$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft File: 511F1AA1B492F6794EF165F62B075919F2B16E44.mft (raw, json) Hash identifier: FXgUui+FiHzr9b5OWGlTIsyx/H7cstXgeAxM5rfMFzQ= Subject key identifier: A3:5C:D8:66:83:36:C3:97:E4:1F:55:98:A2:AC:D0:EC:27:49:D9:48 Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Certificate serial: 7F61DB1775F788BEC5AA525455A7145BBC732CB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 04:24:55 +0000 Manifest this update: Fri 24 Jul 2026 04:19:55 +0000 Manifest next update: Sat 25 Jul 2026 04:54:55 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=) 3: 511F1AA1B492F6794EF165F62B075919F2B16E44.crl (hash: S3ASeFUGWhl1hGCC6gcwZd+fT3VwIHwfW9i7mRHyUFk=) 4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:61:db:17:75:f7:88:be:c5:aa:52:54:55:a7:14:5b:bc:73:2c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Validity Not Before: Jul 24 04:19:55 2026 GMT Not After : Jul 25 04:54:55 2026 GMT Subject: CN=A35CD8668336C397E41F5598A2ACD0EC2749D948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:73:f3:18:1c:6d:5a:60:66:b5:60:76:dc: f4:49:4a:c8:99:f5:14:7c:c0:54:71:17:4d:a5:8d: 7b:58:c7:ab:1c:fd:08:fd:9c:6e:c5:d0:6d:45:4d: ad:73:0a:81:02:97:d8:ee:63:87:09:4d:81:ea:9a: ab:b4:72:29:bc:28:53:94:64:3b:c7:13:4f:79:a6: 8a:4e:00:ad:99:92:3e:08:c8:00:fa:97:26:68:4b: 53:c9:74:2b:2e:3b:94:52:76:94:5d:cd:23:26:22: aa:26:8b:83:a8:1a:36:23:03:f3:c4:be:d1:ef:e5: a5:ef:46:b4:fd:9d:41:73:48:f5:cc:1e:fd:c1:49: f9:4f:1d:82:e8:28:36:eb:52:ed:2f:6d:1e:cb:d1: ad:81:fb:87:7c:3b:3b:75:f9:ae:4c:93:7d:55:87: e9:f9:38:bc:d1:e5:1a:93:8a:3f:62:5d:1b:23:02: d3:d5:41:1a:e7:a6:5e:71:82:f7:a9:d0:aa:29:e6: 25:d9:d9:2d:ce:a9:87:54:c6:b2:4c:4f:d3:95:ad: e8:d2:17:6c:3a:ea:ec:14:87:77:94:23:22:65:49: 1d:ea:94:e7:06:d5:ff:60:53:51:aa:46:02:8b:d2: 20:9d:f1:9a:68:06:c0:0c:b1:30:b4:ea:2a:98:96: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5C:D8:66:83:36:C3:97:E4:1F:55:98:A2:AC:D0:EC:27:49:D9:48 X509v3 Authority Key Identifier: keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:be:dd:23:85:dc:8a:60:ff:b3:3a:8d:34:8a:78:0b:de: 72:86:7c:11:73:fc:28:78:ee:04:3a:67:e4:d7:5d:5f:dc:cb: 0b:ca:1b:d2:aa:3f:2f:9e:8f:13:23:9b:af:b6:4c:7b:b8:1b: 5a:e6:de:6c:10:b1:f3:50:3e:63:51:05:b6:f0:14:f3:70:99: 15:bb:c1:d6:54:fc:e6:25:81:90:b6:d7:31:6c:be:9f:21:b5: e4:54:3a:af:b2:62:87:64:6f:52:f9:d9:15:b3:c8:8f:0a:d2: 9d:58:de:d3:fc:61:6f:97:60:6f:68:00:92:b2:1e:d1:c3:00: 1e:2a:c5:3e:9e:df:0c:44:88:4e:63:ac:a6:c8:8c:ce:b3:15: 41:e5:1b:3e:66:40:ac:16:ea:f4:6d:9d:c8:76:7a:d4:ae:8d: a2:28:d4:96:f1:9c:3f:6c:2d:25:24:e4:5b:43:34:49:1b:f3: bc:e3:c7:6c:df:a4:49:3f:08:fc:3b:ff:5b:ec:3b:42:9f:0c: ed:ec:00:e8:cd:07:4b:9c:52:d1:9e:9d:34:9f:3a:ff:10:d1: 00:0d:63:20:86:b3:54:1f:c5:3a:99:e8:7f:1a:20:89:d7:56: 1d:c5:fc:bd:2e:7e:09:af:8e:53:39:a1:17:d2:04:96:ab:44: 67:a8:a6:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2HbF3X3iL7FqlJUVacUW7xzLLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlG MkIxNkU0NDAeFw0yNjA3MjQwNDE5NTVaFw0yNjA3MjUwNDU0NTVaMDMxMTAvBgNV BAMTKEEzNUNEODY2ODMzNkMzOTdFNDFGNTU5OEEyQUNEMEVDMjc0OUQ5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL2XPzGBxtWmBmtWB23PRJSsiZ 9RR8wFRxF02ljXtYx6sc/Qj9nG7F0G1FTa1zCoECl9juY4cJTYHqmqu0cim8KFOU ZDvHE095popOAK2Zkj4IyAD6lyZoS1PJdCsuO5RSdpRdzSMmIqomi4OoGjYjA/PE vtHv5aXvRrT9nUFzSPXMHv3BSflPHYLoKDbrUu0vbR7L0a2B+4d8Ozt1+a5Mk31V h+n5OLzR5RqTij9iXRsjAtPVQRrnpl5xgvep0Kop5iXZ2S3OqYdUxrJMT9OVrejS F2w66uwUh3eUIyJlSR3qlOcG1f9gU1GqRgKL0iCd8ZpoBsAMsTC06iqYlnM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1zYZoM2w5fkH1WYoqzQ7CdJ2UgwHwYDVR0j BBgwFoAUUR8aobSS9nlO8WX2KwdZGfKxbkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1NzkyMWQtZWUxOC00MzVjLThiNmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFC NDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlGMkIxNkU0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81MTFGMUFBMUI0OTJGNjc5NEVGMTY1RjYyQjA3NTkxOUYyQjE2 RTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5 MTlGMkIxNkU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJBvt0jhdyKYP+zOo00ingL3nKGfBFz/Ch4 7gQ6Z+TXXV/cywvKG9KqPy+ejxMjm6+2THu4G1rm3mwQsfNQPmNRBbbwFPNwmRW7 wdZU/OYlgZC21zFsvp8hteRUOq+yYodkb1L52RWzyI8K0p1Y3tP8YW+XYG9oAJKy HtHDAB4qxT6e3wxEiE5jrKbIjM6zFUHlGz5mQKwW6vRtnch2etSujaIo1JbxnD9s LSUk5FtDNEkb87zjx2zfpEk/CPw7/1vsO0KfDO3sAOjNB0ucUtGenTSfOv8Q0QAN YyCGs1QfxTqZ6H8aIInXVh3F/L0ufgmvjlM5oRfSBJarRGeopqY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:46 2026 by rpki-client