$ rpki-client -vvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json) Hash identifier: cPtk8ksN2sCVTRPec8IFEfRrYiusbmyWPcNqI7mNf2k= Subject key identifier: 36:1B:34:F4:7A:44:D3:3D:F4:39:C8:1E:27:11:E0:F4:95:00:51:5F Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Certificate serial: 3ECD37A470C9BCDA9BEC9BA0C3AC25F6F2A3AA44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:48:36 +0000 Manifest this update: Wed 17 Jun 2026 08:43:36 +0000 Manifest next update: Thu 18 Jun 2026 10:50:36 +0000 Files and hashes: 1: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: YyFPzTxXHigpd9+etAoDXdWdULUC0ExFjSNtqZNNLuo=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cd:37:a4:70:c9:bc:da:9b:ec:9b:a0:c3:ac:25:f6:f2:a3:aa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Validity Not Before: Jun 17 08:43:36 2026 GMT Not After : Jun 18 10:50:36 2026 GMT Subject: CN=361B34F47A44D33DF439C81E2711E0F49500515F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:ef:13:d5:09:55:65:4b:09:2c:5c:7a:00: 76:29:c2:e9:fc:88:51:3d:f8:29:10:52:ef:b4:2c: 36:7a:65:13:18:36:51:c2:50:2c:d0:a0:9c:4f:24: b5:ce:c9:83:ae:cc:94:b3:34:66:95:aa:25:ea:93: a7:b9:6e:0c:89:10:a8:11:66:2f:63:83:97:b5:5b: 2d:d6:8e:c8:e4:67:4b:9a:77:4f:16:ad:04:11:79: 23:2b:a7:fe:71:e5:8f:c5:76:eb:5d:eb:f3:f3:e0: 15:0d:4c:00:fa:e9:b9:aa:2e:17:2b:df:c6:7f:75: 03:04:eb:b9:35:fb:14:34:ff:57:8e:7c:67:42:24: 38:a5:05:38:57:98:b2:91:d6:5c:f3:88:e2:3f:43: c7:2b:d9:7c:b9:12:c0:19:bd:65:59:3f:86:b1:a8: f5:de:85:fc:81:1e:6d:18:be:94:12:cc:dc:bc:aa: 1c:64:8a:fb:72:2c:7b:44:8b:a0:a8:59:da:86:57: 43:0a:3c:8b:1a:34:67:44:ef:40:c0:03:b4:3a:66: 3c:b2:0b:73:ed:72:ea:f3:6e:4e:8b:92:2c:f0:2a: 32:b9:3f:77:91:b1:77:ff:29:3e:cc:6c:69:37:cd: 42:b0:c1:c4:95:cc:84:b7:0f:00:83:1d:20:e6:99: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1B:34:F4:7A:44:D3:3D:F4:39:C8:1E:27:11:E0:F4:95:00:51:5F X509v3 Authority Key Identifier: keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:00:0c:b3:01:be:35:0e:d1:e9:88:df:e6:8f:ba:0d:14:43: 1d:5b:30:52:88:96:d3:e4:db:64:33:9c:33:d9:8c:ba:eb:8c: 39:1d:86:14:10:cc:c8:b6:2c:4f:02:18:dc:da:4f:c8:f8:0b: d6:ea:ac:43:c5:5b:12:d2:96:10:76:12:24:1f:ec:41:53:a2: 56:f4:9e:3a:8e:ab:94:f6:bc:06:7d:75:a2:69:6e:cf:94:dc: 09:ae:a0:a7:4c:bd:8c:41:b0:26:d8:ed:55:bc:df:9d:ea:c9: 68:7a:a7:dd:2f:6f:71:c3:08:1a:c6:ec:d7:42:34:16:25:f7: 88:a6:4f:31:fe:6e:53:52:91:1a:18:a3:b9:a6:eb:56:3f:1f: d5:8a:cd:68:51:e6:8d:cb:d7:04:2a:b8:ee:ac:86:21:10:3c: 75:9d:65:71:64:c7:69:1d:2d:95:23:cf:d7:06:40:50:82:0f: 5b:ca:09:0a:be:37:72:09:1e:8d:4e:9b:75:03:ae:6c:57:84: cc:f9:21:ae:f5:42:0e:15:79:50:98:32:fb:a4:3c:7e:e5:51: 16:01:4f:c0:03:20:5b:3d:71:8a:fb:d9:38:b5:b9:85:06:cb: 4f:6c:e0:39:58:fb:68:b5:62:7d:56:2d:35:0a:b3:fa:7b:eb: 54:e0:16:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPs03pHDJvNqb7Jugw6wl9vKjqkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1 MUVDRkFGOTAeFw0yNjA2MTcwODQzMzZaFw0yNjA2MTgxMDUwMzZaMDMxMTAvBgNV BAMTKDM2MUIzNEY0N0E0NEQzM0RGNDM5QzgxRTI3MTFFMEY0OTUwMDUxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTe8T1QlVZUsJLFx6AHYpwun8 iFE9+CkQUu+0LDZ6ZRMYNlHCUCzQoJxPJLXOyYOuzJSzNGaVqiXqk6e5bgyJEKgR Zi9jg5e1Wy3WjsjkZ0uad08WrQQReSMrp/5x5Y/Fdutd6/Pz4BUNTAD66bmqLhcr 38Z/dQME67k1+xQ0/1eOfGdCJDilBThXmLKR1lzziOI/Q8cr2Xy5EsAZvWVZP4ax qPXehfyBHm0YvpQSzNy8qhxkivtyLHtEi6CoWdqGV0MKPIsaNGdE70DAA7Q6Zjyy C3Ptcurzbk6LkizwKjK5P3eRsXf/KT7MbGk3zUKwwcSVzIS3DwCDHSDmmYrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhs09HpE0z30OcgeJxHg9JUAUV8wHwYDVR0j BBgwFoAUfvZrSI7kjlcbg30rMPC1z1Hs+vkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRjYTU4NjgtNTdlOS00OWI5LWJmZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4 RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1MUVDRkFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUY2NkI0ODhFRTQ4RTU3MUI4MzdEMkIzMEYwQjVDRjUxRUNG QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1 Q0Y1MUVDRkFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcADLMBvjUO0emI3+aPug0UQx1bMFKIltPk 22QznDPZjLrrjDkdhhQQzMi2LE8CGNzaT8j4C9bqrEPFWxLSlhB2EiQf7EFTolb0 njqOq5T2vAZ9daJpbs+U3AmuoKdMvYxBsCbY7VW8353qyWh6p90vb3HDCBrG7NdC NBYl94imTzH+blNSkRoYo7mm61Y/H9WKzWhR5o3L1wQquO6shiEQPHWdZXFkx2kd LZUjz9cGQFCCD1vKCQq+N3IJHo1Om3UDrmxXhMz5Ia71Qg4VeVCYMvukPH7lURYB T8ADIFs9cYr72Ti1uYUGy09s4DlY+2i1Yn1WLTUKs/p761TgFqE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:45:39 2026 by rpki-client