$ rpki-client -vvf rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft File: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft (raw, json) Hash identifier: fHtJVIuKicxlWqJWdRZlRUX5ueDOIfyrJYDAHHTblVM= Subject key identifier: 2B:C6:DF:28:71:D7:32:84:B9:68:57:90:7D:0C:33:18:71:FB:15:C5 Authority key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 Certificate issuer: /CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Certificate serial: 44A6511D2B20E620CC8DD6FE6D2B32DD2C1D2F11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:22:28 +0000 Manifest this update: Thu 23 Jul 2026 18:17:28 +0000 Manifest next update: Fri 24 Jul 2026 21:40:28 +0000 Files and hashes: 1: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl (hash: Dbseo7SHMsa2Hx9JEstRH1TNkrk2GbPY1eCnY6S98vM=) 2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: VsBGao6wJ+D9luytrcOpRnST1DbJomPxjbQHafMOBCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a6:51:1d:2b:20:e6:20:cc:8d:d6:fe:6d:2b:32:dd:2c:1d:2f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Validity Not Before: Jul 23 18:17:28 2026 GMT Not After : Jul 24 21:40:28 2026 GMT Subject: CN=2BC6DF2871D73284B96857907D0C331871FB15C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:82:0a:ba:2c:57:b1:2f:67:5b:ee:f8:2e: c7:88:70:38:cd:23:cd:32:34:34:1d:84:a8:40:0b: 90:43:08:8a:7c:ab:bb:51:ad:42:4b:ce:f3:54:b1: dc:fe:1a:bd:6c:c7:81:d2:cc:c8:7f:81:85:b9:76: 4a:56:29:fd:29:d5:15:6a:cc:75:4d:fb:6d:18:52: 0e:a3:fc:66:aa:ee:1e:e1:c5:0d:cc:84:2e:2b:e9: f4:93:ec:c4:a9:aa:b0:88:ac:8d:2d:92:dd:9d:23: 94:d9:3c:af:82:34:d5:fc:f8:ee:74:87:e8:25:42: c0:c1:05:39:4a:c6:77:1d:3f:85:4d:8d:de:36:6f: 56:a3:2a:26:eb:22:fd:ac:db:41:11:11:8e:63:a8: 32:27:75:e2:cd:54:24:02:73:52:36:28:49:64:12: 0a:61:36:f0:56:76:57:03:60:72:f0:26:33:bf:a6: 2f:55:fb:e9:13:b1:0e:1f:c4:39:95:1c:18:68:dd: 39:66:be:40:53:4f:ff:c4:3f:d3:48:44:64:2b:58: 7e:ac:2b:93:a4:0f:8f:fa:a8:97:1c:34:ed:5c:99: 68:bb:5a:2c:09:92:19:1f:6c:36:cf:5d:88:5e:6b: 4f:90:84:e5:5e:4e:bc:73:f8:ec:76:48:80:04:50: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C6:DF:28:71:D7:32:84:B9:68:57:90:7D:0C:33:18:71:FB:15:C5 X509v3 Authority Key Identifier: keyid:F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3e:17:91:2f:e4:b8:74:88:d6:25:5b:d3:8e:cb:c2:6a:c7: 73:e7:20:f9:08:66:1f:3d:3e:fa:96:67:0d:e1:51:9b:11:ba: c6:76:72:f3:b6:ba:d4:df:24:80:ad:a5:40:0b:96:7d:d7:64: 43:a8:f3:f2:65:a0:36:6f:69:4d:98:36:af:2f:6c:54:3a:c2: 65:6d:c8:9e:04:08:a1:bf:bc:4f:aa:db:8f:57:c8:3b:2e:b9: 49:f8:ec:35:91:e1:aa:cc:3e:bd:b7:34:c3:65:77:10:d7:a9: cd:63:7e:20:33:fc:bf:f4:f6:28:ba:02:74:3e:dd:61:7a:bf: 1e:f9:22:bd:9c:94:ed:bc:2a:f8:08:83:50:ac:10:58:05:02: 99:76:98:ca:cc:28:1b:2b:ee:02:7f:0a:ae:94:0f:e1:80:bf: 2c:44:56:c0:25:e5:51:12:04:99:37:92:bf:86:53:8b:fe:2c: 78:c9:70:da:b2:6d:a6:56:fe:15:6f:22:bc:0a:b6:ca:0f:1a: 15:9f:af:cd:0b:65:1d:98:0d:71:90:17:98:bf:83:8a:9e:4d: 7d:9a:66:88:2c:32:16:31:e5:2e:7c:a3:85:ac:2e:4d:d8:80: 02:7c:24:55:69:4f:67:82:ae:1f:34:10:57:48:42:6a:ed:88: 0a:a8:cb:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKZRHSsg5iDMjdb+bSsy3SwdLxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3MkMy MDhEOTE5MjAeFw0yNjA3MjMxODE3MjhaFw0yNjA3MjQyMTQwMjhaMDMxMTAvBgNV BAMTKDJCQzZERjI4NzFENzMyODRCOTY4NTc5MDdEMEMzMzE4NzFGQjE1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi24IKuixXsS9nW+74LseIcDjN I80yNDQdhKhAC5BDCIp8q7tRrUJLzvNUsdz+Gr1sx4HSzMh/gYW5dkpWKf0p1RVq zHVN+20YUg6j/Gaq7h7hxQ3MhC4r6fST7MSpqrCIrI0tkt2dI5TZPK+CNNX8+O50 h+glQsDBBTlKxncdP4VNjd42b1ajKibrIv2s20EREY5jqDIndeLNVCQCc1I2KElk EgphNvBWdlcDYHLwJjO/pi9V++kTsQ4fxDmVHBho3TlmvkBTT//EP9NIRGQrWH6s K5OkD4/6qJccNO1cmWi7WiwJkhkfbDbPXYhea0+QhOVeTrxz+Ox2SIAEUB1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK8bfKHHXMoS5aFeQfQwzGHH7FcUwHwYDVR0j BBgwFoAU9DyLlj2p3wOHfFv/DaH3LCCNkZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczNWUxNWYtZDQ0OS00NmQ4LWJlMGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYz REE5REYwMzg3N0M1QkZGMERBMUY3MkMyMDhEOTE5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDNDOEI5NjNEQTlERjAzODc3QzVCRkYwREExRjcyQzIwOEQ5 MTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvRjQzQzhCOTYzREE5REYwMzg3N0M1QkZGMERBMUY3 MkMyMDhEOTE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg+F5Ev5Lh0iNYlW9OOy8Jqx3PnIPkIZh89 PvqWZw3hUZsRusZ2cvO2utTfJICtpUALln3XZEOo8/JloDZvaU2YNq8vbFQ6wmVt yJ4ECKG/vE+q249XyDsuuUn47DWR4arMPr23NMNldxDXqc1jfiAz/L/09ii6AnQ+ 3WF6vx75Ir2clO28KvgIg1CsEFgFApl2mMrMKBsr7gJ/Cq6UD+GAvyxEVsAl5VES BJk3kr+GU4v+LHjJcNqybaZW/hVvIrwKtsoPGhWfr80LZR2YDXGQF5i/g4qeTX2a ZogsMhYx5S58o4WsLk3YgAJ8JFVpT2eCrh80EFdIQmrtiAqoyzc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:27:51 2026 by rpki-client