$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: g7v5qFrTGlGtA+NmJvXFB68i+oQTA+pa4juBkf6dHPU= Subject key identifier: D2:8C:B3:57:90:23:85:62:A2:E1:9C:BA:A6:D9:ED:D3:1A:D9:3A:98 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 48F70D11313818192B395179CCECB499EB11BC6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:21 +0000 Manifest this update: Fri 24 Jul 2026 03:18:21 +0000 Manifest next update: Sat 25 Jul 2026 04:21:21 +0000 Files and hashes: 1: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 3: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 4: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: REVelKNig8tsu6fVQbWHnv74Tb2DOLZW1DI4elaNXjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:0d:11:31:38:18:19:2b:39:51:79:cc:ec:b4:99:eb:11:bc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Jul 24 03:18:21 2026 GMT Not After : Jul 25 04:21:21 2026 GMT Subject: CN=D28CB35790238562A2E19CBAA6D9EDD31AD93A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:ac:4c:53:f5:db:d0:d6:c7:e6:66:07:70: 30:ed:0c:3e:12:1e:7e:3c:e5:07:34:3a:99:ba:64: 89:7f:64:0b:08:3a:bb:ee:e7:3b:93:1a:5b:7b:ee: 4e:d6:33:68:30:dd:e8:0d:d5:35:ab:87:4f:41:c3: 0b:46:3f:38:76:ba:4f:ea:89:29:db:73:2f:c0:66: bd:82:36:9c:a1:68:8e:50:4d:80:76:09:59:66:13: 25:3d:a2:08:81:7c:5e:c8:58:57:c5:9d:64:ce:24: 4d:a8:e2:9c:a2:ed:ae:26:f6:74:31:b3:8d:ad:d9: 30:c1:df:37:0c:1a:a0:62:0b:5e:a9:a8:c7:f4:6b: d7:28:f5:7d:c7:3a:9c:a6:a0:b0:e9:8d:e6:e6:50: 01:17:1f:aa:e1:1d:19:a9:55:28:22:ba:26:b4:04: ff:5c:09:d9:9a:66:f4:db:10:ee:64:2f:46:78:9a: 18:9b:da:b8:36:e7:22:df:5d:4d:01:0b:48:8b:71: fd:e6:23:42:bd:a6:4f:bf:05:2b:77:01:d3:06:d1: a7:68:91:cc:98:a0:f8:ba:34:3d:1e:18:a1:4e:d8: 22:81:92:6d:8d:7e:f5:1c:69:75:3e:a7:df:d3:c8: 81:3e:6e:60:18:9b:e6:78:89:00:25:45:73:78:34: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:B3:57:90:23:85:62:A2:E1:9C:BA:A6:D9:ED:D3:1A:D9:3A:98 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6e:d6:d2:21:53:7f:6d:1e:5a:31:e0:9e:25:f7:96:07:54: c2:8d:83:40:ce:73:6d:01:64:28:ab:06:c1:06:96:a4:e9:14: f4:53:05:09:6c:c6:0d:29:d7:59:56:d6:89:6f:fd:6a:e7:0c: 33:0f:13:f9:54:8d:d2:66:fb:f9:b0:10:a6:29:90:20:4f:6d: ab:80:99:8f:4b:69:35:47:8e:50:c6:11:c2:a6:fb:f0:a5:4b: a0:73:fc:3c:10:6b:24:ef:a8:53:31:72:a8:77:7f:b2:cc:12: 5b:a7:58:2e:89:b9:d2:06:b6:19:ca:1a:6d:49:cb:58:ac:45: 82:05:6f:dd:e9:8b:41:e5:e3:81:45:2b:55:d8:9b:a6:d3:08: 56:9d:00:1b:70:89:55:55:73:51:f7:c5:96:6a:48:20:96:5e: 7e:2e:76:68:3f:9e:ca:df:63:2a:ff:1c:d1:a1:5a:76:1e:21: b4:a0:b4:27:89:99:aa:54:21:d7:c4:e0:37:8e:58:1c:de:c6: c8:44:70:d6:49:14:61:35:8c:79:7a:6a:34:3c:57:ac:9e:b2: af:ee:87:35:5d:91:60:2d:a8:85:2d:b2:dd:64:b1:3e:6e:2e: 38:00:3b:33:b2:0e:1a:e6:a9:bd:4a:ba:3d:47:ba:e3:be:bd: 4a:db:9c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPcNETE4GBkrOVF5zOy0mesRvGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA3MjQwMzE4MjFaFw0yNjA3MjUwNDIxMjFaMDMxMTAvBgNV BAMTKEQyOENCMzU3OTAyMzg1NjJBMkUxOUNCQUE2RDlFREQzMUFEOTNBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuaxMU/Xb0NbH5mYHcDDtDD4S Hn485Qc0Opm6ZIl/ZAsIOrvu5zuTGlt77k7WM2gw3egN1TWrh09BwwtGPzh2uk/q iSnbcy/AZr2CNpyhaI5QTYB2CVlmEyU9ogiBfF7IWFfFnWTOJE2o4pyi7a4m9nQx s42t2TDB3zcMGqBiC16pqMf0a9co9X3HOpymoLDpjebmUAEXH6rhHRmpVSgiuia0 BP9cCdmaZvTbEO5kL0Z4mhib2rg25yLfXU0BC0iLcf3mI0K9pk+/BSt3AdMG0ado kcyYoPi6ND0eGKFO2CKBkm2NfvUcaXU+p9/TyIE+bmAYm+Z4iQAlRXN4NN6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oyzV5AjhWKi4Zy6ptnt0xrZOpgwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxu1tIhU39tHlox4J4l95YHVMKNg0DOc20B ZCirBsEGlqTpFPRTBQlsxg0p11lW1olv/WrnDDMPE/lUjdJm+/mwEKYpkCBPbauA mY9LaTVHjlDGEcKm+/ClS6Bz/DwQayTvqFMxcqh3f7LMElunWC6JudIGthnKGm1J y1isRYIFb93pi0Hl44FFK1XYm6bTCFadABtwiVVVc1H3xZZqSCCWXn4udmg/nsrf Yyr/HNGhWnYeIbSgtCeJmapUIdfE4DeOWBzexshEcNZJFGE1jHl6ajQ8V6yesq/u hzVdkWAtqIUtst1ksT5uLjgAOzOyDhrmqb1Kuj1HuuO+vUrbnIA= -----END CERTIFICATE-----Generated at Fri Jul 24 08:44:21 2026 by rpki-client