$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json) Hash identifier: IdBalKKQhvkc2Sz/A1GKbdm3Hh381VrU7q4BTQRYAlk= Subject key identifier: E6:CD:34:0A:64:D8:D1:10:A8:D1:FC:E2:F2:B2:B2:60:88:32:28:9A Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Certificate serial: 3AF369274D3FB6F617A09F99319DB1550B97C00B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 08:52:50 +0000 Manifest this update: Tue 28 Jul 2026 08:47:50 +0000 Manifest next update: Wed 29 Jul 2026 12:40:50 +0000 Files and hashes: 1: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: 5VYtKDPTXYl/cVSvbeHcfIJsOGCMZXliMt5oDZHWqB4=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f3:69:27:4d:3f:b6:f6:17:a0:9f:99:31:9d:b1:55:0b:97:c0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC Validity Not Before: Jul 28 08:47:50 2026 GMT Not After : Jul 29 12:40:50 2026 GMT Subject: CN=E6CD340A64D8D110A8D1FCE2F2B2B2608832289A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:7e:c7:0a:6d:28:ad:05:93:9d:62:0e:57: 16:27:ad:2b:33:58:bc:77:a7:f6:0c:19:5b:a5:0a: 0f:6e:84:5e:f8:24:34:46:a9:1d:af:fb:64:fb:9d: 63:d7:ce:11:47:b9:fc:3a:42:55:7f:3d:b1:d8:00: 58:fc:d0:64:23:02:8a:3c:ea:db:d1:df:5a:b6:f8: 1b:b3:21:f1:63:8e:fa:93:39:f2:d5:f4:e6:2b:75: cf:bf:8c:52:83:98:f7:98:c5:93:5c:de:9c:05:6c: e5:c8:4a:1e:53:f9:53:d5:7d:09:1a:ff:7b:33:36: ec:b7:7f:04:0f:98:38:aa:e2:dc:4c:58:83:28:92: d2:ac:5a:4d:b6:95:97:80:e0:e8:62:e2:37:77:92: 8d:a2:05:b4:c9:07:d0:7a:04:d3:02:8d:79:79:e9: 73:3d:14:f0:6d:a5:49:0e:7c:5b:e0:a5:78:3b:48: 0c:76:72:92:b2:83:90:ab:de:7f:f1:95:38:75:01: ec:43:63:82:88:fd:dd:4c:08:ca:c6:38:fd:e1:62: 8b:76:8d:97:7b:52:e0:a4:14:ef:a9:4e:e6:08:c6: 20:ad:7d:df:e9:65:6a:ff:76:48:12:a5:d0:71:03: ed:43:f9:19:6c:34:f1:92:8f:f4:f6:16:26:70:82: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:34:0A:64:D8:D1:10:A8:D1:FC:E2:F2:B2:B2:60:88:32:28:9A X509v3 Authority Key Identifier: keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2b:85:24:d8:19:7f:b2:9f:94:4e:f7:33:a5:29:d0:1d:3e: 17:a4:78:f5:11:3a:63:63:40:c9:d9:77:b8:87:90:f1:55:a2: 25:22:29:10:18:04:af:d8:93:6b:0f:35:9d:57:85:8b:bd:18: 2f:18:04:dd:c9:b2:a5:76:1f:41:00:8e:4e:08:7d:f4:37:c9: 89:b2:8d:6e:fb:2f:d3:74:09:20:a6:8b:46:95:64:4b:0a:69: 71:10:52:60:06:e8:7e:7f:7f:43:90:9f:3b:f6:d7:e7:40:f0: a1:e2:7c:c1:18:e9:7e:c8:5e:2a:43:7c:d9:e3:b6:94:6f:dd: 7a:e7:26:bf:5a:6c:13:57:b9:fe:19:5c:f8:34:5a:fc:7e:f7: 8d:d5:dd:bc:a4:0a:54:88:dc:03:61:28:26:b9:cb:91:37:34: ba:5b:b9:4d:5f:b1:5e:01:e8:04:91:92:51:d9:1d:fd:c5:fc: e9:86:2a:3d:32:e1:00:c8:37:5f:e3:4b:29:e8:c2:1e:eb:b5: c1:10:b3:9c:44:be:7a:82:e5:97:14:69:3d:d8:d1:ef:07:3e: 20:eb:3a:0b:06:5f:51:c9:cc:32:26:8d:5a:7f:e5:9d:36:0d: 24:77:71:f1:fc:29:15:a8:b1:8c:41:1f:72:7f:1b:61:7d:1e: 03:bd:db:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvNpJ00/tvYXoJ+ZMZ2xVQuXwAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2 MTQzREJCQzAeFw0yNjA3MjgwODQ3NTBaFw0yNjA3MjkxMjQwNTBaMDMxMTAvBgNV BAMTKEU2Q0QzNDBBNjREOEQxMTBBOEQxRkNFMkYyQjJCMjYwODgzMjI4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JH7HCm0orQWTnWIOVxYnrSsz WLx3p/YMGVulCg9uhF74JDRGqR2v+2T7nWPXzhFHufw6QlV/PbHYAFj80GQjAoo8 6tvR31q2+BuzIfFjjvqTOfLV9OYrdc+/jFKDmPeYxZNc3pwFbOXISh5T+VPVfQka /3szNuy3fwQPmDiq4txMWIMoktKsWk22lZeA4Ohi4jd3ko2iBbTJB9B6BNMCjXl5 6XM9FPBtpUkOfFvgpXg7SAx2cpKyg5Cr3n/xlTh1AexDY4KI/d1MCMrGOP3hYot2 jZd7UuCkFO+pTuYIxiCtfd/pZWr/dkgSpdBxA+1D+RlsNPGSj/T2FiZwgszjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5s00CmTY0RCo0fzi8rKyYIgyKJowHwYDVR0j BBgwFoAU9CxbB2GD9KvanOh3BhE/0mFD27wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmRiMDEzMGQtY2FhMy00NzZmLWFmODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2 MTgzRjRBQkRBOUNFODc3MDYxMTNGRDI2MTQzREJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNDJDNUIwNzYxODNGNEFCREE5Q0U4NzcwNjExM0ZEMjYxNDNE QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvRjQyQzVCMDc2MTgzRjRBQkRBOUNFODc3MDYxMTNG RDI2MTQzREJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcrhSTYGX+yn5RO9zOlKdAdPhekePUROmNj QMnZd7iHkPFVoiUiKRAYBK/Yk2sPNZ1XhYu9GC8YBN3JsqV2H0EAjk4IffQ3yYmy jW77L9N0CSCmi0aVZEsKaXEQUmAG6H5/f0OQnzv21+dA8KHifMEY6X7IXipDfNnj tpRv3XrnJr9abBNXuf4ZXPg0Wvx+943V3bykClSI3ANhKCa5y5E3NLpbuU1fsV4B 6ASRklHZHf3F/OmGKj0y4QDIN1/jSynowh7rtcEQs5xEvnqC5ZcUaT3Y0e8HPiDr OgsGX1HJzDImjVp/5Z02DSR3cfH8KRWosYxBH3J/G2F9HgO92xY= -----END CERTIFICATE-----Generated at Wed Jul 29 01:24:10 2026 by rpki-client