$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: SK8XZY9at45fBsDHGpJHFM86pbssQcUuWunGQxGmR5s= Subject key identifier: 01:BF:7B:4E:D4:3A:DD:93:9C:D0:63:94:D6:44:E3:EF:B9:39:29:6B Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 2196AF108F32AA87C89704B995F1725E9F1EDC6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 06:08:20 +0000 Manifest this update: Wed 29 Jul 2026 06:03:20 +0000 Manifest next update: Thu 30 Jul 2026 06:20:20 +0000 Files and hashes: 1: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 2: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: /vcNSOGCdYQjOpvbOd6o6BOL1KTaGhJU8Yz7SjCX9rQ=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:96:af:10:8f:32:aa:87:c8:97:04:b9:95:f1:72:5e:9f:1e:dc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Jul 29 06:03:20 2026 GMT Not After : Jul 30 06:20:20 2026 GMT Subject: CN=01BF7B4ED43ADD939CD06394D644E3EFB939296B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:a5:2e:ff:93:66:c7:48:65:02:bb:3d:c0: b0:74:e6:28:78:95:49:26:73:7f:36:83:78:97:65: 44:43:ca:ef:25:a3:24:de:29:66:d5:2c:ed:79:98: 17:74:9a:78:8f:97:5b:77:1e:3a:39:55:0f:fa:45: e6:88:dc:cf:d0:ad:aa:e3:37:be:e7:68:c4:49:6f: dc:fe:b1:ce:36:41:df:2d:39:67:c9:2e:6c:80:d3: f0:3b:5f:b7:10:a8:71:5f:77:65:4a:9d:64:a6:60: 1c:5e:15:34:e8:a9:5a:ad:70:c4:4a:d0:58:6f:be: b0:20:47:87:c8:26:e6:e5:fc:72:0c:e8:f0:de:b6: 58:c3:97:b8:d3:2f:4f:6e:69:65:23:c2:6a:55:1b: 8f:86:d1:58:8f:cd:49:27:5f:6c:01:6d:ef:f4:ee: 4d:48:44:58:5f:50:1a:e6:94:40:b2:de:98:85:79: 2a:82:3e:7a:db:09:20:17:72:dc:1a:45:e9:45:d6: c4:1e:a1:93:8d:6b:85:3d:05:d7:3e:26:c8:85:31: 90:d1:c2:e2:03:b5:a0:d0:a5:ab:38:0d:1c:c0:00: ce:2f:91:9b:11:57:c5:cf:3c:0f:67:73:46:22:b6: e3:ad:ee:19:4a:c1:76:e4:23:16:06:a4:f5:13:b4: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BF:7B:4E:D4:3A:DD:93:9C:D0:63:94:D6:44:E3:EF:B9:39:29:6B X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1b:b3:9c:7a:82:ee:39:96:e6:e5:6f:e1:32:de:31:1b:b3: c8:aa:1d:84:0a:ac:c8:68:b9:8d:44:9c:44:15:a8:a0:f3:ab: fa:ef:01:89:9f:df:b6:20:f1:44:c9:a6:04:51:40:67:45:43: d3:97:a0:1b:9b:4d:75:ea:f4:3e:c8:76:9d:0b:d3:ca:9f:63: a8:bb:ca:b9:84:14:7c:bd:d8:0f:6f:79:92:86:ec:f4:d8:d2: 1e:61:35:de:21:67:53:28:72:6b:cc:6c:ff:c9:42:4f:a0:db: 69:c2:40:11:bb:a4:6c:55:8b:6b:51:b8:8a:12:aa:ab:d0:fb: 13:eb:a4:1f:94:cf:9d:55:c7:eb:27:fb:41:34:55:96:ef:8c: fd:d6:26:d1:6c:69:55:76:4c:51:bd:e1:5a:0c:76:f0:94:02: fe:2c:c9:c7:ab:a8:19:ab:ec:53:6a:34:6e:68:44:01:eb:4d: 56:8e:56:92:27:18:cd:52:0e:81:52:52:4e:6d:45:cf:87:06: e5:96:9a:e6:76:37:18:91:3c:40:b4:a7:ae:9d:9e:8c:8a:be: 0c:d0:b2:21:40:ec:56:78:55:dd:a2:91:60:5c:91:2d:ad:95: 1f:3a:b8:e9:03:f3:a4:df:40:4d:5e:bf:b4:81:74:25:b8:94: ac:01:82:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZavEI8yqofIlwS5lfFyXp8e3G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA3MjkwNjAzMjBaFw0yNjA3MzAwNjIwMjBaMDMxMTAvBgNV BAMTKDAxQkY3QjRFRDQzQUREOTM5Q0QwNjM5NEQ2NDRFM0VGQjkzOTI5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4KUu/5Nmx0hlArs9wLB05ih4 lUkmc382g3iXZURDyu8loyTeKWbVLO15mBd0mniPl1t3Hjo5VQ/6ReaI3M/Qrarj N77naMRJb9z+sc42Qd8tOWfJLmyA0/A7X7cQqHFfd2VKnWSmYBxeFTToqVqtcMRK 0FhvvrAgR4fIJubl/HIM6PDetljDl7jTL09uaWUjwmpVG4+G0ViPzUknX2wBbe/0 7k1IRFhfUBrmlECy3piFeSqCPnrbCSAXctwaRelF1sQeoZONa4U9Bdc+JsiFMZDR wuIDtaDQpas4DRzAAM4vkZsRV8XPPA9nc0YituOt7hlKwXbkIxYGpPUTtLjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAb97TtQ63ZOc0GOU1kTj77k5KWswHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEbs5x6gu45lublb+Ey3jEbs8iqHYQKrMho uY1EnEQVqKDzq/rvAYmf37Yg8UTJpgRRQGdFQ9OXoBubTXXq9D7Idp0L08qfY6i7 yrmEFHy92A9veZKG7PTY0h5hNd4hZ1MocmvMbP/JQk+g22nCQBG7pGxVi2tRuIoS qqvQ+xPrpB+Uz51Vx+sn+0E0VZbvjP3WJtFsaVV2TFG94VoMdvCUAv4sycerqBmr 7FNqNG5oRAHrTVaOVpInGM1SDoFSUk5tRc+HBuWWmuZ2NxiRPEC0p66dnoyKvgzQ siFA7FZ4Vd2ikWBckS2tlR86uOkD86TfQE1ev7SBdCW4lKwBgsQ= -----END CERTIFICATE-----Generated at Wed Jul 29 07:48:56 2026 by rpki-client