$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: IyJ2oYQB3+IjhDZdjS5gAeTp++qYmT5ND7nJm1T8XQE= Subject key identifier: 5A:6D:A8:45:8F:5B:8F:5A:8C:21:B0:21:90:3E:4F:02:A6:93:A0:77 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 759ECD304814998A53DA6AF3CAB72DF8EE3BD208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 09:23:32 +0000 Manifest this update: Tue 28 Jul 2026 09:18:32 +0000 Manifest next update: Wed 29 Jul 2026 12:35:32 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: C3CC1Qj1ugeFHMRfTv9Ehl7KYY5udLruBuJ37MXDJw4=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9e:cd:30:48:14:99:8a:53:da:6a:f3:ca:b7:2d:f8:ee:3b:d2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Jul 28 09:18:32 2026 GMT Not After : Jul 29 12:35:32 2026 GMT Subject: CN=5A6DA8458F5B8F5A8C21B021903E4F02A693A077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:b8:52:76:1e:66:8d:cf:2e:5e:8d:96:a6: 56:e4:06:83:84:31:f9:4a:76:4b:24:63:fd:88:3d: ab:80:52:c0:d5:66:80:e9:6c:23:37:dc:ec:6e:23: bb:7d:7f:84:8f:09:b6:b5:89:e0:34:64:a8:9d:fa: e7:f6:03:73:da:36:57:2c:bb:61:0a:82:36:4b:2f: f9:40:e6:fe:c7:dc:94:ad:9b:15:d5:28:23:af:ce: cb:d1:5f:4f:d5:24:65:d0:ba:88:b5:47:ab:f0:3e: d0:e6:2f:55:0f:07:ca:03:b3:81:bc:76:cc:eb:d1: 3c:7c:98:54:aa:d7:bf:9d:8a:1b:52:ec:e0:bd:4e: fe:66:61:20:4d:b7:b3:7c:31:6e:7b:c6:10:43:36: 0d:9a:ac:ca:c1:62:9d:fd:46:21:9e:ac:37:9b:e5: 20:f1:5e:95:68:19:3e:97:0c:3b:dc:d9:44:bc:70: 1e:09:8a:29:69:d0:47:02:69:34:31:8d:00:8f:ce: 31:37:cb:06:3f:db:3d:98:d8:b7:55:fd:b0:51:00: b6:3b:93:ce:10:88:76:cf:91:5d:50:95:ec:e1:bd: 5f:44:20:3c:51:cc:3d:ea:15:2b:df:82:7f:57:a6: 90:5b:8b:76:3f:4f:f7:cf:e9:0f:d0:c7:3e:cb:1a: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:A8:45:8F:5B:8F:5A:8C:21:B0:21:90:3E:4F:02:A6:93:A0:77 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0b:d7:1d:2d:61:24:71:a0:9a:e3:72:5b:e1:51:fc:a3:e9: 4f:cd:47:c0:fe:d2:74:52:28:50:ae:6e:e6:50:48:ce:4e:89: 00:db:9b:78:6c:a3:36:9b:2a:e9:3d:33:db:4f:ec:ef:34:97: 59:c1:4e:57:b9:d8:2d:83:99:ab:43:7c:03:c6:c0:21:d2:9f: 83:82:ec:78:c5:ea:b1:d4:08:39:00:4e:f2:c6:c9:bc:4e:d6: d7:eb:d3:55:7a:d2:54:0c:d3:c9:8a:3e:16:42:b7:34:f1:d5: e1:a2:58:77:53:ba:6d:48:59:74:3e:26:f2:26:6f:02:84:e3: 74:24:9a:bb:3c:24:31:22:91:ca:4f:e9:a7:a6:ad:58:fe:d8: 6b:f1:3d:c4:7a:f4:59:e1:78:bb:93:5a:76:f3:09:da:a0:b3: bd:cc:05:f5:ed:30:02:21:9b:d5:31:7e:a4:8a:f8:4d:8d:77: ec:16:e5:4e:75:dd:c3:0f:66:2b:10:7b:97:68:1f:a1:2b:38: 9d:98:8b:e5:3c:88:7c:f6:d0:d5:b5:67:0e:6b:59:b3:45:72: 50:7c:8d:98:f8:6f:34:28:1f:0e:d0:a0:bf:68:e9:f4:17:60: 6e:f5:81:51:ee:ff:17:0a:ed:d0:cc:20:db:bc:70:1d:f7:db: 63:76:58:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZ7NMEgUmYpT2mrzyrct+O470ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA3MjgwOTE4MzJaFw0yNjA3MjkxMjM1MzJaMDMxMTAvBgNV BAMTKDVBNkRBODQ1OEY1QjhGNUE4QzIxQjAyMTkwM0U0RjAyQTY5M0EwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqrhSdh5mjc8uXo2WplbkBoOE MflKdkskY/2IPauAUsDVZoDpbCM33OxuI7t9f4SPCba1ieA0ZKid+uf2A3PaNlcs u2EKgjZLL/lA5v7H3JStmxXVKCOvzsvRX0/VJGXQuoi1R6vwPtDmL1UPB8oDs4G8 dszr0Tx8mFSq17+dihtS7OC9Tv5mYSBNt7N8MW57xhBDNg2arMrBYp39RiGerDeb 5SDxXpVoGT6XDDvc2US8cB4Jiilp0EcCaTQxjQCPzjE3ywY/2z2Y2LdV/bBRALY7 k84QiHbPkV1QlezhvV9EIDxRzD3qFSvfgn9XppBbi3Y/T/fP6Q/Qxz7LGjy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWm2oRY9bj1qMIbAhkD5PAqaToHcwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAL1x0tYSRxoJrjclvhUfyj6U/NR8D+0nRS KFCubuZQSM5OiQDbm3hsozabKuk9M9tP7O80l1nBTle52C2DmatDfAPGwCHSn4OC 7HjF6rHUCDkATvLGybxO1tfr01V60lQM08mKPhZCtzTx1eGiWHdTum1IWXQ+JvIm bwKE43Qkmrs8JDEikcpP6aemrVj+2GvxPcR69FnheLuTWnbzCdqgs73MBfXtMAIh m9UxfqSK+E2Nd+wW5U513cMPZisQe5doH6ErOJ2Yi+U8iHz20NW1Zw5rWbNFclB8 jZj4bzQoHw7QoL9o6fQXYG71gVHu/xcK7dDMINu8cB3322N2WAI= -----END CERTIFICATE-----Generated at Tue Jul 28 23:04:20 2026 by rpki-client