$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: /pDkUA0ykrMrdVZ9OL+amcS1l2lCzVymJv5K7WSI8Sw= Subject key identifier: 12:77:0C:C0:EC:E1:DD:F0:9E:F6:4F:B4:12:22:EB:FB:72:0E:C4:AA Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 3F3999F7695A3ED9BC9D00E83D43104AA3190B54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:53:11 +0000 Manifest this update: Thu 23 Jul 2026 18:48:11 +0000 Manifest next update: Fri 24 Jul 2026 19:31:11 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: OLZAWm9ZHuSrXUDexsVRrFN6QP2jHDCm1CF63GZKMS0=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:39:99:f7:69:5a:3e:d9:bc:9d:00:e8:3d:43:10:4a:a3:19:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Jul 23 18:48:11 2026 GMT Not After : Jul 24 19:31:11 2026 GMT Subject: CN=12770CC0ECE1DDF09EF64FB41222EBFB720EC4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:34:84:9d:5d:f5:8e:be:22:c8:c3:49:e8:26: 5e:d2:a2:6d:3d:35:db:50:46:59:1d:42:6c:f0:b8: e3:c9:1a:16:34:09:84:92:cf:e1:09:4f:17:52:91: fc:27:42:79:fe:81:3a:50:04:54:e5:6d:06:58:da: ad:d7:01:2c:9a:40:a0:2f:18:42:06:4c:cf:ba:58: 4d:69:9d:f5:a8:27:a2:be:89:1a:83:77:22:51:d8: 2f:04:d4:0b:0b:50:da:15:cf:97:b5:b8:0d:ed:f9: b0:1b:ab:45:c0:e7:c0:b9:91:76:c3:bb:68:06:50: 00:35:45:20:fa:b0:8c:d7:a0:72:75:a7:00:0f:25: 7c:f5:f4:11:96:39:5d:1a:2e:de:a2:c0:43:55:2f: 35:5d:74:5c:eb:5d:96:0d:51:a9:32:35:03:b6:d2: 91:1b:21:04:f3:14:65:7d:84:d9:53:fd:f1:3b:46: 84:b6:83:af:a2:1a:ab:90:12:e2:16:89:a9:6b:eb: 7d:3b:8a:3b:fa:ad:2c:2c:41:7e:90:19:0a:fb:05: 92:d2:cb:9c:53:91:99:ab:84:13:7d:27:86:9d:ef: 1e:dd:77:0d:19:0a:cf:17:10:d5:6e:81:fe:c4:8c: 14:3b:3a:7f:eb:5f:1a:c5:3a:8c:13:b5:98:e4:0f: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:0C:C0:EC:E1:DD:F0:9E:F6:4F:B4:12:22:EB:FB:72:0E:C4:AA X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e1:a2:2a:b5:51:7a:cd:b8:9a:4f:f6:48:6b:3d:03:fc:b9: 35:82:ab:77:01:fb:97:bc:c7:c4:f4:3f:81:d1:8f:b1:b1:3b: 63:69:8d:35:e1:95:81:eb:e3:28:78:30:fe:f7:ba:01:f8:2e: 9e:2e:d9:0f:14:8b:3e:0a:c1:96:cf:20:7c:20:9d:d1:93:a3: ff:b1:d6:a8:76:47:4a:cd:c2:66:e0:5e:b3:bf:10:04:58:cd: 93:10:1c:99:22:08:bc:f7:01:79:18:15:1e:21:a6:f5:f4:d3: 11:dd:e8:48:e3:06:75:cf:36:10:a9:fd:23:38:95:18:23:95: 90:1c:1c:a2:c9:95:8f:60:69:5a:62:27:b6:cf:2d:79:fc:7f: 56:1e:37:ef:d7:a1:53:8c:22:86:09:ed:4f:2b:21:aa:8a:49: 2a:43:cb:df:f8:17:60:e3:02:e9:5a:56:1a:50:c3:f5:bb:91: af:96:79:92:b4:76:83:bd:2d:07:7d:40:3e:73:17:7b:a5:0d: c7:09:ca:22:5d:da:4d:99:57:41:55:85:1a:18:86:e8:f4:f4: 2b:61:2a:a2:54:3a:fe:59:18:8c:a0:54:c2:1a:e3:af:f7:58: 60:14:93:e0:9b:6f:c9:0c:d4:09:eb:5b:39:2f:01:1a:64:9d: b1:6e:47:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzmZ92laPtm8nQDoPUMQSqMZC1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA3MjMxODQ4MTFaFw0yNjA3MjQxOTMxMTFaMDMxMTAvBgNV BAMTKDEyNzcwQ0MwRUNFMURERjA5RUY2NEZCNDEyMjJFQkZCNzIwRUM0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5NISdXfWOviLIw0noJl7Som09 NdtQRlkdQmzwuOPJGhY0CYSSz+EJTxdSkfwnQnn+gTpQBFTlbQZY2q3XASyaQKAv GEIGTM+6WE1pnfWoJ6K+iRqDdyJR2C8E1AsLUNoVz5e1uA3t+bAbq0XA58C5kXbD u2gGUAA1RSD6sIzXoHJ1pwAPJXz19BGWOV0aLt6iwENVLzVddFzrXZYNUakyNQO2 0pEbIQTzFGV9hNlT/fE7RoS2g6+iGquQEuIWialr6307ijv6rSwsQX6QGQr7BZLS y5xTkZmrhBN9J4ad7x7ddw0ZCs8XENVugf7EjBQ7On/rXxrFOowTtZjkDyW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEncMwOzh3fCe9k+0EiLr+3IOxKowHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3hoiq1UXrNuJpP9khrPQP8uTWCq3cB+5e8 x8T0P4HRj7GxO2NpjTXhlYHr4yh4MP73ugH4Lp4u2Q8Uiz4KwZbPIHwgndGTo/+x 1qh2R0rNwmbgXrO/EARYzZMQHJkiCLz3AXkYFR4hpvX00xHd6EjjBnXPNhCp/SM4 lRgjlZAcHKLJlY9gaVpiJ7bPLXn8f1YeN+/XoVOMIoYJ7U8rIaqKSSpDy9/4F2Dj AulaVhpQw/W7ka+WeZK0doO9LQd9QD5zF3ulDccJyiJd2k2ZV0FVhRoYhuj09Cth KqJUOv5ZGIygVMIa46/3WGAUk+Cbb8kM1AnrWzkvARpknbFuR4s= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:18 2026 by rpki-client