$ rpki-client -vvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json) Hash identifier: mCw82WMucd/PEQ5DuZN+FGl192VU8/l6jyUFrImtlzo= Subject key identifier: 32:8E:26:B8:B9:C5:2F:1E:8D:5A:18:F0:FD:DA:4D:9A:9C:C3:90:E9 Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Certificate serial: 0DAC0802746495194E6D6BDDBC591D0F4B3EEBFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:49:02 +0000 Manifest this update: Fri 24 Jul 2026 07:44:02 +0000 Manifest next update: Sat 25 Jul 2026 11:38:02 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=) 2: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: G3KVqIM+uRkLZserTzjHWuQoTdeRIxIN67MvqzdgE60=) 3: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=) 4: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:08:02:74:64:95:19:4e:6d:6b:dd:bc:59:1d:0f:4b:3e:eb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Validity Not Before: Jul 24 07:44:02 2026 GMT Not After : Jul 25 11:38:02 2026 GMT Subject: CN=328E26B8B9C52F1E8D5A18F0FDDA4D9A9CC390E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:16:28:f9:a6:b4:d1:ea:74:fd:c1:11:d7: 2f:3f:6d:9c:39:ed:45:55:d1:88:78:ce:55:5c:be: eb:97:84:8b:0d:42:e2:71:45:51:29:71:21:c9:65: c3:2e:86:52:cb:19:ee:c5:1e:45:4e:5b:25:10:a9: 36:81:fd:11:f1:16:bb:34:26:f7:c7:3a:34:c7:d1: 64:70:f6:a5:00:b2:aa:26:c3:61:48:db:ce:5e:d9: 4d:59:90:b6:d1:b3:81:58:e6:e9:26:7f:2c:f6:10: ec:fc:a9:11:0d:ab:f8:18:87:9a:50:75:ea:5d:9a: 13:fb:10:16:89:ad:d7:5d:b2:22:38:d1:3a:b2:ef: 4c:f5:74:13:b7:fe:19:1b:04:f6:b6:d6:86:4a:4a: a0:5c:16:78:f1:3d:83:94:fa:ef:57:af:54:13:bd: 0e:dc:2f:d3:1b:d5:d6:8c:e9:e3:3e:76:89:4c:ca: b5:cc:41:15:ec:8f:84:9a:a6:d5:45:86:c6:eb:0c: dc:e6:13:5d:38:7a:2f:67:ac:8f:d0:e1:08:3f:46: 50:55:cc:3c:99:26:cc:f8:9b:4f:01:a0:e0:e5:a9: 09:9f:6e:01:32:26:d8:65:4b:bd:70:fd:58:97:74: 4f:98:6f:64:eb:8f:4c:1c:03:e0:08:b3:8f:35:75: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:26:B8:B9:C5:2F:1E:8D:5A:18:F0:FD:DA:4D:9A:9C:C3:90:E9 X509v3 Authority Key Identifier: keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6c:17:ee:d1:a8:5b:42:2c:db:68:75:ca:2c:cf:df:b1:bc: 70:69:6e:fc:e5:08:1a:6c:12:57:e3:4a:eb:1f:6d:c3:08:f9: eb:a2:d9:2f:2f:f7:f4:f2:dd:94:5b:3d:6a:5a:58:7e:9f:51: 5a:87:f1:50:16:ab:68:91:9e:23:20:50:94:d5:b2:d9:a8:d9: 89:99:32:50:5d:b5:1c:85:d9:63:4d:22:22:21:0a:b5:be:36: 98:f0:8e:12:45:c8:eb:ca:8c:27:2d:a7:b6:7c:43:f8:11:8d: 07:76:53:20:b2:2e:66:32:8f:79:e6:60:15:aa:46:68:31:82: c8:8f:d2:6a:19:dc:db:0f:f0:b1:41:a7:2a:11:e2:77:80:b6: d4:71:07:10:20:64:db:ac:22:6e:bf:3c:05:f5:cd:f6:57:a8: 1d:4f:84:27:bb:07:d3:ab:23:29:81:ff:25:01:59:8a:c3:35: 3d:1a:73:cf:af:38:c4:14:86:fe:64:03:e5:74:c7:4d:f7:e9: ea:74:c2:9b:70:23:61:6d:d1:fd:09:5a:96:01:43:a1:a0:df: 31:b0:33:d3:19:41:9c:22:a0:de:39:8a:b5:79:fc:15:73:8b: 7c:90:bb:8f:54:f5:fb:08:73:8e:0f:7b:8b:e9:fe:11:43:28: 20:45:84:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDawIAnRklRlObWvdvFkdD0s+6/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3 QTNDMUQ2NjAeFw0yNjA3MjQwNzQ0MDJaFw0yNjA3MjUxMTM4MDJaMDMxMTAvBgNV BAMTKDMyOEUyNkI4QjlDNTJGMUU4RDVBMThGMEZEREE0RDlBOUNDMzkwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFBYo+aa00ep0/cER1y8/bZw5 7UVV0Yh4zlVcvuuXhIsNQuJxRVEpcSHJZcMuhlLLGe7FHkVOWyUQqTaB/RHxFrs0 JvfHOjTH0WRw9qUAsqomw2FI285e2U1ZkLbRs4FY5ukmfyz2EOz8qRENq/gYh5pQ depdmhP7EBaJrdddsiI40Tqy70z1dBO3/hkbBPa21oZKSqBcFnjxPYOU+u9Xr1QT vQ7cL9Mb1daM6eM+dolMyrXMQRXsj4SaptVFhsbrDNzmE104ei9nrI/Q4Qg/RlBV zDyZJsz4m08BoODlqQmfbgEyJthlS71w/ViXdE+Yb2Trj0wcA+AIs481dZS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMo4muLnFLx6NWhjw/dpNmpzDkOkwHwYDVR0j BBgwFoAU8uGdtMniSR083kBj/vZuP3o8HWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFhNmE2N2QtY2JhMy00MjdiLTkwNTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRD OUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3QTNDMUQ2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkUxOURCNEM5RTI0OTFEM0NERTQwNjNGRUY2NkUzRjdBM0Mx RDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZF M0Y3QTNDMUQ2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhsF+7RqFtCLNtodcosz9+xvHBpbvzlCBps ElfjSusfbcMI+eui2S8v9/Ty3ZRbPWpaWH6fUVqH8VAWq2iRniMgUJTVstmo2YmZ MlBdtRyF2WNNIiIhCrW+NpjwjhJFyOvKjCctp7Z8Q/gRjQd2UyCyLmYyj3nmYBWq RmgxgsiP0moZ3NsP8LFBpyoR4neAttRxBxAgZNusIm6/PAX1zfZXqB1PhCe7B9Or IymB/yUBWYrDNT0ac8+vOMQUhv5kA+V0x0336ep0wptwI2Ft0f0JWpYBQ6Gg3zGw M9MZQZwioN45irV5/BVzi3yQu49U9fsIc44Pe4vp/hFDKCBFhBU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:45:28 2026 by rpki-client