$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: FVZwo21QXmy5TpqotGH0Y520wFkAe6MMR3rhVQcT1b4= Subject key identifier: 67:6E:3F:D7:3D:63:F3:5B:70:27:A7:60:0F:37:04:64:8D:2B:9C:70 Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 488715EAC163902E2DF64D5A60DB0345521CC7F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:00:17 +0000 Manifest this update: Fri 24 Jul 2026 00:55:17 +0000 Manifest next update: Sat 25 Jul 2026 02:29:17 +0000 Files and hashes: 1: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 2: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: nR2zQcA+qUXoygz9Wzci4hjnuCVygJmH02XWBM5ZMAM=) 3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:15:ea:c1:63:90:2e:2d:f6:4d:5a:60:db:03:45:52:1c:c7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: Jul 24 00:55:17 2026 GMT Not After : Jul 25 02:29:17 2026 GMT Subject: CN=676E3FD73D63F35B7027A7600F3704648D2B9C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:4c:22:e4:e7:eb:ce:8f:2b:b5:4b:d2:b2: 8f:e0:6d:b7:e8:21:37:4e:59:dc:51:d3:55:d0:5f: cf:59:81:18:3e:06:2c:20:52:3b:4c:f2:65:1d:43: ee:a2:32:7e:ad:c7:83:e5:fb:75:ea:4f:dd:42:f6: ef:36:8e:c3:ef:53:50:41:df:23:94:48:f1:fd:6b: 1c:89:4e:6a:64:68:cc:0b:71:86:15:3e:23:95:96: 47:58:a9:bc:76:f1:c0:b9:4e:d4:69:64:69:34:32: 40:66:ef:fd:d9:0e:28:70:1a:5f:9d:07:66:8c:66: 36:ce:85:fe:69:f4:9e:3b:04:b6:f0:e0:01:c1:bb: b5:af:77:3d:af:a7:5f:c3:77:ee:5d:00:f4:38:11: 19:9a:33:21:13:52:04:ac:05:a8:e0:81:bc:3d:8f: df:05:71:ce:c6:d3:d9:33:b8:63:74:75:d6:0a:75: c3:22:f6:b8:6e:a0:91:80:38:b2:bc:9c:c9:6f:86: 6f:a7:ee:59:3c:af:7d:4e:9b:b5:f3:df:ab:75:90: 48:9a:cf:a0:98:c2:f4:4e:a8:cc:1a:8c:ba:e6:f8: 6a:de:00:31:da:fd:99:3c:13:3e:a3:e6:47:0c:3b: 5d:b9:1d:b1:e2:28:fc:fa:d9:d0:c9:58:73:78:ff: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6E:3F:D7:3D:63:F3:5B:70:27:A7:60:0F:37:04:64:8D:2B:9C:70 X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:17:af:10:2b:9a:22:93:25:c3:15:7e:4a:d2:aa:48:7b:a2: e3:ab:30:d3:b7:87:bc:c0:b3:45:34:8d:79:2f:95:54:9f:5e: 24:9a:7e:a9:9a:7b:9d:e2:3d:38:78:89:dc:5e:69:1a:dd:35: 2a:b3:62:d1:9e:b8:fd:d1:b5:84:95:dc:1e:65:b6:46:24:38: db:41:67:1b:a9:3f:c1:ee:dd:42:89:1b:70:53:36:f0:00:ab: 93:b6:22:37:53:1f:ff:31:30:54:ae:cc:91:6a:88:a9:00:43: c2:47:90:29:46:68:1b:58:e1:1a:d6:2b:80:f2:13:ef:e7:ad: fc:fb:b5:00:d9:30:c8:e8:fd:0f:51:24:04:de:91:c6:9b:a1: e0:fc:3e:69:6f:c6:67:a0:56:c1:06:39:3d:6f:e0:31:80:71: b3:c5:c4:b9:53:cf:17:f8:b2:85:3a:37:52:1b:f2:1a:60:6b: 75:f6:cc:1e:a5:21:af:36:22:61:01:86:6b:a9:f3:5d:8e:88: 92:e3:16:35:10:b3:93:40:bc:e7:a5:72:b7:f0:89:3e:a3:0a: 51:65:79:8b:89:1f:2a:b2:87:0e:e9:74:8b:02:f3:cd:9e:e0: 50:43:e8:dc:3b:c2:cf:05:5c:e0:83:94:82:5e:f8:b8:c0:95: fe:f6:a8:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIcV6sFjkC4t9k1aYNsDRVIcx/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjA3MjQwMDU1MTdaFw0yNjA3MjUwMjI5MTdaMDMxMTAvBgNV BAMTKDY3NkUzRkQ3M0Q2M0YzNUI3MDI3QTc2MDBGMzcwNDY0OEQyQjlDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hkwi5Ofrzo8rtUvSso/gbbfo ITdOWdxR01XQX89ZgRg+BiwgUjtM8mUdQ+6iMn6tx4Pl+3XqT91C9u82jsPvU1BB 3yOUSPH9axyJTmpkaMwLcYYVPiOVlkdYqbx28cC5TtRpZGk0MkBm7/3ZDihwGl+d B2aMZjbOhf5p9J47BLbw4AHBu7Wvdz2vp1/Dd+5dAPQ4ERmaMyETUgSsBajggbw9 j98Fcc7G09kzuGN0ddYKdcMi9rhuoJGAOLK8nMlvhm+n7lk8r31Om7Xz36t1kEia z6CYwvROqMwajLrm+GreADHa/Zk8Ez6j5kcMO125HbHiKPz62dDJWHN4/8QJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ24/1z1j81twJ6dgDzcEZI0rnHAwHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIXrxArmiKTJcMVfkrSqkh7ouOrMNO3h7zA s0U0jXkvlVSfXiSafqmae53iPTh4idxeaRrdNSqzYtGeuP3RtYSV3B5ltkYkONtB ZxupP8Hu3UKJG3BTNvAAq5O2IjdTH/8xMFSuzJFqiKkAQ8JHkClGaBtY4RrWK4Dy E+/nrfz7tQDZMMjo/Q9RJATekcaboeD8PmlvxmegVsEGOT1v4DGAcbPFxLlTzxf4 soU6N1Ib8hpga3X2zB6lIa82ImEBhmup812OiJLjFjUQs5NAvOelcrfwiT6jClFl eYuJHyqyhw7pdIsC882e4FBD6Nw7ws8FXOCDlIJe+LjAlf72qL0= -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:03 2026 by rpki-client