$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: 9voRqfHbCcfMP6osNmc8GDG7WPUyPv0pxTQnT8+quog= Subject key identifier: C2:A0:EB:9E:4E:B8:D5:9B:A4:7A:F0:76:AB:92:A9:8B:CA:12:2D:DB Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 0DF10AE4985AADECDA0CCE86863A1AAAFE387FF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 02:34:14 +0000 Manifest this update: Wed 29 Jul 2026 02:29:14 +0000 Manifest next update: Thu 30 Jul 2026 04:50:14 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 2: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 3: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: DYX4fbEJw7EbDegpIAc1lZmafMkoU76BROmRawQuc10=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:0a:e4:98:5a:ad:ec:da:0c:ce:86:86:3a:1a:aa:fe:38:7f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Jul 29 02:29:14 2026 GMT Not After : Jul 30 04:50:14 2026 GMT Subject: CN=C2A0EB9E4EB8D59BA47AF076AB92A98BCA122DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:a5:13:9d:46:02:94:b3:ea:65:94:c2:27: f4:a9:41:2d:ae:84:7e:f4:53:f0:f7:d0:0e:cd:d0: 9f:98:9d:bb:5c:65:84:cb:90:3f:80:db:40:bd:33: 68:fa:45:df:37:15:e4:93:6d:5e:72:ca:43:f8:be: 4e:47:75:52:52:3b:da:e0:09:1d:4d:ce:e5:33:ec: 3d:f4:b0:1a:21:ba:43:77:cb:57:86:20:0f:80:b8: c8:a7:8e:79:6e:5c:08:a9:7a:5e:8c:c9:bd:5b:d6: c0:6e:b1:8b:b3:17:d5:d9:b6:66:c3:8d:b8:cd:b5: d4:1d:77:45:1f:89:11:b3:52:40:99:5d:b4:29:46: 15:85:22:a3:1d:85:28:88:53:d3:90:13:f7:fb:38: e1:03:69:1a:21:73:b1:7a:08:d9:5f:18:e0:87:14: 00:0b:0b:c8:74:b8:1d:a3:95:fb:b4:6d:a4:8d:8c: 86:a4:ad:33:f0:27:74:30:e1:ca:f8:3c:68:1d:11: 61:c1:d8:f9:0e:bb:94:7e:54:b3:2d:2c:07:12:2f: ec:bc:f9:75:4f:21:53:e9:a3:4b:0e:8c:a1:a5:33: 52:b3:f9:79:aa:3b:5d:82:ec:78:13:c4:99:f1:29: aa:4a:27:6a:50:2a:8a:6a:0d:d0:3a:ea:25:22:ba: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A0:EB:9E:4E:B8:D5:9B:A4:7A:F0:76:AB:92:A9:8B:CA:12:2D:DB X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:9a:9c:81:d9:05:72:d1:d0:4b:4f:9c:66:70:66:04:6e:27: c8:f9:fa:42:f3:06:58:a1:14:b1:98:c3:04:14:47:64:dd:88: d4:59:e5:95:24:7d:21:9b:a4:fe:29:57:0d:38:47:4f:72:16: 70:a1:aa:4e:2a:dc:e3:6f:86:1d:14:f9:f1:af:cc:bc:09:b4: 8f:c5:db:84:fd:d7:74:93:c1:1e:b6:b7:fb:4c:c9:d9:fc:47: cb:01:46:23:98:39:0e:7a:ec:fd:72:39:85:b5:3c:0f:d5:69: 6e:f1:b1:8b:2f:ba:a6:ad:2c:45:f7:b7:ac:f9:e0:fe:d0:bf: 59:f8:fa:5e:61:44:41:e1:eb:29:b9:d9:a8:c4:ea:2a:23:fd: 08:85:a8:81:c4:3a:46:03:e8:5d:1c:8d:b8:63:12:e9:8b:4f: 63:3e:73:e6:16:2b:5a:7e:23:05:eb:5c:77:92:23:56:28:c5: 98:e2:d9:ba:2f:d9:dc:b2:4e:08:92:21:ae:13:c7:74:05:af: 07:73:ad:91:d7:be:33:49:d0:ff:30:9d:43:94:fd:9a:ca:d6: 55:df:42:34:48:bc:eb:0c:7f:86:4b:fc:36:70:f3:4e:66:c4: 15:5d:67:fa:31:67:dd:6a:c5:44:20:c9:05:2f:c5:36:da:e4: 5d:80:48:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfEK5JharezaDM6Ghjoaqv44f/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA3MjkwMjI5MTRaFw0yNjA3MzAwNDUwMTRaMDMxMTAvBgNV BAMTKEMyQTBFQjlFNEVCOEQ1OUJBNDdBRjA3NkFCOTJBOThCQ0ExMjJEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+6UTnUYClLPqZZTCJ/SpQS2u hH70U/D30A7N0J+YnbtcZYTLkD+A20C9M2j6Rd83FeSTbV5yykP4vk5HdVJSO9rg CR1NzuUz7D30sBohukN3y1eGIA+AuMinjnluXAipel6Myb1b1sBusYuzF9XZtmbD jbjNtdQdd0UfiRGzUkCZXbQpRhWFIqMdhSiIU9OQE/f7OOEDaRohc7F6CNlfGOCH FAALC8h0uB2jlfu0baSNjIakrTPwJ3Qw4cr4PGgdEWHB2PkOu5R+VLMtLAcSL+y8 +XVPIVPpo0sOjKGlM1Kz+XmqO12C7HgTxJnxKapKJ2pQKopqDdA66iUiuiL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqDrnk641ZukevB2q5Kpi8oSLdswHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyanIHZBXLR0EtPnGZwZgRuJ8j5+kLzBlih FLGYwwQUR2TdiNRZ5ZUkfSGbpP4pVw04R09yFnChqk4q3ONvhh0U+fGvzLwJtI/F 24T913STwR62t/tMydn8R8sBRiOYOQ567P1yOYW1PA/VaW7xsYsvuqatLEX3t6z5 4P7Qv1n4+l5hREHh6ym52ajE6ioj/QiFqIHEOkYD6F0cjbhjEumLT2M+c+YWK1p+ IwXrXHeSI1YoxZji2bov2dyyTgiSIa4Tx3QFrwdzrZHXvjNJ0P8wnUOU/ZrK1lXf QjRIvOsMf4ZL/DZw805mxBVdZ/oxZ91qxUQgyQUvxTba5F2ASP4= -----END CERTIFICATE-----Generated at Wed Jul 29 07:04:37 2026 by rpki-client