$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: tkICY/PosjYuTZ/H26WtWgwPCKmvCSXS1MLoplbrncw= Subject key identifier: 73:AD:37:CC:78:82:9B:D9:63:2A:D2:5F:DA:1F:20:08:02:FE:7D:DF Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 2965289A6D3E63D4142E8B57BE53417EBF788A6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:14:49 +0000 Manifest this update: Thu 23 Jul 2026 20:09:49 +0000 Manifest next update: Fri 24 Jul 2026 22:01:49 +0000 Files and hashes: 1: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: kuSgF7dn53ZyNn99spp99KTV38soOCIDSSf/NDOQsvA=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:65:28:9a:6d:3e:63:d4:14:2e:8b:57:be:53:41:7e:bf:78:8a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Jul 23 20:09:49 2026 GMT Not After : Jul 24 22:01:49 2026 GMT Subject: CN=73AD37CC78829BD9632AD25FDA1F200802FE7DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:5d:fb:74:7f:28:1c:42:fb:d2:fc:51:50: 2f:31:81:aa:09:ab:64:3f:13:b0:4f:fb:f1:cb:bb: ea:91:cf:ae:81:70:80:38:44:f9:52:8c:2c:e3:3a: 3e:b7:93:90:ec:0b:41:4c:f8:39:7d:8a:a4:81:4a: ea:5d:43:41:09:c1:f1:f9:e8:c1:62:07:c2:65:d7: 5e:fc:71:c3:89:23:05:22:a2:aa:3d:4d:36:9a:b4: 13:d7:53:01:31:75:73:50:da:49:ef:07:eb:35:ec: 2a:32:3e:bc:6b:79:17:b8:28:34:5d:a0:2b:c8:00: 1a:49:37:8c:75:e6:00:ff:aa:9f:25:f4:73:41:b0: 99:30:62:56:bd:f1:b8:df:20:07:e4:d4:43:1b:93: 38:a2:f3:ce:62:4d:d0:de:b3:39:ee:a8:6d:08:17: fe:5b:d6:75:a3:97:11:a3:cf:ba:e8:ec:7e:e2:83: dc:c2:0f:f6:9c:9e:c7:c4:e9:13:f6:0d:66:66:f2: cd:03:28:48:26:37:83:e6:e4:f6:08:2d:f0:55:70: 79:b8:ad:98:e1:f1:a4:2c:96:2a:3b:ab:61:df:15: 47:f6:8a:cb:fb:ea:13:57:28:07:7c:92:06:ae:a5: d2:a6:5d:e7:c6:53:22:a4:13:6a:36:9d:f7:77:a0: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AD:37:CC:78:82:9B:D9:63:2A:D2:5F:DA:1F:20:08:02:FE:7D:DF X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:05:7c:8c:a8:0a:1c:b5:a6:11:44:53:fa:ba:3b:12:6b:31: 10:61:29:e2:58:4c:e7:80:8a:b5:83:f5:fa:57:aa:8a:79:74: db:07:6c:3b:ec:c1:1e:09:d3:d3:5d:09:59:a8:48:65:84:11: 5a:d4:13:3b:aa:43:d0:64:76:2d:2f:a2:76:46:be:ae:82:c5: f7:79:b1:3f:3a:71:6f:09:5c:81:5f:66:bb:f4:ae:3c:d7:89: e1:e3:3c:a4:ef:e7:92:51:71:6c:58:f9:16:4e:71:26:14:11: 10:ce:e2:e3:6c:82:c6:fd:ff:ae:b8:a7:ce:dc:94:a2:96:9c: 58:09:a8:57:ab:47:cb:dc:8b:5f:22:c2:e4:b5:6c:a6:1d:9f: 15:aa:78:cb:ff:82:ea:0f:96:59:28:8a:2b:ea:c3:d2:bc:d6: df:5f:8b:75:7f:f4:20:69:35:ee:5c:77:57:f4:89:80:53:24: 3d:d0:cf:3e:3d:33:bd:52:16:7a:29:2e:79:f5:67:38:ea:95: cd:4f:b4:cc:f3:f7:3a:b5:eb:15:de:b1:5b:bb:34:b6:25:3d: 06:04:4b:1f:70:e2:37:22:c0:30:aa:f0:e9:4c:25:6a:57:b2: 8d:c6:da:7f:27:02:9c:60:42:cd:2c:70:72:4f:1f:ad:b2:28: f0:16:9c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWUomm0+Y9QULotXvlNBfr94imowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA3MjMyMDA5NDlaFw0yNjA3MjQyMjAxNDlaMDMxMTAvBgNV BAMTKDczQUQzN0NDNzg4MjlCRDk2MzJBRDI1RkRBMUYyMDA4MDJGRTdEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYF37dH8oHEL70vxRUC8xgaoJ q2Q/E7BP+/HLu+qRz66BcIA4RPlSjCzjOj63k5DsC0FM+Dl9iqSBSupdQ0EJwfH5 6MFiB8Jl1178ccOJIwUioqo9TTaatBPXUwExdXNQ2knvB+s17CoyPrxreRe4KDRd oCvIABpJN4x15gD/qp8l9HNBsJkwYla98bjfIAfk1EMbkzii885iTdDesznuqG0I F/5b1nWjlxGjz7ro7H7ig9zCD/acnsfE6RP2DWZm8s0DKEgmN4Pm5PYILfBVcHm4 rZjh8aQslio7q2HfFUf2isv76hNXKAd8kgaupdKmXefGUyKkE2o2nfd3oPhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc603zHiCm9ljKtJf2h8gCAL+fd8wHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEFfIyoChy1phFEU/q6OxJrMRBhKeJYTOeA irWD9fpXqop5dNsHbDvswR4J09NdCVmoSGWEEVrUEzuqQ9Bkdi0vonZGvq6Cxfd5 sT86cW8JXIFfZrv0rjzXieHjPKTv55JRcWxY+RZOcSYUERDO4uNsgsb9/664p87c lKKWnFgJqFerR8vci18iwuS1bKYdnxWqeMv/guoPllkoiivqw9K81t9fi3V/9CBp Ne5cd1f0iYBTJD3Qzz49M71SFnopLnn1Zzjqlc1PtMzz9zq16xXesVu7NLYlPQYE Sx9w4jciwDCq8OlMJWpXso3G2n8nApxgQs0scHJPH62yKPAWnIE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:06:30 2026 by rpki-client