$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: w7YH4387h2UaCQ0vQAI0Nw3L7s9cNbbDsnZYeNS6qBg= Subject key identifier: 36:0E:43:C7:BC:CC:C9:F5:18:14:E0:97:24:B7:4D:B0:05:25:B2:B2 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 4CC67393DE7FF870339B89A166C365F602EDD02A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:34:29 +0000 Manifest this update: Tue 28 Jul 2026 14:29:29 +0000 Manifest next update: Wed 29 Jul 2026 17:41:29 +0000 Files and hashes: 1: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 3: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: 3sDTBrw4WWUzOcKU4U/bQrn9dGbAtMXOgwbnQEMEuoY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c6:73:93:de:7f:f8:70:33:9b:89:a1:66:c3:65:f6:02:ed:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Jul 28 14:29:29 2026 GMT Not After : Jul 29 17:41:29 2026 GMT Subject: CN=360E43C7BCCCC9F51814E09724B74DB00525B2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:97:2d:59:2b:3a:64:87:2d:48:ed:af:d8: 24:78:ef:f8:a6:6e:31:33:61:cb:0f:30:ab:33:42: 5d:0a:00:19:0e:7b:5b:77:b8:9b:aa:b5:4e:41:48: d1:a8:3f:0c:8a:2d:fe:74:70:49:fb:fd:82:e1:f9: 77:fd:20:d6:d2:bc:25:41:d8:e8:23:76:42:2d:0f: 95:f3:11:a4:49:85:9e:cd:74:07:a7:7f:61:f2:a7: 6f:fc:5c:e8:d7:7c:d2:3a:ef:7a:11:76:a3:c3:5d: 1d:ca:91:5b:14:be:d2:33:6d:08:30:c0:03:4d:ab: 6e:35:d4:ed:85:67:b3:6a:5b:74:fd:af:7c:a0:e6: 6b:66:32:86:8a:72:40:6a:0e:f1:86:23:b6:11:b3: b4:df:38:40:69:0f:c0:7b:99:76:aa:e9:5a:69:fb: 73:d0:f7:ef:b4:43:8d:8a:53:e6:49:b3:65:85:92: bf:91:bf:a1:20:71:09:5d:dd:0c:59:57:aa:a8:ff: 23:1a:6b:fc:25:0b:f3:71:bc:d9:fe:bc:22:18:c5: c2:9d:b3:73:a4:12:0a:90:bc:d8:e7:48:29:d5:9d: 25:fe:ce:18:18:f7:00:08:4c:3a:b1:0f:22:b8:f8: 1e:ad:64:55:ef:0e:12:83:51:85:30:68:c3:b2:48: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:43:C7:BC:CC:C9:F5:18:14:E0:97:24:B7:4D:B0:05:25:B2:B2 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:97:ba:16:5e:00:98:79:33:07:1d:22:d1:27:db:ac:d4: 15:57:6f:5d:b4:3b:0a:e3:b0:07:f0:db:38:57:b1:f1:58:4b: 03:e8:ba:45:6b:9a:58:e2:8c:be:61:90:cb:76:1b:e5:6a:fa: a5:49:b0:fd:50:b3:ee:c2:3c:42:41:d0:ed:fe:37:2a:ff:05: be:a2:dc:86:69:f5:fd:29:50:09:1d:a1:8a:8c:3b:11:f5:de: cf:ac:ef:f4:fd:f6:bb:6f:ce:11:f3:6c:e5:b9:5d:f7:b9:98: 7b:70:86:fe:9f:5a:3b:23:ca:2e:6e:5a:a3:de:bf:5c:4d:d8: 45:12:a1:41:30:1a:6f:ca:35:2c:c3:4f:28:da:fb:2a:09:f9: 1b:6e:ec:7d:16:ab:d6:35:7a:e9:55:3b:d1:40:9f:10:37:dd: 9c:9b:6a:22:55:f6:1f:98:bc:29:e1:72:3c:9f:ca:ab:b4:c6: ab:c0:ef:01:8b:60:e7:f7:86:8b:83:12:c6:1a:9a:74:a3:4c: cf:68:28:63:54:4a:cb:91:71:79:a5:22:07:fe:82:8a:f3:58: 5a:80:56:a4:b3:06:32:2e:3f:bc:7c:58:36:17:c5:dd:07:b5: 37:c3:40:42:a8:b2:77:e2:a7:ff:61:43:25:65:6e:fe:46:47: 45:1d:21:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMZzk95/+HAzm4mhZsNl9gLt0CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA3MjgxNDI5MjlaFw0yNjA3MjkxNzQxMjlaMDMxMTAvBgNV BAMTKDM2MEU0M0M3QkNDQ0M5RjUxODE0RTA5NzI0Qjc0REIwMDUyNUIyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A5ctWSs6ZIctSO2v2CR47/im bjEzYcsPMKszQl0KABkOe1t3uJuqtU5BSNGoPwyKLf50cEn7/YLh+Xf9INbSvCVB 2OgjdkItD5XzEaRJhZ7NdAenf2Hyp2/8XOjXfNI673oRdqPDXR3KkVsUvtIzbQgw wANNq2411O2FZ7NqW3T9r3yg5mtmMoaKckBqDvGGI7YRs7TfOEBpD8B7mXaq6Vpp +3PQ9++0Q42KU+ZJs2WFkr+Rv6EgcQld3QxZV6qo/yMaa/wlC/NxvNn+vCIYxcKd s3OkEgqQvNjnSCnVnSX+zhgY9wAITDqxDyK4+B6tZFXvDhKDUYUwaMOySN1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNg5Dx7zMyfUYFOCXJLdNsAUlsrIwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETKl7oWXgCYeTMHHSLRJ9us1BVXb120Owrj sAfw2zhXsfFYSwPoukVrmljijL5hkMt2G+Vq+qVJsP1Qs+7CPEJB0O3+Nyr/Bb6i 3IZp9f0pUAkdoYqMOxH13s+s7/T99rtvzhHzbOW5Xfe5mHtwhv6fWjsjyi5uWqPe v1xN2EUSoUEwGm/KNSzDTyja+yoJ+Rtu7H0Wq9Y1eulVO9FAnxA33ZybaiJV9h+Y vCnhcjyfyqu0xqvA7wGLYOf3houDEsYamnSjTM9oKGNUSsuRcXmlIgf+gorzWFqA VqSzBjIuP7x8WDYXxd0HtTfDQEKosnfip/9hQyVlbv5GR0UdISA= -----END CERTIFICATE-----Generated at Wed Jul 29 00:50:14 2026 by rpki-client