$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: nQVpV2cdk9chfvn/hFY0RVGmXyk+ZtWhqxVOwRr62s0= Subject key identifier: 29:7F:0F:25:9A:DE:A1:B5:96:44:5D:78:40:BC:DA:D8:A4:B4:9B:BB Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 5BD71C9ED6C0895A2C72BF2588351953AEA12AD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 06:03:13 +0000 Manifest this update: Wed 29 Jul 2026 05:58:13 +0000 Manifest next update: Thu 30 Jul 2026 08:57:13 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) 2: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: P83hsYUwupDdVGXHa4rSo2dN7uWcieAAxbt3Hr2KHwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d7:1c:9e:d6:c0:89:5a:2c:72:bf:25:88:35:19:53:ae:a1:2a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: Jul 29 05:58:13 2026 GMT Not After : Jul 30 08:57:13 2026 GMT Subject: CN=297F0F259ADEA1B596445D7840BCDAD8A4B49BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:b1:8c:f3:ca:1c:eb:7a:8d:83:e5:9e:82: f5:3b:72:b6:a8:3c:78:2f:a1:14:77:42:ce:54:64: 78:6c:65:7e:a3:09:fa:b6:13:f1:da:36:52:98:12: 58:80:15:04:7e:25:fb:c1:d8:99:7b:c3:e3:20:86: 74:e5:7f:dc:80:e0:50:24:f2:41:17:c0:10:10:03: 0f:7a:6b:e2:6a:26:17:b6:76:cc:b5:d9:ad:58:6b: f2:4a:1e:3c:f5:85:1e:7b:48:60:a4:38:76:9f:e9: 69:37:33:40:43:13:0c:d6:00:ff:2c:15:da:fb:34: 62:97:61:35:10:8c:bf:8f:92:5d:b8:ff:fd:26:33: b8:53:fb:18:11:e3:88:0d:04:b0:ff:7d:7a:a4:25: 00:fa:27:13:02:ab:37:d2:2f:22:71:69:5a:8b:4a: f7:f7:1e:f7:b9:33:b9:3d:cd:1b:2f:d1:3f:de:0b: ff:25:7d:15:14:42:cc:36:b9:70:8b:60:8f:87:45: 44:43:90:12:c8:d2:c5:bf:b2:9b:3e:2f:7d:f0:e1: 5a:66:77:f3:c4:a0:e2:60:b2:eb:c5:ab:c6:88:19: 3b:5e:e9:c6:df:dd:b9:9a:54:82:5d:35:d6:72:d1: a5:5d:d1:de:56:f2:01:d7:e2:0c:12:f8:d0:07:36: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7F:0F:25:9A:DE:A1:B5:96:44:5D:78:40:BC:DA:D8:A4:B4:9B:BB X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8d:03:d2:25:d4:06:18:ed:cf:1a:b7:1e:11:d6:1c:52:05: f4:a2:f2:88:85:dc:57:e6:75:40:23:e3:73:41:76:a6:94:62: 9d:5c:c2:c5:c0:43:54:75:c0:06:22:32:c3:41:cd:f2:22:8a: 6c:63:bc:56:11:c3:5b:f3:9f:39:3c:19:ad:a0:a2:81:e9:95: 91:69:4c:4b:08:36:f6:31:d8:1b:c3:aa:3d:25:2f:a4:7b:3b: d4:65:3d:c3:c4:fe:c4:5d:98:06:44:b8:c1:9b:7a:01:47:a6: 14:af:be:4e:48:ba:5e:6b:01:1f:ff:a5:e2:4e:fa:1c:18:b7: 6b:e1:bd:df:97:bb:eb:06:ab:e7:e4:ce:bb:5d:7f:a7:13:17: a5:22:80:ba:64:a2:e1:72:81:ed:67:79:ef:f1:21:91:ae:e4: a1:84:5c:33:51:ae:7a:6a:e7:1d:ef:32:32:2d:77:14:a0:5e: 3a:31:53:2b:ac:83:5a:78:3c:2f:f7:dd:0d:13:2c:64:7b:54: 76:4d:86:c5:fa:c3:eb:61:67:45:c7:61:cf:54:2a:e5:52:e3: 27:bf:c7:77:f6:c5:bd:2b:be:c5:93:58:73:53:71:01:84:29: c8:16:41:41:66:8b:c4:d5:67:03:97:33:67:b4:12:8b:aa:d5: 24:45:11:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9ccntbAiVoscr8liDUZU66hKtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA3MjkwNTU4MTNaFw0yNjA3MzAwODU3MTNaMDMxMTAvBgNV BAMTKDI5N0YwRjI1OUFERUExQjU5NjQ0NUQ3ODQwQkNEQUQ4QTRCNDlCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAbGM88oc63qNg+WegvU7crao PHgvoRR3Qs5UZHhsZX6jCfq2E/HaNlKYEliAFQR+JfvB2Jl7w+MghnTlf9yA4FAk 8kEXwBAQAw96a+JqJhe2dsy12a1Ya/JKHjz1hR57SGCkOHaf6Wk3M0BDEwzWAP8s Fdr7NGKXYTUQjL+Pkl24//0mM7hT+xgR44gNBLD/fXqkJQD6JxMCqzfSLyJxaVqL Svf3Hve5M7k9zRsv0T/eC/8lfRUUQsw2uXCLYI+HRURDkBLI0sW/sps+L33w4Vpm d/PEoOJgsuvFq8aIGTte6cbf3bmaVIJdNdZy0aVd0d5W8gHX4gwS+NAHNppLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKX8PJZreobWWRF14QLza2KS0m7swHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyNA9Il1AYY7c8atx4R1hxSBfSi8oiF3Ffm dUAj43NBdqaUYp1cwsXAQ1R1wAYiMsNBzfIiimxjvFYRw1vznzk8Ga2gooHplZFp TEsINvYx2BvDqj0lL6R7O9RlPcPE/sRdmAZEuMGbegFHphSvvk5Iul5rAR//peJO +hwYt2vhvd+Xu+sGq+fkzrtdf6cTF6UigLpkouFyge1nee/xIZGu5KGEXDNRrnpq 5x3vMjItdxSgXjoxUyusg1p4PC/33Q0TLGR7VHZNhsX6w+thZ0XHYc9UKuVS4ye/ x3f2xb0rvsWTWHNTcQGEKcgWQUFmi8TVZwOXM2e0Eouq1SRFEak= -----END CERTIFICATE-----Generated at Wed Jul 29 08:46:06 2026 by rpki-client