$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: u7JSOmwBRKlOIXUCzqiGsds/dYPdbRNEkEgv/zKTeu4= Subject key identifier: 7F:88:BC:1C:B2:98:34:F8:BC:8F:69:C0:1C:EC:66:17:EE:FB:9F:F2 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 4512A6C2AD0A01F6DA1B61ECCE5CC215D2D384CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:43:07 +0000 Manifest this update: Thu 23 Jul 2026 10:38:07 +0000 Manifest next update: Fri 24 Jul 2026 12:36:07 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 2: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 3: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: vaoRjenhNE8BoZXEvi0F4Utx9QO+QiQcOPAhIZeK57o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:12:a6:c2:ad:0a:01:f6:da:1b:61:ec:ce:5c:c2:15:d2:d3:84:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Jul 23 10:38:07 2026 GMT Not After : Jul 24 12:36:07 2026 GMT Subject: CN=7F88BC1CB29834F8BC8F69C01CEC6617EEFB9FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:c9:07:53:c0:79:28:7e:ab:1c:6a:e6:5b: 56:1b:64:75:79:e6:b1:a2:83:31:b8:4b:f0:43:63: c3:66:07:27:d3:44:91:9c:40:a7:1d:35:4b:80:73: fc:66:5b:fd:83:40:cb:f8:60:d8:ff:8b:94:94:92: 18:06:4b:fd:f7:73:c6:77:d4:a1:88:da:9f:1c:b9: 29:3f:bd:1c:7c:4b:f1:17:ec:92:84:bf:d5:3a:4a: 00:d9:fe:7c:e8:e6:aa:59:82:d8:a6:61:3a:b6:95: 5f:9e:ac:4d:72:3f:4c:0f:0e:b2:32:4d:b0:74:7e: 2c:29:4b:fe:3d:67:d6:f6:f7:62:85:c3:2e:ae:93: 3f:cf:77:f0:ed:03:98:d0:eb:54:73:10:2c:98:93: 4e:e2:5d:d4:7b:14:78:44:8c:af:26:fc:a8:5d:e0: 52:fb:b5:f4:75:22:47:17:9f:5a:11:ee:f1:31:32: 9f:a1:ac:95:1d:bc:e2:5d:82:78:26:ed:f6:4f:28: 54:e6:2b:be:f1:c1:26:7e:f9:7d:50:39:4f:55:0f: 37:64:6f:3b:7e:74:5e:8a:01:bf:03:24:2e:bb:96: d0:fd:f1:3f:6c:df:33:3e:7b:4f:23:da:92:28:68: 59:3b:45:1e:d4:5b:4a:c4:9e:87:78:2b:bc:7a:63: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:BC:1C:B2:98:34:F8:BC:8F:69:C0:1C:EC:66:17:EE:FB:9F:F2 X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:98:69:b0:e4:3f:e7:20:b4:43:e9:e4:41:d3:00:41:d6:7e: 42:08:b2:e6:63:43:d1:a9:d9:7f:23:b9:56:27:19:a2:78:b6: 0d:93:d5:d5:2d:7c:a6:eb:f9:e9:b2:77:ca:11:e8:73:79:4b: d5:e3:3c:ec:81:10:05:af:87:76:29:cd:75:35:e3:2b:17:dd: 75:a2:c5:7a:88:3b:25:fe:f1:81:4c:6f:4b:1a:e6:d7:f1:b0: fc:c6:96:36:6c:8b:46:9e:33:7d:2e:0b:0f:c2:c8:2a:8f:75: ea:a2:8a:5d:cc:d8:ab:f3:91:d7:ad:97:57:98:ff:65:1b:2c: db:89:85:d2:d6:cb:57:42:e8:c2:0b:75:77:54:0a:7b:d8:f8: 28:7f:e6:85:73:6b:58:1f:fc:a2:84:de:e1:70:95:7e:c8:42: f6:80:11:ee:5e:d1:8b:36:17:40:a4:bf:e8:94:83:f3:05:e7: 3d:25:e6:8d:1a:1f:f8:bf:dd:54:42:80:ed:30:32:e3:e8:7b: 8e:55:a1:02:b8:2f:7e:24:9f:a5:ae:39:8b:7b:fe:cb:6a:33: 7b:fe:da:e9:02:0c:d6:5e:7d:0e:a5:8f:fb:9d:07:83:51:1e: aa:52:f0:d5:67:53:ac:34:20:34:af:3d:ec:b9:d1:02:55:07: 76:60:67:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRKmwq0KAfbaG2HszlzCFdLThM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA3MjMxMDM4MDdaFw0yNjA3MjQxMjM2MDdaMDMxMTAvBgNV BAMTKDdGODhCQzFDQjI5ODM0RjhCQzhGNjlDMDFDRUM2NjE3RUVGQjlGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/G8kHU8B5KH6rHGrmW1YbZHV5 5rGigzG4S/BDY8NmByfTRJGcQKcdNUuAc/xmW/2DQMv4YNj/i5SUkhgGS/33c8Z3 1KGI2p8cuSk/vRx8S/EX7JKEv9U6SgDZ/nzo5qpZgtimYTq2lV+erE1yP0wPDrIy TbB0fiwpS/49Z9b292KFwy6ukz/Pd/DtA5jQ61RzECyYk07iXdR7FHhEjK8m/Khd 4FL7tfR1IkcXn1oR7vExMp+hrJUdvOJdgngm7fZPKFTmK77xwSZ++X1QOU9VDzdk bzt+dF6KAb8DJC67ltD98T9s3zM+e08j2pIoaFk7RR7UW0rEnod4K7x6Y+A/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4i8HLKYNPi8j2nAHOxmF+77n/IwHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmYabDkP+cgtEPp5EHTAEHWfkIIsuZjQ9Gp 2X8juVYnGaJ4tg2T1dUtfKbr+emyd8oR6HN5S9XjPOyBEAWvh3YpzXU14ysX3XWi xXqIOyX+8YFMb0sa5tfxsPzGljZsi0aeM30uCw/CyCqPdeqiil3M2Kvzkdetl1eY /2UbLNuJhdLWy1dC6MILdXdUCnvY+Ch/5oVza1gf/KKE3uFwlX7IQvaAEe5e0Ys2 F0Ckv+iUg/MF5z0l5o0aH/i/3VRCgO0wMuPoe45VoQK4L34kn6WuOYt7/stqM3v+ 2ukCDNZefQ6lj/udB4NRHqpS8NVnU6w0IDSvPey50QJVB3ZgZ5M= -----END CERTIFICATE-----Generated at Fri Jul 24 02:31:27 2026 by rpki-client