$ rpki-client -vvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: ekb1IdPmnBYVCr9ub8TE2ahNAnFhc4cJVad/PmGpZKk= Subject key identifier: 69:E1:0B:1A:06:5B:18:0A:96:58:30:E8:EB:20:38:DA:CA:6A:E2:AD Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 2DC0EC0429DC0CA29252D86B501442BEF1541EB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:26:12 +0000 Manifest this update: Fri 24 Jul 2026 05:21:12 +0000 Manifest next update: Sat 25 Jul 2026 09:21:12 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) 2: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: T8Cup3esBnb2K95Bl83aGRddnWFTj/KM8oz9cz88rzY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c0:ec:04:29:dc:0c:a2:92:52:d8:6b:50:14:42:be:f1:54:1e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Jul 24 05:21:12 2026 GMT Not After : Jul 25 09:21:12 2026 GMT Subject: CN=69E10B1A065B180A965830E8EB2038DACA6AE2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:0c:70:ad:30:49:aa:d9:6d:fd:75:29:16: bb:a8:22:af:86:fc:e8:df:4a:d0:b7:41:46:5f:49: 0d:10:1b:28:3f:99:9e:ca:18:c2:c1:93:e9:00:72: 96:6f:52:d8:04:49:91:91:46:47:ca:52:ea:9b:5b: fd:bf:42:2c:11:54:9b:1e:ca:83:9b:6a:0d:80:28: 0c:6f:7f:d6:73:b7:09:91:35:54:62:f5:bb:33:7e: 92:de:c1:61:75:14:c6:d3:e2:f0:38:3c:e0:ff:da: b3:f7:67:58:7b:54:76:d8:8a:28:89:5a:05:2d:53: a9:44:d2:b7:0d:5f:45:9c:18:fa:26:cf:69:bb:7d: 96:38:c2:0d:89:7f:28:df:b6:a8:10:17:4b:43:ec: 06:52:cf:12:c3:c3:38:f4:25:b2:de:83:ff:7e:be: ed:2e:1f:8d:4f:3b:9c:4a:29:06:87:58:b6:30:71: 80:e5:7c:23:a3:bc:e6:8f:00:90:be:c4:6d:83:f0: a7:7e:2e:81:4a:a9:7f:fa:7d:b5:f2:47:39:96:d2: 1d:54:fe:5c:5e:8b:f5:b4:25:65:9f:c9:57:17:2a: 62:72:93:0c:68:80:5e:3a:19:d7:46:45:60:07:4b: 08:d4:7f:0d:68:e1:19:36:97:b3:cd:79:ea:83:0f: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E1:0B:1A:06:5B:18:0A:96:58:30:E8:EB:20:38:DA:CA:6A:E2:AD X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cb:29:d4:91:34:98:09:5c:f2:40:4f:11:55:66:e0:d6:71: b1:ae:70:c9:92:77:a9:02:ee:29:42:02:23:39:ab:d0:e7:ad: 83:fc:85:f4:ff:9f:75:ee:a2:01:56:4f:d3:15:f4:0a:30:fb: 79:45:b7:00:2a:31:cd:83:ef:bd:db:b9:be:f5:5e:d3:f6:7e: 21:ad:21:27:16:bf:31:92:8f:95:c3:3a:47:e9:74:bb:7b:cb: 5c:ba:40:7b:20:b6:a3:78:e2:76:30:68:98:e2:84:b7:71:09: 3a:a9:de:a2:c7:28:ce:e5:26:3b:e3:20:b6:ba:d7:5e:3e:6b: cc:a0:84:12:c6:31:43:3e:0a:9d:b8:03:82:63:14:dc:f1:f2: 30:59:a2:33:fe:60:36:8c:5f:79:ad:30:c1:d2:2b:32:78:a5: 8b:0a:08:44:a9:0e:9e:7c:ec:74:84:7b:f1:1e:2a:06:9c:49: 07:60:ca:69:43:2e:cc:5e:db:4c:d1:4e:99:2e:00:67:4f:ba: 9e:68:69:d5:f3:a7:c2:f7:05:0c:94:cc:ec:de:05:fd:72:10: 49:ea:64:6a:22:00:e4:4d:b0:c8:3d:94:85:09:36:f7:85:12: 59:73:ba:02:06:a4:f6:93:f8:99:5c:fc:b4:8a:64:05:64:f0: 41:a7:ea:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcDsBCncDKKSUthrUBRCvvFUHrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA3MjQwNTIxMTJaFw0yNjA3MjUwOTIxMTJaMDMxMTAvBgNV BAMTKDY5RTEwQjFBMDY1QjE4MEE5NjU4MzBFOEVCMjAzOERBQ0E2QUUyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSgxwrTBJqtlt/XUpFruoIq+G /OjfStC3QUZfSQ0QGyg/mZ7KGMLBk+kAcpZvUtgESZGRRkfKUuqbW/2/QiwRVJse yoObag2AKAxvf9ZztwmRNVRi9bszfpLewWF1FMbT4vA4POD/2rP3Z1h7VHbYiiiJ WgUtU6lE0rcNX0WcGPomz2m7fZY4wg2JfyjftqgQF0tD7AZSzxLDwzj0JbLeg/9+ vu0uH41PO5xKKQaHWLYwcYDlfCOjvOaPAJC+xG2D8Kd+LoFKqX/6fbXyRzmW0h1U /lxei/W0JWWfyVcXKmJykwxogF46GddGRWAHSwjUfw1o4Rk2l7PNeeqDD99lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeELGgZbGAqWWDDo6yA42spq4q0wHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnLKdSRNJgJXPJATxFVZuDWcbGucMmSd6kC 7ilCAiM5q9DnrYP8hfT/n3XuogFWT9MV9Aow+3lFtwAqMc2D773bub71XtP2fiGt IScWvzGSj5XDOkfpdLt7y1y6QHsgtqN44nYwaJjihLdxCTqp3qLHKM7lJjvjILa6 114+a8yghBLGMUM+Cp24A4JjFNzx8jBZojP+YDaMX3mtMMHSKzJ4pYsKCESpDp58 7HSEe/EeKgacSQdgymlDLsxe20zRTpkuAGdPup5oadXzp8L3BQyUzOzeBf1yEEnq ZGoiAORNsMg9lIUJNveFEllzugIGpPaT+Jlc/LSKZAVk8EGn6nM= -----END CERTIFICATE-----Generated at Fri Jul 24 16:17:06 2026 by rpki-client