$ rpki-client -vvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: T0y3HsWVZ2uUY+5Uzgxy24ulVmWd+hgzrZbVyfF/BLs= Subject key identifier: 53:5E:12:E7:0A:58:C8:D6:FA:37:8B:8E:11:F2:70:F4:6B:FB:6C:A4 Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 151FB3FFB794C329D71DB6DCF842B375EB8A7402 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:33:42 +0000 Manifest this update: Fri 24 Jul 2026 11:28:42 +0000 Manifest next update: Sat 25 Jul 2026 13:49:42 +0000 Files and hashes: 1: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: EpOqLTslMbaUYw2w8okgBbYylN2omh/wk7WMmjDTBKo=) 2: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1f:b3:ff:b7:94:c3:29:d7:1d:b6:dc:f8:42:b3:75:eb:8a:74:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Jul 24 11:28:42 2026 GMT Not After : Jul 25 13:49:42 2026 GMT Subject: CN=535E12E70A58C8D6FA378B8E11F270F46BFB6CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:e0:8d:23:5d:5f:3d:16:32:a4:ff:ff:c0: 32:39:3b:67:7e:90:3b:ad:97:e4:76:3e:22:aa:cb: ae:dd:5e:2c:4c:af:fc:3a:b4:4c:16:e3:00:2d:fb: 98:bc:65:ac:74:b6:f5:63:d7:76:f9:39:4c:ff:ce: 98:d9:c4:6a:2d:5d:18:3a:15:c7:82:15:e4:c9:96: 11:bf:8a:78:fc:52:b9:ea:a1:d0:bf:cd:33:8e:ba: 8b:f7:4b:61:08:71:58:d4:74:28:21:35:f0:42:d1: d8:0a:7c:da:02:8e:7c:24:b8:78:52:94:f7:7c:64: 6b:2f:1a:3a:8c:a4:8f:98:9b:e6:0a:dd:92:53:0b: 7c:a9:37:9d:ce:72:34:5d:70:ca:91:a7:18:ee:4d: 57:6f:5f:5f:0f:b3:0c:fb:77:78:c4:b3:bf:55:98: af:43:fb:35:26:f2:96:19:91:a6:38:02:3e:11:2d: fe:4c:88:75:9f:be:4a:c0:8a:82:01:2e:e4:d0:73: c6:97:7f:37:ef:ff:31:f4:13:01:79:f9:25:68:d2: 50:61:ce:5f:65:12:0f:b4:4d:c3:16:dc:c6:ef:fb: 68:20:51:1c:4c:b1:58:44:68:6e:ac:f0:dd:9c:0c: 28:07:7d:4b:1d:e4:99:8b:39:a0:e3:f2:94:aa:12: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:12:E7:0A:58:C8:D6:FA:37:8B:8E:11:F2:70:F4:6B:FB:6C:A4 X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:a7:f7:75:8d:47:51:90:b9:79:59:09:67:3b:da:07:13: b0:60:95:84:06:d6:52:b8:0d:ea:53:05:72:44:f3:99:eb:da: de:ed:1d:82:4a:b1:b5:85:39:31:87:9e:18:39:f6:78:00:14: 29:e7:d2:e6:02:42:21:2f:66:01:ac:4c:09:02:96:c7:50:7d: 9a:c2:7a:e7:06:7c:bb:43:88:8d:ba:ec:aa:e9:aa:52:60:9f: 12:9d:10:ad:73:10:3f:b1:1e:10:c8:37:29:8e:ce:4b:6f:3d: 90:c3:ad:41:a7:26:3b:71:7a:34:63:5e:37:7c:65:38:33:6a: f4:da:65:0a:a3:5c:1d:d9:9a:39:a8:da:39:dd:0e:91:9f:13: 2e:56:c9:51:5e:9f:ee:54:30:b4:df:eb:5d:fc:34:b4:51:0b: e6:dd:59:06:bf:0e:f2:ba:b1:cb:2c:34:23:5a:ba:05:70:cb: f0:69:3a:7d:a5:4e:d8:06:a7:36:45:77:7b:50:1c:35:41:73: e1:ff:5c:54:b1:1b:b1:97:6a:23:a1:f3:5f:6d:7c:56:bc:4c: 1a:05:bd:38:30:94:b6:68:d7:c1:12:59:d2:76:da:48:35:ff: 9e:d0:ce:0d:9e:3e:fb:78:19:35:85:1d:b6:9b:e6:33:a0:fa: 0b:d3:d1:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFR+z/7eUwynXHbbc+EKzdeuKdAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA3MjQxMTI4NDJaFw0yNjA3MjUxMzQ5NDJaMDMxMTAvBgNV BAMTKDUzNUUxMkU3MEE1OEM4RDZGQTM3OEI4RTExRjI3MEY0NkJGQjZDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7uCNI11fPRYypP//wDI5O2d+ kDutl+R2PiKqy67dXixMr/w6tEwW4wAt+5i8Zax0tvVj13b5OUz/zpjZxGotXRg6 FceCFeTJlhG/inj8UrnqodC/zTOOuov3S2EIcVjUdCghNfBC0dgKfNoCjnwkuHhS lPd8ZGsvGjqMpI+Ym+YK3ZJTC3ypN53OcjRdcMqRpxjuTVdvX18Pswz7d3jEs79V mK9D+zUm8pYZkaY4Aj4RLf5MiHWfvkrAioIBLuTQc8aXfzfv/zH0EwF5+SVo0lBh zl9lEg+0TcMW3Mbv+2ggURxMsVhEaG6s8N2cDCgHfUsd5JmLOaDj8pSqEt/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU14S5wpYyNb6N4uOEfJw9Gv7bKQwHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh7p/d1jUdRkLl5WQlnO9oHE7BglYQG1lK4 DepTBXJE85nr2t7tHYJKsbWFOTGHnhg59ngAFCnn0uYCQiEvZgGsTAkClsdQfZrC eucGfLtDiI267KrpqlJgnxKdEK1zED+xHhDINymOzktvPZDDrUGnJjtxejRjXjd8 ZTgzavTaZQqjXB3Zmjmo2jndDpGfEy5WyVFen+5UMLTf6138NLRRC+bdWQa/DvK6 scssNCNaugVwy/BpOn2lTtgGpzZFd3tQHDVBc+H/XFSxG7GXaiOh819tfFa8TBoF vTgwlLZo18ESWdJ22kg1/57Qzg2ePvt4GTWFHbab5jOg+gvT0cs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:19:10 2026 by rpki-client