$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: iJk5NRmGi7vLPlWL9tu34ccjSPzBTDTkZFvzPlkkns4= Subject key identifier: 83:DD:08:50:68:70:78:94:97:28:85:26:2D:67:BA:7D:E7:B4:DB:AF Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 74B3622B55CB3DEB115EBF8A1C3B7CB39F3FF8BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 08:04:46 +0000 Manifest this update: Thu 23 Jul 2026 07:59:46 +0000 Manifest next update: Fri 24 Jul 2026 10:18:46 +0000 Files and hashes: 1: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: br6m11ZLXQXOZZ4ItxmAV/Q1KXQxnNiav1CFgEasSD8=) 2: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) 3: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) 4: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b3:62:2b:55:cb:3d:eb:11:5e:bf:8a:1c:3b:7c:b3:9f:3f:f8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Jul 23 07:59:46 2026 GMT Not After : Jul 24 10:18:46 2026 GMT Subject: CN=83DD085068707894972885262D67BA7DE7B4DBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:32:7f:d9:d3:82:60:d7:e8:10:74:98:a9: 48:03:12:77:eb:5a:7d:9e:c4:a3:be:e4:7e:a5:94: 69:66:5f:87:cd:c0:08:72:0c:4d:ab:1a:32:ce:de: 7d:c0:45:2d:db:dc:e9:b8:ce:9b:38:eb:6c:6f:1f: 54:cc:5d:36:cc:47:3c:6e:8e:10:2d:15:49:6d:bc: e7:c1:95:d1:e2:b0:01:61:c4:bd:7b:7a:a0:e9:b4: cf:27:3e:24:ad:5e:79:17:8e:3c:a8:3a:52:6a:01: 0f:80:58:8e:b6:0a:41:19:1a:b1:31:0c:6d:46:d9: 88:9e:1c:b2:bb:23:4e:5d:f2:3d:89:19:0b:2d:38: 8e:f4:aa:cc:05:7c:37:e8:b7:ef:1b:da:30:8d:61: c8:b5:1a:a4:bb:2b:81:41:b1:ef:c7:79:c0:f7:49: de:75:44:a2:9c:fc:7c:0a:f6:e7:58:36:18:d6:ba: db:53:54:f9:16:3a:d1:cd:71:52:ce:f3:00:ea:ef: 79:04:f4:bf:66:92:b7:75:7f:11:91:e8:23:65:e6: b0:60:82:7f:01:99:6e:60:8f:d4:35:1f:56:78:7c: 4c:a6:30:e5:3e:33:ec:66:41:99:48:00:68:5f:ca: 4b:e4:82:2e:be:a3:bf:93:24:85:78:b2:04:8b:95: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:08:50:68:70:78:94:97:28:85:26:2D:67:BA:7D:E7:B4:DB:AF X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:25:82:21:5f:b1:11:4a:70:5b:38:7b:b1:f6:81:da:f7:da: b5:b0:4a:c3:87:10:dc:39:6e:8a:91:ea:d3:c3:72:24:ed:fa: bd:a3:8e:dc:ed:a9:a0:cd:a7:d7:44:dc:ec:c2:b8:cf:48:f4: fc:1e:7e:4b:7a:2f:e4:8e:e7:31:35:fe:63:b8:f5:fa:5c:cd: f4:c8:7f:0c:a9:b9:d6:c2:9f:cf:8a:c5:83:88:3d:75:ab:b5: fa:65:e3:97:ec:d3:73:be:08:05:7a:22:d5:2d:36:99:52:f1: 0f:30:16:a4:74:86:4a:1c:0d:87:c1:c9:2e:74:8d:2e:d9:8c: a1:2e:f1:a5:e6:3b:06:68:ec:6b:5d:09:7b:54:54:9e:6f:9f: 43:aa:c9:a5:bb:75:22:40:65:53:53:48:6a:3b:20:2c:7b:6d: 7d:d1:c7:28:91:2c:25:70:18:b9:28:42:63:a8:70:30:bf:19: 1f:42:ce:22:3c:f4:78:c4:60:89:2c:fe:7a:e6:74:1f:c3:dd: 2e:15:17:f0:4b:5d:0a:81:65:24:36:58:97:a6:55:39:03:4c: 9e:2e:d3:6d:9e:73:e8:05:66:8c:8e:31:d7:94:54:76:43:44: b8:e7:0d:b8:f8:08:0a:fd:c7:43:a9:6d:09:fd:89:5a:11:d6: 98:4a:91:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLNiK1XLPesRXr+KHDt8s58/+L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA3MjMwNzU5NDZaFw0yNjA3MjQxMDE4NDZaMDMxMTAvBgNV BAMTKDgzREQwODUwNjg3MDc4OTQ5NzI4ODUyNjJENjdCQTdERTdCNERCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZjJ/2dOCYNfoEHSYqUgDEnfr Wn2exKO+5H6llGlmX4fNwAhyDE2rGjLO3n3ARS3b3Om4zps462xvH1TMXTbMRzxu jhAtFUltvOfBldHisAFhxL17eqDptM8nPiStXnkXjjyoOlJqAQ+AWI62CkEZGrEx DG1G2YieHLK7I05d8j2JGQstOI70qswFfDfot+8b2jCNYci1GqS7K4FBse/HecD3 Sd51RKKc/HwK9udYNhjWuttTVPkWOtHNcVLO8wDq73kE9L9mkrd1fxGR6CNl5rBg gn8BmW5gj9Q1H1Z4fEymMOU+M+xmQZlIAGhfykvkgi6+o7+TJIV4sgSLlebxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg90IUGhweJSXKIUmLWe6fee0268wHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADglgiFfsRFKcFs4e7H2gdr32rWwSsOHENw5 boqR6tPDciTt+r2jjtztqaDNp9dE3OzCuM9I9Pwefkt6L+SO5zE1/mO49fpczfTI fwypudbCn8+KxYOIPXWrtfpl45fs03O+CAV6ItUtNplS8Q8wFqR0hkocDYfByS50 jS7ZjKEu8aXmOwZo7GtdCXtUVJ5vn0OqyaW7dSJAZVNTSGo7ICx7bX3RxyiRLCVw GLkoQmOocDC/GR9CziI89HjEYIks/nrmdB/D3S4VF/BLXQqBZSQ2WJemVTkDTJ4u 022ec+gFZoyOMdeUVHZDRLjnDbj4CAr9x0OpbQn9iVoR1phKkdA= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:20 2026 by rpki-client