$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: pWhfCvf+ls/82Rbsy1icE4jJbfEJFj15/6egsxsYwkE= Subject key identifier: E9:34:6E:D1:C8:90:C5:FA:7C:3D:9A:CD:2A:D2:9E:11:2E:1C:AB:82 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 1EB56F8A60F419381410AB90A94BDBC893FE3B50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:46:50 +0000 Manifest this update: Thu 23 Jul 2026 17:41:50 +0000 Manifest next update: Fri 24 Jul 2026 20:09:50 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) 2: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: Eum27Qw3VirnMNkd8C2haIE61buLjYSYgoz68ZmOyB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b5:6f:8a:60:f4:19:38:14:10:ab:90:a9:4b:db:c8:93:fe:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: Jul 23 17:41:50 2026 GMT Not After : Jul 24 20:09:50 2026 GMT Subject: CN=E9346ED1C890C5FA7C3D9ACD2AD29E112E1CAB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:22:c1:0f:ee:a9:23:69:fd:cb:11:dd:2b: 50:69:95:a5:a6:83:e9:0b:3c:cd:fa:4c:1e:d9:96: ef:64:dc:ba:17:5b:4e:d0:00:6e:8b:c4:ae:5c:5c: 30:43:13:10:9a:e7:d3:64:67:06:69:3a:2e:58:62: 53:95:8c:dc:1d:46:f3:11:e7:a4:b5:24:92:2e:68: 31:75:af:ea:76:55:ef:80:65:8b:2a:96:11:df:68: 93:a5:a7:28:d6:29:00:de:41:06:9d:02:37:d3:29: 28:32:2d:91:81:6d:10:d7:ba:72:a8:be:64:1c:b7: 4d:28:e8:3b:a7:30:b6:e0:3a:5e:2b:f0:77:f7:5e: 1f:0a:2c:ff:45:f1:83:16:27:c1:3a:47:7e:ae:67: e7:62:ed:97:5c:04:c5:7e:aa:e4:8b:d0:cf:7e:ac: 93:21:fb:2c:a6:f4:35:a1:cd:52:a6:b3:23:e6:ed: ac:4c:8a:fc:de:fb:75:71:59:1c:a0:97:97:60:4b: ba:ec:ad:7b:10:8d:e9:36:bf:78:2d:7e:0e:28:65: 81:57:bc:d0:f2:8c:97:ad:7c:3e:b4:40:30:2d:45: 71:6d:1f:d5:de:cd:83:c8:2a:31:00:4e:64:96:2f: fd:c3:0d:a6:3e:7a:17:7b:62:79:58:b3:dd:c5:a0: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:6E:D1:C8:90:C5:FA:7C:3D:9A:CD:2A:D2:9E:11:2E:1C:AB:82 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b8:63:17:4b:74:5e:79:53:15:9e:58:79:53:5f:2e:d4:c8: 5f:3e:15:5a:1c:5a:f2:ae:88:7e:a9:c9:70:47:39:de:9a:d0: bd:e6:6a:24:52:00:e4:de:3b:79:cb:35:af:89:ea:d5:08:d5: a6:ba:64:cf:95:1e:f8:93:59:84:1e:6f:6d:cd:51:91:96:9d: e5:f7:bb:12:83:a5:af:c2:a0:e1:22:01:cf:d3:12:a4:12:34: fd:b2:0e:61:64:14:93:9e:be:6d:5a:13:3f:f4:04:be:96:3f: 2b:07:6c:3c:d5:94:ff:94:bf:61:62:f7:6c:7e:8e:91:98:71: a6:21:08:d9:63:10:00:e5:c8:3c:32:ac:ce:55:84:a4:82:c6: e7:4a:13:99:66:72:25:b6:0d:c4:bd:3a:df:9c:8e:e5:b4:99: b3:d7:61:64:8e:40:ec:f7:ba:21:e5:32:89:d6:54:de:2e:e3: f9:19:dd:5d:95:a3:62:f1:3c:ea:03:f2:48:23:8f:eb:34:db: 23:e8:cf:85:7d:dc:67:8c:cd:e4:63:6e:81:ce:01:70:8c:28: df:a8:41:53:a6:a2:33:84:12:e5:9c:59:86:d3:f0:2b:4e:b9: ca:9a:e6:6b:40:98:f9:43:e1:cc:35:c2:cb:80:5a:9a:91:d1: 4b:a0:a2:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrVvimD0GTgUEKuQqUvbyJP+O1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA3MjMxNzQxNTBaFw0yNjA3MjQyMDA5NTBaMDMxMTAvBgNV BAMTKEU5MzQ2RUQxQzg5MEM1RkE3QzNEOUFDRDJBRDI5RTExMkUxQ0FCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufCLBD+6pI2n9yxHdK1BplaWm g+kLPM36TB7Zlu9k3LoXW07QAG6LxK5cXDBDExCa59NkZwZpOi5YYlOVjNwdRvMR 56S1JJIuaDF1r+p2Ve+AZYsqlhHfaJOlpyjWKQDeQQadAjfTKSgyLZGBbRDXunKo vmQct00o6DunMLbgOl4r8Hf3Xh8KLP9F8YMWJ8E6R36uZ+di7ZdcBMV+quSL0M9+ rJMh+yym9DWhzVKmsyPm7axMivze+3VxWRygl5dgS7rsrXsQjek2v3gtfg4oZYFX vNDyjJetfD60QDAtRXFtH9XezYPIKjEATmSWL/3DDaY+ehd7YnlYs93FoHhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6TRu0ciQxfp8PZrNKtKeES4cq4IwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu4YxdLdF55UxWeWHlTXy7UyF8+FVocWvKu iH6pyXBHOd6a0L3maiRSAOTeO3nLNa+J6tUI1aa6ZM+VHviTWYQeb23NUZGWneX3 uxKDpa/CoOEiAc/TEqQSNP2yDmFkFJOevm1aEz/0BL6WPysHbDzVlP+Uv2Fi92x+ jpGYcaYhCNljEADlyDwyrM5VhKSCxudKE5lmciW2DcS9Ot+cjuW0mbPXYWSOQOz3 uiHlMonWVN4u4/kZ3V2Vo2LxPOoD8kgjj+s02yPoz4V93GeMzeRjboHOAXCMKN+o QVOmojOEEuWcWYbT8CtOucqa5mtAmPlD4cw1wsuAWpqR0UugohA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:53:18 2026 by rpki-client