$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: sj1KoWsC94LBXbxKK2wXnqwhjqtB90HrpWJGQoJV9TY= Subject key identifier: B1:30:AD:A6:2F:45:C1:6F:1F:F2:73:5F:91:FC:0F:5F:98:90:BF:EA Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 435899C91A8A51C2856C87AA8ECAF89B12A9145B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:15:37 +0000 Manifest this update: Fri 24 Jul 2026 01:10:37 +0000 Manifest next update: Sat 25 Jul 2026 04:46:37 +0000 Files and hashes: 1: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: ol8xCd5R8FYYjClzBks8BKanQibsJnbIsWNr3FyHpkI=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:58:99:c9:1a:8a:51:c2:85:6c:87:aa:8e:ca:f8:9b:12:a9:14:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: Jul 24 01:10:37 2026 GMT Not After : Jul 25 04:46:37 2026 GMT Subject: CN=B130ADA62F45C16F1FF2735F91FC0F5F9890BFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:50:aa:70:8a:18:a7:86:9a:50:29:64:a7: 76:77:c8:08:0f:bd:0b:57:9b:c1:04:05:d1:5b:b4: b6:c6:45:2b:05:02:22:79:75:c9:9f:7e:71:21:29: 03:17:1d:ce:e1:b7:54:2b:6b:02:74:42:48:aa:83: 7a:0f:0a:38:2c:93:15:7f:0d:4c:f1:cc:71:b7:5c: fe:60:4e:13:2a:6c:9f:2d:4b:ca:98:6d:16:0e:6d: bc:02:e6:b6:c1:dd:c5:76:5f:6e:a8:26:96:30:b7: ad:5a:9e:01:f5:53:b4:73:fd:8c:cb:39:84:98:7c: b7:42:0d:ce:49:47:77:97:6b:54:61:58:d7:27:f5: d1:e1:a4:c8:19:2e:92:a8:0e:5d:8e:11:bd:74:6e: f8:15:d7:21:8e:53:41:c9:b5:2a:f9:ad:02:4e:65: 8d:8f:98:b0:42:a8:52:c7:fb:c4:b4:0f:57:f6:b3: 1a:de:22:dd:c5:dd:4d:ba:79:29:71:26:a5:f4:c0: 3f:32:74:2a:77:2c:18:fa:2f:cc:ed:e8:58:61:e2: f4:64:83:dc:34:83:c6:b5:9e:6d:06:e2:62:bd:5b: f1:f0:fa:ae:c1:be:d0:d7:27:89:1d:c9:37:37:ed: c8:71:26:1f:88:13:49:29:90:f1:d5:c5:24:15:3d: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:AD:A6:2F:45:C1:6F:1F:F2:73:5F:91:FC:0F:5F:98:90:BF:EA X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a3:f2:b2:a7:33:6b:59:08:55:6f:ac:bd:16:f9:f8:97:d0: 38:1e:b7:4b:3e:6b:bf:7d:4a:37:75:cf:3a:23:75:6e:ec:eb: aa:02:35:af:f0:f6:66:b7:4b:71:c8:4e:0a:ab:ea:ef:7b:83: 70:9f:ff:3b:86:63:21:54:e9:c2:d1:23:be:e4:68:73:98:32: ff:8e:21:f2:3c:77:3a:50:23:f1:47:ab:1e:de:2e:77:28:ef: 6e:93:c2:70:a1:8e:b0:1c:7d:94:cd:bb:6c:68:dc:60:43:35: 39:cb:19:89:f0:85:f9:e3:ce:74:52:61:e0:f1:a7:05:30:16: c5:00:43:25:00:fc:24:17:90:af:60:36:d7:14:5a:3e:f9:e8: 0e:7a:23:a0:42:eb:e3:09:5e:0f:1f:d3:0c:2c:6f:e0:0b:fe: e5:cd:59:77:c0:08:8b:5b:5d:fc:86:64:7d:db:d7:de:d2:6a: 61:f8:d6:c2:b4:c8:b2:76:fb:24:a7:3c:6b:85:0e:7e:e6:fb: f4:93:a9:e0:a2:c9:97:43:96:24:8f:7d:f2:ad:3b:18:a3:a8: 05:77:fc:56:b5:5c:17:54:21:f6:a0:41:f6:6a:8e:97:16:c8: bf:57:57:d9:a0:89:6f:c4:d7:5b:7a:3f:c9:09:f2:8b:dd:ab: 46:cf:75:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1iZyRqKUcKFbIeqjsr4mxKpFFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA3MjQwMTEwMzdaFw0yNjA3MjUwNDQ2MzdaMDMxMTAvBgNV BAMTKEIxMzBBREE2MkY0NUMxNkYxRkYyNzM1RjkxRkMwRjVGOTg5MEJGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CFCqcIoYp4aaUClkp3Z3yAgP vQtXm8EEBdFbtLbGRSsFAiJ5dcmffnEhKQMXHc7ht1QrawJ0Qkiqg3oPCjgskxV/ DUzxzHG3XP5gThMqbJ8tS8qYbRYObbwC5rbB3cV2X26oJpYwt61angH1U7Rz/YzL OYSYfLdCDc5JR3eXa1RhWNcn9dHhpMgZLpKoDl2OEb10bvgV1yGOU0HJtSr5rQJO ZY2PmLBCqFLH+8S0D1f2sxreIt3F3U26eSlxJqX0wD8ydCp3LBj6L8zt6Fhh4vRk g9w0g8a1nm0G4mK9W/Hw+q7BvtDXJ4kdyTc37chxJh+IE0kpkPHVxSQVPSjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTCtpi9FwW8f8nNfkfwPX5iQv+owHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6j8rKnM2tZCFVvrL0W+fiX0Dget0s+a799 Sjd1zzojdW7s66oCNa/w9ma3S3HITgqr6u97g3Cf/zuGYyFU6cLRI77kaHOYMv+O IfI8dzpQI/FHqx7eLnco726TwnChjrAcfZTNu2xo3GBDNTnLGYnwhfnjznRSYeDx pwUwFsUAQyUA/CQXkK9gNtcUWj756A56I6BC6+MJXg8f0wwsb+AL/uXNWXfACItb XfyGZH3b197SamH41sK0yLJ2+ySnPGuFDn7m+/STqeCiyZdDliSPffKtOxijqAV3 /Fa1XBdUIfagQfZqjpcWyL9XV9mgiW/E11t6P8kJ8ovdq0bPdX4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:01:26 2026 by rpki-client