$ rpki-client -vvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json) Hash identifier: /JOsMCww4HgSt4gpUWLRmc9bBWUU8zTE/D7OV0McfNw= Subject key identifier: D1:6B:33:F0:14:C2:6E:3F:FA:D6:14:F8:80:4A:C1:7D:78:B8:B9:50 Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Certificate serial: 441DC46CC2111F9362F1175609FE7941A2C5A7BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:42:22 +0000 Manifest this update: Tue 28 Jul 2026 16:37:22 +0000 Manifest next update: Wed 29 Jul 2026 18:31:22 +0000 Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: ezzrrv1ywuJGpieFykH6a7KThJKEQL7NDxtvRa3q+BU=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1d:c4:6c:c2:11:1f:93:62:f1:17:56:09:fe:79:41:a2:c5:a7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC Validity Not Before: Jul 28 16:37:22 2026 GMT Not After : Jul 29 18:31:22 2026 GMT Subject: CN=D16B33F014C26E3FFAD614F8804AC17D78B8B950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:3a:67:83:e3:fa:2d:90:97:d0:52:2a:bd: 9d:b9:79:39:35:a3:18:20:9f:60:ec:cc:3b:7d:a0: b9:fc:f7:c4:38:c5:f4:6a:e3:f3:96:24:a7:6f:c5: 24:52:9d:d5:c9:5d:42:4e:f1:8e:ed:39:1d:11:96: 4d:13:61:c8:f4:f5:bc:0b:6e:02:a7:4f:9a:94:bf: 55:b2:3c:f7:f4:1c:25:9e:81:4e:bc:da:61:f7:03: 53:be:bc:dc:b7:39:f9:60:cf:f9:b9:06:5d:c9:27: 4a:67:cf:c3:bd:e7:0d:99:28:1f:04:fa:1f:32:83: 6c:9a:a1:99:e6:af:04:f7:c8:53:6a:02:f9:7b:02: 49:6e:c5:fe:5c:5b:09:5f:5e:3d:05:36:74:0e:9d: c2:28:39:cc:4b:2f:dc:87:c3:53:6c:20:11:97:05: 5c:ce:aa:4e:16:be:9d:ff:22:da:f3:97:a7:be:5e: ab:d1:ce:17:47:e8:ff:23:5c:90:8f:51:4d:a1:d0: 73:c3:32:bf:49:01:4a:d4:89:c9:4e:a8:ab:21:1a: e4:9e:f3:00:e1:ca:7d:87:85:d3:73:9c:59:e9:7c: 34:93:0e:e4:67:23:f6:e1:36:ff:8a:25:55:30:13: 83:54:15:aa:84:15:93:67:a8:e2:6c:5e:84:3f:3e: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:33:F0:14:C2:6E:3F:FA:D6:14:F8:80:4A:C1:7D:78:B8:B9:50 X509v3 Authority Key Identifier: keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fb:78:21:f6:8e:b4:2c:41:4d:e7:6f:01:c4:d6:b2:7f:b3: 6f:29:37:51:05:66:01:64:8f:4e:43:86:9e:c6:cf:4a:3f:d0: ec:db:c2:c3:a8:ea:62:12:a8:b6:4e:c7:d4:2b:e8:65:8e:c3: 0f:42:c1:91:07:07:8c:18:7f:21:56:16:51:45:08:5d:2f:20: b1:4d:ff:64:cd:9f:9c:e1:f1:4d:c9:82:76:f4:c7:14:f4:b3: 7b:18:d9:a6:07:a7:f5:3e:7a:e7:1e:a3:96:93:9f:b4:e1:d2: df:41:6b:80:bb:80:60:36:0a:62:26:b8:77:44:61:de:fb:59: 63:b3:5c:b5:95:27:95:a8:2f:fd:12:e9:56:39:9a:fb:c4:15: 71:04:75:10:52:af:d9:98:98:a6:1c:b0:2a:fa:64:34:8c:b4: b9:52:c4:2d:b3:b1:88:6a:80:5b:6e:cf:c9:ad:62:38:0b:80: 9c:4f:4c:82:f1:ff:5e:67:e7:9b:21:f7:75:cb:8e:ce:fa:18: 18:34:af:e0:1e:35:b4:a5:0d:8a:c4:c4:76:37:44:00:a0:41: 2e:21:b3:d0:9f:78:e6:7a:c5:a1:3e:0a:70:45:85:24:5f:ff: a4:82:6f:c5:f3:dd:01:f7:04:d6:0c:9e:1b:4f:06:5a:2f:fe: 8a:cf:79:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURB3EbMIRH5Ni8RdWCf55QaLFp74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3 RkU1QjVDQzAeFw0yNjA3MjgxNjM3MjJaFw0yNjA3MjkxODMxMjJaMDMxMTAvBgNV BAMTKEQxNkIzM0YwMTRDMjZFM0ZGQUQ2MTRGODgwNEFDMTdENzhCOEI5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVqTpng+P6LZCX0FIqvZ25eTk1 oxggn2DszDt9oLn898Q4xfRq4/OWJKdvxSRSndXJXUJO8Y7tOR0Rlk0TYcj09bwL bgKnT5qUv1WyPPf0HCWegU682mH3A1O+vNy3Oflgz/m5Bl3JJ0pnz8O95w2ZKB8E +h8yg2yaoZnmrwT3yFNqAvl7Akluxf5cWwlfXj0FNnQOncIoOcxLL9yHw1NsIBGX BVzOqk4Wvp3/Itrzl6e+XqvRzhdH6P8jXJCPUU2h0HPDMr9JAUrUiclOqKshGuSe 8wDhyn2HhdNznFnpfDSTDuRnI/bhNv+KJVUwE4NUFaqEFZNnqOJsXoQ/PnFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Wsz8BTCbj/61hT4gErBfXi4uVAwHwYDVR0j BBgwFoAUwgQJXQ36KcoCIvTBvl5qnH/ltcwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjkwZDAyNjUtMmNjMS00NjNkLTk0OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQw REZBMjlDQTAyMjJGNEMxQkU1RTZBOUM3RkU1QjVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMjA0MDk1RDBERkEyOUNBMDIyMkY0QzFCRTVFNkE5QzdGRTVC NUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQzIwNDA5NUQwREZBMjlDQTAyMjJGNEMxQkU1RTZB OUM3RkU1QjVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj7eCH2jrQsQU3nbwHE1rJ/s28pN1EFZgFk j05Dhp7Gz0o/0OzbwsOo6mISqLZOx9Qr6GWOww9CwZEHB4wYfyFWFlFFCF0vILFN /2TNn5zh8U3Jgnb0xxT0s3sY2aYHp/U+euceo5aTn7Th0t9Ba4C7gGA2CmImuHdE Yd77WWOzXLWVJ5WoL/0S6VY5mvvEFXEEdRBSr9mYmKYcsCr6ZDSMtLlSxC2zsYhq gFtuz8mtYjgLgJxPTILx/15n55sh93XLjs76GBg0r+AeNbSlDYrExHY3RACgQS4h s9CfeOZ6xaE+CnBFhSRf/6SCb8Xz3QH3BNYMnhtPBlov/orPeVc= -----END CERTIFICATE-----Generated at Tue Jul 28 22:07:23 2026 by rpki-client