$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: 8W3UpXY64pCOTxJ7pJH4CaBQWBjUFS87ajw243Eg4Nc= Subject key identifier: 0E:BE:FC:CF:02:99:5F:C2:A2:A1:DF:DD:B1:50:6E:93:0A:F1:BF:B7 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 47B5053AB4BBAB68E85CE25DF86EB8776B0192B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:00:01 +0000 Manifest this update: Tue 28 Jul 2026 14:55:01 +0000 Manifest next update: Wed 29 Jul 2026 17:48:01 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 2: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 7: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: HMvC66TI71QszZ5lksTK1v8nG7guXeqKxa9Wi3aaEE8=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b5:05:3a:b4:bb:ab:68:e8:5c:e2:5d:f8:6e:b8:77:6b:01:92:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Jul 28 14:55:01 2026 GMT Not After : Jul 29 17:48:01 2026 GMT Subject: CN=0EBEFCCF02995FC2A2A1DFDDB1506E930AF1BFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:0e:da:d4:b7:86:fd:b7:dc:b5:8c:8f:c5: f9:cb:9e:d6:d1:98:3e:ed:12:96:95:be:bb:72:8d: 61:1a:ef:15:42:c3:f4:f4:56:55:03:46:54:28:0d: f3:01:6e:fe:99:92:5a:bf:25:f1:24:28:b0:fe:23: 01:8e:e1:73:e8:9a:d2:05:ab:e1:66:45:2a:f3:46: 4a:82:07:a4:af:3e:4e:f0:92:b2:97:27:cf:e0:b0: b1:4d:15:d6:15:4d:8f:7c:96:8c:85:f1:11:cd:56: 2c:a5:43:cd:7f:9d:b3:c3:83:e8:df:d9:d3:52:06: 2c:04:99:20:27:1d:41:ce:e9:3d:a5:f5:b4:a7:9c: e2:b0:05:74:da:a6:21:f3:55:5e:ef:c0:07:f3:e7: 38:5b:0a:ee:20:b7:92:f3:04:39:37:df:37:7a:cb: d2:c2:3c:d9:61:f1:83:f1:14:1e:dd:59:84:39:88: e3:c7:a1:7d:66:b6:a6:a2:5c:88:46:cc:4d:ba:bf: 73:08:72:37:74:3e:b7:fa:87:d8:2b:2c:fc:dd:b5: 41:12:9f:11:cd:d0:f4:1f:36:10:66:cf:66:32:53: 51:42:35:f3:b3:20:15:5e:7c:2e:cd:26:f1:0f:ff: fc:7a:6d:46:e8:15:83:5c:ef:73:52:b3:6a:5d:6e: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BE:FC:CF:02:99:5F:C2:A2:A1:DF:DD:B1:50:6E:93:0A:F1:BF:B7 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:e5:ae:73:57:b2:aa:68:54:3b:f6:32:ee:f0:8b:88:e1: a8:84:a8:41:ab:6f:6f:80:65:dc:15:68:3b:fe:07:da:7e:74: c2:3a:09:cd:ec:cf:74:4b:7f:eb:04:80:26:9a:b0:19:a0:7f: 80:3c:33:23:8a:ec:a9:bd:ee:ff:24:7f:96:a1:05:9d:ad:ca: 27:6c:71:94:8c:2f:79:48:6b:69:d9:24:5a:3b:1a:ea:3d:d3: 84:c8:87:41:8a:80:d8:c9:4a:ed:de:76:2d:e9:ec:31:90:c4: 14:ab:16:0f:d1:6a:2a:02:f4:d1:8e:a8:07:21:e4:8f:06:31: 0b:b2:ce:31:da:5a:b1:48:4a:03:5d:20:c4:e0:13:de:90:f9: 8b:a6:77:c0:0d:40:7b:f1:79:fe:cf:51:3e:ac:2e:2e:5e:d2: 84:05:7e:29:36:e5:24:38:61:03:47:23:af:a8:1a:0f:d8:56: 33:1d:29:7d:9e:12:22:4a:fb:2d:29:c4:9d:d0:4f:b8:d4:ef: e8:c8:67:f8:0c:8d:d0:ac:06:3a:83:ce:83:cb:dc:0c:9e:3d: b7:44:69:d8:09:63:98:ca:74:bf:b9:77:19:7c:04:29:90:16: 3b:07:f3:ea:a8:30:91:b6:0d:6b:56:14:d8:7c:24:ac:c7:f2: 44:f2:c9:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7UFOrS7q2joXOJd+G64d2sBkrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA3MjgxNDU1MDFaFw0yNjA3MjkxNzQ4MDFaMDMxMTAvBgNV BAMTKDBFQkVGQ0NGMDI5OTVGQzJBMkExREZEREIxNTA2RTkzMEFGMUJGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDueA7a1LeG/bfctYyPxfnLntbR mD7tEpaVvrtyjWEa7xVCw/T0VlUDRlQoDfMBbv6Zklq/JfEkKLD+IwGO4XPomtIF q+FmRSrzRkqCB6SvPk7wkrKXJ8/gsLFNFdYVTY98loyF8RHNViylQ81/nbPDg+jf 2dNSBiwEmSAnHUHO6T2l9bSnnOKwBXTapiHzVV7vwAfz5zhbCu4gt5LzBDk33zd6 y9LCPNlh8YPxFB7dWYQ5iOPHoX1mtqaiXIhGzE26v3MIcjd0Prf6h9grLPzdtUES nxHN0PQfNhBmz2YyU1FCNfOzIBVefC7NJvEP//x6bUboFYNc73NSs2pdbhY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDr78zwKZX8Kiod/dsVBukwrxv7cwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+R5a5zV7KqaFQ79jLu8IuI4aiEqEGrb2+A ZdwVaDv+B9p+dMI6Cc3sz3RLf+sEgCaasBmgf4A8MyOK7Km97v8kf5ahBZ2tyids cZSML3lIa2nZJFo7Guo904TIh0GKgNjJSu3edi3p7DGQxBSrFg/RaioC9NGOqAch 5I8GMQuyzjHaWrFISgNdIMTgE96Q+Yumd8ANQHvxef7PUT6sLi5e0oQFfik25SQ4 YQNHI6+oGg/YVjMdKX2eEiJK+y0pxJ3QT7jU7+jIZ/gMjdCsBjqDzoPL3AyePbdE adgJY5jKdL+5dxl8BCmQFjsH8+qoMJG2DWtWFNh8JKzH8kTyyVw= -----END CERTIFICATE-----Generated at Wed Jul 29 06:29:46 2026 by rpki-client