$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: cBljYA0msmrluXVKLYQOJjVDeBxJJc88ToTHuvbexiI= Subject key identifier: 38:F4:29:58:46:39:EF:66:E5:E4:D9:5F:7F:65:F6:55:D4:0A:D7:A5 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 0CA18CF62A6F8838E3671FE919E4AA008532E0C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 13:38:18 +0000 Manifest this update: Tue 28 Jul 2026 13:33:18 +0000 Manifest next update: Wed 29 Jul 2026 16:32:18 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 3: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: iBJX+NwJGk9XlKosLncA9RiTO/64HJd3NWaLXed3vUc=) 4: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 5: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a1:8c:f6:2a:6f:88:38:e3:67:1f:e9:19:e4:aa:00:85:32:e0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Jul 28 13:33:18 2026 GMT Not After : Jul 29 16:32:18 2026 GMT Subject: CN=38F429584639EF66E5E4D95F7F65F655D40AD7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:72:9f:77:8a:09:fe:9d:98:1c:66:e9:1a: 43:83:a9:45:07:89:93:07:ea:db:a7:47:d3:b3:1e: a2:67:f3:cc:24:be:85:e4:67:3e:e8:a4:76:a4:7f: 02:48:b3:75:03:b8:f4:c0:f6:80:0e:9d:0c:5d:26: bf:e6:c4:b6:e8:fb:39:2f:31:4c:e8:9d:bf:56:b5: 63:e5:c3:93:e4:4f:bb:ac:ea:32:fe:94:32:a7:7c: 7a:41:0b:51:77:68:5b:1f:84:f1:d9:77:af:71:13: 24:6f:2f:ec:84:b4:b5:d2:51:66:b0:af:ce:5b:6d: 98:7b:48:bf:fe:f0:81:f8:c2:cb:77:e6:73:49:00: 52:9a:ad:5d:df:d6:84:6c:76:96:68:d4:e5:ac:b4: 43:6f:ba:df:5b:fa:b6:67:6d:74:12:7e:21:de:4c: bf:40:bb:cc:41:5c:57:3e:49:a8:70:db:07:a0:65: bc:d6:23:d0:e6:05:2c:64:4a:a5:18:0c:b6:91:47: 53:56:0d:97:ce:1a:43:0f:47:f7:7b:23:ae:4a:d1: 3e:c8:2e:06:71:61:60:b7:b2:03:17:c7:18:a9:2f: b9:dd:57:62:f7:c1:24:35:9a:25:40:2d:8c:6d:43: e2:c2:df:b1:79:4f:bf:72:95:13:6b:ad:56:e6:2c: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:29:58:46:39:EF:66:E5:E4:D9:5F:7F:65:F6:55:D4:0A:D7:A5 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8c:b3:55:21:77:db:6d:68:ff:df:12:bc:78:eb:75:02:5f: f3:3a:2a:c9:e0:29:bd:4b:46:c0:86:0e:6b:aa:3b:21:f9:ce: 5b:9b:2f:95:f3:12:a3:59:88:10:b4:2c:c4:84:6b:03:00:5d: 7d:25:4d:76:10:4c:87:2e:ac:e9:7c:05:68:c4:31:24:06:b2: 8c:74:92:7f:12:b7:27:30:14:7d:ce:6b:00:ac:79:7e:e7:7d: 7b:2f:8d:24:67:09:65:fd:d1:3d:5b:03:f0:e6:bc:34:94:56: 48:de:d0:33:27:d7:e4:0e:7d:49:95:a4:a7:73:64:60:ef:da: f3:59:dd:c0:6a:f3:d0:de:ca:e1:5a:2a:ec:9a:52:61:4e:1d: 6b:47:7a:92:d6:d6:11:b3:90:41:2a:63:ae:f1:24:17:37:91: 85:18:6b:26:a1:eb:0c:9f:9e:96:8e:97:87:fc:a5:6c:ca:63: 5d:45:f0:38:aa:82:82:19:2d:e7:fc:ba:d2:53:f9:8c:4a:c9: 5f:54:8e:44:4b:ee:1d:4f:92:d9:31:2e:19:1e:89:21:0a:dc: d4:19:3b:f8:1c:86:4a:c6:a7:5d:e8:52:42:63:99:25:24:1e: 09:90:df:d1:34:f9:af:31:ce:af:56:ca:b6:d5:8e:8b:b2:de: 3b:36:3f:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKGM9ipviDjjZx/pGeSqAIUy4MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA3MjgxMzMzMThaFw0yNjA3MjkxNjMyMThaMDMxMTAvBgNV BAMTKDM4RjQyOTU4NDYzOUVGNjZFNUU0RDk1RjdGNjVGNjU1RDQwQUQ3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmXKfd4oJ/p2YHGbpGkODqUUH iZMH6tunR9OzHqJn88wkvoXkZz7opHakfwJIs3UDuPTA9oAOnQxdJr/mxLbo+zkv MUzonb9WtWPlw5PkT7us6jL+lDKnfHpBC1F3aFsfhPHZd69xEyRvL+yEtLXSUWaw r85bbZh7SL/+8IH4wst35nNJAFKarV3f1oRsdpZo1OWstENvut9b+rZnbXQSfiHe TL9Au8xBXFc+Sahw2wegZbzWI9DmBSxkSqUYDLaRR1NWDZfOGkMPR/d7I65K0T7I LgZxYWC3sgMXxxipL7ndV2L3wSQ1miVALYxtQ+LC37F5T79ylRNrrVbmLAiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPQpWEY572bl5Nlff2X2VdQK16UwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCMs1Uhd9ttaP/fErx463UCX/M6KsngKb1L RsCGDmuqOyH5zlubL5XzEqNZiBC0LMSEawMAXX0lTXYQTIcurOl8BWjEMSQGsox0 kn8StycwFH3OawCseX7nfXsvjSRnCWX90T1bA/DmvDSUVkje0DMn1+QOfUmVpKdz ZGDv2vNZ3cBq89DeyuFaKuyaUmFOHWtHepLW1hGzkEEqY67xJBc3kYUYayah6wyf npaOl4f8pWzKY11F8DiqgoIZLef8utJT+YxKyV9UjkRL7h1PktkxLhkeiSEK3NQZ O/gchkrGp13oUkJjmSUkHgmQ39E0+a8xzq9WyrbVjouy3js2P8c= -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:58 2026 by rpki-client