$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: 4AEQ/ZPne9a75Viu2OMvV8O7kPlhGNAfYUIchs5eHas= Subject key identifier: 4F:DB:01:6B:74:F6:10:50:B3:24:23:B4:AC:C1:3D:83:54:F2:A9:DC Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 3A746FD2F9D2E19478E7F7A72DAD37F56A73B997 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:22:28 +0000 Manifest this update: Thu 23 Jul 2026 18:17:28 +0000 Manifest next update: Fri 24 Jul 2026 18:55:28 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: il4pP9FFidoOU10f/X604zEi+l6SZmrxp0gPQS+v5Mc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:74:6f:d2:f9:d2:e1:94:78:e7:f7:a7:2d:ad:37:f5:6a:73:b9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Jul 23 18:17:28 2026 GMT Not After : Jul 24 18:55:28 2026 GMT Subject: CN=4FDB016B74F61050B32423B4ACC13D8354F2A9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:d8:a9:fc:34:c8:3a:31:42:65:46:44:75: 41:08:57:d2:7f:ab:4b:b4:80:8c:6b:13:ea:f6:b3: 2c:75:c6:22:53:28:28:44:19:7b:50:bf:ba:69:ef: 26:e7:17:b6:18:30:93:6b:5e:c3:70:e3:bc:17:e5: 2d:62:83:4a:93:a1:a9:6d:4d:45:99:17:c2:c7:21: 33:12:5e:19:dc:b2:74:74:a9:75:67:00:bf:86:23: 6d:67:38:e2:93:50:ca:da:a7:78:d7:6c:b0:91:48: 4e:2e:0d:f0:0e:fe:2e:ce:c6:fe:f6:e0:c9:b5:ee: a7:a3:7b:78:65:c4:d5:77:f6:23:96:92:07:c8:42: fe:8b:fb:2e:fe:5c:99:ab:b0:99:b1:90:dd:80:95: e5:e5:5a:14:1d:08:7c:ef:f5:42:fd:20:d7:34:18: 6e:4b:6a:aa:1b:f5:0c:db:10:37:5a:7e:d2:9b:92: 06:88:0c:b9:7c:c2:ed:91:fd:e2:05:8e:eb:40:e8: a1:73:37:27:a5:a7:57:98:14:14:dc:74:7a:1f:de: 72:ef:72:d9:8a:d5:e8:c7:e5:56:8b:64:8c:6c:ba: c4:0d:98:bd:08:3c:00:4b:5d:10:44:ff:ca:f4:eb: 8c:48:09:cc:e1:e6:37:2a:7a:ae:aa:ff:19:69:d2: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:01:6B:74:F6:10:50:B3:24:23:B4:AC:C1:3D:83:54:F2:A9:DC X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:55:0f:d0:b0:46:37:e8:58:5e:07:3b:04:1b:8b:25:9a: 42:75:56:b4:12:34:4a:4a:9a:8d:8a:e7:1a:d5:e1:eb:c8:61: 3b:8a:e2:a5:ff:f1:5d:5f:7c:ea:81:bf:24:2a:3b:9d:27:98: ca:68:74:56:4a:aa:d6:88:dd:f2:5a:ba:d6:9a:21:63:f2:f8: 99:a0:1f:fb:4e:2c:d8:18:06:65:e0:0f:ee:92:e9:32:11:09: af:ad:db:01:f0:c3:80:a4:11:4a:dd:a3:8e:84:0f:fb:29:ac: 62:96:40:e0:ac:8f:52:e8:15:80:bc:fd:1e:c5:ea:a2:7b:0d: 0a:01:a3:96:93:30:8b:a9:cd:d9:99:4a:d8:e2:46:60:5a:eb: ba:49:c6:b0:e8:31:73:33:3a:76:90:6e:2f:98:2d:83:b3:55: 2e:8c:49:9d:4c:8c:b3:6d:09:b8:24:7d:9a:e9:ef:f7:66:46: bf:45:27:64:cf:81:c9:29:26:c2:d9:b8:c9:c7:9b:ef:df:4e: 58:a7:4b:4e:67:09:c2:ad:83:b8:88:e6:ef:b8:8f:ce:55:f7: 43:01:dc:03:8f:41:02:b0:95:a8:eb:db:dd:b4:ce:f1:6d:8f: 8b:f7:53:77:aa:48:34:11:ee:6e:12:b9:5e:95:1b:59:2d:4e: 15:f3:75:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnRv0vnS4ZR45/enLa039WpzuZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA3MjMxODE3MjhaFw0yNjA3MjQxODU1MjhaMDMxMTAvBgNV BAMTKDRGREIwMTZCNzRGNjEwNTBCMzI0MjNCNEFDQzEzRDgzNTRGMkE5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ9ip/DTIOjFCZUZEdUEIV9J/ q0u0gIxrE+r2syx1xiJTKChEGXtQv7pp7ybnF7YYMJNrXsNw47wX5S1ig0qToalt TUWZF8LHITMSXhncsnR0qXVnAL+GI21nOOKTUMrap3jXbLCRSE4uDfAO/i7Oxv72 4Mm17qeje3hlxNV39iOWkgfIQv6L+y7+XJmrsJmxkN2AleXlWhQdCHzv9UL9INc0 GG5Laqob9QzbEDdaftKbkgaIDLl8wu2R/eIFjutA6KFzNyelp1eYFBTcdHof3nLv ctmK1ejH5VaLZIxsusQNmL0IPABLXRBE/8r064xICczh5jcqeq6q/xlp0tC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9sBa3T2EFCzJCO0rME9g1TyqdwwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl+VQ/QsEY36FheBzsEG4slmkJ1VrQSNEpK mo2K5xrV4evIYTuK4qX/8V1ffOqBvyQqO50nmMpodFZKqtaI3fJautaaIWPy+Jmg H/tOLNgYBmXgD+6S6TIRCa+t2wHww4CkEUrdo46ED/sprGKWQOCsj1LoFYC8/R7F 6qJ7DQoBo5aTMIupzdmZStjiRmBa67pJxrDoMXMzOnaQbi+YLYOzVS6MSZ1MjLNt CbgkfZrp7/dmRr9FJ2TPgckpJsLZuMnHm+/fTlinS05nCcKtg7iI5u+4j85V90MB 3AOPQQKwlajr2920zvFtj4v3U3eqSDQR7m4SuV6VG1ktThXzdXg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:47:14 2026 by rpki-client