$ rpki-client -vvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: x2q0q0eEqv+S8vKSQwFx+XSziHDz3+5aVM4KCPaEhhM= Subject key identifier: 72:33:18:EA:F2:75:3A:47:04:78:F5:C9:5D:0B:60:DD:25:93:2A:D7 Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 671B36CC5F61D60842E7DDD7AD3E3447D213DD10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:36:41 +0000 Manifest this update: Thu 23 Jul 2026 13:31:41 +0000 Manifest next update: Fri 24 Jul 2026 14:46:41 +0000 Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) 2: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: ORYlU2pEKrL9kwd/Nsp3j+M+5yqU+UtVusld2rrUvP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1b:36:cc:5f:61:d6:08:42:e7:dd:d7:ad:3e:34:47:d2:13:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: Jul 23 13:31:41 2026 GMT Not After : Jul 24 14:46:41 2026 GMT Subject: CN=723318EAF2753A470478F5C95D0B60DD25932AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:65:fc:c2:ad:6e:70:7d:91:4b:e6:6e:68: 1a:08:20:0e:5f:85:bb:2b:b4:b8:15:33:81:be:b6: d7:22:d0:53:47:21:8d:30:c0:34:3c:83:89:a3:4a: dc:e4:41:d0:bd:de:26:64:87:08:e1:55:cb:26:4a: 2d:3f:a3:80:84:43:07:5c:f7:6e:15:1f:6a:77:ea: 17:fe:90:86:14:19:5b:5a:32:be:dd:08:7b:5a:fb: 10:fd:78:d4:79:58:11:23:a8:4d:2b:b7:58:ac:d7: 03:fa:7e:9c:a4:4c:4f:e5:df:b8:08:2e:44:6b:9a: 0d:d9:59:a7:7f:d9:68:15:fb:8d:14:bc:cd:da:9a: 9f:05:98:c5:bf:4d:39:82:56:45:8d:c7:c2:1a:a4: 1b:af:82:f4:98:46:8e:90:d2:e4:a7:2d:cf:cf:70: d1:b2:cc:eb:2c:d0:44:fc:b3:63:2c:53:5d:2b:5e: f7:2f:30:3d:9f:4b:93:34:86:b8:04:35:0c:02:d5: d1:63:f6:07:62:30:f6:51:36:44:87:74:39:77:39: 08:76:cb:df:e2:29:7a:0a:87:86:8c:69:5a:d4:4d: b5:56:a3:43:38:4a:7c:4a:ca:b7:af:0c:a5:8e:b2: 5b:5e:6d:bf:08:d4:45:42:ce:01:5c:75:8f:ff:d4: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:18:EA:F2:75:3A:47:04:78:F5:C9:5D:0B:60:DD:25:93:2A:D7 X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6c:21:de:6e:33:af:30:05:11:b1:da:63:e2:10:26:d0:c2: 1b:9d:8c:8f:11:f8:30:81:a2:25:ec:2e:41:f3:d7:88:03:83: 0e:d3:e6:66:c0:e9:3c:24:00:83:85:19:92:da:80:d8:b1:40: 6b:ee:f7:cc:2e:86:3c:b0:4c:85:90:21:e9:86:4a:d2:fc:bf: ae:0e:7e:56:db:f2:28:fc:c5:7f:38:32:9d:6e:8f:47:4f:0e: 6c:5e:78:15:f6:32:e7:2b:d8:8f:8a:a0:37:b9:85:d8:45:0b: 64:63:91:e8:81:60:77:e3:20:01:6c:e6:5f:b9:d4:7c:a1:ae: 8d:18:9f:62:4c:52:a6:b7:e3:0a:20:d3:a9:65:88:9e:77:e1: 1f:91:e0:ff:17:71:3b:ef:be:b7:39:80:11:61:b6:69:d8:82: 25:0d:70:44:f2:06:97:35:56:50:5b:b7:79:e2:5b:4b:d1:28: 5f:60:20:77:a4:7f:7f:01:91:c3:da:4b:0d:90:18:6e:e7:b3: e5:99:96:9e:25:28:17:9c:1b:d6:88:b7:4c:e3:fe:b1:d0:89: a3:e8:b7:51:7d:7d:f8:c6:56:49:74:d2:2b:8c:25:bf:4f:f0: f6:08:8a:d9:7e:a5:a5:97:15:30:58:fd:3f:68:41:4d:a9:87: cc:4d:b1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxs2zF9h1ghC593XrT40R9IT3RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA3MjMxMzMxNDFaFw0yNjA3MjQxNDQ2NDFaMDMxMTAvBgNV BAMTKDcyMzMxOEVBRjI3NTNBNDcwNDc4RjVDOTVEMEI2MEREMjU5MzJBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DmX8wq1ucH2RS+ZuaBoIIA5f hbsrtLgVM4G+ttci0FNHIY0wwDQ8g4mjStzkQdC93iZkhwjhVcsmSi0/o4CEQwdc 924VH2p36hf+kIYUGVtaMr7dCHta+xD9eNR5WBEjqE0rt1is1wP6fpykTE/l37gI LkRrmg3ZWad/2WgV+40UvM3amp8FmMW/TTmCVkWNx8IapBuvgvSYRo6Q0uSnLc/P cNGyzOss0ET8s2MsU10rXvcvMD2fS5M0hrgENQwC1dFj9gdiMPZRNkSHdDl3OQh2 y9/iKXoKh4aMaVrUTbVWo0M4SnxKyrevDKWOsltebb8I1EVCzgFcdY//1KpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjMY6vJ1OkcEePXJXQtg3SWTKtcwHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFsId5uM68wBRGx2mPiECbQwhudjI8R+DCB oiXsLkHz14gDgw7T5mbA6TwkAIOFGZLagNixQGvu98wuhjywTIWQIemGStL8v64O flbb8ij8xX84Mp1uj0dPDmxeeBX2Mucr2I+KoDe5hdhFC2RjkeiBYHfjIAFs5l+5 1Hyhro0Yn2JMUqa34wog06lliJ534R+R4P8XcTvvvrc5gBFhtmnYgiUNcETyBpc1 VlBbt3niW0vRKF9gIHekf38BkcPaSw2QGG7ns+WZlp4lKBecG9aIt0zj/rHQiaPo t1F9ffjGVkl00iuMJb9P8PYIitl+paWXFTBY/T9oQU2ph8xNsbE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:22:53 2026 by rpki-client