$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: hvDNKeMdpNX8bYrt+k4J9aC5gBKXMPoJGGoe7tV8xfA= Subject key identifier: 65:5B:CF:57:CC:A6:3C:E6:BF:D8:41:A7:5B:71:74:11:77:B1:BE:47 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 6D9C9D69E44C642AF3BD00B3F1205E42B1075369 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 16:52:33 +0000 Manifest this update: Tue 28 Jul 2026 16:47:33 +0000 Manifest next update: Wed 29 Jul 2026 18:30:33 +0000 Files and hashes: 1: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: KOpH5oR6F4Qi5ARR/JvwM/aE7hn73AUi/OzOZs2xA7w=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9c:9d:69:e4:4c:64:2a:f3:bd:00:b3:f1:20:5e:42:b1:07:53:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: Jul 28 16:47:33 2026 GMT Not After : Jul 29 18:30:33 2026 GMT Subject: CN=655BCF57CCA63CE6BFD841A75B71741177B1BE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:5a:43:fd:ec:52:e0:c6:3e:45:fb:2f:e0: 0c:21:b2:1f:a6:71:fd:82:6a:e4:e9:e2:54:63:e8: c9:2f:cd:5b:22:31:91:95:91:25:02:55:2b:7e:32: 3d:8d:28:fa:8d:53:f5:d4:87:4a:ac:db:ff:ea:cb: 0a:85:03:4e:21:dc:8b:d4:e4:4c:94:f1:23:47:42: 9b:cd:69:2a:9e:8f:8b:fd:32:cd:da:b5:98:f0:c2: 6e:88:6f:ef:df:1a:f8:d8:46:4e:5f:87:e4:db:cf: 34:de:f5:ac:f4:27:04:f3:5f:df:08:f9:40:28:38: e6:d0:63:f1:a1:0f:2d:d2:3a:78:ef:4c:04:c6:94: 20:9a:07:bf:45:04:28:c0:2e:a8:e9:49:58:4f:57: ff:8f:80:dd:90:55:48:65:2d:2e:42:56:e5:68:f9: ba:4b:e1:b7:11:f3:c0:e8:46:02:df:8d:96:55:73: 88:3c:1f:37:31:b4:42:e8:cc:88:d3:d2:2c:c0:6c: c2:dc:61:60:b8:81:99:dd:e3:c9:78:f2:1f:68:77: 72:ab:0d:21:48:7c:fc:51:41:25:39:15:e9:70:4b: 76:db:9c:1e:d2:28:7d:78:3c:aa:16:b7:d7:0d:ee: 91:e2:84:60:58:5a:17:c0:7f:57:a7:cb:d4:c9:68: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5B:CF:57:CC:A6:3C:E6:BF:D8:41:A7:5B:71:74:11:77:B1:BE:47 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:b3:13:53:fa:bc:56:f0:4f:83:01:fb:75:63:ad:dc:b7: b6:96:6b:6a:b2:cf:c3:0f:0a:c7:8f:c6:0d:75:e1:75:36:9c: 75:fa:08:81:6b:a4:c0:91:c1:37:16:7f:13:9f:72:47:cf:17: e3:0d:61:bb:34:15:0b:a3:65:a3:fa:23:61:c4:06:19:b9:03: 0b:60:92:45:4b:29:e5:f9:7b:c3:39:b8:60:f1:68:15:a1:25: cd:dd:42:42:93:48:54:ed:e1:18:a5:db:09:07:b9:73:90:6b: 1f:10:77:8b:1d:a1:9b:72:c3:33:53:b9:a7:bf:94:03:88:c0: 66:2c:fc:7e:6b:fe:bc:27:ac:2c:91:15:09:6b:6e:5f:ce:1a: 26:95:d0:ea:31:6b:b5:2e:c4:5a:67:e8:33:0c:14:b6:d3:55: 21:e2:b5:09:c9:b8:03:49:e7:ff:7c:35:c5:69:96:bd:27:0c: 1c:f5:92:2f:14:18:43:3b:76:94:89:82:0c:69:1a:ef:18:58: 7f:f4:6a:49:03:d2:42:36:8e:f7:57:89:c9:94:e4:f3:16:72: dd:c6:69:e7:cd:dc:74:f9:b8:4a:aa:ac:09:e0:fb:8c:f8:63: 42:d3:19:55:f9:71:64:f2:03:d3:54:43:90:fe:fa:45:fb:3d: bd:da:3e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZydaeRMZCrzvQCz8SBeQrEHU2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA3MjgxNjQ3MzNaFw0yNjA3MjkxODMwMzNaMDMxMTAvBgNV BAMTKDY1NUJDRjU3Q0NBNjNDRTZCRkQ4NDFBNzVCNzE3NDExNzdCMUJFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiFpD/exS4MY+Rfsv4Awhsh+m cf2CauTp4lRj6MkvzVsiMZGVkSUCVSt+Mj2NKPqNU/XUh0qs2//qywqFA04h3IvU 5EyU8SNHQpvNaSqej4v9Ms3atZjwwm6Ib+/fGvjYRk5fh+TbzzTe9az0JwTzX98I +UAoOObQY/GhDy3SOnjvTATGlCCaB79FBCjALqjpSVhPV/+PgN2QVUhlLS5CVuVo +bpL4bcR88DoRgLfjZZVc4g8HzcxtELozIjT0izAbMLcYWC4gZnd48l48h9od3Kr DSFIfPxRQSU5FelwS3bbnB7SKH14PKoWt9cN7pHihGBYWhfAf1eny9TJaGstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVvPV8ymPOa/2EGnW3F0EXexvkcwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq8sxNT+rxW8E+DAft1Y63ct7aWa2qyz8MP CsePxg114XU2nHX6CIFrpMCRwTcWfxOfckfPF+MNYbs0FQujZaP6I2HEBhm5Awtg kkVLKeX5e8M5uGDxaBWhJc3dQkKTSFTt4Ril2wkHuXOQax8Qd4sdoZtywzNTuae/ lAOIwGYs/H5r/rwnrCyRFQlrbl/OGiaV0Ooxa7UuxFpn6DMMFLbTVSHitQnJuANJ 5/98NcVplr0nDBz1ki8UGEM7dpSJggxpGu8YWH/0akkD0kI2jvdXicmU5PMWct3G aefN3HT5uEqqrAng+4z4Y0LTGVX5cWTyA9NUQ5D++kX7Pb3aPj4= -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:10 2026 by rpki-client