$ rpki-client -vvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: 4Iu/7jliF8jIcP9DlDhuJRPobu6VKHQEGPxxE0DkAeI= Subject key identifier: 32:8B:0B:DE:B0:05:63:26:B5:C3:A2:29:7D:B6:69:DB:24:1F:CE:12 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 5EA9E021E28D4EE522CEAC5C9BE5210A08623A4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:49:20 +0000 Manifest this update: Thu 23 Jul 2026 19:44:20 +0000 Manifest next update: Fri 24 Jul 2026 22:53:20 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: DrUl0ZKKvIgrrK5jL/sRsygn4r+COd7DyOLAhjyDqRQ=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a9:e0:21:e2:8d:4e:e5:22:ce:ac:5c:9b:e5:21:0a:08:62:3a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Jul 23 19:44:20 2026 GMT Not After : Jul 24 22:53:20 2026 GMT Subject: CN=328B0BDEB0056326B5C3A2297DB669DB241FCE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:96:79:65:a5:39:02:a0:dd:09:35:84:af: d3:f6:0f:71:cc:da:30:e4:d5:6a:4a:b1:f9:67:61: 77:d0:1f:d7:8a:fe:48:05:36:47:6d:4b:f4:1c:2a: a2:03:63:5c:ae:b4:27:4d:71:d5:d6:1e:f2:f4:98: e3:b0:80:58:b2:3e:ad:df:5e:24:50:1d:01:cc:97: ee:58:6a:ca:ad:07:14:ac:be:22:04:85:88:6a:98: b9:da:5f:da:3a:60:f9:47:80:2f:79:50:d1:01:80: 09:d0:eb:67:a2:cd:a5:81:35:d6:cc:b4:35:0b:d8: 71:95:e9:e2:72:ef:fd:57:52:3f:95:a4:47:b8:5b: b6:67:dd:a8:0e:ec:02:83:22:f5:a4:72:28:84:7d: d5:11:b4:92:8c:30:0e:fa:e3:80:c3:7e:22:d2:86: e5:ed:de:35:1c:66:cd:56:00:72:7b:c9:bd:85:2d: d1:fd:88:52:7f:7e:c6:b5:e4:29:54:38:ca:fa:e9: b5:db:83:7d:96:e8:37:f4:83:71:32:5f:c7:b8:e5: 28:eb:45:23:9e:40:fb:51:66:1c:68:35:b6:58:df: 1d:39:68:a6:83:e7:e0:3f:4d:7a:5a:42:55:10:3c: 63:79:6e:28:3d:5f:73:47:08:f9:18:a3:25:5c:e0: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:0B:DE:B0:05:63:26:B5:C3:A2:29:7D:B6:69:DB:24:1F:CE:12 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:f0:70:40:e2:a4:ef:9c:ff:d8:ed:cd:7e:fc:db:46:87: 49:53:80:e3:5a:12:b3:11:fd:e0:80:b2:7e:c1:c0:5c:7b:75: 19:6f:30:a2:e9:78:51:12:73:33:ab:96:cc:02:22:a7:5b:b4: 79:12:83:0e:38:09:0f:24:07:90:60:12:61:c3:c1:0b:62:6d: d2:d9:32:5a:e4:e3:99:37:4b:60:44:a9:9a:98:aa:11:cc:98: 46:9d:38:08:f2:2c:5b:7f:fa:05:35:83:42:b1:b8:4f:91:86: 1d:a5:76:93:8e:eb:45:4f:e7:90:33:a3:f8:ea:56:cf:a6:2b: b7:30:e3:a7:f7:a7:fb:4f:d8:c9:86:92:34:3c:7f:10:9d:a3: ec:65:94:7f:26:45:a1:35:6a:9a:d5:33:ad:ed:45:63:0b:00: c7:2f:ec:1a:f7:15:53:3b:3c:a1:3a:8b:57:d4:c1:ae:85:20: 9b:dd:0c:db:59:44:0a:8b:31:4a:94:45:69:04:9b:61:dd:7b: a3:ff:92:ab:e8:67:5d:f8:f3:bb:e4:ae:5d:74:e6:2a:14:7b: 7a:e0:55:c3:4a:e2:ec:8a:d4:1f:34:c6:2b:bd:0a:36:c3:40: 8e:97:4e:7f:6f:40:b0:ab:0f:74:b3:d4:6b:bc:d6:ec:30:53: d4:48:07:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqngIeKNTuUizqxcm+UhCghiOkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA3MjMxOTQ0MjBaFw0yNjA3MjQyMjUzMjBaMDMxMTAvBgNV BAMTKDMyOEIwQkRFQjAwNTYzMjZCNUMzQTIyOTdEQjY2OURCMjQxRkNFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA5Z5ZaU5AqDdCTWEr9P2D3HM 2jDk1WpKsflnYXfQH9eK/kgFNkdtS/QcKqIDY1yutCdNcdXWHvL0mOOwgFiyPq3f XiRQHQHMl+5YasqtBxSsviIEhYhqmLnaX9o6YPlHgC95UNEBgAnQ62eizaWBNdbM tDUL2HGV6eJy7/1XUj+VpEe4W7Zn3agO7AKDIvWkciiEfdURtJKMMA7644DDfiLS huXt3jUcZs1WAHJ7yb2FLdH9iFJ/fsa15ClUOMr66bXbg32W6Df0g3EyX8e45Sjr RSOeQPtRZhxoNbZY3x05aKaD5+A/TXpaQlUQPGN5big9X3NHCPkYoyVc4NNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMosL3rAFYya1w6IpfbZp2yQfzhIwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP88HBA4qTvnP/Y7c1+/NtGh0lTgONaErMR /eCAsn7BwFx7dRlvMKLpeFESczOrlswCIqdbtHkSgw44CQ8kB5BgEmHDwQtibdLZ Mlrk45k3S2BEqZqYqhHMmEadOAjyLFt/+gU1g0KxuE+Rhh2ldpOO60VP55Azo/jq Vs+mK7cw46f3p/tP2MmGkjQ8fxCdo+xllH8mRaE1aprVM63tRWMLAMcv7Br3FVM7 PKE6i1fUwa6FIJvdDNtZRAqLMUqURWkEm2Hde6P/kqvoZ13487vkrl105ioUe3rg VcNK4uyK1B80xiu9CjbDQI6XTn9vQLCrD3Sz1Gu81uwwU9RIB44= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:42 2026 by rpki-client