$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: l7b7e79oHDtUyNjqWiAWf8KNU//lavWCtvHHVOqO3Ac= Subject key identifier: D4:BF:31:B2:04:05:AC:EB:2F:49:1E:C7:50:70:69:47:32:75:F4:84 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 48F360FAF5B635A72D9248ECFCD01F80472CD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 17:58:55 +0000 Manifest this update: Tue 28 Jul 2026 17:53:55 +0000 Manifest next update: Wed 29 Jul 2026 19:43:55 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 2: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: E4Cva+/YFT/dsHaYRzwWe4CEKHrdi6a1ypEvmsJH+pw=) 3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f3:60:fa:f5:b6:35:a7:2d:92:48:ec:fc:d0:1f:80:47:2c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Jul 28 17:53:55 2026 GMT Not After : Jul 29 19:43:55 2026 GMT Subject: CN=D4BF31B20405ACEB2F491EC7507069473275F484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:4a:e0:1b:54:2b:a8:30:de:c8:93:89:6c: e2:87:b5:3e:b3:7f:f8:1e:2d:70:19:f4:ce:72:48: 1e:cb:51:68:20:f2:1d:c6:e6:7c:ff:f2:3e:dd:4c: cd:f0:fd:0d:18:e4:79:23:e3:67:8d:ef:b6:b9:fe: 2a:fc:95:8a:26:8e:0a:65:11:ae:1f:c5:ce:06:0e: 30:18:36:5d:0d:95:6c:92:b3:de:81:b1:e9:64:4d: 54:9c:d6:44:d8:b7:17:34:6a:97:93:0a:b5:eb:06: fb:88:29:90:8a:b9:5a:e4:16:21:29:b5:f0:e5:70: 16:b0:1d:52:99:84:8e:be:1e:29:fd:3f:fc:b4:a5: fe:06:ea:2d:22:5b:1a:4b:eb:30:b5:34:1a:14:a0: 1d:02:58:e3:63:16:b2:8c:8d:5f:d2:d9:21:ba:47: f8:50:0e:1d:e7:28:4e:25:bd:1f:0b:20:11:16:bd: f5:55:88:db:61:d8:11:a5:66:b1:43:82:af:8d:00: fd:11:46:46:cf:a3:70:e7:da:44:a8:09:82:36:2c: 30:0c:89:29:b1:01:88:3f:e5:86:bc:2b:f7:87:39: e9:80:1a:2f:67:22:4e:9a:4f:df:93:61:6e:20:4c: 21:e4:ce:3d:01:d4:34:1f:6e:2d:1a:12:a2:f8:87: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BF:31:B2:04:05:AC:EB:2F:49:1E:C7:50:70:69:47:32:75:F4:84 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8c:86:0d:b4:8b:54:60:0c:6d:44:2a:d9:66:62:ee:8b:6e: 6c:92:7c:38:26:00:77:e6:2d:db:87:2a:de:89:68:af:88:ff: dd:01:d9:bb:b3:40:8f:1b:ac:d8:b8:1c:94:44:75:3d:61:ea: 74:86:b6:94:76:5d:e7:38:3d:28:e8:9e:a7:f6:74:c8:75:ff: 1a:c8:48:69:a5:44:e3:a3:a7:ef:03:0b:f7:09:93:f6:f8:a3: 3f:7e:9d:5f:df:00:fa:49:47:9f:26:97:f0:12:72:72:67:7b: cb:c2:ed:22:60:19:ae:c0:17:94:5d:d8:51:a9:5e:d6:96:19: 8f:32:d1:83:bd:7c:e2:6b:40:a6:e3:e5:9f:19:6a:22:91:7f: 7e:5b:36:a7:e6:2e:bc:ce:f2:d1:e9:ab:76:68:3d:78:6d:f3: 3a:2a:2f:27:12:b4:45:b3:ff:fa:22:8f:f0:43:59:37:f3:35: e9:de:78:70:d5:21:52:be:c2:d2:43:c6:3f:4e:84:4a:76:37: 22:b3:a4:12:40:fc:0f:67:85:b1:a6:ea:7c:96:6e:97:64:2a: b3:3b:62:ba:80:11:e6:56:6a:58:2f:c3:f4:e4:84:e5:c3:2f: b0:b0:f1:fb:15:ec:31:58:b8:2f:1f:9e:32:2a:67:39:58:e4: 94:80:f5:e2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITSPNg+vW2Nactkkjs/NAfgEcs2TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEy MjQ5RUYxMB4XDTI2MDcyODE3NTM1NVoXDTI2MDcyOTE5NDM1NVowMzExMC8GA1UE AxMoRDRCRjMxQjIwNDA1QUNFQjJGNDkxRUM3NTA3MDY5NDczMjc1RjQ4NDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK2cSuAbVCuoMN7Ik4ls4oe1PrN/ +B4tcBn0znJIHstRaCDyHcbmfP/yPt1MzfD9DRjkeSPjZ43vtrn+KvyViiaOCmUR rh/FzgYOMBg2XQ2VbJKz3oGx6WRNVJzWRNi3FzRql5MKtesG+4gpkIq5WuQWISm1 8OVwFrAdUpmEjr4eKf0//LSl/gbqLSJbGkvrMLU0GhSgHQJY42MWsoyNX9LZIbpH +FAOHecoTiW9HwsgERa99VWI22HYEaVmsUOCr40A/RFGRs+jcOfaRKgJgjYsMAyJ KbEBiD/lhrwr94c56YAaL2ciTppP35NhbiBMIeTOPQHUNB9uLRoSoviHUqUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTUvzGyBAWs6y9JHsdQcGlHMnX0hDAfBgNVHSME GDAWgBTwS88p6KSYOnxhRWM4kEsdEiSe8TAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9GMDRCQ0YyOUU4 QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5RUYxLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8wL0YwNEJDRjI5RThBNDk4M0E3QzYxNDU2MzM4OTA0QjFEMTIyNDlF RjEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMGJkN2Q2Yy1lYTVhLTRjNDUtOTU1 OC03MTc5OTRhYjY4MGUvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIx RDEyMjQ5RUYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAeoyGDbSLVGAMbUQq2WZi7otubJJ8OCYAd+Yt 24cq3olor4j/3QHZu7NAjxus2LgclER1PWHqdIa2lHZd5zg9KOiep/Z0yHX/GshI aaVE46On7wML9wmT9vijP36dX98A+klHnyaX8BJycmd7y8LtImAZrsAXlF3YUale 1pYZjzLRg7184mtApuPlnxlqIpF/fls2p+YuvM7y0emrdmg9eG3zOiovJxK0RbP/ +iKP8ENZN/M16d54cNUhUr7C0kPGP06ESnY3IrOkEkD8D2eFsabqfJZul2Qqszti uoAR5lZqWC/D9OSE5cMvsLDx+xXsMVi4Lx+eMipnOVjklID14g== -----END CERTIFICATE-----Generated at Tue Jul 28 20:41:44 2026 by rpki-client