$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: F9p4yNS3h398VFc4rZiASBg3V/+fA/t1uAAJTyW1Mtg= Subject key identifier: 95:F1:0C:20:BC:8B:45:E3:5E:EA:22:CF:C4:80:B8:8D:8A:7E:B1:C0 Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 40474D06C0A021F9A15CC1011230C88AF046AD29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 14:07:52 +0000 Manifest this update: Wed 29 Jul 2026 14:02:52 +0000 Manifest next update: Thu 30 Jul 2026 16:28:52 +0000 Files and hashes: 1: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) 2: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: VXm8HobqSvnRh/6OvxAuknexVkrJkIYjoo5SQEn1+m4=) 3: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 4: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 5: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) 6: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:4d:06:c0:a0:21:f9:a1:5c:c1:01:12:30:c8:8a:f0:46:ad:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: Jul 29 14:02:52 2026 GMT Not After : Jul 30 16:28:52 2026 GMT Subject: CN=95F10C20BC8B45E35EEA22CFC480B88D8A7EB1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:af:c3:e8:0d:ff:7d:63:4b:6f:08:3a:2e: 55:79:a9:1b:67:ea:ef:a4:f5:03:60:da:0a:27:bd: 3a:57:e8:0e:ff:64:0e:e0:51:74:b4:4c:f9:3a:06: 70:34:1f:08:92:0c:2d:6b:c8:fa:56:3d:29:af:32: 7f:6d:cf:61:99:32:f6:94:23:33:c3:5b:86:83:1a: 4b:50:e8:b4:4c:65:da:ba:c5:f0:48:12:7c:72:5a: cd:ff:84:ea:ee:dc:84:be:30:28:47:58:ef:7d:a9: 79:fd:42:47:9a:79:f2:9f:f2:64:64:64:49:f9:31: 3a:94:63:3c:07:a8:10:a9:00:d9:84:c2:ad:c6:1c: 18:a5:99:50:46:72:94:fa:f1:4f:a8:9b:1c:f7:c1: 12:b5:4b:22:7a:57:97:ac:5a:5e:a0:37:16:5d:e8: 62:50:6b:42:78:a5:bf:39:c6:dc:5f:4a:8f:77:0b: bc:35:d9:f2:a2:49:85:dd:fd:84:09:52:01:03:e6: 01:44:14:05:49:e0:a6:c3:ec:23:44:96:12:4a:9b: 04:33:bb:42:7c:ef:8e:f3:05:68:3c:50:ce:70:28: 12:a4:a0:85:54:d1:f9:ae:2a:30:b6:a8:3e:71:f5: fe:93:24:08:71:45:48:2d:22:3f:d4:c9:cc:36:8b: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:0C:20:BC:8B:45:E3:5E:EA:22:CF:C4:80:B8:8D:8A:7E:B1:C0 X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:51:52:9b:06:fd:54:64:ff:ec:d7:cd:3a:63:6b:b9:83:c0: 6c:c2:63:cf:a0:d9:2c:27:55:5b:e5:b0:fd:c6:10:e4:18:e6: dd:92:d7:a2:d7:09:6a:59:f4:7b:33:85:f4:5b:f6:c3:f2:37: 19:71:54:cd:e8:1d:eb:cf:bb:4a:1d:21:64:7f:fc:ac:b0:30: bd:3a:fa:cf:33:ca:b3:a9:61:8f:36:76:3b:cf:c9:92:6d:75: 1e:d2:8c:f1:8f:9f:aa:0f:38:0b:5a:38:a9:b2:9a:bc:75:29: 05:33:c1:fd:9a:84:8e:20:4c:11:de:c5:8b:d5:8d:af:78:d6: 4b:16:da:cf:8e:62:dc:78:e2:87:45:66:ef:e7:75:88:ae:66: 24:b6:5c:07:cb:0e:02:ad:1d:b0:c2:b6:84:48:2f:1a:37:5f: 1d:db:25:73:c8:36:6a:e7:96:db:1c:22:9e:79:41:d3:01:2c: 60:d4:c4:92:4a:dc:ba:7c:c5:a2:ca:10:cc:e7:62:4e:78:45: 16:76:73:19:a3:7e:03:20:41:f2:9c:63:05:28:7b:19:14:92: 62:9c:a9:7b:28:36:b5:a3:a6:56:b4:99:2b:6c:13:c8:b3:f8: 3b:05:cb:11:7a:82:db:87:03:13:01:6e:5e:e1:64:dd:2f:01: 4f:00:4d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEdNBsCgIfmhXMEBEjDIivBGrSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA3MjkxNDAyNTJaFw0yNjA3MzAxNjI4NTJaMDMxMTAvBgNV BAMTKDk1RjEwQzIwQkM4QjQ1RTM1RUVBMjJDRkM0ODBCODhEOEE3RUIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVLa/D6A3/fWNLbwg6LlV5qRtn 6u+k9QNg2gonvTpX6A7/ZA7gUXS0TPk6BnA0HwiSDC1ryPpWPSmvMn9tz2GZMvaU IzPDW4aDGktQ6LRMZdq6xfBIEnxyWs3/hOru3IS+MChHWO99qXn9QkeaefKf8mRk ZEn5MTqUYzwHqBCpANmEwq3GHBilmVBGcpT68U+omxz3wRK1SyJ6V5esWl6gNxZd 6GJQa0J4pb85xtxfSo93C7w12fKiSYXd/YQJUgED5gFEFAVJ4KbD7CNElhJKmwQz u0J8747zBWg8UM5wKBKkoIVU0fmuKjC2qD5x9f6TJAhxRUgtIj/Uycw2i9N7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlfEMILyLReNe6iLPxIC4jYp+scAwHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZRUpsG/VRk/+zXzTpja7mDwGzCY8+g2Swn VVvlsP3GEOQY5t2S16LXCWpZ9HszhfRb9sPyNxlxVM3oHevPu0odIWR//KywML06 +s8zyrOpYY82djvPyZJtdR7SjPGPn6oPOAtaOKmymrx1KQUzwf2ahI4gTBHexYvV ja941ksW2s+OYtx44odFZu/ndYiuZiS2XAfLDgKtHbDCtoRILxo3Xx3bJXPINmrn ltscIp55QdMBLGDUxJJK3Lp8xaLKEMznYk54RRZ2cxmjfgMgQfKcYwUoexkUkmKc qXsoNrWjpla0mStsE8iz+DsFyxF6gtuHAxMBbl7hZN0vAU8ATXA= -----END CERTIFICATE-----Generated at Wed Jul 29 17:22:24 2026 by rpki-client