$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json) Hash identifier: 842W7ys32dhhzv9Nm44ER+BhqHvc0tKWjJrsVK4FKcw= Subject key identifier: 9E:56:DD:BC:82:0A:DD:5D:42:BB:30:49:53:92:58:24:2F:76:E6:8F Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Certificate serial: 5A1361638BCB086E9C4952FD70DD33E4146BCCCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:16:05 +0000 Manifest this update: Thu 23 Jul 2026 17:11:05 +0000 Manifest next update: Fri 24 Jul 2026 20:18:05 +0000 Files and hashes: 1: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=) 2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=) 3: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=) 4: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=) 5: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: KSsOjaYQbsi6d5dgw9n1GddaaQWmcVMztRYflNt5l1g=) 6: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:13:61:63:8b:cb:08:6e:9c:49:52:fd:70:dd:33:e4:14:6b:cc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Validity Not Before: Jul 23 17:11:05 2026 GMT Not After : Jul 24 20:18:05 2026 GMT Subject: CN=9E56DDBC820ADD5D42BB3049539258242F76E68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:1d:6d:97:cf:6e:33:97:41:39:f1:fb:a9: 7d:06:b2:e1:56:a7:95:eb:31:96:dd:35:28:3c:2f: 75:4e:09:7a:6a:73:85:3d:75:6d:97:3b:e5:ca:d5: e9:c2:0c:26:d4:d8:44:fc:01:81:c1:71:4e:5b:a0: c7:78:cd:f7:01:42:c3:92:5b:80:29:3a:b9:2c:e4: ff:97:f4:0d:49:12:65:10:6d:25:9b:a2:fd:53:b8: 3c:d7:dd:a0:8c:91:c6:9b:20:58:f0:64:1a:3b:8d: eb:f4:9e:7c:ae:2c:96:ee:da:3e:47:74:28:8e:eb: 00:2d:16:ba:88:ba:a2:2a:e5:05:5e:a4:05:38:ad: b9:82:fc:94:33:27:85:ca:5c:7f:79:c8:5e:92:60: 5b:de:5c:9d:29:9d:d5:37:ba:79:c0:da:40:d4:12: d2:66:f7:7b:af:d5:ca:0a:f8:96:f9:15:c8:2f:85: 0a:9c:02:a9:b1:27:14:e6:12:74:5a:39:9e:8f:cc: e9:03:a3:ec:0c:e9:44:85:9b:6f:a3:84:66:75:5c: e6:c7:06:29:ba:51:8b:80:2f:d2:17:a7:b6:f7:7a: 2a:56:a4:91:0d:48:25:13:57:76:37:a5:58:66:04: 90:a8:ed:ad:fd:d7:f3:91:81:ce:43:17:f9:48:a4: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:56:DD:BC:82:0A:DD:5D:42:BB:30:49:53:92:58:24:2F:76:E6:8F X509v3 Authority Key Identifier: keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:43:9b:f1:95:ec:d8:43:05:c5:44:62:1a:a6:20:f6:78:8c: a8:3e:5d:ff:78:b3:2a:b1:dd:81:84:58:e6:b3:5d:f4:6b:f5: 7c:84:78:f6:c9:43:66:5d:b4:4c:96:d0:54:d5:d1:82:2b:2c: 7e:99:21:90:fd:3a:9b:68:91:04:86:0b:18:0e:13:ad:f1:50: 2a:b0:a3:dc:ae:69:3f:2e:66:89:67:a2:5f:1b:7f:b9:81:81: 92:ee:12:d2:b4:e8:da:46:51:16:96:88:a7:02:0d:a6:04:cd: 18:4a:58:ce:ba:24:4a:65:63:4c:4c:54:8c:ce:cd:06:f9:e6: 34:c1:bd:5d:43:04:cf:6e:d5:28:5d:f9:77:8e:4b:d4:df:b1: 78:df:76:39:5f:ac:e6:27:5c:12:09:7d:c5:c6:77:fb:35:2b: 43:36:bc:67:c6:f8:b0:c9:13:17:63:e0:73:f0:27:98:39:f4: 45:12:52:ea:ba:9f:a0:66:58:5c:f0:95:f6:5f:7c:97:1a:31: 83:bf:63:c1:a1:61:85:52:47:6c:72:8c:fa:3b:7f:74:29:46: bf:42:4f:ca:bc:40:5b:6e:96:d9:e9:76:ef:e9:4d:54:de:f8: 15:50:cd:bb:68:b1:76:0d:3c:b8:a0:50:80:04:7e:f1:09:91: da:7d:8b:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhNhY4vLCG6cSVL9cN0z5BRrzMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNEQTJE QkE4MTI1QzAeFw0yNjA3MjMxNzExMDVaFw0yNjA3MjQyMDE4MDVaMDMxMTAvBgNV BAMTKDlFNTZEREJDODIwQURENUQ0MkJCMzA0OTUzOTI1ODI0MkY3NkU2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FB1tl89uM5dBOfH7qX0GsuFW p5XrMZbdNSg8L3VOCXpqc4U9dW2XO+XK1enCDCbU2ET8AYHBcU5boMd4zfcBQsOS W4ApOrks5P+X9A1JEmUQbSWbov1TuDzX3aCMkcabIFjwZBo7jev0nnyuLJbu2j5H dCiO6wAtFrqIuqIq5QVepAU4rbmC/JQzJ4XKXH95yF6SYFveXJ0pndU3unnA2kDU EtJm93uv1coK+Jb5FcgvhQqcAqmxJxTmEnRaOZ6PzOkDo+wM6USFm2+jhGZ1XObH Bim6UYuAL9IXp7b3eipWpJENSCUTV3Y3pVhmBJCo7a391/ORgc5DF/lIpDSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlbdvIIK3V1CuzBJU5JYJC925o8wHwYDVR0j BBgwFoAU/uVwo/x48fGOhYrtqFM9otuoElwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJhZjgzNTItY2Q2NS00ZGI3LWIwY2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNG Qzc4RjFGMThFODU4QUVEQTg1MzNEQTJEQkE4MTI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUU1NzBBM0ZDNzhGMUYxOEU4NThBRURBODUzM0RBMkRCQTgx MjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNE QTJEQkE4MTI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhDm/GV7NhDBcVEYhqmIPZ4jKg+Xf94syqx 3YGEWOazXfRr9XyEePbJQ2ZdtEyW0FTV0YIrLH6ZIZD9OptokQSGCxgOE63xUCqw o9yuaT8uZolnol8bf7mBgZLuEtK06NpGURaWiKcCDaYEzRhKWM66JEplY0xMVIzO zQb55jTBvV1DBM9u1Shd+XeOS9TfsXjfdjlfrOYnXBIJfcXGd/s1K0M2vGfG+LDJ Exdj4HPwJ5g59EUSUuq6n6BmWFzwlfZffJcaMYO/Y8GhYYVSR2xyjPo7f3QpRr9C T8q8QFtultnpdu/pTVTe+BVQzbtosXYNPLigUIAEfvEJkdp9izA= -----END CERTIFICATE-----Generated at Fri Jul 24 01:16:38 2026 by rpki-client