$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: hcRbupZpKH5n8MRrc8s2ty5KWtDL/Mt33tYr80cp2Jo= Subject key identifier: A2:F7:DD:DA:3B:25:AF:87:F1:42:2C:28:4E:6E:F9:2F:BD:B6:61:A4 Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 2BB118366AFDFF18156CC500A73A9142A6D42A42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 11:04:16 +0000 Manifest this update: Wed 29 Jul 2026 10:59:16 +0000 Manifest next update: Thu 30 Jul 2026 11:21:16 +0000 Files and hashes: 1: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: pSb0aAmhEtzEcN8agdbWp/MNZm5sGYhZI6Mj2uye0FM=) 2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 3: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b1:18:36:6a:fd:ff:18:15:6c:c5:00:a7:3a:91:42:a6:d4:2a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Jul 29 10:59:16 2026 GMT Not After : Jul 30 11:21:16 2026 GMT Subject: CN=A2F7DDDA3B25AF87F1422C284E6EF92FBDB661A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:ad:f9:78:60:e7:36:df:68:71:b8:fb:d8: 50:d6:86:52:26:9f:70:c9:6d:50:81:6f:66:8d:00: 23:b9:3d:e7:25:1e:38:ea:04:a9:b0:e8:4d:f3:79: e7:89:e6:e5:f3:58:9a:31:3a:b4:7e:a1:0f:c7:44: 1b:97:66:96:23:c6:5f:fe:3e:8b:f1:14:b3:3c:28: 46:11:f4:a1:d2:0d:0c:81:8f:e0:20:d9:ef:27:ce: de:03:f9:f9:92:fa:f4:ff:c6:0a:b8:15:72:fb:5c: aa:77:e2:6c:3a:db:7e:3d:dd:51:4c:b4:86:8d:c4: f4:5b:b1:fd:91:db:3a:0c:d6:62:db:b8:ee:92:c0: 00:56:c6:fd:69:57:69:eb:e3:4c:29:12:a4:b3:94: 84:4d:72:99:42:70:dc:be:d5:d8:29:1a:e5:47:8c: 55:3d:79:56:92:f9:84:98:a2:d9:b4:4f:4e:9b:5e: f3:0c:22:35:b8:b1:59:6c:0e:5b:6f:7d:32:8f:5f: ec:99:04:95:9a:5c:b7:9b:c0:90:25:c8:91:cc:d8: 09:9e:b0:a6:3e:cb:dc:4c:97:98:7e:4d:87:9f:d0: bb:1d:b6:b0:e6:ac:2c:78:4d:6d:21:b6:ef:88:5b: a2:54:93:71:f5:28:c5:60:e2:d1:ad:46:df:44:6c: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F7:DD:DA:3B:25:AF:87:F1:42:2C:28:4E:6E:F9:2F:BD:B6:61:A4 X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b9:1f:42:e9:d4:50:bd:f1:9c:ef:de:c8:59:fc:95:54:df: 95:e1:90:98:a2:69:16:88:18:17:56:20:cc:9e:35:e3:eb:82: 14:73:c3:29:13:d7:28:1c:4b:e4:e5:e4:81:a7:9d:3f:63:cb: e0:aa:8a:f7:36:c3:dd:0d:dc:b1:2a:c6:41:ae:81:2e:5c:7a: 6a:cc:11:7d:c9:0c:d7:a1:e8:b4:ae:e5:ee:1e:4c:2b:6a:c0: f9:a3:3d:92:a3:12:eb:a7:80:83:4b:53:a9:00:d3:c4:46:dd: e4:1a:1a:d3:f9:57:fb:71:bd:f6:67:28:0c:fc:b3:76:ec:75: 3a:46:dd:7a:85:b6:56:db:e4:bc:13:c8:58:fc:c7:10:f5:9d: 09:67:ee:6e:16:35:7e:6a:18:8e:f5:3f:02:6c:7e:81:9b:df: b3:c3:65:7d:75:1f:52:8e:ec:ef:2c:89:2a:68:4d:37:b7:f8: 21:24:8f:a3:56:61:80:e5:39:cc:6e:a4:66:46:6f:a4:6d:6e: e7:2b:90:21:8c:b5:a6:06:68:b1:8c:28:c5:66:4b:2e:10:1b: 38:b2:a3:d2:d4:97:ac:7b:a8:f4:d4:0a:f4:4b:3f:ce:64:6d: a5:0d:f2:b2:90:8d:ec:4a:35:3e:66:e5:ed:5c:82:da:8e:a6: 3e:96:9c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7EYNmr9/xgVbMUApzqRQqbUKkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA3MjkxMDU5MTZaFw0yNjA3MzAxMTIxMTZaMDMxMTAvBgNV BAMTKEEyRjdERERBM0IyNUFGODdGMTQyMkMyODRFNkVGOTJGQkRCNjYxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+635eGDnNt9ocbj72FDWhlIm n3DJbVCBb2aNACO5PeclHjjqBKmw6E3zeeeJ5uXzWJoxOrR+oQ/HRBuXZpYjxl/+ PovxFLM8KEYR9KHSDQyBj+Ag2e8nzt4D+fmS+vT/xgq4FXL7XKp34mw623493VFM tIaNxPRbsf2R2zoM1mLbuO6SwABWxv1pV2nr40wpEqSzlIRNcplCcNy+1dgpGuVH jFU9eVaS+YSYotm0T06bXvMMIjW4sVlsDltvfTKPX+yZBJWaXLebwJAlyJHM2Ame sKY+y9xMl5h+TYef0LsdtrDmrCx4TW0htu+IW6JUk3H1KMVg4tGtRt9EbBUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovfd2jslr4fxQiwoTm75L722YaQwHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm5H0Lp1FC98Zzv3shZ/JVU35XhkJiiaRaI GBdWIMyeNePrghRzwykT1ygcS+Tl5IGnnT9jy+Cqivc2w90N3LEqxkGugS5cemrM EX3JDNeh6LSu5e4eTCtqwPmjPZKjEuungINLU6kA08RG3eQaGtP5V/txvfZnKAz8 s3bsdTpG3XqFtlbb5LwTyFj8xxD1nQln7m4WNX5qGI71PwJsfoGb37PDZX11H1KO 7O8siSpoTTe3+CEkj6NWYYDlOcxupGZGb6RtbucrkCGMtaYGaLGMKMVmSy4QGziy o9LUl6x7qPTUCvRLP85kbaUN8rKQjexKNT5m5e1cgtqOpj6WnDQ= -----END CERTIFICATE-----Generated at Wed Jul 29 16:41:08 2026 by rpki-client