$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: 2xSnrsAEgTVb27J+3f7XFz8qX3D0a5P3qCIz28vAo8o= Subject key identifier: 39:18:C9:4F:DB:6D:8B:D7:2A:6E:F0:94:0A:89:42:B1:C4:7B:11:A2 Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 19E33FD84D64A8ED6FEB8F8821CC2F511E410D3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 09:20:49 +0000 Manifest this update: Fri 24 Jul 2026 09:15:49 +0000 Manifest next update: Sat 25 Jul 2026 11:09:49 +0000 Files and hashes: 1: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) 2: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 3: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 4: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: 5fTmRzcrawEbLm4G/RKhV9gA/zlW27Pn2RybLjhgG1Y=) 5: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) 6: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 7: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e3:3f:d8:4d:64:a8:ed:6f:eb:8f:88:21:cc:2f:51:1e:41:0d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: Jul 24 09:15:49 2026 GMT Not After : Jul 25 11:09:49 2026 GMT Subject: CN=3918C94FDB6D8BD72A6EF0940A8942B1C47B11A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:f8:fe:0e:20:76:11:3c:96:17:48:fb:eb: 16:71:2f:0c:d3:65:56:17:17:7b:43:ec:12:fc:da: ff:da:dc:70:9f:d4:1a:c3:2c:4c:9d:d2:43:fc:f6: d1:eb:44:16:90:61:91:1e:29:2a:33:c0:2d:d2:2e: 4a:39:74:3f:0d:2a:81:a8:b3:a4:74:f2:7c:2e:7c: e8:a9:9d:bb:85:28:f1:40:23:c4:09:56:6e:f1:b0: 92:e7:c8:a9:03:70:df:c4:2c:b3:bb:9d:b2:f3:ae: 7f:3b:ee:c2:82:eb:3b:2b:89:93:82:e5:13:10:90: ef:15:98:79:e5:14:ac:ab:03:98:99:ad:1f:73:ca: c1:d6:11:5b:fb:5a:7e:1a:e9:9a:8a:a6:f6:af:e9: bf:a3:4b:9a:2c:de:ef:77:24:3b:02:c8:13:b5:21: b5:30:1f:5e:6f:96:9e:2b:cd:8b:2b:f2:33:0b:e5: 33:f2:51:b7:cd:49:6a:dd:6e:88:e5:61:0c:75:c3: 00:36:34:4b:cc:fb:d0:e7:0c:54:44:83:3f:b2:55: 5a:d9:57:2c:02:35:02:77:bf:21:56:b1:5f:78:44: eb:f0:1f:20:2f:28:09:d0:07:4e:47:bc:11:3c:43: 3f:ec:a5:37:f8:b1:43:9e:ad:43:f6:06:6d:f3:ff: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:C9:4F:DB:6D:8B:D7:2A:6E:F0:94:0A:89:42:B1:C4:7B:11:A2 X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:64:b9:c0:25:ac:14:9e:2a:b6:04:59:a9:59:09:df:8b: ba:aa:25:bc:28:dd:f7:80:7d:10:3c:33:ef:61:c3:84:9c:b2: 91:6c:66:8d:d6:5d:e9:51:31:ed:9d:b1:cd:2e:44:6c:f1:9f: 15:1b:a0:07:0c:70:21:f2:27:0c:48:c7:95:8a:ff:3c:6e:00: 26:32:b1:b3:b8:4f:d3:55:d0:fa:e7:0f:4b:e1:a8:c5:a0:99: b9:1b:06:29:6d:a4:df:64:50:d0:d9:4f:a4:ba:c7:8a:28:75: c8:81:a3:e8:56:f4:13:41:e8:2e:ba:c4:ea:40:ca:54:e0:f9: de:a3:8f:8d:c1:16:d0:20:80:db:0d:e2:01:12:c0:00:fa:46: 10:01:93:e7:fe:2f:31:b5:65:aa:d4:b9:c7:54:f9:96:ca:1d: e6:53:d9:40:57:9f:16:f0:b0:30:a7:1e:4e:39:3e:21:38:ea: 58:ca:9b:15:03:96:7a:8b:e9:96:32:65:70:4e:91:07:4f:62: c6:47:ae:fb:9a:0d:06:bd:24:62:b2:a1:fd:9b:88:df:bd:77: 5f:01:19:e5:48:65:07:c1:63:30:34:6f:d3:e0:f1:ca:db:bf: 96:31:b8:d2:4f:68:e5:49:57:59:f8:a1:3c:fb:9a:59:8e:86: 1e:a9:78:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeM/2E1kqO1v64+IIcwvUR5BDTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA3MjQwOTE1NDlaFw0yNjA3MjUxMTA5NDlaMDMxMTAvBgNV BAMTKDM5MThDOTRGREI2RDhCRDcyQTZFRjA5NDBBODk0MkIxQzQ3QjExQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50Pj+DiB2ETyWF0j76xZxLwzT ZVYXF3tD7BL82v/a3HCf1BrDLEyd0kP89tHrRBaQYZEeKSozwC3SLko5dD8NKoGo s6R08nwufOipnbuFKPFAI8QJVm7xsJLnyKkDcN/ELLO7nbLzrn877sKC6zsriZOC 5RMQkO8VmHnlFKyrA5iZrR9zysHWEVv7Wn4a6ZqKpvav6b+jS5os3u93JDsCyBO1 IbUwH15vlp4rzYsr8jML5TPyUbfNSWrdbojlYQx1wwA2NEvM+9DnDFREgz+yVVrZ VywCNQJ3vyFWsV94ROvwHyAvKAnQB05HvBE8Qz/spTf4sUOerUP2Bm3z/7pzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORjJT9tti9cqbvCUColCscR7EaIwHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZMZLnAJawUniq2BFmpWQnfi7qqJbwo3feA fRA8M+9hw4ScspFsZo3WXelRMe2dsc0uRGzxnxUboAcMcCHyJwxIx5WK/zxuACYy sbO4T9NV0PrnD0vhqMWgmbkbBiltpN9kUNDZT6S6x4oodciBo+hW9BNB6C66xOpA ylTg+d6jj43BFtAggNsN4gESwAD6RhABk+f+LzG1ZarUucdU+ZbKHeZT2UBXnxbw sDCnHk45PiE46ljKmxUDlnqL6ZYyZXBOkQdPYsZHrvuaDQa9JGKyof2biN+9d18B GeVIZQfBYzA0b9Pg8crbv5YxuNJPaOVJV1n4oTz7mlmOhh6peAg= -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:08 2026 by rpki-client