$ rpki-client -vvf rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft File: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft (raw, json) Hash identifier: oKD3Z8FYhTuL/q87WNwX35OoT4xLzqBaJN8yWi4XLo8= Subject key identifier: 08:AF:38:88:8C:E8:DB:C9:45:FE:8E:18:BC:C1:FB:9D:85:2E:A9:3B Authority key identifier: B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B Certificate issuer: /CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Certificate serial: 0FAC5BF2F3E0F3873A1920BBBDFED0A44EA5FB7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:12:46 +0000 Manifest this update: Tue 28 Jul 2026 21:07:46 +0000 Manifest next update: Wed 29 Jul 2026 23:57:46 +0000 Files and hashes: 1: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl (hash: cdqyIsmbooWdfIbrZojUrv+AsN1iOwqhjhssUEXR5nM=) 2: 3130332e3231332e3233312e302f32342d3234203d3e20313339393439.roa (hash: 3WYXT0bkqeQjsqbaJ4MScxou4zOpVNziugI00uOfe0Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ac:5b:f2:f3:e0:f3:87:3a:19:20:bb:bd:fe:d0:a4:4e:a5:fb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Validity Not Before: Jul 28 21:07:46 2026 GMT Not After : Jul 29 23:57:46 2026 GMT Subject: CN=08AF38888CE8DBC945FE8E18BCC1FB9D852EA93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:a5:1f:e3:fd:3e:b3:84:81:dd:fd:83:a0: 0d:f8:f0:c8:22:12:f2:dd:d1:71:a1:f2:c1:de:67: 19:60:46:c5:13:5c:ec:5c:53:47:90:4d:c1:56:1b: 6e:e7:69:09:60:9f:a2:b4:65:51:97:c6:3a:d2:e5: 57:e8:2e:d7:ec:d1:23:af:87:af:cc:a5:29:1e:60: eb:2e:d0:cd:5b:fc:b3:da:f7:df:87:c2:a9:f6:68: b9:78:bf:38:cd:ae:5f:a4:c6:81:68:34:48:e5:98: 64:1d:01:06:0b:89:f3:d2:ab:23:40:41:42:c6:fc: e2:80:86:a4:a7:be:ec:90:9d:69:7a:9e:c3:a1:d1: f4:ba:0b:83:6d:bf:9b:06:20:43:22:87:bd:49:28: f7:70:61:19:fa:af:84:c5:57:f7:e6:fa:b2:c2:44: a3:b1:41:fb:6e:57:85:bc:3b:02:e0:08:27:17:f3: f1:8e:28:61:1e:09:fb:bb:fd:45:c4:98:81:c9:4d: 48:bd:66:83:2c:66:8e:1a:1d:b2:02:c0:89:bf:38: 84:f4:0e:93:03:03:e6:51:d8:b2:1b:66:05:fe:6e: 77:37:2f:2f:1c:7a:b0:b9:bf:86:e4:93:56:45:04: 60:9d:28:b5:0f:7a:2c:d4:59:56:a5:b3:26:4b:4f: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:38:88:8C:E8:DB:C9:45:FE:8E:18:BC:C1:FB:9D:85:2E:A9:3B X509v3 Authority Key Identifier: keyid:B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a0:7d:58:d8:79:52:43:01:b5:03:2b:b5:33:2e:63:93:d4: 87:0b:87:97:c4:00:e6:30:c8:87:05:1f:f7:5e:c9:6c:ed:67: b7:8d:a8:5c:71:c7:5b:30:98:6a:9e:4c:29:c9:d2:aa:17:54: ff:5f:96:59:8b:11:be:21:de:e7:51:b7:7d:56:2c:52:2a:c6: 60:0b:dd:b9:5b:4a:23:37:bf:2f:50:c8:45:94:e9:af:06:76: 73:58:d4:6f:d6:5e:41:d9:cb:b4:ce:16:9f:0f:c4:a9:77:d5: a7:ee:a1:d7:8d:98:88:d6:7c:25:b2:fe:10:15:95:94:2d:87: 3a:b2:ee:2d:9a:18:20:2f:72:cb:26:21:ba:12:2e:f6:d3:41: 50:ba:48:8f:87:5e:b2:e5:82:59:b5:28:fa:ef:1d:bf:1a:47: da:d1:11:37:c7:78:b8:c9:53:14:cb:b1:3d:1e:cc:e3:37:aa: d2:7e:5f:4b:01:aa:c8:3e:30:4b:dc:8a:cc:c0:26:53:1d:f9: 37:ce:04:0f:b9:28:15:06:c4:f7:2a:b2:11:98:c1:04:8d:7b: 19:1d:e4:e7:66:89:49:4f:28:2e:c8:5b:ff:a9:65:c8:89:90: 02:aa:83:d4:11:91:af:50:72:97:3b:76:b8:ca:b8:25:eb:6f: be:89:0c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6xb8vPg84c6GSC7vf7QpE6l+3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRD QTg5QTI5QjAeFw0yNjA3MjgyMTA3NDZaFw0yNjA3MjkyMzU3NDZaMDMxMTAvBgNV BAMTKDA4QUYzODg4OENFOERCQzk0NUZFOEUxOEJDQzFGQjlEODUyRUE5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l6Uf4/0+s4SB3f2DoA348Mgi EvLd0XGh8sHeZxlgRsUTXOxcU0eQTcFWG27naQlgn6K0ZVGXxjrS5VfoLtfs0SOv h6/MpSkeYOsu0M1b/LPa99+Hwqn2aLl4vzjNrl+kxoFoNEjlmGQdAQYLifPSqyNA QULG/OKAhqSnvuyQnWl6nsOh0fS6C4Ntv5sGIEMih71JKPdwYRn6r4TFV/fm+rLC RKOxQftuV4W8OwLgCCcX8/GOKGEeCfu7/UXEmIHJTUi9ZoMsZo4aHbICwIm/OIT0 DpMDA+ZR2LIbZgX+bnc3Ly8cerC5v4bkk1ZFBGCdKLUPeizUWValsyZLT7FXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCK84iIzo28lF/o4YvMH7nYUuqTswHwYDVR0j BBgwFoAUsQPLPJ8gRb1HWm/t0jmubcqJopswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIyOTJiYTgtYWQxYS00MTM5LThjMjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5 RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRDQTg5QTI5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTAzQ0IzQzlGMjA0NUJENDc1QTZGRUREMjM5QUU2RENBODlB MjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFF NkRDQTg5QTI5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWgfVjYeVJDAbUDK7UzLmOT1IcLh5fEAOYw yIcFH/deyWztZ7eNqFxxx1swmGqeTCnJ0qoXVP9fllmLEb4h3udRt31WLFIqxmAL 3blbSiM3vy9QyEWU6a8GdnNY1G/WXkHZy7TOFp8PxKl31afuodeNmIjWfCWy/hAV lZQthzqy7i2aGCAvcssmIboSLvbTQVC6SI+HXrLlglm1KPrvHb8aR9rRETfHeLjJ UxTLsT0ezOM3qtJ+X0sBqsg+MEvciszAJlMd+TfOBA+5KBUGxPcqshGYwQSNexkd 5OdmiUlPKC7IW/+pZciJkAKqg9QRka9Qcpc7drjKuCXrb76JDHQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:04:36 2026 by rpki-client