$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: 2EUmCbuchXzFDtqNikSnWsYNf5jOkfCoDu3FGVF4dcg= Subject key identifier: E5:53:FE:B1:B4:DC:6A:2F:3A:27:8A:2F:91:AA:96:C2:A3:01:60:2E Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 07B49F978B6EFF9E853E2FA5B382CD0FB1453635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:37:30 +0000 Manifest this update: Fri 24 Jul 2026 02:32:30 +0000 Manifest next update: Sat 25 Jul 2026 04:32:30 +0000 Files and hashes: 1: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) 2: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: tfjAhiW+Vg20irdYlbwIT6ZwnddsVI/j63FPT/wGKHE=) 3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b4:9f:97:8b:6e:ff:9e:85:3e:2f:a5:b3:82:cd:0f:b1:45:36:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Jul 24 02:32:30 2026 GMT Not After : Jul 25 04:32:30 2026 GMT Subject: CN=E553FEB1B4DC6A2F3A278A2F91AA96C2A301602E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:07:f7:ee:7a:29:13:5e:4f:07:a8:d3:e9: f3:a6:8d:99:df:78:58:76:d9:33:0a:4f:06:3d:3e: e9:84:52:3d:9f:74:b6:e6:63:c7:5b:47:42:f5:e7: b5:34:7b:db:5b:ed:d1:da:5f:b9:c1:ff:f4:6e:17: a5:43:f6:ab:0d:14:e7:a6:49:ec:a2:2c:d0:24:da: 43:2c:75:3b:b3:3f:59:5b:65:5f:e3:7a:6c:93:92: 70:b9:38:07:91:1e:eb:5e:89:79:73:6f:43:dc:8c: 9b:a6:70:eb:3a:05:a5:7b:ae:c2:bd:a1:b9:38:b6: 1a:22:fb:4d:27:56:a9:5b:77:79:0c:3d:5e:18:a6: 8b:fe:b1:6c:37:20:77:68:49:9f:f8:07:cb:fe:98: 6c:40:d8:ba:ec:d9:d9:f2:d5:98:c4:4e:f9:d3:39: 5e:68:4a:12:60:09:fb:64:36:de:50:c1:22:c0:52: 97:e0:8c:40:aa:47:1a:c1:23:12:b6:00:52:67:eb: b4:da:2f:38:57:79:f6:d8:ab:4e:37:04:3c:dd:54: 2c:60:c7:0e:08:2d:16:85:79:a0:c3:ff:a6:5c:e2: 2c:5b:0a:68:43:bc:10:11:de:06:0e:5c:48:31:e6: 6a:4d:28:f8:6f:a6:55:2b:2a:0d:49:2f:d2:b2:61: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:FE:B1:B4:DC:6A:2F:3A:27:8A:2F:91:AA:96:C2:A3:01:60:2E X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ba:ea:67:70:d7:8d:d1:b2:47:a4:2f:40:11:f1:fe:89:75: fe:71:b8:6d:9a:9f:5c:d2:72:09:d4:22:88:fd:ce:45:90:b0: cf:70:64:05:df:75:34:b1:4b:03:7b:b7:2e:6e:2c:4e:49:42: 77:a9:b8:50:af:74:b1:c3:10:c2:c4:43:7f:60:c2:f3:c7:69: 9a:0c:a8:49:df:38:75:73:3a:f7:57:8e:75:89:2a:d6:5d:fa: b0:9f:f8:41:ea:06:83:4d:5a:28:71:fc:21:1c:47:db:34:1b: c9:4a:8e:f4:22:7b:1c:92:a2:70:09:c9:79:30:17:62:81:cd: 52:5a:c4:a3:83:ae:7b:02:a5:29:fa:b9:17:e8:81:8a:35:64: c3:df:b6:ca:16:64:2a:fd:83:35:21:1e:4d:5d:84:76:4a:c8: 1a:70:18:c4:82:04:62:28:e3:ef:9a:35:98:9f:02:52:77:e3: 54:62:7b:9f:4c:18:08:73:14:48:6b:3e:e2:6a:d9:c4:87:b1: b3:9b:5c:41:5a:da:6f:c8:d8:df:fa:dd:95:5d:93:f8:43:57: e0:9d:15:bd:9a:7f:43:f1:c3:48:c1:a1:d6:71:fe:82:57:5e: 33:52:ff:b4:4f:f1:d3:41:75:6f:0a:0e:e2:9b:ba:90:d4:c2: 18:51:00:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7Sfl4tu/56FPi+ls4LND7FFNjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA3MjQwMjMyMzBaFw0yNjA3MjUwNDMyMzBaMDMxMTAvBgNV BAMTKEU1NTNGRUIxQjREQzZBMkYzQTI3OEEyRjkxQUE5NkMyQTMwMTYwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBAf37nopE15PB6jT6fOmjZnf eFh22TMKTwY9PumEUj2fdLbmY8dbR0L157U0e9tb7dHaX7nB//RuF6VD9qsNFOem SeyiLNAk2kMsdTuzP1lbZV/jemyTknC5OAeRHuteiXlzb0PcjJumcOs6BaV7rsK9 obk4thoi+00nVqlbd3kMPV4Ypov+sWw3IHdoSZ/4B8v+mGxA2Lrs2dny1ZjETvnT OV5oShJgCftkNt5QwSLAUpfgjECqRxrBIxK2AFJn67TaLzhXefbYq043BDzdVCxg xw4ILRaFeaDD/6Zc4ixbCmhDvBAR3gYOXEgx5mpNKPhvplUrKg1JL9KyYdO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VP+sbTcai86J4ovkaqWwqMBYC4wHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO66mdw143RskekL0AR8f6Jdf5xuG2an1zS cgnUIoj9zkWQsM9wZAXfdTSxSwN7ty5uLE5JQnepuFCvdLHDEMLEQ39gwvPHaZoM qEnfOHVzOvdXjnWJKtZd+rCf+EHqBoNNWihx/CEcR9s0G8lKjvQiexySonAJyXkw F2KBzVJaxKODrnsCpSn6uRfogYo1ZMPftsoWZCr9gzUhHk1dhHZKyBpwGMSCBGIo 4++aNZifAlJ341Rie59MGAhzFEhrPuJq2cSHsbObXEFa2m/I2N/63ZVdk/hDV+Cd Fb2af0Pxw0jBodZx/oJXXjNS/7RP8dNBdW8KDuKbupDUwhhRABw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:52:52 2026 by rpki-client