$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: HUnTX/O1yuOrW7cJc/m47Pm32qFpijxTucJJGoSEVbg= Subject key identifier: 2B:65:87:F9:E7:DC:41:0E:E6:B4:D5:B9:5F:50:E8:A2:E9:36:ED:50 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 5A1BC2E6379FF4E6D01BDD770199726AC3482877 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 03:45:39 +0000 Manifest this update: Wed 29 Jul 2026 03:40:39 +0000 Manifest next update: Thu 30 Jul 2026 05:37:39 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 2: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 3: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: V3a/BxSK86VrTDlNyH6AnvaPbHTtrfh33ztWit53muw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1b:c2:e6:37:9f:f4:e6:d0:1b:dd:77:01:99:72:6a:c3:48:28:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Jul 29 03:40:39 2026 GMT Not After : Jul 30 05:37:39 2026 GMT Subject: CN=2B6587F9E7DC410EE6B4D5B95F50E8A2E936ED50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:ef:7b:ec:83:2a:30:92:a5:ef:91:ab:90: 91:25:68:38:ca:5f:eb:b4:dc:58:0b:63:63:8e:ae: a6:d7:2f:47:c5:5a:2a:1e:38:48:ca:5d:c2:5a:15: af:66:8e:5a:cd:0b:ad:39:78:76:e9:80:7d:cc:08: 4d:dd:69:36:ae:f5:67:0e:19:53:76:45:6d:e6:2b: 25:f0:be:00:37:30:d1:2d:5e:61:f2:3d:56:3a:28: 89:93:fd:51:f3:0c:62:e9:ae:1f:21:ee:be:23:29: 3e:89:5c:91:7c:a9:10:f4:ce:cb:0c:79:40:22:b2: 70:80:b2:44:15:21:f5:bb:64:ad:be:62:d3:b2:71: e9:2d:36:d3:7f:3c:55:b3:8e:7c:0b:56:6d:2b:d5: 9c:21:03:bf:ca:18:38:08:b0:9a:be:cb:0d:45:81: 44:68:93:13:2f:fb:dc:f2:7b:91:4e:3b:5e:16:64: 38:c7:e1:71:e1:7b:04:5a:31:67:2c:0a:86:90:fc: ab:4c:82:4e:f4:a4:7f:8d:e6:d7:22:05:4c:7e:27: 6c:36:6f:80:c0:bc:61:0c:39:a8:2a:2f:1b:76:37: 10:70:ba:b5:74:89:89:cd:cd:8f:c0:f6:00:60:7c: e1:00:bc:f7:a1:5c:79:61:0f:8a:ce:78:8b:b1:5d: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:65:87:F9:E7:DC:41:0E:E6:B4:D5:B9:5F:50:E8:A2:E9:36:ED:50 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:8f:b6:cc:3f:44:b3:ba:1e:7c:a7:de:ca:50:89:8a:22:91: db:09:ac:8a:d9:30:8f:19:2e:62:62:f2:23:fa:63:ca:e5:0a: 4f:90:42:5f:be:ca:ae:9b:ab:c0:c5:3b:24:bf:42:bf:b1:2f: c5:b7:78:14:4c:55:8f:ee:d9:78:8a:81:ea:44:a8:18:12:ea: 4f:52:f8:c8:d4:4a:11:85:7c:a2:fe:41:47:04:72:35:0e:32: 1a:73:47:26:f8:16:06:00:ed:3f:d2:ae:da:49:ea:ff:6c:9f: 71:97:ee:b6:51:f2:fe:f3:08:9b:3d:8a:36:7e:df:50:6b:ee: a4:ed:cc:91:d0:7b:4b:b8:1c:fe:5e:a3:fa:58:80:e9:51:9d: b4:dc:a2:45:b2:cb:0b:f5:e4:05:41:71:b3:26:b6:49:f8:6c: 17:50:b1:56:a9:aa:d2:20:99:11:dd:c1:bd:6c:23:58:1c:0d: f7:da:b5:24:b5:4e:f6:c4:4c:c5:de:72:52:87:0e:fd:50:3f: 2d:ac:3f:7c:76:fd:ab:0a:9e:69:2a:88:90:5e:6b:d0:60:5a: d2:04:c1:9e:c1:d4:59:a8:4d:ee:92:53:7b:a1:73:41:58:0f: a1:49:3b:6e:88:b0:ea:19:36:a7:37:bd:77:6a:de:2e:37:51: 47:72:26:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhvC5jef9ObQG913AZlyasNIKHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA3MjkwMzQwMzlaFw0yNjA3MzAwNTM3MzlaMDMxMTAvBgNV BAMTKDJCNjU4N0Y5RTdEQzQxMEVFNkI0RDVCOTVGNTBFOEEyRTkzNkVENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVe977IMqMJKl75GrkJElaDjK X+u03FgLY2OOrqbXL0fFWioeOEjKXcJaFa9mjlrNC605eHbpgH3MCE3daTau9WcO GVN2RW3mKyXwvgA3MNEtXmHyPVY6KImT/VHzDGLprh8h7r4jKT6JXJF8qRD0zssM eUAisnCAskQVIfW7ZK2+YtOycektNtN/PFWzjnwLVm0r1ZwhA7/KGDgIsJq+yw1F gURokxMv+9zye5FOO14WZDjH4XHhewRaMWcsCoaQ/KtMgk70pH+N5tciBUx+J2w2 b4DAvGEMOagqLxt2NxBwurV0iYnNzY/A9gBgfOEAvPehXHlhD4rOeIuxXYBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2WH+efcQQ7mtNW5X1Doouk27VAwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSPtsw/RLO6Hnyn3spQiYoikdsJrIrZMI8Z LmJi8iP6Y8rlCk+QQl++yq6bq8DFOyS/Qr+xL8W3eBRMVY/u2XiKgepEqBgS6k9S +MjUShGFfKL+QUcEcjUOMhpzRyb4FgYA7T/SrtpJ6v9sn3GX7rZR8v7zCJs9ijZ+ 31Br7qTtzJHQe0u4HP5eo/pYgOlRnbTcokWyywv15AVBcbMmtkn4bBdQsVapqtIg mRHdwb1sI1gcDffatSS1TvbETMXeclKHDv1QPy2sP3x2/asKnmkqiJBea9BgWtIE wZ7B1FmoTe6SU3uhc0FYD6FJO26IsOoZNqc3vXdq3i43UUdyJv0= -----END CERTIFICATE-----Generated at Wed Jul 29 14:12:06 2026 by rpki-client