$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: FR4Up759rlWE3wwfrN3UGR8oKU0UWTsl8w/BPz/Cm4k= Subject key identifier: FA:0A:17:7D:1F:AF:11:57:C9:10:75:FA:E7:E1:2E:91:61:15:83:69 Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 2F5C0D679CE8C97AE837365C6D29CB9A59659535 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:01:43 +0000 Manifest this update: Fri 24 Jul 2026 05:56:43 +0000 Manifest next update: Sat 25 Jul 2026 06:22:43 +0000 Files and hashes: 1: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: YZOWBoqXsGCNWfcDjBnxZumI2HVvIxJtpcO2LTSLtKI=) 2: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) 3: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) 4: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5c:0d:67:9c:e8:c9:7a:e8:37:36:5c:6d:29:cb:9a:59:65:95:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: Jul 24 05:56:43 2026 GMT Not After : Jul 25 06:22:43 2026 GMT Subject: CN=FA0A177D1FAF1157C91075FAE7E12E9161158369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:ee:bc:f7:10:d5:86:e0:fa:75:5c:d6:27: 5a:c7:e9:28:98:d6:ab:a5:17:4e:af:30:2e:80:53: 86:50:c2:a4:8c:86:34:a3:e9:f6:17:98:ef:04:fe: 53:20:72:fb:65:40:54:76:d7:7c:9f:97:36:3f:4a: 36:b8:59:ec:b2:53:be:3f:00:10:3b:af:85:40:27: 96:72:f0:23:b9:00:d7:dd:70:35:d8:8c:6e:a7:aa: 56:14:05:c8:ae:9e:b9:f4:7b:bb:9b:22:ce:bb:9f: 1a:26:58:33:85:53:3e:20:b0:3c:14:cd:e7:0d:9e: 03:3b:0b:ea:36:e4:a2:cd:41:8f:e8:0e:65:fc:29: 9e:0a:af:ee:24:e1:a0:ac:a5:ce:c8:68:2d:55:3c: 86:f3:ff:dd:a9:c0:0a:08:c4:3b:db:c3:ae:8e:75: ff:2f:28:26:71:91:92:da:eb:c9:3d:c8:62:b2:79: 9c:11:7b:ff:16:4d:3d:15:75:46:b4:13:4b:b5:bd: e2:b2:a5:45:eb:b1:05:4d:92:23:dc:c2:8a:15:b0: df:66:fa:fe:a9:c6:15:47:59:39:75:d6:2e:d4:77: 2d:08:d6:6d:54:9b:e1:03:c2:0a:d5:ac:72:ce:ee: 37:20:33:e3:e1:93:90:10:06:8b:c2:f0:1f:ad:3e: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:17:7D:1F:AF:11:57:C9:10:75:FA:E7:E1:2E:91:61:15:83:69 X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4b:fb:a2:d8:94:81:95:7c:19:7b:ba:d4:4c:4f:66:64:ec: f1:b2:df:e7:9e:2d:d9:5a:9d:4c:de:06:b9:07:4b:df:de:2c: e1:01:6b:6e:49:22:98:21:6e:fc:94:13:59:1c:d3:f4:8f:df: a0:12:5e:ec:37:bb:a7:ab:e1:ce:0d:c4:e3:4a:34:a4:81:23: 7e:fc:c7:94:36:dd:73:5e:6b:07:fb:f0:1a:64:90:fa:3f:d2: 1e:ee:9c:ba:71:6f:3e:67:0f:f8:a4:e6:b4:fe:e9:a5:98:cd: d7:47:ca:04:71:e7:86:33:bc:a3:c6:15:8a:f7:5d:74:2c:a5: 2e:0a:fc:e9:66:7e:be:84:1a:0f:db:f0:d6:3a:9d:a2:2a:09: 18:0d:15:b8:bd:01:e4:4c:34:6f:1c:21:a7:63:99:25:0e:2e: 35:48:19:2e:91:69:fe:71:a8:f5:ea:da:f0:91:d2:26:ca:68: b8:6a:11:ca:79:86:29:86:68:d6:ec:b8:8b:41:12:01:19:1d: fb:fc:aa:f0:0e:8a:51:a2:d5:62:70:de:e9:2c:48:4c:dd:45: 67:97:72:ef:a8:31:53:60:b2:9c:65:61:b0:2e:64:f7:d7:55: 80:6f:81:32:15:90:a4:83:ee:e5:62:ea:d9:b6:93:b8:6d:66: c5:4a:a7:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1wNZ5zoyXroNzZcbSnLmllllTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA3MjQwNTU2NDNaFw0yNjA3MjUwNjIyNDNaMDMxMTAvBgNV BAMTKEZBMEExNzdEMUZBRjExNTdDOTEwNzVGQUU3RTEyRTkxNjExNTgzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpI+689xDVhuD6dVzWJ1rH6SiY 1qulF06vMC6AU4ZQwqSMhjSj6fYXmO8E/lMgcvtlQFR213yflzY/Sja4WeyyU74/ ABA7r4VAJ5Zy8CO5ANfdcDXYjG6nqlYUBciunrn0e7ubIs67nxomWDOFUz4gsDwU zecNngM7C+o25KLNQY/oDmX8KZ4Kr+4k4aCspc7IaC1VPIbz/92pwAoIxDvbw66O df8vKCZxkZLa68k9yGKyeZwRe/8WTT0VdUa0E0u1veKypUXrsQVNkiPcwooVsN9m +v6pxhVHWTl11i7Udy0I1m1Um+EDwgrVrHLO7jcgM+Phk5AQBovC8B+tPs81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+goXfR+vEVfJEHX65+EukWEVg2kwHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJL+6LYlIGVfBl7utRMT2Zk7PGy3+eeLdla nUzeBrkHS9/eLOEBa25JIpghbvyUE1kc0/SP36ASXuw3u6er4c4NxONKNKSBI378 x5Q23XNeawf78BpkkPo/0h7unLpxbz5nD/ik5rT+6aWYzddHygRx54YzvKPGFYr3 XXQspS4K/Olmfr6EGg/b8NY6naIqCRgNFbi9AeRMNG8cIadjmSUOLjVIGS6Raf5x qPXq2vCR0ibKaLhqEcp5himGaNbsuItBEgEZHfv8qvAOilGi1WJw3uksSEzdRWeX cu+oMVNgspxlYbAuZPfXVYBvgTIVkKSD7uVi6tm2k7htZsVKp0g= -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:39 2026 by rpki-client