$ rpki-client -vvf rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft File: 202D68B92C393694107A2F9B59DF1822383F0A40.mft (raw, json) Hash identifier: 50lKTI9Cy6f7IWzsqf9MjJX7S8CgVsduzeCu0ReBrYc= Subject key identifier: AA:FA:40:A4:BF:E1:02:73:ED:21:B7:AF:16:E9:8F:C2:95:83:49:2A Authority key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 Certificate issuer: /CN=202D68B92C393694107A2F9B59DF1822383F0A40 Certificate serial: 41F8E9E1656B839E3F69E9B28C5E3F6BA8CC68B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:21:21 +0000 Manifest this update: Thu 23 Jul 2026 13:16:21 +0000 Manifest next update: Fri 24 Jul 2026 14:19:21 +0000 Files and hashes: 1: 202D68B92C393694107A2F9B59DF1822383F0A40.crl (hash: HXpjoMzH+sw6/bV0O1L4EPlJXWT7PwQo8vLwBfx74CQ=) 2: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JJn7HIlfA2u7cKl1pj836AvFJgvd06b+L9BxXbXGPiQ=) 3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: sVkX/3BAqlUnIX3vPMQ13bPbeRbhUsec2KXwzV7qXyg=) 4: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 59w4gZXVO0UF24xOSJ6tHWLfwtyek7qt4pTN2C7JT58=) 5: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: s1JJ4qxqnX+/x2wRLTL/vn6XvEiBu3g0RUuaHJFKCfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f8:e9:e1:65:6b:83:9e:3f:69:e9:b2:8c:5e:3f:6b:a8:cc:68:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202D68B92C393694107A2F9B59DF1822383F0A40 Validity Not Before: Jul 23 13:16:21 2026 GMT Not After : Jul 24 14:19:21 2026 GMT Subject: CN=AAFA40A4BFE10273ED21B7AF16E98FC29583492A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:65:f8:1b:d7:c8:22:78:0d:eb:d0:f4:9f: fa:8c:aa:09:e9:f0:e3:ed:38:97:89:cd:ec:7c:5f: b1:63:4d:b0:c3:66:33:97:b8:df:4d:8a:47:f9:1b: 6a:f7:81:19:7e:81:82:3a:90:ce:9c:e9:6d:a7:2b: b6:d6:5c:1e:9a:e5:60:6c:16:c3:6f:39:13:00:ee: 56:a0:fc:14:0f:3e:a6:3d:b3:52:7f:a9:96:1c:9d: 27:f0:cb:5b:a6:f1:d3:63:ca:09:36:4c:50:8d:4b: 4b:88:15:a4:c3:95:2b:f3:ae:0d:f5:f7:ea:eb:15: df:b5:95:ad:b5:d8:b9:23:d1:78:8b:63:2d:6a:73: c3:ef:bb:94:2a:58:fb:ec:3f:e7:12:a8:34:cf:75: 9c:2a:97:a7:67:94:9e:18:68:38:cf:e8:b4:fa:24: 4e:57:42:66:1c:df:3e:9a:2d:0e:7d:6c:67:1b:59: a8:b9:2f:c6:a6:1d:e6:00:b8:f4:df:3b:3e:4d:b3: c9:eb:ce:7a:1b:ac:11:29:f9:fb:a1:d8:07:25:d0: 01:ed:44:97:1e:d0:45:e5:ed:8f:96:e3:d9:72:db: 70:02:9b:c4:59:fd:8d:fe:07:05:53:67:4a:b1:62: 3c:e9:07:43:c2:1b:90:cc:29:e5:2a:05:43:08:eb: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FA:40:A4:BF:E1:02:73:ED:21:B7:AF:16:E9:8F:C2:95:83:49:2A X509v3 Authority Key Identifier: keyid:20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:02:cf:71:88:3e:01:a6:20:eb:fe:d4:44:54:b9:e4:2f:39: ce:b0:b3:2c:23:ac:b6:09:c3:a6:fd:0f:aa:eb:48:38:d2:07: 12:ce:09:70:32:a7:c2:7f:23:d5:83:a2:7c:59:5c:3f:1a:1a: cd:fe:77:eb:88:84:91:22:b9:82:80:3a:66:c3:38:2c:79:32: 8c:88:7b:49:c3:0d:25:6d:9f:6b:4d:40:51:cb:95:30:a9:cb: a9:a3:f8:4a:6c:e0:10:42:17:16:d8:04:63:85:42:03:0c:20: 9e:81:7c:cc:b8:c7:83:28:25:19:00:44:9e:60:13:41:c7:98: 94:68:60:1b:64:d0:d6:d4:93:a0:8e:67:0b:17:31:02:0a:30: 2f:c0:83:4d:6d:a7:e0:0f:af:3b:6d:37:a0:19:2d:4e:2c:ef: 53:88:8a:e0:c3:d5:b1:71:5e:7d:cb:d4:74:dc:74:25:2b:41: 81:cd:db:86:a4:18:af:9b:27:0b:5a:0e:b1:dc:83:74:dc:7d: fd:d7:b3:4a:e2:db:b1:c3:c5:98:18:02:3e:d7:23:63:e4:42: 2b:6d:39:99:92:52:19:04:68:2c:05:e6:4a:6b:12:7a:2e:e0: 70:c3:fa:0a:20:dd:f0:cf:b7:3c:55:e1:4f:ff:6a:9b:cc:49: 84:34:92:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfjp4WVrg54/aemyjF4/a6jMaLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4MjIz ODNGMEE0MDAeFw0yNjA3MjMxMzE2MjFaFw0yNjA3MjQxNDE5MjFaMDMxMTAvBgNV BAMTKEFBRkE0MEE0QkZFMTAyNzNFRDIxQjdBRjE2RTk4RkMyOTU4MzQ5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KWX4G9fIIngN69D0n/qMqgnp 8OPtOJeJzex8X7FjTbDDZjOXuN9Nikf5G2r3gRl+gYI6kM6c6W2nK7bWXB6a5WBs FsNvORMA7lag/BQPPqY9s1J/qZYcnSfwy1um8dNjygk2TFCNS0uIFaTDlSvzrg31 9+rrFd+1la212Lkj0XiLYy1qc8Pvu5QqWPvsP+cSqDTPdZwql6dnlJ4YaDjP6LT6 JE5XQmYc3z6aLQ59bGcbWai5L8amHeYAuPTfOz5Ns8nrznobrBEp+fuh2Acl0AHt RJce0EXl7Y+W49ly23ACm8RZ/Y3+BwVTZ0qxYjzpB0PCG5DMKeUqBUMI6xgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvpApL/hAnPtIbevFumPwpWDSSowHwYDVR0j BBgwFoAUIC1ouSw5NpQQei+bWd8YIjg/CkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3MjkyOTEtYTFhNy00YjE5LTkzZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4Qjky QzM5MzY5NDEwN0EyRjlCNTlERjE4MjIzODNGMEE0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJENjhCOTJDMzkzNjk0MTA3QTJGOUI1OURGMTgyMjM4M0Yw QTQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4 MjIzODNGMEE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUCz3GIPgGmIOv+1ERUueQvOc6wsywjrLYJ w6b9D6rrSDjSBxLOCXAyp8J/I9WDonxZXD8aGs3+d+uIhJEiuYKAOmbDOCx5MoyI e0nDDSVtn2tNQFHLlTCpy6mj+Eps4BBCFxbYBGOFQgMMIJ6BfMy4x4MoJRkARJ5g E0HHmJRoYBtk0NbUk6COZwsXMQIKMC/Ag01tp+APrzttN6AZLU4s71OIiuDD1bFx Xn3L1HTcdCUrQYHN24akGK+bJwtaDrHcg3Tcff3Xs0ri27HDxZgYAj7XI2PkQitt OZmSUhkEaCwF5kprEnou4HDD+gog3fDPtzxV4U//apvMSYQ0kg0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:47 2026 by rpki-client