$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: tVVSSGI2+rN4ZULBg0+VIDN578hoPhkZlEa9M5mPqxo= Subject key identifier: FA:15:85:97:FE:CF:8E:01:A8:70:52:FF:26:90:13:4E:52:0A:BB:B8 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 2A0AFE600A473F8A9C9EFBDCEAE78237A4FF2004 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:14:26 +0000 Manifest this update: Fri 24 Jul 2026 12:09:26 +0000 Manifest next update: Sat 25 Jul 2026 15:20:26 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) 2: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: PR19qQCo1QhNfButt8X+c5TFnYD3RaqiYNCm4RZazOA=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0a:fe:60:0a:47:3f:8a:9c:9e:fb:dc:ea:e7:82:37:a4:ff:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Jul 24 12:09:26 2026 GMT Not After : Jul 25 15:20:26 2026 GMT Subject: CN=FA158597FECF8E01A87052FF2690134E520ABBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:24:7b:7e:67:e5:be:cb:03:45:e5:c6:0a: be:b0:2c:13:14:df:0a:65:0d:2b:f1:09:86:f5:7c: 75:0f:f7:62:dd:e2:de:2f:2b:ce:42:fd:f4:c3:ed: 24:ac:8a:a7:84:bc:89:fb:d6:88:e8:2d:94:8b:4c: 38:d5:d0:40:1f:b6:a1:5c:6a:fc:a6:99:43:8a:ad: 6c:44:05:d0:61:ab:ee:5b:6b:1e:3b:12:fe:d8:68: db:39:aa:1a:79:db:e8:ca:f7:96:d6:fe:d3:a8:11: 52:b5:b0:67:e3:87:74:0b:2e:a4:09:cf:95:19:0f: 3b:02:58:a1:b0:75:5b:97:b8:fb:e5:63:d0:32:ba: 26:37:e1:76:59:48:c3:43:9b:1c:d9:de:a0:54:b9: fa:ae:43:50:c2:2a:8d:27:f8:74:ae:91:a0:8b:be: fa:f1:82:4d:57:7b:16:a9:a5:98:76:0c:47:f9:68: d0:e2:66:37:b5:f6:6b:45:70:b9:37:1c:64:d9:f8: dd:e3:2f:a1:88:04:19:43:f7:ac:c7:76:4a:39:49: 8f:07:41:5b:89:86:a5:43:63:a6:e4:42:02:2b:d9: 96:e1:79:91:45:2f:e4:eb:b2:31:b0:3c:26:81:98: 9b:85:01:f0:aa:70:f8:9e:84:f5:68:09:18:9a:e8: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:85:97:FE:CF:8E:01:A8:70:52:FF:26:90:13:4E:52:0A:BB:B8 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:3a:4b:27:8d:1b:95:b5:e9:97:48:21:00:94:75:ec:e3: 94:75:27:88:e3:13:d9:52:73:a8:ea:1f:23:50:ca:ca:8f:a4: c4:7e:bc:55:7a:5a:e2:97:a5:4a:bd:a8:02:43:9f:19:7b:54: a0:66:14:ea:5d:c3:ed:60:e4:f7:6f:12:f2:14:f9:1b:81:42: 96:ec:9e:12:c1:b3:c4:1e:a2:b0:52:b9:a1:d3:00:cd:f4:76: df:ee:99:ac:4e:4f:e0:10:5b:a4:c3:17:00:ab:37:66:42:be: 62:7f:5c:22:c5:6f:20:1e:c0:41:55:60:77:26:a4:8f:06:be: 3c:4e:0f:4a:67:2a:09:1b:0f:4a:61:b0:9e:35:a4:05:0e:99: b0:bd:19:31:3b:e8:2e:f9:88:9f:a4:23:a9:fb:78:be:f1:08: 7e:bb:bd:71:71:c0:a3:6b:28:c3:79:f6:a7:15:a3:73:52:82: a6:17:90:12:2f:90:49:02:c3:47:5a:75:51:24:56:2e:b9:ae: 36:5a:26:76:7a:d3:74:50:45:00:4a:c5:94:98:a2:12:0e:f0: 4b:d8:fb:ad:12:21:2f:15:72:7e:16:63:9b:cf:d2:80:3d:21: 08:2b:8d:64:08:a0:51:3a:c9:99:d9:78:84:ca:0e:0a:77:3f: 41:7e:5e:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgr+YApHP4qcnvvc6ueCN6T/IAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA3MjQxMjA5MjZaFw0yNjA3MjUxNTIwMjZaMDMxMTAvBgNV BAMTKEZBMTU4NTk3RkVDRjhFMDFBODcwNTJGRjI2OTAxMzRFNTIwQUJCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5CR7fmflvssDReXGCr6wLBMU 3wplDSvxCYb1fHUP92Ld4t4vK85C/fTD7SSsiqeEvIn71ojoLZSLTDjV0EAftqFc avymmUOKrWxEBdBhq+5bax47Ev7YaNs5qhp52+jK95bW/tOoEVK1sGfjh3QLLqQJ z5UZDzsCWKGwdVuXuPvlY9AyuiY34XZZSMNDmxzZ3qBUufquQ1DCKo0n+HSukaCL vvrxgk1XexappZh2DEf5aNDiZje19mtFcLk3HGTZ+N3jL6GIBBlD96zHdko5SY8H QVuJhqVDY6bkQgIr2ZbheZFFL+TrsjGwPCaBmJuFAfCqcPiehPVoCRia6KzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hWFl/7PjgGocFL/JpATTlIKu7gwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5+OksnjRuVtemXSCEAlHXs45R1J4jjE9lS c6jqHyNQysqPpMR+vFV6WuKXpUq9qAJDnxl7VKBmFOpdw+1g5PdvEvIU+RuBQpbs nhLBs8QeorBSuaHTAM30dt/umaxOT+AQW6TDFwCrN2ZCvmJ/XCLFbyAewEFVYHcm pI8GvjxOD0pnKgkbD0phsJ41pAUOmbC9GTE76C75iJ+kI6n7eL7xCH67vXFxwKNr KMN59qcVo3NSgqYXkBIvkEkCw0dadVEkVi65rjZaJnZ603RQRQBKxZSYohIO8EvY +60SIS8Vcn4WY5vP0oA9IQgrjWQIoFE6yZnZeITKDgp3P0F+XvY= -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:52 2026 by rpki-client