$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: g0o318SeMiYSDLE3L/3/7RuRjDWJAZaibWQwwW3xA8k= Subject key identifier: F9:AE:AD:AD:00:55:7D:31:EF:D9:57:64:D2:30:D9:9B:E5:C7:B3:4E Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 19EDEE8864AB8922469ACCF7CEB5B7A92382FA69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:06:52 +0000 Manifest this update: Fri 24 Jul 2026 02:01:52 +0000 Manifest next update: Sat 25 Jul 2026 02:44:52 +0000 Files and hashes: 1: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: HCcrJlAoPMySWkyA8NzMm0e3+PevqXHUGotZTc8S7Gs=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ed:ee:88:64:ab:89:22:46:9a:cc:f7:ce:b5:b7:a9:23:82:fa:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Jul 24 02:01:52 2026 GMT Not After : Jul 25 02:44:52 2026 GMT Subject: CN=F9AEADAD00557D31EFD95764D230D99BE5C7B34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:19:3d:14:a4:85:49:63:52:ad:b1:dd:a4: 98:b8:10:c9:01:1d:20:2d:67:c3:25:f7:d3:c3:ea: e1:1a:c7:aa:31:5e:f2:ab:7f:f4:7b:6a:26:f3:66: 14:b0:c5:43:3e:2c:12:e7:6c:95:7c:3e:aa:99:78: fc:e9:ea:8f:ee:75:d1:94:4a:9c:de:37:47:df:94: 50:c3:61:3e:88:22:13:ce:1b:87:b2:a4:8e:72:a5: 4f:73:7b:6f:ef:0d:4b:1d:ea:4d:06:b3:2a:c7:5b: 9e:86:98:d6:1f:ed:e9:b4:88:1a:2b:2c:a2:94:f6: a1:cb:7b:5c:ed:f9:2d:93:65:6d:42:4b:60:48:92: 5f:76:e6:42:5a:42:77:bd:8b:e3:d8:14:b3:a3:12: 47:84:ad:7f:65:ae:08:a2:f1:84:aa:d3:00:43:2e: f5:8c:bb:d9:b2:53:99:af:0e:92:49:83:d8:f5:b3: 87:76:0c:73:4a:9f:a4:a1:2c:bf:20:bb:18:b2:c5: a9:97:97:fe:bc:2c:bd:5f:55:58:d3:82:59:75:5c: b0:bb:21:13:5b:bc:1e:16:c3:d8:15:e9:df:6f:0e: bc:06:34:ba:b4:4c:d5:d0:95:87:71:09:bf:8b:fa: 8d:cd:bb:d7:ac:99:48:05:9a:cb:ac:7a:96:35:0d: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:AD:AD:00:55:7D:31:EF:D9:57:64:D2:30:D9:9B:E5:C7:B3:4E X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:09:c0:8a:e1:b4:14:1e:49:1b:44:c7:84:dc:6b:b4:64:dd: 02:65:dc:7b:82:27:9f:64:c5:fb:a9:93:84:a1:1f:34:b9:48: 57:95:d9:b5:80:02:12:c5:51:a9:f0:06:5d:74:5d:0d:1f:76: 77:73:56:07:f4:23:a7:f1:23:53:fc:f1:af:04:8f:e7:c3:d9: af:db:75:74:08:80:81:be:3f:c9:0f:a2:50:f4:3f:76:0f:6f: ea:97:9f:fd:f6:79:dc:0f:bb:66:d5:8a:bd:b2:64:b6:cf:b4: 19:e1:ca:1d:92:9a:dc:b5:12:9b:07:fc:0f:83:7c:5d:02:d3: d6:45:8c:8c:3f:6c:4a:b3:9b:1b:c4:c3:e1:e9:18:ac:06:f2: 77:c3:46:65:83:57:02:ff:66:c4:1c:fa:c8:29:52:bf:7c:12: f6:df:b7:cf:e3:15:dc:86:f9:9a:4f:90:8b:e7:13:8b:88:10: 28:96:09:1b:2e:4c:ad:f5:26:86:84:ee:ab:4d:86:46:1d:d9: 90:26:a7:b3:66:4d:c9:09:69:95:b8:2b:17:44:3e:d0:32:50: 67:99:7e:c3:c2:39:3e:e0:d5:2e:2d:2a:4e:cf:9d:48:06:5e: 8e:57:90:21:4c:22:b4:68:6b:f8:b1:42:c5:a8:05:23:3b:c4: ec:a0:3b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGe3uiGSriSJGmsz3zrW3qSOC+mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA3MjQwMjAxNTJaFw0yNjA3MjUwMjQ0NTJaMDMxMTAvBgNV BAMTKEY5QUVBREFEMDA1NTdEMzFFRkQ5NTc2NEQyMzBEOTlCRTVDN0IzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoThk9FKSFSWNSrbHdpJi4EMkB HSAtZ8Ml99PD6uEax6oxXvKrf/R7aibzZhSwxUM+LBLnbJV8PqqZePzp6o/uddGU SpzeN0fflFDDYT6IIhPOG4eypI5ypU9ze2/vDUsd6k0GsyrHW56GmNYf7em0iBor LKKU9qHLe1zt+S2TZW1CS2BIkl925kJaQne9i+PYFLOjEkeErX9lrgii8YSq0wBD LvWMu9myU5mvDpJJg9j1s4d2DHNKn6ShLL8guxiyxamXl/68LL1fVVjTgll1XLC7 IRNbvB4Ww9gV6d9vDrwGNLq0TNXQlYdxCb+L+o3Nu9esmUgFmsusepY1DUerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+a6trQBVfTHv2Vdk0jDZm+XHs04wHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoJwIrhtBQeSRtEx4Tca7Rk3QJl3HuCJ59k xfupk4ShHzS5SFeV2bWAAhLFUanwBl10XQ0fdndzVgf0I6fxI1P88a8Ej+fD2a/b dXQIgIG+P8kPolD0P3YPb+qXn/32edwPu2bVir2yZLbPtBnhyh2Smty1EpsH/A+D fF0C09ZFjIw/bEqzmxvEw+HpGKwG8nfDRmWDVwL/ZsQc+sgpUr98Evbft8/jFdyG +ZpPkIvnE4uIECiWCRsuTK31JoaE7qtNhkYd2ZAmp7NmTckJaZW4KxdEPtAyUGeZ fsPCOT7g1S4tKk7PnUgGXo5XkCFMIrRoa/ixQsWoBSM7xOygOy4= -----END CERTIFICATE-----Generated at Fri Jul 24 11:50:47 2026 by rpki-client