$ rpki-client -vvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: EfblGlHk19N4w4NYpl1IhvxSqF2WEKIEUSITKvjF9+c= Subject key identifier: E4:82:0A:5A:0D:13:B8:B4:FA:D7:78:0D:A2:7A:6F:25:F3:40:A2:3F Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 7D4DDA95F241EBAE0EEB4C8E3F0D344A715117A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 05:57:13 +0000 Manifest this update: Thu 23 Jul 2026 05:52:13 +0000 Manifest next update: Fri 24 Jul 2026 08:53:13 +0000 Files and hashes: 1: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) 2: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: WHehHFCPTISsdQm7ZoVet2gvLtah6y5Q2Kl/KUuTStQ=) 3: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) 4: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) 5: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4d:da:95:f2:41:eb:ae:0e:eb:4c:8e:3f:0d:34:4a:71:51:17:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Jul 23 05:52:13 2026 GMT Not After : Jul 24 08:53:13 2026 GMT Subject: CN=E4820A5A0D13B8B4FAD7780DA27A6F25F340A23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:f7:5c:18:50:aa:24:82:b9:71:c7:d6:ef: 93:80:30:f5:22:2f:5d:a1:b3:d7:5d:93:b6:9e:53: e4:de:74:85:65:30:49:08:58:9e:ae:96:a8:8e:43: e8:17:45:e7:05:ec:2f:4d:e2:7b:df:ba:25:5d:92: 38:1e:00:4c:3a:6d:dc:a6:e3:20:97:a1:31:ee:5f: 4e:7a:73:d9:0e:a6:27:a6:f1:03:25:a1:d8:a4:ba: 65:55:47:93:24:ad:7b:3b:c8:c9:04:2c:c5:43:f2: 99:61:f7:b4:1d:10:28:12:52:02:cb:11:79:7e:67: 44:ff:85:78:85:a9:0a:2d:06:8f:1e:17:6e:b4:dc: 71:15:93:5f:3e:19:ef:75:19:82:65:c9:92:f3:e6: 89:bc:d5:bb:ad:ba:9f:c7:32:73:9d:fb:ce:97:fb: 8f:fd:28:cb:95:e7:9c:bc:6b:ca:17:f9:cd:5d:e3: 15:e1:7d:fb:32:4f:b9:c6:41:3d:0f:a8:e8:d4:c7: d3:b3:fa:e4:1e:01:30:c3:86:9f:77:bb:cd:3a:63: 72:ce:a5:f5:94:c1:fa:36:01:65:28:78:86:c7:ae: c6:e2:62:98:cf:38:65:d2:3a:6b:86:41:04:a7:ee: 00:f7:bd:ed:ce:eb:65:34:b9:65:50:a0:4b:de:a4: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:82:0A:5A:0D:13:B8:B4:FA:D7:78:0D:A2:7A:6F:25:F3:40:A2:3F X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bd:15:f7:34:38:e8:fa:a2:d2:0d:a3:bf:f7:49:36:8d:e3: e9:18:14:3e:22:1b:39:64:00:3d:0e:4e:06:e8:4c:52:03:94: cd:3b:a5:09:aa:03:0c:78:bf:8a:3d:ca:52:04:29:40:bd:6b: 26:2d:47:1c:a8:6d:38:8f:d5:7a:65:67:b0:53:bd:36:8e:89: c7:64:5f:48:08:99:c0:50:9c:09:c6:42:34:99:a8:fb:65:ad: a8:53:80:f1:53:ed:c1:a0:27:92:c4:1f:bf:f5:ba:11:19:49: ee:fa:44:05:fe:a2:74:f6:2c:7d:25:87:ba:88:28:76:99:54: 43:70:08:90:e1:21:eb:3e:a1:65:85:3a:e6:e7:78:f4:df:d6: 54:f8:18:ed:3a:0f:ae:40:72:32:88:35:e5:77:35:b2:73:81: 00:54:87:60:4a:b0:a3:81:21:2b:a0:07:98:da:59:b6:d4:7e: 39:9c:b7:dd:c7:6f:24:aa:f4:3b:c2:1d:77:19:b8:8d:2c:f9: 3b:9f:af:34:af:13:8d:c6:b2:44:8d:c2:f4:2c:ff:df:49:4c: c6:bd:b1:31:45:67:02:4d:e8:25:38:67:3f:32:87:18:ae:79: 13:00:e1:65:9e:2c:1a:b4:5e:ae:d4:65:de:01:3e:34:9e:4e: 69:de:37:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU3alfJB664O60yOPw00SnFRF6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjA3MjMwNTUyMTNaFw0yNjA3MjQwODUzMTNaMDMxMTAvBgNV BAMTKEU0ODIwQTVBMEQxM0I4QjRGQUQ3NzgwREEyN0E2RjI1RjM0MEEyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4/dcGFCqJIK5ccfW75OAMPUi L12hs9ddk7aeU+TedIVlMEkIWJ6ulqiOQ+gXRecF7C9N4nvfuiVdkjgeAEw6bdym 4yCXoTHuX056c9kOpiem8QMlodikumVVR5MkrXs7yMkELMVD8plh97QdECgSUgLL EXl+Z0T/hXiFqQotBo8eF2603HEVk18+Ge91GYJlyZLz5om81butup/HMnOd+86X +4/9KMuV55y8a8oX+c1d4xXhffsyT7nGQT0PqOjUx9Oz+uQeATDDhp93u806Y3LO pfWUwfo2AWUoeIbHrsbiYpjPOGXSOmuGQQSn7gD3ve3O62U0uWVQoEvepBDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IIKWg0TuLT613gNonpvJfNAoj8wHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe9Ffc0OOj6otINo7/3STaN4+kYFD4iGzlk AD0OTgboTFIDlM07pQmqAwx4v4o9ylIEKUC9ayYtRxyobTiP1XplZ7BTvTaOicdk X0gImcBQnAnGQjSZqPtlrahTgPFT7cGgJ5LEH7/1uhEZSe76RAX+onT2LH0lh7qI KHaZVENwCJDhIes+oWWFOubnePTf1lT4GO06D65AcjKINeV3NbJzgQBUh2BKsKOB ISugB5jaWbbUfjmct93HbySq9DvCHXcZuI0s+TufrzSvE43GskSNwvQs/99JTMa9 sTFFZwJN6CU4Zz8yhxiueRMA4WWeLBq0Xq7UZd4BPjSeTmneN+4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:05 2026 by rpki-client