$ rpki-client -vvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: taIfVc1jLaGtwoNuBz9T5RGBTjaoAHgR9UR+HU5AbhQ= Subject key identifier: E0:77:88:4A:7B:F9:B7:F2:08:5D:6E:3A:15:43:B6:36:2C:27:D6:41 Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 59F2B0E2BE9B205CDF5673A256CC57DA89329120 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 12:25:58 +0000 Manifest this update: Wed 29 Jul 2026 12:20:58 +0000 Manifest next update: Thu 30 Jul 2026 13:47:58 +0000 Files and hashes: 1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: ZsMr98bP8gtsP+fehDH7853WCJb/ev96GPt2TVA9FQI=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f2:b0:e2:be:9b:20:5c:df:56:73:a2:56:cc:57:da:89:32:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: Jul 29 12:20:58 2026 GMT Not After : Jul 30 13:47:58 2026 GMT Subject: CN=E077884A7BF9B7F2085D6E3A1543B6362C27D641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:fa:4e:0a:1b:2b:3e:6c:3f:fa:54:53:94: 8f:f8:a4:08:8d:ba:48:1d:ce:21:18:da:45:fa:16: 80:3e:82:79:24:c5:dc:e6:f7:47:0c:d8:43:aa:dc: 02:b9:7b:f7:b5:d7:90:9b:b3:18:09:86:37:b2:9e: f0:e8:c6:a7:f3:f4:1f:53:56:c1:d9:bc:26:69:13: 59:31:4c:c2:54:65:8f:31:4b:13:7e:c5:82:67:b4: 71:7e:59:be:aa:3d:81:c7:3b:c8:bd:35:a9:85:ba: 04:1c:35:b1:c4:ff:46:28:21:26:12:17:0e:fe:cc: ab:6e:c2:31:2d:b3:6f:c0:1a:e2:de:66:0c:d5:92: a6:29:cc:b0:2e:90:7a:5a:65:a6:1b:81:ed:bd:79: 80:ee:7b:88:dc:ef:c4:62:42:eb:b8:07:eb:da:34: 3e:22:af:cf:14:e4:bb:57:21:4f:80:66:f9:03:78: a9:26:ef:9a:4e:2a:06:54:67:fa:49:37:67:ca:19: 78:53:9d:6f:fc:9a:c1:7a:7c:d9:1d:2b:4e:c6:09: b1:7c:7c:93:56:6d:0e:38:28:c7:7d:97:68:8c:46: d2:d2:da:7a:76:91:7f:7d:c5:ef:8a:16:5d:b1:d4: df:80:3a:fd:fe:be:86:30:ee:99:d3:97:66:51:08: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:88:4A:7B:F9:B7:F2:08:5D:6E:3A:15:43:B6:36:2C:27:D6:41 X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:50:55:68:b5:8b:6f:b1:e9:b0:6a:1b:03:21:10:8b:04: 8e:67:8a:41:fe:5d:76:41:5b:4f:59:c6:b1:4f:7e:03:e8:a5: a7:1a:24:03:01:53:a6:b1:e5:ab:60:0b:87:c9:a5:b6:a0:46: 55:4b:6f:ce:3d:09:22:02:87:e2:1e:47:19:d8:73:87:cc:9a: e2:c2:16:90:7d:b8:a8:52:0c:a0:d0:9c:18:52:8d:81:fe:46: c6:7c:1c:a7:4d:50:65:b6:83:16:0c:13:2b:0f:7e:dd:5b:14: 67:a9:aa:7b:a6:5f:89:20:a4:5d:85:6e:54:f3:fe:0d:ee:16: e9:e7:9e:6c:21:18:47:67:7e:8b:29:78:32:b7:44:ed:b6:f5: 34:12:b4:6f:76:05:f2:b9:c1:bc:5c:9e:7a:30:a4:79:f1:80: 92:be:01:eb:5a:d6:1f:6e:51:79:02:e9:4c:e6:86:b4:09:f0: 66:a9:63:7a:1a:ae:5d:f4:d3:12:ca:da:88:b5:d2:32:3a:53: 70:5a:8e:ef:7d:8a:3a:db:e8:53:19:f0:b6:40:9c:0a:a6:12: 11:ba:88:54:e8:b9:d6:e5:c2:fa:c9:ca:76:10:1d:b9:3a:4d: 36:fb:d0:bd:47:4e:e3:b5:b5:ff:23:91:39:7b:98:b6:94:d2: 2e:a4:55:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfKw4r6bIFzfVnOiVsxX2okykSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA3MjkxMjIwNThaFw0yNjA3MzAxMzQ3NThaMDMxMTAvBgNV BAMTKEUwNzc4ODRBN0JGOUI3RjIwODVENkUzQTE1NDNCNjM2MkMyN0Q2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8//pOChsrPmw/+lRTlI/4pAiN ukgdziEY2kX6FoA+gnkkxdzm90cM2EOq3AK5e/e115CbsxgJhjeynvDoxqfz9B9T VsHZvCZpE1kxTMJUZY8xSxN+xYJntHF+Wb6qPYHHO8i9NamFugQcNbHE/0YoISYS Fw7+zKtuwjEts2/AGuLeZgzVkqYpzLAukHpaZaYbge29eYDue4jc78RiQuu4B+va ND4ir88U5LtXIU+AZvkDeKkm75pOKgZUZ/pJN2fKGXhTnW/8msF6fNkdK07GCbF8 fJNWbQ44KMd9l2iMRtLS2np2kX99xe+KFl2x1N+AOv3+voYw7pnTl2ZRCOLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4HeISnv5t/IIXW46FUO2Niwn1kEwHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4dUFVotYtvsemwahsDIRCLBI5nikH+XXZB W09ZxrFPfgPopacaJAMBU6ax5atgC4fJpbagRlVLb849CSICh+IeRxnYc4fMmuLC FpB9uKhSDKDQnBhSjYH+RsZ8HKdNUGW2gxYMEysPft1bFGepqnumX4kgpF2FblTz /g3uFunnnmwhGEdnfospeDK3RO229TQStG92BfK5wbxcnnowpHnxgJK+Aeta1h9u UXkC6UzmhrQJ8GapY3oarl300xLK2oi10jI6U3Baju99ijrb6FMZ8LZAnAqmEhG6 iFToudblwvrJynYQHbk6TTb70L1HTuO1tf8jkTl7mLaU0i6kVQo= -----END CERTIFICATE-----Generated at Wed Jul 29 17:56:21 2026 by rpki-client