$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json) Hash identifier: 1CtEAU0YoYvsY6KcTlibgXagiA2ZsBdyIoN/ZCHP4pQ= Subject key identifier: B9:E5:16:46:DB:2F:EF:04:0D:27:EF:21:AD:29:74:06:D5:6C:21:2A Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635 Certificate serial: 28DF96310ECCF006DF19071DED1C4AB89CA7047F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 00:47:10 +0000 Manifest this update: Wed 29 Jul 2026 00:42:10 +0000 Manifest next update: Thu 30 Jul 2026 00:56:10 +0000 Files and hashes: 1: 11FFFA845980AD12347D7297657117A393722635.crl (hash: tIXm1/88xRtlnpMfs9oG8PnkR3UAWMYr7alae7fL0MI=) 2: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:df:96:31:0e:cc:f0:06:df:19:07:1d:ed:1c:4a:b8:9c:a7:04:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FFFA845980AD12347D7297657117A393722635 Validity Not Before: Jul 29 00:42:10 2026 GMT Not After : Jul 30 00:56:10 2026 GMT Subject: CN=B9E51646DB2FEF040D27EF21AD297406D56C212A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:7b:18:27:20:9f:be:62:5b:1a:9f:9c:3f: 69:99:73:12:81:98:48:b8:cb:96:d4:65:18:17:38: b5:a6:f2:ac:2e:1d:e0:60:bf:55:93:17:54:f5:51: c7:c3:3f:d9:27:1e:17:1c:e4:4a:a3:f5:5d:a4:ac: c7:52:0c:a8:b8:6f:91:34:de:e1:c2:27:1f:4c:24: cb:8e:60:f7:35:07:d1:cc:af:90:64:8d:b2:28:25: 2b:81:82:c4:49:c3:11:39:c6:c8:32:0f:76:35:a5: 53:ea:ff:64:e8:de:fa:28:1c:ad:8c:7a:e9:fe:24: d3:6b:cc:87:58:e6:dc:7e:c9:f8:0e:bb:fa:39:92: e0:dd:51:0d:9e:a0:8d:32:88:6f:72:1b:23:b0:b8: 52:20:47:d7:4f:38:19:88:cf:0c:cc:b8:6f:e1:c2: 67:7a:7c:00:5b:d2:1e:b9:fc:c4:98:5c:07:b8:58: 4c:41:67:81:20:0b:dc:1c:63:ff:05:f4:d4:98:55: 0b:87:c6:b0:8a:a5:28:a3:9f:71:5f:7e:24:ce:10: f3:36:f0:ee:fb:15:e4:9a:69:eb:35:99:af:61:47: 64:6f:cc:52:20:da:09:e0:e9:f9:d5:f9:3e:91:30: af:9b:83:55:db:17:f1:f1:2b:09:72:29:b5:cb:1d: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E5:16:46:DB:2F:EF:04:0D:27:EF:21:AD:29:74:06:D5:6C:21:2A X509v3 Authority Key Identifier: keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:22:4a:da:30:8f:7e:b7:b9:80:62:da:ce:40:65:3d:d7:e6: 87:64:a3:cd:7c:a4:93:e4:a4:6e:43:f9:6e:54:1f:54:f6:0e: 36:50:a3:3f:76:ef:a9:b8:9b:35:a9:db:14:a9:73:05:80:bf: 5f:60:da:35:f2:5b:ab:01:7f:b0:23:31:01:91:2a:30:76:30: 8d:e3:6b:14:78:31:cb:10:f4:9b:4f:f7:46:1a:9b:9b:d4:cb: d7:d4:6f:99:08:c3:5c:70:74:1c:19:d5:88:cf:b4:c9:ea:be: a0:d6:7b:ea:ee:32:9a:73:76:e1:9a:21:c2:3c:05:1f:51:1c: 9e:82:0b:1e:a8:39:59:82:6e:07:ed:55:8f:1c:5e:c9:24:74: 40:48:7d:49:59:56:e6:2c:45:e0:3d:b6:ad:61:44:f0:64:3d: 0d:0e:bb:56:68:62:67:c1:39:fb:5b:29:b7:3f:a9:6b:2f:19: 4a:7d:8c:b9:03:a8:fe:de:aa:07:1a:19:64:ee:62:1d:03:b3: ed:30:1c:d0:62:85:e1:44:5d:9c:96:ca:d2:52:4e:28:66:10: b0:ca:20:bf:14:b7:b0:58:00:2e:e1:e3:04:0d:0d:76:e6:ab: a7:74:30:1a:3f:d2:d3:97:30:86:94:d8:8d:8b:d9:ab:3a:ca: 0f:a7:7a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKN+WMQ7M8AbfGQcd7RxKuJynBH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5 MzcyMjYzNTAeFw0yNjA3MjkwMDQyMTBaFw0yNjA3MzAwMDU2MTBaMDMxMTAvBgNV BAMTKEI5RTUxNjQ2REIyRkVGMDQwRDI3RUYyMUFEMjk3NDA2RDU2QzIxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHHsYJyCfvmJbGp+cP2mZcxKB mEi4y5bUZRgXOLWm8qwuHeBgv1WTF1T1UcfDP9knHhcc5Eqj9V2krMdSDKi4b5E0 3uHCJx9MJMuOYPc1B9HMr5BkjbIoJSuBgsRJwxE5xsgyD3Y1pVPq/2To3vooHK2M eun+JNNrzIdY5tx+yfgOu/o5kuDdUQ2eoI0yiG9yGyOwuFIgR9dPOBmIzwzMuG/h wmd6fABb0h65/MSYXAe4WExBZ4EgC9wcY/8F9NSYVQuHxrCKpSijn3FffiTOEPM2 8O77FeSaaes1ma9hR2RvzFIg2gng6fnV+T6RMK+bg1XbF/HxKwlyKbXLHeMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUueUWRtsv7wQNJ+8hrSl0BtVsISowHwYDVR0j BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1 OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3 QTM5MzcyMjYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQiStowj363uYBi2s5AZT3X5odko818pJPk pG5D+W5UH1T2DjZQoz9276m4mzWp2xSpcwWAv19g2jXyW6sBf7AjMQGRKjB2MI3j axR4McsQ9JtP90Yam5vUy9fUb5kIw1xwdBwZ1YjPtMnqvqDWe+ruMppzduGaIcI8 BR9RHJ6CCx6oOVmCbgftVY8cXskkdEBIfUlZVuYsReA9tq1hRPBkPQ0Ou1ZoYmfB OftbKbc/qWsvGUp9jLkDqP7eqgcaGWTuYh0Ds+0wHNBiheFEXZyWytJSTihmELDK IL8Ut7BYAC7h4wQNDXbmq6d0MBo/0tOXMIaU2I2L2as6yg+nero= -----END CERTIFICATE-----Generated at Wed Jul 29 07:50:15 2026 by rpki-client