$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: WjZDnXrZ7jZZ6h2ICPT+r/649tLqESAzNWpNvfDjZcQ= Subject key identifier: 89:26:41:F5:32:93:F2:4B:32:EC:BB:25:F9:14:46:16:9A:BA:AB:7E Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 681D3B293F2891B51E931F58C58D7B38C8679670 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:49:00 +0000 Manifest this update: Fri 24 Jul 2026 03:44:00 +0000 Manifest next update: Sat 25 Jul 2026 04:04:00 +0000 Files and hashes: 1: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: JnLuTQ2zEqcSf0eHtXWpVa9k+AkvCdDZ5BsLoI9E7XI=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) 3: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1d:3b:29:3f:28:91:b5:1e:93:1f:58:c5:8d:7b:38:c8:67:96:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Jul 24 03:44:00 2026 GMT Not After : Jul 25 04:04:00 2026 GMT Subject: CN=892641F53293F24B32ECBB25F91446169ABAAB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:ec:b7:06:b9:68:34:f9:a4:b8:f1:97:63: 9c:dd:4b:e7:ed:6f:b9:8b:77:29:9a:d7:33:13:b4: 42:77:e6:59:c3:7a:30:8a:80:f2:bd:e6:a7:6d:a3: b4:c7:bf:ca:66:90:b8:3f:18:b7:90:e7:97:5d:a9: aa:d5:22:39:ff:61:c0:64:21:36:99:90:a7:57:fd: 1b:49:10:52:5e:43:ce:7a:70:39:94:74:9a:e1:35: 46:28:51:29:0f:e8:d7:69:f3:e8:8e:02:a3:47:66: ba:fe:86:7f:81:c4:d6:2d:d4:0c:67:77:4c:dd:6f: 16:16:a6:c5:71:26:22:3a:ff:8f:19:21:d6:07:1e: b6:49:4f:e3:77:29:6c:72:c9:d1:50:5c:40:f1:5f: 81:2b:34:cc:26:d3:ea:b3:9b:46:3b:2c:10:c1:85: 9e:50:95:a4:4c:35:6e:6f:64:e3:28:0a:21:c5:90: f0:71:c8:83:1b:bb:47:29:24:f6:51:b4:f6:c6:7a: 90:75:56:2b:ef:c3:eb:d0:2f:10:28:36:bb:72:8c: 70:f5:c3:00:b6:1d:98:b2:3f:de:3c:42:b9:3a:ad: 5e:d0:d0:b1:cf:a4:3d:30:f9:c7:ed:e7:2a:86:f2: d9:5a:af:85:9e:6d:4e:11:b1:44:92:c9:d0:39:fc: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:26:41:F5:32:93:F2:4B:32:EC:BB:25:F9:14:46:16:9A:BA:AB:7E X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f7:92:a6:93:41:d7:2b:0a:2a:22:dc:a1:b1:28:0f:e1:22: 3c:3b:45:c8:db:33:20:b4:df:1f:c0:69:af:c3:54:b7:1c:b1: 35:d8:98:f3:b4:93:d2:db:07:dc:a5:1e:69:3b:8b:c4:4c:39: 88:00:6a:e4:3a:01:85:e0:dc:72:95:11:bb:49:5d:14:90:b2: a5:ad:e7:d1:36:1b:3c:b8:89:31:db:85:2b:96:86:76:13:b3: 42:5d:72:71:26:68:5f:79:cd:56:82:7c:ef:d3:76:93:e2:b8: a6:b8:49:86:dd:35:b5:ec:95:84:31:d4:48:3e:88:e9:ed:05: 21:5e:a3:60:a7:c0:c0:15:ed:14:26:7c:73:d2:d2:e2:0a:d7: b5:8d:8b:cf:94:93:94:08:4a:a7:c8:18:06:9a:9a:50:33:69: ce:90:2e:9d:48:25:13:fa:9a:f2:52:c6:0d:4c:62:c0:cd:8b: ab:01:80:4b:63:a0:de:b7:4a:f9:fe:29:ed:2d:af:b2:28:21: eb:3d:77:d8:cc:04:84:31:1a:86:b2:8a:ec:df:61:80:8e:c5: 12:bc:11:64:e3:72:49:18:a2:fe:dc:d5:0b:ba:79:dc:e0:6c: de:ce:cf:f3:0b:c5:74:9d:d2:e6:21:ff:02:f6:d4:f9:b3:7e: 47:c8:7b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaB07KT8okbUekx9YxY17OMhnlnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA3MjQwMzQ0MDBaFw0yNjA3MjUwNDA0MDBaMDMxMTAvBgNV BAMTKDg5MjY0MUY1MzI5M0YyNEIzMkVDQkIyNUY5MTQ0NjE2OUFCQUFCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConey3BrloNPmkuPGXY5zdS+ft b7mLdyma1zMTtEJ35lnDejCKgPK95qdto7THv8pmkLg/GLeQ55ddqarVIjn/YcBk ITaZkKdX/RtJEFJeQ856cDmUdJrhNUYoUSkP6Ndp8+iOAqNHZrr+hn+BxNYt1Axn d0zdbxYWpsVxJiI6/48ZIdYHHrZJT+N3KWxyydFQXEDxX4ErNMwm0+qzm0Y7LBDB hZ5QlaRMNW5vZOMoCiHFkPBxyIMbu0cpJPZRtPbGepB1Vivvw+vQLxAoNrtyjHD1 wwC2HZiyP948Qrk6rV7Q0LHPpD0w+cft5yqG8tlar4WebU4RsUSSydA5/NV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSZB9TKT8ksy7Lsl+RRGFpq6q34wHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv3kqaTQdcrCioi3KGxKA/hIjw7RcjbMyC0 3x/Aaa/DVLccsTXYmPO0k9LbB9ylHmk7i8RMOYgAauQ6AYXg3HKVEbtJXRSQsqWt 59E2Gzy4iTHbhSuWhnYTs0JdcnEmaF95zVaCfO/TdpPiuKa4SYbdNbXslYQx1Eg+ iOntBSFeo2CnwMAV7RQmfHPS0uIK17WNi8+Uk5QISqfIGAaamlAzac6QLp1IJRP6 mvJSxg1MYsDNi6sBgEtjoN63Svn+Ke0tr7IoIes9d9jMBIQxGoayiuzfYYCOxRK8 EWTjckkYov7c1Qu6edzgbN7Oz/MLxXSd0uYh/wL21PmzfkfIe8Y= -----END CERTIFICATE-----Generated at Fri Jul 24 07:56:36 2026 by rpki-client