$ rpki-client -vvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft File: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft (raw, json) Hash identifier: zVrjnv+495I36svRLxUJQKPGK7CO3v8FPeOisGgJS2A= Subject key identifier: FF:9B:30:57:E0:2B:19:87:64:3F:01:5F:09:28:1A:B6:E9:42:12:2A Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A Certificate issuer: /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Certificate serial: 0394A04CFAA9188C67B678409592346326F9A47C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:43:11 +0000 Manifest this update: Thu 23 Jul 2026 10:38:11 +0000 Manifest next update: Fri 24 Jul 2026 13:02:11 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: 5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=) 2: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl (hash: fOLNr99LdHozVr5LJHJcideTJay3pEadwUoUAdMAcgg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:94:a0:4c:fa:a9:18:8c:67:b6:78:40:95:92:34:63:26:f9:a4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Validity Not Before: Jul 23 10:38:11 2026 GMT Not After : Jul 24 13:02:11 2026 GMT Subject: CN=FF9B3057E02B1987643F015F09281AB6E942122A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:92:62:96:31:88:64:60:9b:19:e9:0d:12: 45:0a:99:7f:1d:a7:b1:c6:8d:89:b0:a8:1d:d3:b2: eb:3f:5a:e9:d8:46:06:c4:7c:90:75:02:d4:37:17: 01:44:49:9d:8d:e8:a8:85:18:15:1e:1a:9d:13:88: 0e:13:44:6b:75:b8:20:9b:6c:4d:1c:2d:81:40:54: 87:ad:22:b9:25:4b:1b:2f:7a:ac:8a:1b:0d:ab:26: ce:89:48:61:23:7f:23:25:f8:4d:34:0f:d7:11:42: b5:8a:da:21:82:66:db:7d:c2:9f:3d:6b:fe:77:00: 43:a3:59:22:48:31:13:39:c4:51:f1:fe:fc:c0:70: a6:ee:cc:cd:b3:3e:53:36:57:b8:45:31:aa:31:8e: 6e:a5:1c:e3:11:da:ff:89:b7:d4:57:fc:c4:8d:f9: 56:45:b8:ad:e7:9a:28:cb:eb:96:40:4d:fd:eb:cc: ac:ed:90:15:8a:b3:bb:77:80:d3:5d:f0:51:14:8e: b3:80:64:65:6f:bd:ad:74:22:de:38:b2:96:04:56: b1:be:68:65:aa:e2:b6:ef:e7:d7:39:62:a4:28:4e: 87:4f:12:b7:9a:36:ba:a7:cb:85:32:30:5e:6c:af: 7e:68:58:8a:0a:5b:d9:63:82:ae:6b:e4:f5:f0:1e: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:30:57:E0:2B:19:87:64:3F:01:5F:09:28:1A:B6:E9:42:12:2A X509v3 Authority Key Identifier: keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:b0:53:1b:33:ab:08:ab:a2:8c:39:8d:a4:ed:ba:99:31: e6:ad:2e:7a:15:3d:7d:87:ea:48:47:a2:3b:59:7f:f0:1f:d7: b6:5a:1f:c4:27:1b:92:eb:0c:c4:d2:a0:52:e6:a1:86:9b:ac: 5d:d5:24:36:b4:46:10:57:0f:39:f3:8a:6d:66:4b:07:fe:80: 28:87:ec:a0:ca:d3:6d:46:5d:20:a9:dd:92:31:32:e3:9e:65: 94:75:38:af:8f:1d:d2:3f:54:51:1f:07:20:f0:5a:1d:45:74: 46:f5:43:6a:3d:62:85:99:1e:59:b3:96:36:02:dd:d7:29:5c: 3f:07:72:e8:bc:1f:88:c2:29:40:17:14:2b:2f:d7:70:89:dc: 90:34:51:88:3a:90:2e:1d:a6:b4:d1:8a:00:9c:24:78:b0:65: 5f:15:e0:6c:40:de:f4:d0:67:39:26:0c:9c:be:2c:3c:1b:ec: 63:32:a5:03:d8:6c:e6:68:7a:92:1c:f1:ef:bf:32:14:7e:1d: 99:22:a9:43:1e:62:54:98:c5:c8:03:36:ed:e4:eb:ab:f3:5b: e1:d1:ac:34:ce:38:36:97:e1:2b:5b:f5:95:ce:30:af:ee:4e: f1:c0:09:fc:07:3e:5f:ba:81:1f:b7:80:14:fd:d8:23:af:c4: 53:96:d9:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5SgTPqpGIxntnhAlZI0Yyb5pHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4 RDg4Njc4QTAeFw0yNjA3MjMxMDM4MTFaFw0yNjA3MjQxMzAyMTFaMDMxMTAvBgNV BAMTKEZGOUIzMDU3RTAyQjE5ODc2NDNGMDE1RjA5MjgxQUI2RTk0MjEyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqW5JiljGIZGCbGekNEkUKmX8d p7HGjYmwqB3Tsus/WunYRgbEfJB1AtQ3FwFESZ2N6KiFGBUeGp0TiA4TRGt1uCCb bE0cLYFAVIetIrklSxsveqyKGw2rJs6JSGEjfyMl+E00D9cRQrWK2iGCZtt9wp89 a/53AEOjWSJIMRM5xFHx/vzAcKbuzM2zPlM2V7hFMaoxjm6lHOMR2v+Jt9RX/MSN +VZFuK3nmijL65ZATf3rzKztkBWKs7t3gNNd8FEUjrOAZGVvva10It44spYEVrG+ aGWq4rbv59c5YqQoTodPEreaNrqny4UyMF5sr35oWIoKW9ljgq5r5PXwHkZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5swV+ArGYdkPwFfCSgatulCEiowHwYDVR0j BBgwFoAU+UgR3MUQHxzGJk1pGn4v7o2IZ4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc1MGE2NTEtMWExYS00NTAxLWE4YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExREND NTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4RDg4Njc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTQ4MTFEQ0M1MTAxRjFDQzYyNjRENjkxQTdFMkZFRThEODg2 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJG RUU4RDg4Njc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhRsFMbM6sIq6KMOY2k7bqZMeatLnoVPX2H 6khHojtZf/Af17ZaH8QnG5LrDMTSoFLmoYabrF3VJDa0RhBXDznzim1mSwf+gCiH 7KDK021GXSCp3ZIxMuOeZZR1OK+PHdI/VFEfByDwWh1FdEb1Q2o9YoWZHlmzljYC 3dcpXD8Hcui8H4jCKUAXFCsv13CJ3JA0UYg6kC4dprTRigCcJHiwZV8V4GxA3vTQ ZzkmDJy+LDwb7GMypQPYbOZoepIc8e+/MhR+HZkiqUMeYlSYxcgDNu3k66vzW+HR rDTOODaX4Stb9ZXOMK/uTvHACfwHPl+6gR+3gBT92COvxFOW2S0= -----END CERTIFICATE-----Generated at Fri Jul 24 01:52:24 2026 by rpki-client