$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft File: E03B468CD361142C585663CF9ECF8523C31B59E9.mft (raw, json) Hash identifier: kMxpJMNwmVKJpY7dlfMJEUe7Sm1785mbKJZIG5/SfsQ= Subject key identifier: 25:28:9A:53:3A:C6:8F:5E:89:9E:DF:44:3F:B7:65:15:77:59:76:5F Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9 Certificate issuer: /CN=E03B468CD361142C585663CF9ECF8523C31B59E9 Certificate serial: 1B8112E1EFF1CC9D1F5FEA713E6A8E5A2A2C1787 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:37:30 +0000 Manifest this update: Fri 24 Jul 2026 06:32:30 +0000 Manifest next update: Sat 25 Jul 2026 06:56:30 +0000 Files and hashes: 1: E03B468CD361142C585663CF9ECF8523C31B59E9.crl (hash: hEZ5TCe1Kiw6fCdVvkW19aQQu0Bf/BSvi1NlQmt6oec=) 2: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: NQj0jBui5SdBCaBtC25o6ECq/13rF1K5IZvhOhcCy5E=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: n4xjy2upk2LunwKR2BfVR8985IfNh54QVcVNRfdNf2s=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: YVVFf3w1oI5cN9GhWV4EQ/srdvKn64MAVk6XgK0Qog8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:81:12:e1:ef:f1:cc:9d:1f:5f:ea:71:3e:6a:8e:5a:2a:2c:17:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9 Validity Not Before: Jul 24 06:32:30 2026 GMT Not After : Jul 25 06:56:30 2026 GMT Subject: CN=25289A533AC68F5E899EDF443FB765157759765F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:3d:3b:c0:b2:d5:eb:e1:68:26:51:94:64: 0a:28:a7:10:37:10:2b:aa:90:cd:8e:3c:1b:e6:e8: 75:6d:3e:bf:c0:fc:a0:a7:a8:58:59:96:78:0c:b4: 45:6e:ca:38:f2:76:2f:3e:d7:48:de:89:a6:22:f2: 7b:70:b0:f6:d6:7f:e7:5e:8d:b8:d5:69:5b:51:f8: 3c:2d:4b:72:14:41:15:45:08:6d:32:be:c4:0e:8a: 89:f2:23:26:8c:14:6b:b7:f2:38:0f:c3:8c:b6:89: 5e:43:91:26:5c:ac:77:38:64:d0:de:30:d4:fa:53: 37:bf:00:73:28:26:a3:00:cf:4c:ad:28:0e:06:55: 3f:4b:49:94:54:e2:45:02:ad:d1:f5:ce:d6:50:44: 90:e2:74:b8:26:f4:ba:d8:4c:c0:63:ae:5b:ce:58: 95:ce:79:47:a3:b6:a7:18:03:79:35:09:77:03:d9: de:ba:39:8c:77:0c:b8:36:ba:df:d1:de:a0:06:22: a3:5f:28:b7:a0:7a:c0:9a:e4:c0:a2:53:c3:00:0e: 48:c1:d0:4d:60:8a:7d:ba:26:a1:dd:65:f7:5c:76: ca:2b:cf:4c:0c:00:5e:5e:e4:6f:26:5a:fb:f9:95: 55:89:4b:b3:26:62:4d:6b:0e:b8:da:89:7d:88:3b: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:28:9A:53:3A:C6:8F:5E:89:9E:DF:44:3F:B7:65:15:77:59:76:5F X509v3 Authority Key Identifier: keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:86:49:3c:ea:21:c9:df:95:85:40:b7:b6:7d:35:84:8c:4e: 70:a2:d6:06:d1:88:a1:19:bc:84:7f:f7:6c:78:5b:4e:91:ec: 48:eb:aa:d7:84:d0:5e:cd:24:19:cc:09:b0:75:5a:7e:95:47: fb:7a:0c:0e:1c:f0:f6:5b:d8:c0:15:a0:ff:8f:81:b4:88:93: 32:47:3f:ae:77:e7:85:cc:f3:89:86:c3:e2:65:50:8f:74:3c: f4:23:28:7e:f2:72:21:98:81:38:2c:41:d4:e3:80:a1:31:87: 3d:7d:de:b5:b0:73:46:c1:b9:23:8b:0c:f0:89:ef:17:dd:49: 09:dc:40:f9:1d:30:ae:05:0e:ae:aa:8e:7a:2a:cc:a0:1e:7e: 71:a2:cb:b9:c2:ef:54:72:dd:df:d5:ab:b2:ea:79:08:10:2f: c6:88:73:47:8a:3e:03:8c:80:b1:79:a3:b5:70:f3:61:7d:8c: 4f:8a:71:06:79:77:1d:c4:48:1f:0b:00:b8:53:db:b3:ec:3e: c0:fe:1a:7d:40:b2:bb:84:f2:45:25:4b:78:c0:54:b3:2a:0e: 37:8c:5e:b1:88:29:03:84:d4:73:19:e2:c9:a1:84:26:bf:89: 6b:19:a0:00:4c:f5:db:4a:88:4a:5a:aa:8e:f6:46:20:28:5d: 71:be:29:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4ES4e/xzJ0fX+pxPmqOWiosF4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1MjND MzFCNTlFOTAeFw0yNjA3MjQwNjMyMzBaFw0yNjA3MjUwNjU2MzBaMDMxMTAvBgNV BAMTKDI1Mjg5QTUzM0FDNjhGNUU4OTlFREY0NDNGQjc2NTE1Nzc1OTc2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIj07wLLV6+FoJlGUZAoopxA3 ECuqkM2OPBvm6HVtPr/A/KCnqFhZlngMtEVuyjjydi8+10jeiaYi8ntwsPbWf+de jbjVaVtR+DwtS3IUQRVFCG0yvsQOionyIyaMFGu38jgPw4y2iV5DkSZcrHc4ZNDe MNT6Uze/AHMoJqMAz0ytKA4GVT9LSZRU4kUCrdH1ztZQRJDidLgm9LrYTMBjrlvO WJXOeUejtqcYA3k1CXcD2d66OYx3DLg2ut/R3qAGIqNfKLegesCa5MCiU8MADkjB 0E1gin26JqHdZfdcdsorz0wMAF5e5G8mWvv5lVWJS7MmYk1rDrjaiX2IO6M1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSiaUzrGj16Jnt9EP7dlFXdZdl8wHwYDVR0j BBgwFoAU4DtGjNNhFCxYVmPPns+FI8MbWekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZkYWYwNmEtZjYyNC00MmNmLWJiMTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENE MzYxMTQyQzU4NTY2M0NGOUVDRjg1MjNDMzFCNTlFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FMDNCNDY4Q0QzNjExNDJDNTg1NjYzQ0Y5RUNGODUyM0MzMUI1 OUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvRTAzQjQ2OENEMzYxMTQyQzU4NTY2M0NGOUVDRjg1 MjNDMzFCNTlFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiGSTzqIcnflYVAt7Z9NYSMTnCi1gbRiKEZ vIR/92x4W06R7EjrqteE0F7NJBnMCbB1Wn6VR/t6DA4c8PZb2MAVoP+PgbSIkzJH P65354XM84mGw+JlUI90PPQjKH7yciGYgTgsQdTjgKExhz193rWwc0bBuSOLDPCJ 7xfdSQncQPkdMK4FDq6qjnoqzKAefnGiy7nC71Ry3d/Vq7LqeQgQL8aIc0eKPgOM gLF5o7Vw82F9jE+KcQZ5dx3ESB8LALhT27PsPsD+Gn1AsruE8kUlS3jAVLMqDjeM XrGIKQOE1HMZ4smhhCa/iWsZoABM9dtKiEpaqo72RiAoXXG+KUw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:05 2026 by rpki-client