$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: Yz0CYIYT8UKX/USY06oJGGVihURXD8s7aa+Zh8U7PKw= Subject key identifier: 02:A4:92:52:F0:D4:79:8D:03:9A:69:72:9B:AB:5F:D3:4A:1F:BF:CE Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 3BB77B58FEDA6B8305A8763E8F2ADF86C9B22A2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:48:40 +0000 Manifest this update: Tue 28 Jul 2026 17:43:40 +0000 Manifest next update: Wed 29 Jul 2026 19:03:40 +0000 Files and hashes: 1: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: tuP/5xk0DgD+lc4jWNH/ihCixb0rzD96XTJXokWxY9o=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:7b:58:fe:da:6b:83:05:a8:76:3e:8f:2a:df:86:c9:b2:2a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Jul 28 17:43:40 2026 GMT Not After : Jul 29 19:03:40 2026 GMT Subject: CN=02A49252F0D4798D039A69729BAB5FD34A1FBFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:53:af:7a:59:68:d5:8e:d6:3e:28:dc:2d: c1:94:22:93:8c:7d:d1:63:86:0d:85:12:73:7f:69: 43:59:65:98:1f:4a:56:2c:ad:61:14:98:9d:30:db: 21:31:8d:10:bb:19:ac:c4:13:c8:2d:da:2f:d4:ab: 9c:cb:c5:de:da:0d:77:18:b9:8f:39:aa:03:10:f8: 4e:61:63:3c:bf:ed:0f:87:1d:18:4f:95:14:57:24: eb:8b:9c:c6:d2:ab:2b:8a:22:2e:f7:0e:be:81:54: a9:57:ec:b8:4c:55:1d:41:b6:73:6d:56:f4:b9:ca: 90:be:e8:e5:b6:f6:1f:22:c5:7e:f1:4e:0d:22:72: e3:e0:a4:7d:bc:43:10:f7:fc:c6:12:ea:d1:94:e2: a6:72:e2:b0:c5:fb:ac:56:49:6c:9a:7d:82:da:ed: 0a:29:f4:39:f9:fc:5b:d9:c7:ce:bb:75:7d:95:36: ba:8b:05:eb:4d:1d:81:6f:91:66:89:f6:61:ae:a9: d2:6e:92:35:93:cf:12:b2:a1:16:82:8c:79:66:f3: 9f:6f:a3:57:fc:d0:6c:56:8f:cd:1e:29:64:56:32: 9f:c8:20:bd:24:01:ac:f6:0d:b0:1a:6e:48:e0:31: 48:08:1f:a6:f3:22:28:7f:9f:d4:e8:2b:45:b6:2b: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A4:92:52:F0:D4:79:8D:03:9A:69:72:9B:AB:5F:D3:4A:1F:BF:CE X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0a:00:6c:ee:40:35:50:5f:40:20:d3:c9:69:ea:0e:74:37: 8a:9d:2e:1a:30:8d:b1:d2:0b:bd:27:ba:79:b7:7e:9c:39:8f: cb:73:23:d2:53:43:2a:34:ae:33:2b:89:40:1f:6f:64:e7:3d: 18:7e:0b:0e:3b:c4:a0:26:23:85:df:c7:83:74:00:0b:20:2f: 0c:7a:0d:6f:7b:cc:08:8c:b7:be:b5:37:02:db:ef:f4:63:1f: cc:ff:86:fc:f8:33:0a:cb:e8:bc:d3:7a:c2:4e:71:81:46:b2: ef:a1:da:52:3f:0e:57:16:cd:39:88:19:73:06:7f:14:a5:a2: 4e:4d:7c:22:33:2f:a3:f8:ce:d0:73:f9:8b:f0:4e:be:1c:b1: c0:55:4a:f4:23:55:f7:0b:29:16:5f:f1:a1:77:07:53:ef:90: f8:7c:bf:76:88:d0:89:db:8b:33:70:17:aa:83:5c:ee:14:d0: 61:17:9c:db:79:74:0f:6f:fe:61:e8:44:87:12:ad:68:ce:74: 4b:15:67:b0:c9:2d:22:e5:b3:4d:bb:0e:9e:fc:b7:8f:e3:17: 38:dd:d0:c9:e2:c6:18:d8:d5:c2:db:ff:39:21:1c:5b:19:53: 55:5e:d3:37:b6:20:96:f2:b2:22:43:0d:f9:fc:76:1d:94:50: a8:2f:0e:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7d7WP7aa4MFqHY+jyrfhsmyKiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA3MjgxNzQzNDBaFw0yNjA3MjkxOTAzNDBaMDMxMTAvBgNV BAMTKDAyQTQ5MjUyRjBENDc5OEQwMzlBNjk3MjlCQUI1RkQzNEExRkJGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj1Ovello1Y7WPijcLcGUIpOM fdFjhg2FEnN/aUNZZZgfSlYsrWEUmJ0w2yExjRC7GazEE8gt2i/Uq5zLxd7aDXcY uY85qgMQ+E5hYzy/7Q+HHRhPlRRXJOuLnMbSqyuKIi73Dr6BVKlX7LhMVR1BtnNt VvS5ypC+6OW29h8ixX7xTg0icuPgpH28QxD3/MYS6tGU4qZy4rDF+6xWSWyafYLa 7Qop9Dn5/FvZx867dX2VNrqLBetNHYFvkWaJ9mGuqdJukjWTzxKyoRaCjHlm859v o1f80GxWj80eKWRWMp/IIL0kAaz2DbAabkjgMUgIH6bzIih/n9ToK0W2KwvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqSSUvDUeY0Dmmlym6tf00ofv84wHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoKAGzuQDVQX0Ag08lp6g50N4qdLhowjbHS C70nunm3fpw5j8tzI9JTQyo0rjMriUAfb2TnPRh+Cw47xKAmI4Xfx4N0AAsgLwx6 DW97zAiMt761NwLb7/RjH8z/hvz4MwrL6LzTesJOcYFGsu+h2lI/DlcWzTmIGXMG fxSlok5NfCIzL6P4ztBz+YvwTr4cscBVSvQjVfcLKRZf8aF3B1PvkPh8v3aI0Inb izNwF6qDXO4U0GEXnNt5dA9v/mHoRIcSrWjOdEsVZ7DJLSLls027Dp78t4/jFzjd 0MnixhjY1cLb/zkhHFsZU1Ve0ze2IJbysiJDDfn8dh2UUKgvDms= -----END CERTIFICATE-----Generated at Wed Jul 29 02:21:45 2026 by rpki-client