$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: qLNPLxSzmZI3M8FuphPSKswCECtyodRFNJ2XahIxPKM= Subject key identifier: 85:84:96:BD:A4:8C:01:2B:4E:4E:D9:EC:24:94:2E:70:87:E9:46:58 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 4BDDDD791A672A72E380FFD7BAB68071A822E9D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:36:26 +0000 Manifest this update: Thu 23 Jul 2026 21:31:26 +0000 Manifest next update: Sat 25 Jul 2026 01:23:26 +0000 Files and hashes: 1: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: UwW0s4aHqKCo1AhC9sqBruRbmxn407GyP7cGp3JrjBA=) 2: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:dd:dd:79:1a:67:2a:72:e3:80:ff:d7:ba:b6:80:71:a8:22:e9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Jul 23 21:31:26 2026 GMT Not After : Jul 25 01:23:26 2026 GMT Subject: CN=858496BDA48C012B4E4ED9EC24942E7087E94658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:ca:26:9a:89:48:c2:67:1f:95:ba:c7:e5: 29:c0:c7:29:c9:ce:46:b8:a2:3d:56:c2:40:f0:36: c3:2d:61:bd:dc:c4:e1:8d:78:ad:04:c9:73:9e:77: 7e:cb:7e:d6:eb:7b:74:ae:c6:62:d8:a7:94:37:5f: f3:c6:cb:20:73:0a:8b:88:5c:95:75:07:e0:63:ec: 80:f8:3a:8c:e9:5c:92:03:f4:96:3d:c6:9c:f1:d2: ad:9c:09:4b:d0:2e:4c:fc:5a:d2:9e:03:a9:6f:37: f8:a6:cf:ac:1a:ce:aa:4c:97:d9:1b:7a:27:6e:93: 14:92:19:a8:11:92:cc:ed:5b:3a:44:4b:ab:b1:58: c3:9d:83:2f:eb:03:27:f2:58:9c:6d:5f:7e:3b:27: 82:78:ec:b0:d9:36:77:87:b4:91:d3:3a:2c:ce:0d: 46:39:2e:26:14:34:79:1d:e8:7a:b5:59:50:76:fa: d7:19:84:0b:74:37:0e:1b:0b:f2:1c:a3:ec:be:5a: f9:c0:5f:7a:30:b9:f2:29:6e:0a:cb:a6:4f:11:52: b0:bc:f1:fe:ce:cb:06:77:76:39:79:f4:d2:9e:73: 4a:96:07:90:49:4a:94:2c:b3:83:83:d2:15:66:c9: 0b:29:b0:f4:db:29:d6:d1:c3:e0:fe:b8:1e:ff:ed: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:84:96:BD:A4:8C:01:2B:4E:4E:D9:EC:24:94:2E:70:87:E9:46:58 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c2:36:e5:81:22:f9:0e:45:ba:0c:6e:41:81:7f:01:5c:9e: 9e:2d:ec:46:33:52:07:ed:44:b8:a4:3f:57:3c:13:e3:7e:39: ad:eb:1d:35:ab:6c:af:68:12:ba:c6:35:b8:16:ae:38:f4:f2: 77:20:96:e5:74:f9:d8:64:e1:86:5f:82:16:8a:f9:5f:e9:a6: 3a:b8:96:e8:6d:3a:53:7e:22:9b:7d:53:29:5f:58:0f:c0:2e: 98:73:f7:7d:b4:77:61:d1:2e:80:78:24:37:45:68:81:1a:db: 8f:2f:db:b7:d4:19:a6:4e:69:10:af:6c:8a:e0:84:33:f5:8d: 52:3a:28:7d:c4:71:47:45:22:86:57:06:6e:2b:4f:26:d7:e7: 3e:db:de:e7:db:31:9f:6c:36:70:8d:60:4d:f1:c7:a9:57:64: 11:cb:9d:4d:4c:fb:36:93:66:5e:63:b7:9b:80:1e:6a:5a:d3: 20:4f:c9:62:a6:b2:32:17:32:e0:0a:6c:1f:70:43:64:71:e7: 35:cb:72:68:e0:df:e2:9f:cb:f1:90:76:75:76:87:be:f8:9e: 18:7d:f1:65:ff:04:7a:10:49:62:99:69:08:68:cb:de:18:24: ca:39:e6:74:43:29:f4:be:a8:79:a8:e4:07:36:e8:3c:13:f4: 7b:b2:25:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS93deRpnKnLjgP/XuraAcagi6dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA3MjMyMTMxMjZaFw0yNjA3MjUwMTIzMjZaMDMxMTAvBgNV BAMTKDg1ODQ5NkJEQTQ4QzAxMkI0RTRFRDlFQzI0OTQyRTcwODdFOTQ2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4MommolIwmcflbrH5SnAxynJ zka4oj1WwkDwNsMtYb3cxOGNeK0EyXOed37Lftbre3SuxmLYp5Q3X/PGyyBzCouI XJV1B+Bj7ID4OozpXJID9JY9xpzx0q2cCUvQLkz8WtKeA6lvN/imz6wazqpMl9kb eidukxSSGagRksztWzpES6uxWMOdgy/rAyfyWJxtX347J4J47LDZNneHtJHTOizO DUY5LiYUNHkd6Hq1WVB2+tcZhAt0Nw4bC/Ico+y+WvnAX3owufIpbgrLpk8RUrC8 8f7OywZ3djl59NKec0qWB5BJSpQss4OD0hVmyQspsPTbKdbRw+D+uB7/7Q5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYSWvaSMAStOTtnsJJQucIfpRlgwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLCNuWBIvkORboMbkGBfwFcnp4t7EYzUgft RLikP1c8E+N+Oa3rHTWrbK9oErrGNbgWrjj08ncgluV0+dhk4YZfghaK+V/ppjq4 luhtOlN+Ipt9UylfWA/ALphz9320d2HRLoB4JDdFaIEa248v27fUGaZOaRCvbIrg hDP1jVI6KH3EcUdFIoZXBm4rTybX5z7b3ufbMZ9sNnCNYE3xx6lXZBHLnU1M+zaT Zl5jt5uAHmpa0yBPyWKmsjIXMuAKbB9wQ2Rx5zXLcmjg3+Kfy/GQdnV2h774nhh9 8WX/BHoQSWKZaQhoy94YJMo55nRDKfS+qHmo5Ac26DwT9HuyJSA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:24 2026 by rpki-client