$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: XlsdFyvlss8bocNppk3q/3ImHMWpCo95aVszz+eYfQU= Subject key identifier: 76:D9:45:7F:89:BC:E0:2B:46:9F:2A:78:4F:7C:B2:C1:1C:E6:C4:C2 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 02B5EB5CDF6C59B69C5288F0661092A1C5C36777 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 03:15:00 +0000 Manifest this update: Wed 29 Jul 2026 03:10:00 +0000 Manifest next update: Thu 30 Jul 2026 05:31:00 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) 3: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: oVSeEW/UrT4uLXqezLtmrXL0fjhLO4i31tGdM6RhHM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b5:eb:5c:df:6c:59:b6:9c:52:88:f0:66:10:92:a1:c5:c3:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Jul 29 03:10:00 2026 GMT Not After : Jul 30 05:31:00 2026 GMT Subject: CN=76D9457F89BCE02B469F2A784F7CB2C11CE6C4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:37:0a:03:cd:44:11:59:f5:14:7d:13:3a: 0e:e4:6f:31:cd:47:08:2d:42:16:17:6a:eb:35:93: 58:87:4f:66:94:ad:13:db:64:06:b2:f1:b0:ce:f0: b6:11:90:c3:46:6d:45:74:d5:28:43:2e:b4:57:13: 03:55:2d:9b:76:11:64:b7:35:47:89:93:81:5b:78: 9e:3a:19:b2:5f:d4:c0:e2:d1:8e:b4:93:8f:c9:9c: a8:20:c0:b7:f5:0f:c3:f1:34:ea:00:b5:5b:5c:8b: 8f:cf:72:17:71:6b:c7:63:30:d8:a4:e3:51:42:2d: 9f:b9:ed:8e:70:ef:21:f4:be:5c:fd:b9:10:dd:49: a5:aa:7b:e3:dc:67:9d:fd:12:15:c9:1c:02:e2:34: 08:86:05:c0:c0:8d:75:56:2d:2b:7d:d9:3f:01:1d: d2:52:e0:5c:c3:3b:0e:87:a3:17:5c:99:1d:48:97: d8:ae:43:7e:8b:5f:6f:f7:f7:e1:2f:39:a9:3d:c0: 09:30:c3:26:1e:45:a8:a3:28:c7:05:77:e6:62:a0: 27:d5:52:c3:7e:65:92:4f:3b:6f:2c:ca:b2:3f:d8: 96:59:94:c8:c7:b7:f0:e5:8c:de:63:b5:cf:29:de: 10:83:56:2d:03:31:ea:e0:6c:dd:43:05:73:5b:51: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:45:7F:89:BC:E0:2B:46:9F:2A:78:4F:7C:B2:C1:1C:E6:C4:C2 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4d:5e:08:06:19:d1:cf:26:14:1b:1f:4b:12:7f:a4:ba:12: a4:63:75:31:db:92:71:3f:98:1c:9d:47:34:d6:7a:29:47:8b: a3:5c:66:a5:9c:3c:fc:86:dc:6b:e2:37:ae:88:07:dd:9b:d5: 5a:bc:0a:a5:aa:0d:23:94:2b:c3:5a:07:bf:79:97:22:ed:a9: 74:ad:ac:7b:5e:b9:cc:96:71:c8:67:07:6d:26:05:1d:15:f7: db:c1:0b:41:5f:38:90:fb:bf:fb:f0:05:87:34:97:eb:9b:ac: b8:1f:9e:f7:2f:75:e1:00:93:2b:85:8a:ac:16:d6:9e:db:78: 30:26:a9:c7:2f:e9:5a:e0:1b:7d:01:97:ee:40:65:b1:21:4e: e5:64:a0:50:5d:8a:74:37:53:7f:36:7f:71:ff:9c:f7:fe:b5: 0a:3d:6e:c8:59:a3:d6:43:23:64:f0:59:eb:c2:67:8a:ed:37: 91:c9:53:34:f3:46:ec:ab:b5:76:b4:23:44:d7:41:e1:47:28: 53:95:a8:86:a3:0a:c0:9a:89:41:2a:c8:74:7a:92:f2:76:fd: bc:10:45:a6:2a:55:18:43:b3:b3:31:81:9e:49:ff:54:c6:4c: 57:9a:df:8d:9f:b6:6a:d2:9a:96:eb:37:da:38:c5:20:7f:8a: 66:6f:9e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArXrXN9sWbacUojwZhCSocXDZ3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA3MjkwMzEwMDBaFw0yNjA3MzAwNTMxMDBaMDMxMTAvBgNV BAMTKDc2RDk0NTdGODlCQ0UwMkI0NjlGMkE3ODRGN0NCMkMxMUNFNkM0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTzcKA81EEVn1FH0TOg7kbzHN RwgtQhYXaus1k1iHT2aUrRPbZAay8bDO8LYRkMNGbUV01ShDLrRXEwNVLZt2EWS3 NUeJk4FbeJ46GbJf1MDi0Y60k4/JnKggwLf1D8PxNOoAtVtci4/Pchdxa8djMNik 41FCLZ+57Y5w7yH0vlz9uRDdSaWqe+PcZ539EhXJHALiNAiGBcDAjXVWLSt92T8B HdJS4FzDOw6HoxdcmR1Il9iuQ36LX2/39+EvOak9wAkwwyYeRaijKMcFd+ZioCfV UsN+ZZJPO28syrI/2JZZlMjHt/DljN5jtc8p3hCDVi0DMergbN1DBXNbUZRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtlFf4m84CtGnyp4T3yywRzmxMIwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdNXggGGdHPJhQbH0sSf6S6EqRjdTHbknE/ mBydRzTWeilHi6NcZqWcPPyG3GviN66IB92b1Vq8CqWqDSOUK8NaB795lyLtqXSt rHteucyWcchnB20mBR0V99vBC0FfOJD7v/vwBYc0l+ubrLgfnvcvdeEAkyuFiqwW 1p7beDAmqccv6VrgG30Bl+5AZbEhTuVkoFBdinQ3U382f3H/nPf+tQo9bshZo9ZD I2TwWevCZ4rtN5HJUzTzRuyrtXa0I0TXQeFHKFOVqIajCsCaiUEqyHR6kvJ2/bwQ RaYqVRhDs7MxgZ5J/1TGTFea342ftmrSmpbrN9o4xSB/imZvnkY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:27:26 2026 by rpki-client