$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft File: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft (raw, json) Hash identifier: 7RHJVCDd4nXsxok3+vaBx9uzjqp9wJuYr+HygoJUJFQ= Subject key identifier: DC:9E:6F:57:7F:8A:94:12:36:82:8B:98:B5:1F:8B:68:FE:32:7E:87 Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Certificate serial: 3BD8158F24FE02CE082091953D1A9DFAC09229A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:22:10 +0000 Manifest this update: Fri 24 Jul 2026 02:17:10 +0000 Manifest next update: Sat 25 Jul 2026 04:58:10 +0000 Files and hashes: 1: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: CIu+a1x1Ob4TtttYENYOSXpa0Xw1+bkYfz/RVtE/6mo=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: LF0MrR9BI6ohPR99FqHdVyHSCGgsD/4Honm25vFKTtU=) 3: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl (hash: b+4ytYv/xK+kfryiVKRqS1xqfNZIdXDPGbomDeBWzEQ=) 4: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: h+jOCf2n8qXpyofV0yrwta8TGMspkZPZ+KTwYTU4B7c=) 5: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: 9zWseK0VGBFjDjSukC7sEdd2KVTBNcjvlH0F1oisM48=) 6: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=) 7: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: hnbLn0WCQW7tjxDDomIPOhXC1r7ltYUmnmJCJUDX+Hs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d8:15:8f:24:fe:02:ce:08:20:91:95:3d:1a:9d:fa:c0:92:29:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Validity Not Before: Jul 24 02:17:10 2026 GMT Not After : Jul 25 04:58:10 2026 GMT Subject: CN=DC9E6F577F8A941236828B98B51F8B68FE327E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:da:a2:48:bc:3f:e8:a4:e8:9e:9e:86:4d: b5:26:72:28:4c:7c:f2:53:16:78:67:de:80:ab:a2: 72:6e:5b:90:4d:f5:80:63:66:95:07:58:f0:79:8d: 71:17:62:75:6f:26:aa:28:b2:ee:0a:0f:16:27:b1: 78:de:7d:38:87:40:99:c5:5c:85:3d:a7:42:4e:90: ce:62:0a:22:48:35:c9:44:0d:9b:48:64:97:b5:d0: 9d:ed:a8:2d:12:5e:b1:a3:b3:d0:3d:7e:0c:84:ab: 9f:58:52:57:e5:71:7e:bb:d4:96:f3:02:00:a7:03: 2f:38:ca:6f:17:a0:00:8d:b2:34:23:e5:25:1d:0a: 60:9e:ac:8b:67:34:55:3d:cb:34:d9:a2:21:6a:8b: 5a:1c:22:1f:ca:f5:0a:f5:8b:fa:fe:ef:79:ab:56: b6:ff:91:ee:94:e1:40:d8:84:e1:41:51:ce:14:28: 3a:70:0d:a9:83:73:cc:15:e6:80:2c:17:e2:8f:57: a0:55:87:06:7a:27:45:41:a6:1f:51:c4:24:55:ee: 81:18:07:2a:08:60:4c:de:68:80:bb:bd:72:c2:1c: cf:e2:cc:02:eb:68:fa:a2:f5:34:93:61:60:2f:76: bc:83:f8:49:06:12:54:4c:b1:f2:a2:0a:cc:af:cc: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:6F:57:7F:8A:94:12:36:82:8B:98:B5:1F:8B:68:FE:32:7E:87 X509v3 Authority Key Identifier: keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e5:67:df:57:4e:1e:3e:9e:d1:ca:36:6b:8c:53:2d:7f:0e: c7:66:1e:7e:20:23:ca:64:1d:8e:bf:4b:c9:85:66:4f:9a:91: 0c:b9:00:a6:a3:d2:fa:fd:7c:04:60:fd:f6:97:72:22:e6:02: 00:30:68:e8:e7:93:aa:5c:9c:b0:be:58:8c:de:d1:71:76:dd: 13:f9:7f:f4:68:eb:23:77:48:0d:3b:e4:a3:32:6b:46:8e:af: 59:13:c9:82:ca:a1:27:3e:0d:2c:00:c8:26:07:18:f4:02:17: 75:80:d2:a6:46:2f:d7:76:9b:f5:a5:8e:c4:99:de:fc:94:4f: cb:68:a5:fb:c7:ba:4b:aa:ea:27:7e:64:d7:da:c5:59:37:ac: 0b:e1:63:bb:bb:f3:1a:b7:64:13:2b:34:44:70:71:5e:7b:89: ca:77:96:30:36:43:fa:72:94:04:ab:da:2b:a1:3d:42:d8:13: 49:67:96:9c:32:d9:32:5d:64:40:d6:e7:6b:a3:47:fb:35:65: e0:71:1e:7a:ec:e8:a6:f7:82:75:c0:ef:24:93:c5:7b:b0:ee: 4f:87:6b:cb:7e:73:9f:52:50:f3:7b:b8:64:af:39:ad:fb:04: 9e:1b:0d:5a:81:82:79:63:f3:94:62:55:55:4f:76:03:41:2e: 57:ff:d7:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9gVjyT+As4IIJGVPRqd+sCSKagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC Q0MwNkJFNjAeFw0yNjA3MjQwMjE3MTBaFw0yNjA3MjUwNDU4MTBaMDMxMTAvBgNV BAMTKERDOUU2RjU3N0Y4QTk0MTIzNjgyOEI5OEI1MUY4QjY4RkUzMjdFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKUtqiSLw/6KTonp6GTbUmcihM fPJTFnhn3oCronJuW5BN9YBjZpUHWPB5jXEXYnVvJqoosu4KDxYnsXjefTiHQJnF XIU9p0JOkM5iCiJINclEDZtIZJe10J3tqC0SXrGjs9A9fgyEq59YUlflcX671Jbz AgCnAy84ym8XoACNsjQj5SUdCmCerItnNFU9yzTZoiFqi1ocIh/K9Qr1i/r+73mr Vrb/ke6U4UDYhOFBUc4UKDpwDamDc8wV5oAsF+KPV6BVhwZ6J0VBph9RxCRV7oEY ByoIYEzeaIC7vXLCHM/izALraPqi9TSTYWAvdryD+EkGElRMsfKiCsyvzFgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3J5vV3+KlBI2gouYtR+LaP4yfocwHwYDVR0j BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2 QkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAw NENCQ0MwNkJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPlZ99XTh4+ntHKNmuMUy1/DsdmHn4gI8pk HY6/S8mFZk+akQy5AKaj0vr9fARg/faXciLmAgAwaOjnk6pcnLC+WIze0XF23RP5 f/Ro6yN3SA075KMya0aOr1kTyYLKoSc+DSwAyCYHGPQCF3WA0qZGL9d2m/WljsSZ 3vyUT8topfvHukuq6id+ZNfaxVk3rAvhY7u78xq3ZBMrNERwcV57icp3ljA2Q/py lASr2iuhPULYE0lnlpwy2TJdZEDW52ujR/s1ZeBxHnrs6Kb3gnXA7ySTxXuw7k+H a8t+c59SUPN7uGSvOa37BJ4bDVqBgnlj85RiVVVPdgNBLlf/1xk= -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:41 2026 by rpki-client