest next update: Fri 24 Jul 2026 18:36:52 +0000 Files and hashes: 1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: L3EJbLt8OvU4HmUzJJXZGAarooF4oK0M19Rwoba28RM=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2c:22:af:d5:be:39:76:86:53:19:2f:0e:e5:91:0d:43:85:d5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: Jul 23 15:23:52 2026 GMT Not After : Jul 24 18:36:52 2026 GMT Subject: CN=8B165976576A06512937BF5630CEAED4D3E122D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:5e:48:aa:7e:ae:94:19:2e:40:71:56:7b: aa:68:a9:d7:b2:03:21:c4:80:92:0d:28:54:6b:62: 88:60:b4:a6:36:a8:8a:91:c1:a0:96:0f:0a:5b:9e: ea:c7:3a:f4:30:13:d0:07:63:78:0d:c5:dc:32:ac: 82:14:26:5a:14:79:e4:ce:e1:71:01:f6:9e:7e:ec: 7e:2e:d6:a6:30:c2:57:eb:f5:21:74:d4:ba:28:fd: 6c:4a:b5:3c:d8:b0:68:1d:3f:9f:79:25:9b:b4:f1: 6b:26:f6:8a:fb:4c:09:1d:b6:5e:3b:56:e0:45:04: 67:c7:c5:8e:f2:20:e3:31:87:d6:dc:9a:55:5e:04: c0:9f:77:94:f6:ef:3c:aa:2b:23:39:66:ed:e4:fa: d6:99:54:9a:e3:18:52:6b:22:fc:68:2d:b8:35:31: dc:1c:3a:d7:d8:65:c0:ab:1b:21:47:18:36:02:b0: a4:dc:17:07:9a:24:e3:33:87:32:1f:25:d5:b2:86: 2d:21:a2:65:45:5f:a2:de:1f:80:89:d3:c8:22:6d: 4f:59:fb:1e:d7:df:8e:bd:af:33:c9:a6:a4:6d:52: bc:dd:6c:f6:3d:d0:e2:ec:68:39:33:30:88:b8:92: d4:73:c9:be:4d:df:44:95:90:01:31:a8:1f:c4:cb: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:16:59:76:57:6A:06:51:29:37:BF:56:30:CE:AE:D4:D3:E1:22:D6 X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2b:94:65:19:bc:c8:65:e2:a7:6d:b5:45:8b:58:09:36:5a: d5:3d:7d:9f:5a:b6:81:2a:60:db:32:81:f8:f0:62:3a:03:b7: f0:07:e2:a1:00:d6:ad:1f:98:47:87:02:bb:7f:7d:8b:38:ad: 74:a1:e8:ba:3e:2f:3d:24:f0:f2:67:19:e4:39:44:a4:ff:f7: 7e:a4:6a:7c:a1:09:50:84:1f:b2:86:df:69:2e:89:27:bf:08: b8:f8:a6:04:2c:62:9c:ce:76:18:05:b3:db:fc:ee:f2:5f:a3: d7:7b:d8:6d:88:62:33:43:8f:f2:83:17:89:4b:4d:0c:bf:5d: 63:17:05:f0:bc:be:79:32:42:2d:ea:b7:da:5d:15:f4:2a:d3: c4:35:1e:76:c7:3b:94:07:96:60:fd:ab:61:39:63:c4:33:52: d7:ab:7c:82:22:9d:8b:69:e8:bb:3c:da:e0:f0:71:8c:7a:af: 01:fb:cb:08:f2:bd:b0:ad:71:4d:a3:2c:2f:6f:36:fe:2e:4c: e6:c1:0d:86:9e:c7:45:4f:37:af:b9:1e:b3:66:03:cd:dc:f0: f6:23:ad:12:8b:23:34:66:03:49:2c:36:ac:d3:b4:0f:17:98: 2f:c1:62:ac:74:c5:59:e3:34:38:6d:63:d0:4e:bf:ff:b4:56: 5c:8c:72:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMywir9W+OXaGUxkvDuWRDUOF1VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjA3MjMxNTIzNTJaFw0yNjA3MjQxODM2NTJaMDMxMTAvBgNV BAMTKDhCMTY1OTc2NTc2QTA2NTEyOTM3QkY1NjMwQ0VBRUQ0RDNFMTIyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Y15Iqn6ulBkuQHFWe6poqdey AyHEgJINKFRrYohgtKY2qIqRwaCWDwpbnurHOvQwE9AHY3gNxdwyrIIUJloUeeTO 4XEB9p5+7H4u1qYwwlfr9SF01Loo/WxKtTzYsGgdP595JZu08Wsm9or7TAkdtl47 VuBFBGfHxY7yIOMxh9bcmlVeBMCfd5T27zyqKyM5Zu3k+taZVJrjGFJrIvxoLbg1 MdwcOtfYZcCrGyFHGDYCsKTcFweaJOMzhzIfJdWyhi0homVFX6LeH4CJ08gibU9Z +x7X3469rzPJpqRtUrzdbPY90OLsaDkzMIi4ktRzyb5N30SVkAExqB/Ey26RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUixZZdldqBlEpN79WMM6u1NPhItYwHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0rlGUZvMhl4qdttUWLWAk2WtU9fZ9atoEq YNsygfjwYjoDt/AH4qEA1q0fmEeHArt/fYs4rXSh6Lo+Lz0k8PJnGeQ5RKT/936k anyhCVCEH7KG32kuiSe/CLj4pgQsYpzOdhgFs9v87vJfo9d72G2IYjNDj/KDF4lL TQy/XWMXBfC8vnkyQi3qt9pdFfQq08Q1HnbHO5QHlmD9q2E5Y8QzUterfIIinYtp 6Ls82uDwcYx6rwH7ywjyvbCtcU2jLC9vNv4uTObBDYaex0VPN6+5HrNmA83c8PYj rRKLIzRmA0ksNqzTtA8XmC/BYqx0xVnjNDhtY9BOv/+0VlyMchw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:27 2026 by rpki-client