$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json) Hash identifier: Yirm3HkAghj283chzj3EmAsJv7mZtnksy+2uFC/Y9po= Subject key identifier: AC:01:10:F7:63:1B:B6:F8:CD:12:01:D4:83:28:06:59:F6:3E:AD:22 Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Certificate serial: 563A2A1A3307BF27FE40A361F21CC121EB973AD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:01:54 +0000 Manifest this update: Thu 23 Jul 2026 21:56:54 +0000 Manifest next update: Fri 24 Jul 2026 22:16:54 +0000 Files and hashes: 1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=) 2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: 1S3a8hxU1uEhS995pouBTwsSNe5PE/IvC6MrBCCmnos=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3a:2a:1a:33:07:bf:27:fe:40:a3:61:f2:1c:c1:21:eb:97:3a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Validity Not Before: Jul 23 21:56:54 2026 GMT Not After : Jul 24 22:16:54 2026 GMT Subject: CN=AC0110F7631BB6F8CD1201D483280659F63EAD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:16:16:57:0c:90:b9:38:6d:41:81:67:3b: a1:6a:34:a5:ad:77:03:b4:0d:00:8c:81:40:dd:cb: 2e:f0:73:0f:f2:1a:bb:84:a2:34:97:24:90:2d:39: 66:74:4c:5d:76:49:bb:2b:80:04:b3:f8:30:e5:d2: 1d:26:cc:cc:06:c6:30:f5:a1:53:23:b8:c8:67:07: 02:aa:70:13:ec:92:7b:b5:4d:fa:cd:70:74:fd:ae: 65:b6:8c:a5:74:83:8f:85:17:13:06:0c:90:dc:bc: 85:8a:71:ee:fe:bd:2e:30:67:c0:cd:48:0b:76:80: ad:d0:ec:b2:68:02:a7:33:84:df:b1:04:9b:fc:9f: ba:bb:31:8e:dc:73:3b:34:3d:57:16:7b:c8:22:4e: 26:2c:de:fc:48:e1:e6:07:8a:6a:e5:8b:a8:97:11: be:77:82:7d:a3:e1:21:71:7d:f1:b9:40:9a:b5:b8: 42:d6:43:0c:73:50:3d:36:b7:01:94:4c:61:4c:95: b9:cf:df:82:82:9a:04:e2:45:d9:66:82:7a:4c:66: 92:19:96:2c:45:bc:01:cb:78:08:3f:f2:73:37:32: 1e:5c:73:37:40:3e:c5:9f:87:24:9f:96:99:c9:46: 8a:3b:23:b7:af:bb:5a:42:d7:a5:75:c0:ce:74:69: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:10:F7:63:1B:B6:F8:CD:12:01:D4:83:28:06:59:F6:3E:AD:22 X509v3 Authority Key Identifier: keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:a8:43:ef:ae:4d:43:f9:49:5e:f5:d8:57:85:fb:03:c0: b5:c4:de:63:c8:5e:8c:0c:84:7a:ff:d4:e5:1c:be:8d:f9:5c: f1:ce:4d:d6:ca:2b:31:9c:89:64:cc:bf:8c:ef:da:27:9c:0e: eb:38:96:10:73:8d:1c:0c:4d:c6:ac:1a:a9:e0:a0:81:1a:f6: d0:b8:ef:e0:97:e5:25:90:9f:c8:0b:c1:d6:2a:a7:38:8f:92: 70:8b:66:c3:da:6e:60:14:e9:5f:82:5e:14:5a:c6:13:1e:7c: ca:6f:e4:7a:61:d5:55:45:bc:da:93:d3:0c:94:c2:f6:5b:47: cc:d4:27:db:c9:1b:65:1a:d2:20:b7:ef:0f:bc:c8:76:c2:c7: f0:eb:10:a2:10:a7:27:4a:c2:21:fd:76:58:80:be:2f:41:ca: 83:fa:6f:48:04:41:17:17:e2:3b:4a:be:ae:7c:2b:1e:0a:f5: 21:11:07:16:27:54:30:e4:b5:d8:e1:8e:35:86:1f:9d:c9:5c: 52:66:22:74:72:77:54:ff:79:9d:d6:cb:b5:5b:b3:ad:60:4d: dc:98:9d:f3:97:ec:97:24:93:93:fe:18:f0:9f:9b:ab:42:5a: 10:f9:ea:6c:7c:8c:0b:bd:6b:63:84:7e:3d:71:b7:a9:a0:4e: 43:d9:52:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjoqGjMHvyf+QKNh8hzBIeuXOtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2 MTQzREJCQzAeFw0yNjA3MjMyMTU2NTRaFw0yNjA3MjQyMjE2NTRaMDMxMTAvBgNV BAMTKEFDMDExMEY3NjMxQkI2RjhDRDEyMDFENDgzMjgwNjU5RjYzRUFEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOxYWVwyQuThtQYFnO6FqNKWt dwO0DQCMgUDdyy7wcw/yGruEojSXJJAtOWZ0TF12SbsrgASz+DDl0h0mzMwGxjD1 oVMjuMhnBwKqcBPsknu1TfrNcHT9rmW2jKV0g4+FFxMGDJDcvIWKce7+vS4wZ8DN SAt2gK3Q7LJoAqczhN+xBJv8n7q7MY7cczs0PVcWe8giTiYs3vxI4eYHimrli6iX Eb53gn2j4SFxffG5QJq1uELWQwxzUD02twGUTGFMlbnP34KCmgTiRdlmgnpMZpIZ lixFvAHLeAg/8nM3Mh5cczdAPsWfhySflpnJRoo7I7evu1pC16V1wM50aWAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAEQ92MbtvjNEgHUgygGWfY+rSIwHwYDVR0j BBgwFoAU9CxbB2GD9KvanOh3BhE/0mFD27wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmRiMDEzMGQtY2FhMy00NzZmLWFmODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2 MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2MTQzREJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNDJDNUIwNzYxODNGNEFCREE5Q0U4NzcwNjExM0ZEMjYxNDNE QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNG RDI2MTQzREJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9YqEPvrk1D+Ule9dhXhfsDwLXE3mPIXowM hHr/1OUcvo35XPHOTdbKKzGciWTMv4zv2iecDus4lhBzjRwMTcasGqngoIEa9tC4 7+CX5SWQn8gLwdYqpziPknCLZsPabmAU6V+CXhRaxhMefMpv5Hph1VVFvNqT0wyU wvZbR8zUJ9vJG2Ua0iC37w+8yHbCx/DrEKIQpydKwiH9dliAvi9ByoP6b0gEQRcX 4jtKvq58Kx4K9SERBxYnVDDktdjhjjWGH53JXFJmInRyd1T/eZ3Wy7Vbs61gTdyY nfOX7Jckk5P+GPCfm6tCWhD56mx8jAu9a2OEfj1xt6mgTkPZUjc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:48 2026 by rpki-client