$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: DyYLRqXoYBWYqiz6aa/aIbIUAEyYAwCKZeW8Uj8PVGE= Subject key identifier: 2F:61:F0:85:EE:DE:EC:1E:D9:F6:8D:0B:86:78:FC:35:67:16:2F:95 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 092B37A053B7F64E14AA31D6854E1D6DC6242D69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:31:35 +0000 Manifest this update: Thu 23 Jul 2026 13:26:35 +0000 Manifest next update: Fri 24 Jul 2026 13:38:35 +0000 Files and hashes: 1: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: 8JDKIBrU+MJJq3dF1MvCqAvnC8F6gzMMdhUTGK0QlNs=) 2: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) 3: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) 4: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 5: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 6: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2b:37:a0:53:b7:f6:4e:14:aa:31:d6:85:4e:1d:6d:c6:24:2d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Jul 23 13:26:35 2026 GMT Not After : Jul 24 13:38:35 2026 GMT Subject: CN=2F61F085EEDEEC1ED9F68D0B8678FC3567162F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:77:1e:75:96:39:35:ab:59:0c:b9:5c:5e: 23:4e:d4:45:42:b6:36:63:3c:91:4a:b1:65:b9:93: eb:ee:ea:f7:98:d4:b6:65:40:d9:e5:8e:8e:f4:7b: b4:ec:a8:a4:d2:a7:59:e5:e1:5e:c7:02:83:c9:c8: 97:72:46:34:20:56:28:b2:fa:3b:87:01:76:1e:40: 43:1c:cd:10:9c:c8:5c:70:f7:b3:b0:2f:7e:f6:fb: 13:98:53:1f:41:6b:c0:95:6f:3e:0a:a5:bc:df:e8: 0e:ac:8b:8e:08:fd:62:63:54:6d:4c:6c:fb:06:49: 33:45:5b:5d:db:ab:85:dd:95:d6:bd:fc:69:7f:c8: 92:b4:ed:e2:96:4b:92:f3:9d:06:92:da:3a:6a:7c: 1b:88:ec:1a:2b:f9:fe:4c:ab:38:3d:69:0f:27:98: b8:e6:0c:64:69:f5:00:87:cc:10:72:2b:e2:f1:7a: 73:d4:ba:31:79:a8:93:c6:67:04:75:3c:b0:43:d6: 1c:e2:a7:b9:e3:6b:e4:33:f6:c6:cf:29:71:3a:5e: e5:dc:d3:ed:c9:34:5e:4c:eb:2b:e3:63:5d:d8:03: d4:ac:11:39:77:ed:4b:f6:c8:97:0a:ae:b1:39:07: 5d:77:da:9c:9a:04:62:d3:f8:ed:f0:32:e4:15:2a: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:61:F0:85:EE:DE:EC:1E:D9:F6:8D:0B:86:78:FC:35:67:16:2F:95 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9c:01:0d:11:da:65:0a:0e:90:ea:5c:7c:65:18:f6:b8:42: 5d:13:ea:45:a6:83:24:ae:78:68:c8:80:e1:03:95:61:c5:c3: f8:72:a0:d8:e1:80:9d:8b:ad:81:61:02:f2:51:f7:2a:63:97: e7:16:2e:3e:61:4e:40:85:b2:90:4b:7c:e3:5b:cc:64:d5:3a: 5d:ca:c6:8f:fd:5f:98:ad:63:c0:2a:ad:d7:77:bb:b4:4e:f5: b8:ae:bf:b9:08:77:1d:b8:1f:64:9d:c4:4f:38:da:b2:53:67: 97:87:b9:12:2c:de:82:7e:9d:68:0e:5c:75:07:ef:9a:53:43: 52:39:56:7b:ba:46:8a:a8:96:f6:16:b8:51:f8:fe:2e:d3:1e: d1:05:19:b4:5f:ee:9c:84:f1:fd:1a:c0:0a:bc:a4:25:64:53: f6:a3:c9:c2:57:6a:10:62:fd:3b:e7:e9:29:3d:ac:52:e5:77: 08:05:c2:de:e6:c9:6e:0e:9e:36:43:44:57:2a:bb:58:d2:ce: 6e:66:e6:d2:04:0b:3c:90:00:6f:86:1a:55:de:7b:d7:a4:d0: a9:ec:95:80:5a:37:b4:9c:44:9b:7d:3f:c0:18:e5:63:6c:76: 6b:5f:ae:86:05:ae:dd:f7:b2:36:c8:89:a9:11:5f:30:ca:b7: 89:e3:e3:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSs3oFO39k4UqjHWhU4dbcYkLWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA3MjMxMzI2MzVaFw0yNjA3MjQxMzM4MzVaMDMxMTAvBgNV BAMTKDJGNjFGMDg1RUVERUVDMUVEOUY2OEQwQjg2NzhGQzM1NjcxNjJGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTncedZY5NatZDLlcXiNO1EVC tjZjPJFKsWW5k+vu6veY1LZlQNnljo70e7TsqKTSp1nl4V7HAoPJyJdyRjQgViiy +juHAXYeQEMczRCcyFxw97OwL372+xOYUx9Ba8CVbz4Kpbzf6A6si44I/WJjVG1M bPsGSTNFW13bq4Xdlda9/Gl/yJK07eKWS5LznQaS2jpqfBuI7Bor+f5Mqzg9aQ8n mLjmDGRp9QCHzBByK+LxenPUujF5qJPGZwR1PLBD1hzip7nja+Qz9sbPKXE6XuXc 0+3JNF5M6yvjY13YA9SsETl37Uv2yJcKrrE5B1132pyaBGLT+O3wMuQVKrx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2Hwhe7e7B7Z9o0Lhnj8NWcWL5UwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWcAQ0R2mUKDpDqXHxlGPa4Ql0T6kWmgySu eGjIgOEDlWHFw/hyoNjhgJ2LrYFhAvJR9ypjl+cWLj5hTkCFspBLfONbzGTVOl3K xo/9X5itY8Aqrdd3u7RO9biuv7kIdx24H2SdxE842rJTZ5eHuRIs3oJ+nWgOXHUH 75pTQ1I5Vnu6RoqolvYWuFH4/i7THtEFGbRf7pyE8f0awAq8pCVkU/ajycJXahBi /Tvn6Sk9rFLldwgFwt7myW4OnjZDRFcqu1jSzm5m5tIECzyQAG+GGlXee9ek0Kns lYBaN7ScRJt9P8AY5WNsdmtfroYFrt33sjbIiakRXzDKt4nj48c= -----END CERTIFICATE-----Generated at Fri Jul 24 05:41:36 2026 by rpki-client