$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: kugnvkRwIOZElII3phx10Q1ybzvt1HZP8pOXsS5GyiI= Subject key identifier: C0:EC:A2:85:80:11:71:30:85:F5:E7:83:CA:22:F3:54:AE:AD:FE:BD Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 073E1C1D92EA2070740498D20C52BC206B793417 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 12:01:33 +0000 Manifest this update: Tue 28 Jul 2026 11:56:33 +0000 Manifest next update: Wed 29 Jul 2026 13:53:33 +0000 Files and hashes: 1: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: O5FSGsvGwzunkWzqtmg6FAj6iE4hUuXXfXXFRfMKG6k=) 2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) 3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3e:1c:1d:92:ea:20:70:74:04:98:d2:0c:52:bc:20:6b:79:34:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Jul 28 11:56:33 2026 GMT Not After : Jul 29 13:53:33 2026 GMT Subject: CN=C0ECA2858011713085F5E783CA22F354AEADFEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:e2:55:d6:05:81:a9:39:d3:05:ea:6f:21: 59:22:c7:43:85:37:09:3a:3a:56:9a:79:de:0f:90: 23:01:46:d7:57:a4:d5:f6:36:3d:2b:5f:a5:95:0a: 29:f3:bf:79:86:84:45:f5:65:e5:03:09:e6:b0:f6: 02:fa:e4:6c:b7:a8:25:09:86:93:b8:a2:93:c9:7b: 6e:6a:90:f7:8c:0d:f5:3a:90:b0:96:3a:9c:40:55: a2:98:69:a2:2a:a8:f4:73:d8:1e:98:7c:d7:3f:5a: 88:c5:26:02:36:db:05:a6:bc:a6:cb:2e:6d:8f:66: a3:e7:3d:95:0d:45:17:94:59:04:ff:53:35:3e:a0: db:be:6d:72:80:1f:09:d5:73:a7:71:82:23:bc:63: 40:91:17:72:a2:cd:bf:e8:99:74:3c:97:ac:ff:f1: a0:f5:4c:ca:f3:cc:3a:18:04:c5:ed:82:b3:45:0a: 4a:7b:d2:4e:d2:b0:46:5d:1f:9b:f3:96:c8:27:70: a9:7f:05:3d:3e:af:20:04:59:9c:6c:9e:9e:86:9b: 01:83:7e:58:73:66:54:4a:46:1a:e4:c1:66:56:26: fc:c4:fa:09:52:d4:b9:b6:d8:7a:df:fd:69:ed:a7: 7f:f4:91:f2:4b:fd:ce:9e:9d:47:02:84:0b:38:11: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EC:A2:85:80:11:71:30:85:F5:E7:83:CA:22:F3:54:AE:AD:FE:BD X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:19:2d:e8:25:38:9a:6a:6d:19:44:b7:8f:32:45:42:f0: 75:6e:0b:69:d7:c2:90:79:37:5f:ab:d3:44:d7:f3:3a:ec:0c: 49:6b:38:e7:fa:30:d9:ba:93:c4:f0:c9:57:10:06:f7:d3:2b: 08:70:08:4e:09:94:8f:85:9a:70:49:55:d7:2e:4a:1f:33:78: bd:5c:42:4b:f0:53:aa:e2:b0:1a:6d:42:a7:cd:8a:9a:b3:ed: e0:40:34:11:5d:18:ba:1f:5b:2c:4b:a5:bf:be:1c:ec:38:be: c3:d0:13:49:c3:9a:36:8c:82:d7:74:8a:e5:31:45:93:58:12: ff:d4:89:ce:18:00:3b:06:d3:9b:e2:77:c7:a0:71:0a:30:54: cc:7f:82:21:1c:26:d8:0c:f9:21:75:e6:a3:43:a1:8a:e2:ea: b9:7d:d2:dd:94:42:2b:87:9e:1f:63:2e:19:4c:b6:17:10:cc: 56:c1:d4:98:bc:34:c3:91:12:70:b7:61:da:d2:96:f1:ac:fe: ed:f5:36:22:82:f6:1a:d3:ef:a7:22:f2:94:37:06:b3:91:53: ae:b6:15:a1:54:4b:56:4f:08:f5:5d:ad:50:11:fd:50:4c:52: 9f:f7:1a:dc:ee:c6:8d:27:55:31:08:f5:06:c6:1e:29:f3:6d: 92:63:f5:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBz4cHZLqIHB0BJjSDFK8IGt5NBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA3MjgxMTU2MzNaFw0yNjA3MjkxMzUzMzNaMDMxMTAvBgNV BAMTKEMwRUNBMjg1ODAxMTcxMzA4NUY1RTc4M0NBMjJGMzU0QUVBREZFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFreJV1gWBqTnTBepvIVkix0OF Nwk6Olaaed4PkCMBRtdXpNX2Nj0rX6WVCinzv3mGhEX1ZeUDCeaw9gL65Gy3qCUJ hpO4opPJe25qkPeMDfU6kLCWOpxAVaKYaaIqqPRz2B6YfNc/WojFJgI22wWmvKbL Lm2PZqPnPZUNRReUWQT/UzU+oNu+bXKAHwnVc6dxgiO8Y0CRF3Kizb/omXQ8l6z/ 8aD1TMrzzDoYBMXtgrNFCkp70k7SsEZdH5vzlsgncKl/BT0+ryAEWZxsnp6GmwGD flhzZlRKRhrkwWZWJvzE+glS1Lm22Hrf/Wntp3/0kfJL/c6enUcChAs4EXBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOyihYARcTCF9eeDyiLzVK6t/r0wHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkpGS3oJTiaam0ZRLePMkVC8HVuC2nXwpB5 N1+r00TX8zrsDElrOOf6MNm6k8TwyVcQBvfTKwhwCE4JlI+FmnBJVdcuSh8zeL1c QkvwU6risBptQqfNipqz7eBANBFdGLofWyxLpb++HOw4vsPQE0nDmjaMgtd0iuUx RZNYEv/Uic4YADsG05vid8egcQowVMx/giEcJtgM+SF15qNDoYri6rl90t2UQiuH nh9jLhlMthcQzFbB1Ji8NMOREnC3YdrSlvGs/u31NiKC9hrT76ci8pQ3BrORU662 FaFUS1ZPCPVdrVAR/VBMUp/3Gtzuxo0nVTEI9QbGHinzbZJj9bs= -----END CERTIFICATE-----Generated at Wed Jul 29 07:37:20 2026 by rpki-client