$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: wUreRl81PovcDANc2kuKYQxP8hOLtVw7QlrYjzKmdYw= Subject key identifier: C4:25:D1:E8:84:43:CE:CD:B4:BB:30:38:A0:3C:0E:37:99:5F:3B:45 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 180744BB401E04E1BCA73F3C1BFBDD49CF333F6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:27:49 +0000 Manifest this update: Thu 23 Jul 2026 10:22:49 +0000 Manifest next update: Fri 24 Jul 2026 13:10:49 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 2: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 3: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: mG98mXCYKnPygTFKRx8vwfRFM1xX32gNHCsUt+fD+/o=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:07:44:bb:40:1e:04:e1:bc:a7:3f:3c:1b:fb:dd:49:cf:33:3f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Jul 23 10:22:49 2026 GMT Not After : Jul 24 13:10:49 2026 GMT Subject: CN=C425D1E88443CECDB4BB3038A03C0E37995F3B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d0:6b:e9:48:56:fa:71:0b:d7:f4:5b:2b:1d: b6:f0:63:07:77:26:07:68:91:66:68:4d:0a:82:58: db:2c:b1:ef:5d:05:86:e3:86:58:7d:f9:79:e4:78: 98:0b:51:f3:01:7b:e6:74:36:da:74:61:98:70:f2: 65:ce:ca:47:7c:d7:0d:7f:86:02:1b:4c:15:4d:84: 8f:fd:4a:2f:4d:a1:f5:50:a9:f1:25:dc:19:7f:5a: 52:d3:9f:ab:f9:78:92:43:38:8b:c0:7e:19:1a:31: 7a:c2:9c:da:ea:09:c1:77:db:f3:fb:c1:4d:b8:e4: bf:64:7b:94:da:e9:75:ee:6a:0d:16:0a:2f:6d:ae: c3:41:f2:3f:df:b1:ef:49:0a:e7:93:d4:a4:50:a6: 76:b0:80:ea:e8:ca:7a:d0:26:4d:39:5d:86:79:59: 13:77:a3:a2:a0:df:1d:c7:76:d5:9d:44:9e:3d:cf: 45:1b:e5:58:cb:cd:19:b4:64:e4:43:e4:a8:23:d0: d9:1b:c7:98:a8:f5:4d:a0:88:9b:09:66:8b:00:2e: ac:7a:66:f6:27:01:e3:5b:4f:10:30:da:35:00:e4: 82:6a:fb:63:56:ba:de:8b:6a:e1:c2:b6:cc:c0:8e: 39:8e:4c:de:cc:75:95:45:98:a2:97:c3:80:dc:87: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:D1:E8:84:43:CE:CD:B4:BB:30:38:A0:3C:0E:37:99:5F:3B:45 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a7:79:e3:b0:3d:e4:11:d1:e2:87:3a:2a:b7:26:db:61:f7: 92:01:16:77:28:0f:bc:34:75:23:7a:ad:94:5a:94:35:74:a2: 53:72:4b:49:22:4d:f6:6e:06:c9:3c:b1:7d:13:d6:f5:c4:88: db:4b:17:18:f0:65:7c:d7:75:ee:ec:ea:fd:8d:8a:9d:d3:6c: d8:0e:fd:d7:ed:71:33:65:cb:4e:08:2e:ed:fa:8c:31:fd:f3: e9:07:d9:c0:92:4a:91:19:0d:0d:91:ae:32:01:01:a5:ea:03: 30:1c:89:be:9f:2f:b8:82:e3:94:3c:b2:bb:f6:66:9f:43:75: 63:86:ec:a4:fb:65:de:fb:5d:28:69:3b:15:85:1b:43:93:12: 3e:74:cc:02:9e:97:1b:0c:5f:0a:34:b0:bd:53:b2:e0:14:0d: c3:4c:f8:cd:57:d7:c1:c5:70:ee:d1:73:7d:e8:b1:a7:fe:9b: 84:6e:09:80:7f:6c:15:3c:4c:83:9b:4a:f8:0a:e9:c1:77:bc: 9a:52:bf:92:ff:a1:85:7c:aa:ce:a2:ef:ed:18:bb:b2:5d:3b: 50:52:d6:17:1d:84:bd:85:25:69:32:90:66:50:40:fd:db:52: f5:4a:dd:14:a1:56:77:a5:d0:03:cc:0d:1f:9c:1c:b7:eb:a3: 12:61:d6:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAdEu0AeBOG8pz88G/vdSc8zP2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA3MjMxMDIyNDlaFw0yNjA3MjQxMzEwNDlaMDMxMTAvBgNV BAMTKEM0MjVEMUU4ODQ0M0NFQ0RCNEJCMzAzOEEwM0MwRTM3OTk1RjNCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0GvpSFb6cQvX9FsrHbbwYwd3 JgdokWZoTQqCWNssse9dBYbjhlh9+XnkeJgLUfMBe+Z0Ntp0YZhw8mXOykd81w1/ hgIbTBVNhI/9Si9NofVQqfEl3Bl/WlLTn6v5eJJDOIvAfhkaMXrCnNrqCcF32/P7 wU245L9ke5Ta6XXuag0WCi9trsNB8j/fse9JCueT1KRQpnawgOroynrQJk05XYZ5 WRN3o6Kg3x3HdtWdRJ49z0Ub5VjLzRm0ZORD5Kgj0Nkbx5io9U2giJsJZosALqx6 ZvYnAeNbTxAw2jUA5IJq+2NWut6LauHCtszAjjmOTN7MdZVFmKKXw4Dch/GVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCXR6IRDzs20uzA4oDwON5lfO0UwHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6neeOwPeQR0eKHOiq3Jtth95IBFncoD7w0 dSN6rZRalDV0olNyS0kiTfZuBsk8sX0T1vXEiNtLFxjwZXzXde7s6v2Nip3TbNgO /dftcTNly04ILu36jDH98+kH2cCSSpEZDQ2RrjIBAaXqAzAcib6fL7iC45Q8srv2 Zp9DdWOG7KT7Zd77XShpOxWFG0OTEj50zAKelxsMXwo0sL1TsuAUDcNM+M1X18HF cO7Rc33osaf+m4RuCYB/bBU8TIObSvgK6cF3vJpSv5L/oYV8qs6i7+0Yu7JdO1BS 1hcdhL2FJWkykGZQQP3bUvVK3RShVnel0APMDR+cHLfroxJh1uc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:43 2026 by rpki-client