$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: ABU1Jwe5hO+dKWDabJ0ANU5IfjKVBGw22Skkjq/Wd7c= Subject key identifier: 72:33:F4:3E:7D:2C:C2:20:B4:FB:36:5F:F9:C1:6F:A4:A1:71:2B:2E Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 2EAF76682D15E50FC92AF90A93F4B2B851975B5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 09:20:53 +0000 Manifest this update: Fri 24 Jul 2026 09:15:53 +0000 Manifest next update: Sat 25 Jul 2026 10:38:53 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 2: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: K2LRvvAdVdYGTzoZOn5T1J7BeQj++EOXb7UTNlOo4rY=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:af:76:68:2d:15:e5:0f:c9:2a:f9:0a:93:f4:b2:b8:51:97:5b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Jul 24 09:15:53 2026 GMT Not After : Jul 25 10:38:53 2026 GMT Subject: CN=7233F43E7D2CC220B4FB365FF9C16FA4A1712B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:e7:91:7c:2b:b8:3b:71:44:8c:94:e9:f5: 5f:3e:4f:db:70:02:40:c2:19:c5:d7:4c:b2:e2:84: ab:2c:a8:ab:94:de:32:51:12:7a:d9:41:63:6a:96: 7d:a3:53:51:1b:96:2a:e4:31:02:13:b7:52:cf:74: d1:92:1b:71:78:1b:f3:1b:17:14:94:ea:ae:8c:d6: f1:22:c1:7b:32:81:60:81:e6:f2:2e:72:3f:46:ba: 7a:6c:b9:75:97:ac:bf:9d:94:5b:94:5e:56:7e:2a: b0:13:1c:5d:b6:96:20:2b:3e:8a:1a:5f:32:59:18: 10:aa:28:23:01:79:ff:36:ab:8e:23:71:88:01:2a: fd:33:01:b0:91:51:8d:55:c1:31:97:c8:c8:b6:f3: 3b:a4:63:a6:75:4e:97:be:ff:96:de:80:e0:b8:35: d9:71:eb:78:97:ad:51:36:68:ec:80:52:6c:b6:20: 04:c2:76:09:e4:bf:d2:79:d6:2d:80:55:cc:52:9a: 0d:dc:9d:63:80:8e:06:79:a8:16:d4:49:66:e4:6b: 71:fb:16:86:79:18:96:f4:50:79:4d:a9:82:bb:c8: ea:62:b8:70:66:8f:99:11:47:85:f6:fe:40:f1:be: c2:04:d9:da:7b:ae:bf:73:55:28:0c:71:5e:5e:53: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:F4:3E:7D:2C:C2:20:B4:FB:36:5F:F9:C1:6F:A4:A1:71:2B:2E X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:14:4a:e8:d0:c6:00:0a:6d:21:fb:35:a7:48:9d:55:d6:b3: 38:68:02:6e:ea:dd:20:4d:e8:00:ce:d8:87:f7:49:50:79:73: 4b:23:7c:31:6a:94:6b:6f:60:74:45:12:ab:c5:47:99:52:0f: af:f9:aa:56:14:3b:06:99:74:7e:3f:fe:54:e2:d3:30:d1:55: 84:87:da:dd:0a:b0:fe:1e:9a:4b:0c:63:60:52:1e:80:d0:00: e1:e2:38:90:31:8a:08:32:a1:42:74:03:8d:68:d6:49:aa:3f: f0:4f:76:fb:6a:e4:32:9d:ac:89:fc:90:63:d4:04:43:11:b7: 53:54:4c:36:1e:8a:45:26:4e:70:80:d0:f5:72:f6:18:52:73: 97:20:f0:b3:20:30:19:e6:06:89:32:9c:f7:4d:31:2f:44:6b: ee:e6:42:e4:9e:01:1e:54:08:a1:70:3b:96:fe:7c:2d:f1:e2: e1:3d:91:ce:91:e7:74:dc:ca:b9:3c:cb:03:3d:2d:85:68:f0: 88:7d:b9:a9:69:37:68:47:0a:c0:0b:23:37:dc:44:e9:a4:e9: 95:c6:32:5b:21:57:7c:3c:51:b2:12:37:32:b8:e1:88:ad:b5: 5b:83:57:5f:4d:c1:f8:29:87:7d:1e:c7:b1:02:e9:09:d7:05: 03:34:bf:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULq92aC0V5Q/JKvkKk/SyuFGXW1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA3MjQwOTE1NTNaFw0yNjA3MjUxMDM4NTNaMDMxMTAvBgNV BAMTKDcyMzNGNDNFN0QyQ0MyMjBCNEZCMzY1RkY5QzE2RkE0QTE3MTJCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKj+eRfCu4O3FEjJTp9V8+T9tw AkDCGcXXTLLihKssqKuU3jJREnrZQWNqln2jU1EblirkMQITt1LPdNGSG3F4G/Mb FxSU6q6M1vEiwXsygWCB5vIucj9GunpsuXWXrL+dlFuUXlZ+KrATHF22liArPooa XzJZGBCqKCMBef82q44jcYgBKv0zAbCRUY1VwTGXyMi28zukY6Z1Tpe+/5begOC4 Ndlx63iXrVE2aOyAUmy2IATCdgnkv9J51i2AVcxSmg3cnWOAjgZ5qBbUSWbka3H7 FoZ5GJb0UHlNqYK7yOpiuHBmj5kRR4X2/kDxvsIE2dp7rr9zVSgMcV5eU/FJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjP0Pn0swiC0+zZf+cFvpKFxKy4wHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgUSujQxgAKbSH7NadInVXWszhoAm7q3SBN 6ADO2If3SVB5c0sjfDFqlGtvYHRFEqvFR5lSD6/5qlYUOwaZdH4//lTi0zDRVYSH 2t0KsP4emksMY2BSHoDQAOHiOJAxiggyoUJ0A41o1kmqP/BPdvtq5DKdrIn8kGPU BEMRt1NUTDYeikUmTnCA0PVy9hhSc5cg8LMgMBnmBokynPdNMS9Ea+7mQuSeAR5U CKFwO5b+fC3x4uE9kc6R53Tcyrk8ywM9LYVo8Ih9ualpN2hHCsALIzfcROmk6ZXG MlshV3w8UbISNzK44YittVuDV19Nwfgph30ex7EC6QnXBQM0v2Q= -----END CERTIFICATE-----Generated at Fri Jul 24 19:48:31 2026 by rpki-client