$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: KmQI1xKSpyeDR81PcybVRtWypjIvOtvStxIqKBqq5g8= Subject key identifier: 8B:20:F1:E7:D9:1B:C3:67:2A:7A:1A:DC:7E:76:8F:E2:EB:1B:1D:06 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 3B9CF51BA0C52FAD12DEB47AE10C84A611C1ADDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 14:17:14 +0000 Manifest this update: Fri 24 Jul 2026 14:12:14 +0000 Manifest next update: Sat 25 Jul 2026 17:38:14 +0000 Files and hashes: 1: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 2: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: /q9N496Dmc2WJdvQiyIDytFC+Pukrwn8nZ6Mhj9Lg/w=) 3: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9c:f5:1b:a0:c5:2f:ad:12:de:b4:7a:e1:0c:84:a6:11:c1:ad:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Jul 24 14:12:14 2026 GMT Not After : Jul 25 17:38:14 2026 GMT Subject: CN=8B20F1E7D91BC3672A7A1ADC7E768FE2EB1B1D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:75:09:6a:f1:83:69:4e:4d:10:74:ce:ea: 50:b3:a3:cc:45:a1:28:af:f5:19:c8:68:46:f6:96: e5:e9:ea:71:0f:d6:a4:8e:14:66:39:7e:6c:c7:ce: 36:c2:6f:f8:fd:3f:cd:a6:22:e8:a8:36:92:27:a3: 68:93:56:80:b6:e8:22:6a:11:fa:00:af:bc:fe:3c: e2:55:89:fb:30:4f:45:1c:ab:b5:a2:e1:62:79:3e: db:7a:f9:83:71:a5:a7:5f:50:c3:c7:90:01:ec:77: 38:c8:1a:fb:ab:c1:45:cc:2b:bc:f0:21:69:d9:cf: 5a:e8:16:91:91:ec:d8:b3:42:82:9e:74:e4:9d:f2: a4:03:f1:c7:91:34:cf:d2:06:7a:73:85:2d:60:bf: 61:8e:16:cf:48:e3:b1:75:e9:a6:e8:5e:53:b0:7b: d9:4f:dc:9f:bd:bb:e3:63:32:c4:d2:11:d7:d8:63: ee:e6:a3:6d:54:cf:e8:20:7a:2a:5e:98:55:a0:98: 79:42:54:e9:23:55:3f:5d:aa:00:06:82:9a:b9:42: d6:94:46:99:f4:f0:d8:aa:1a:8b:ca:28:77:02:70: e2:88:94:df:90:c0:1b:43:86:7c:95:9d:41:11:93: 2e:73:cb:fb:e3:b0:40:b1:ad:e3:a5:d7:c0:b5:d0: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:F1:E7:D9:1B:C3:67:2A:7A:1A:DC:7E:76:8F:E2:EB:1B:1D:06 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:55:bb:ca:08:aa:59:13:d7:89:9d:be:62:49:a9:3e:8d:5b: a7:38:53:2c:af:e9:92:78:1f:1e:c3:bb:9b:0e:40:43:ca:b2: 0c:8f:03:87:ae:2c:92:4f:e6:e8:3c:11:c2:b2:4f:f9:2f:53: 9f:ef:3d:c2:e4:35:39:61:ad:48:8d:7a:01:e4:32:4f:2b:23: f7:e6:be:f4:90:46:1d:2a:04:f9:90:11:2e:da:a9:fa:2b:00: 33:13:2b:96:52:6f:75:b2:e0:1b:d1:31:5c:e1:d2:54:ad:38: 01:c5:0e:06:10:61:3c:35:af:75:6c:45:0e:1f:d2:f7:e8:6e: 8d:d8:70:3e:ae:e3:11:e3:a5:a7:2b:58:71:6a:05:56:fb:b3: 68:05:98:b4:c9:59:1a:87:50:19:ba:f7:55:d9:67:d6:1e:33: 4d:6d:12:3e:94:a0:38:8b:e7:b9:32:96:79:c6:67:1b:09:e0: 50:71:70:ee:c4:72:9b:19:cc:02:df:bb:89:e6:e7:e4:19:44: 42:39:d3:3c:d2:cc:ab:dc:84:19:a3:73:cd:99:d7:7c:d4:c5: 30:42:b6:bb:eb:47:80:3d:63:63:2f:5c:50:d6:73:ca:ba:c4: 79:05:ff:63:66:ff:b2:3c:5c:fe:51:2b:37:b4:53:4c:0f:59: 23:d5:f7:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5z1G6DFL60S3rR64QyEphHBrdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA3MjQxNDEyMTRaFw0yNjA3MjUxNzM4MTRaMDMxMTAvBgNV BAMTKDhCMjBGMUU3RDkxQkMzNjcyQTdBMUFEQzdFNzY4RkUyRUIxQjFEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEXUJavGDaU5NEHTO6lCzo8xF oSiv9RnIaEb2luXp6nEP1qSOFGY5fmzHzjbCb/j9P82mIuioNpIno2iTVoC26CJq EfoAr7z+POJVifswT0Ucq7Wi4WJ5Ptt6+YNxpadfUMPHkAHsdzjIGvurwUXMK7zw IWnZz1roFpGR7NizQoKedOSd8qQD8ceRNM/SBnpzhS1gv2GOFs9I47F16aboXlOw e9lP3J+9u+NjMsTSEdfYY+7mo21Uz+ggeipemFWgmHlCVOkjVT9dqgAGgpq5QtaU Rpn08NiqGovKKHcCcOKIlN+QwBtDhnyVnUERky5zy/vjsECxreOl18C10H81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiyDx59kbw2cqehrcfnaP4usbHQYwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJVu8oIqlkT14mdvmJJqT6NW6c4Uyyv6ZJ4 Hx7Du5sOQEPKsgyPA4euLJJP5ug8EcKyT/kvU5/vPcLkNTlhrUiNegHkMk8rI/fm vvSQRh0qBPmQES7aqforADMTK5ZSb3Wy4BvRMVzh0lStOAHFDgYQYTw1r3VsRQ4f 0vfobo3YcD6u4xHjpacrWHFqBVb7s2gFmLTJWRqHUBm691XZZ9YeM01tEj6UoDiL 57kylnnGZxsJ4FBxcO7EcpsZzALfu4nm5+QZREI50zzSzKvchBmjc82Z13zUxTBC trvrR4A9Y2MvXFDWc8q6xHkF/2Nm/7I8XP5RKze0U0wPWSPV9xE= -----END CERTIFICATE-----Generated at Fri Jul 24 15:37:35 2026 by rpki-client