$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: jcj80sDug+bJMMxq6g5IgPFSc4V7KKxGnCSYlg2wdXo= Subject key identifier: BE:8F:2A:06:4B:8E:54:E1:36:DB:92:F8:35:59:28:21:CF:49:E8:AB Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 76F478BB6A26130D42B4BF50338392D5DCDBAE97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 16:15:32 +0000 Manifest this update: Wed 29 Jul 2026 16:10:32 +0000 Manifest next update: Thu 30 Jul 2026 19:26:32 +0000 Files and hashes: 1: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 2: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 3: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 4: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: Afe86fay6xnjlos/T2PONj7iccSjMveMKeYBgJ7nbO4=) 5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f4:78:bb:6a:26:13:0d:42:b4:bf:50:33:83:92:d5:dc:db:ae:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Jul 29 16:10:32 2026 GMT Not After : Jul 30 19:26:32 2026 GMT Subject: CN=BE8F2A064B8E54E136DB92F835592821CF49E8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:2e:d4:ba:bc:3c:10:1f:a0:2a:93:1a:96: 0c:29:13:a5:ae:93:ac:1c:2d:be:47:5d:db:d5:2b: 37:db:3e:2d:ba:45:30:c6:bc:cd:78:af:0d:07:eb: 7e:80:d6:22:fc:ca:96:a7:59:fd:71:52:c6:85:59: 22:8f:09:9e:58:d6:6f:87:39:3d:8c:01:86:96:b8: 99:a7:7d:33:71:9d:67:50:74:26:e5:9c:60:77:41: 80:12:2d:65:80:fe:7b:2d:51:88:95:47:f8:6d:3c: 6b:1f:08:99:df:57:18:1f:c1:eb:08:d0:b6:1c:55: 66:b3:c3:23:f1:26:92:33:92:9c:e5:2b:57:54:73: a6:94:c6:5b:d9:04:00:cc:c5:54:52:ef:89:7c:65: c8:f3:ee:e9:21:b2:9e:e7:2b:8d:d6:82:ea:30:b3: 04:1e:fc:00:e5:64:c2:f6:80:0a:29:14:f5:26:cc: 47:2c:70:b2:2a:37:f2:08:75:bb:11:8c:93:c3:a5: 48:c0:8f:fb:48:bf:f7:85:70:84:01:87:f9:f8:5e: bb:fe:4f:3e:bf:ea:39:66:72:11:df:e3:04:4d:5b: bb:a5:25:48:f1:b1:37:ea:3e:4d:f3:3e:9c:fe:d8: a0:13:45:eb:3d:47:02:4b:08:ee:7d:70:2c:25:3f: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:2A:06:4B:8E:54:E1:36:DB:92:F8:35:59:28:21:CF:49:E8:AB X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:38:a1:e4:f9:29:a7:15:a4:3e:1a:ed:db:ac:8b:b6:bc:df: d2:e8:be:de:54:02:c2:13:a2:15:00:15:93:9f:42:e8:dd:40: 99:09:21:ed:08:3c:f3:d6:f9:ac:d9:a4:26:99:bf:0a:c0:67: f2:4f:89:a7:66:7a:ed:e4:56:34:43:12:cc:b6:78:ea:b2:25: 58:52:f0:40:46:66:0d:9f:e4:03:c1:85:3b:65:77:d8:e0:53: 0a:f1:f3:af:03:54:9c:04:b6:9e:ec:a8:0e:1f:1e:3d:eb:c8: 93:96:34:13:58:14:43:b4:31:8d:d4:b5:d6:9b:44:dd:8d:3f: e8:b5:c7:c5:8e:de:0f:e3:7a:bf:08:9a:1c:4e:b0:b0:a4:7e: 76:1f:85:ee:3d:0a:d6:2d:66:e2:93:e0:aa:de:c4:36:e7:dc: 2e:46:d4:fd:e7:9a:c7:c3:c0:45:c5:9e:b9:95:dd:75:b9:30: 44:4d:25:d6:d1:f8:e4:c6:35:ca:cb:f9:d6:e9:66:08:67:df: f8:ae:28:1b:72:c2:72:06:e4:83:61:17:60:07:b0:82:f7:2d: f1:be:40:34:a2:10:52:58:73:09:91:b0:e9:78:28:95:3e:01: 99:5f:85:bf:9e:78:7d:ed:4b:46:19:4e:ae:7c:71:19:fc:e9: b3:cd:0c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvR4u2omEw1CtL9QM4OS1dzbrpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA3MjkxNjEwMzJaFw0yNjA3MzAxOTI2MzJaMDMxMTAvBgNV BAMTKEJFOEYyQTA2NEI4RTU0RTEzNkRCOTJGODM1NTkyODIxQ0Y0OUU4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cC7Uurw8EB+gKpMalgwpE6Wu k6wcLb5HXdvVKzfbPi26RTDGvM14rw0H636A1iL8ypanWf1xUsaFWSKPCZ5Y1m+H OT2MAYaWuJmnfTNxnWdQdCblnGB3QYASLWWA/nstUYiVR/htPGsfCJnfVxgfwesI 0LYcVWazwyPxJpIzkpzlK1dUc6aUxlvZBADMxVRS74l8Zcjz7ukhsp7nK43Wguow swQe/ADlZML2gAopFPUmzEcscLIqN/IIdbsRjJPDpUjAj/tIv/eFcIQBh/n4Xrv+ Tz6/6jlmchHf4wRNW7ulJUjxsTfqPk3zPpz+2KATRes9RwJLCO59cCwlP2OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvo8qBkuOVOE225L4NVkoIc9J6KswHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACE4oeT5KacVpD4a7dusi7a839Lovt5UAsIT ohUAFZOfQujdQJkJIe0IPPPW+azZpCaZvwrAZ/JPiadmeu3kVjRDEsy2eOqyJVhS 8EBGZg2f5APBhTtld9jgUwrx868DVJwEtp7sqA4fHj3ryJOWNBNYFEO0MY3Utdab RN2NP+i1x8WO3g/jer8ImhxOsLCkfnYfhe49CtYtZuKT4KrexDbn3C5G1P3nmsfD wEXFnrmV3XW5MERNJdbR+OTGNcrL+dbpZghn3/iuKBtywnIG5INhF2AHsIL3LfG+ QDSiEFJYcwmRsOl4KJU+AZlfhb+eeH3tS0YZTq58cRn86bPNDBA= -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:13 2026 by rpki-client