$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: aQr4XRpVfWCH+GIa+GRgNnZkXKE98G2sm54jzZDzuFs= Subject key identifier: E7:7C:D1:C4:08:AE:8F:D0:5A:6B:6D:B1:3D:76:20:E5:86:58:34:36 Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 355F4C62EACCA408C3BC2D24C273DD0095DB47A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 14:27:06 +0000 Manifest this update: Sat 13 Jun 2026 14:22:06 +0000 Manifest next update: Sun 14 Jun 2026 15:03:06 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 2: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: 3HgBTDUQyczvgxJzxh/aihQ6P+rs8MV4ETSOZW6m+Z8=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5f:4c:62:ea:cc:a4:08:c3:bc:2d:24:c2:73:dd:00:95:db:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Jun 13 14:22:06 2026 GMT Not After : Jun 14 15:03:06 2026 GMT Subject: CN=E77CD1C408AE8FD05A6B6DB13D7620E586583436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:02:81:e1:7d:dd:e7:30:44:54:0e:16:54: 71:1a:7d:e3:22:14:3d:d8:1c:bf:a6:4f:80:46:35: 35:88:ac:95:36:fa:6b:0d:60:fa:9c:5a:85:41:8f: 7d:bc:97:a8:2a:e9:78:54:b5:7f:d6:13:8d:b1:2e: 11:0e:d0:dd:e5:72:eb:74:b6:63:13:54:92:a8:20: 86:bc:09:55:cb:d5:85:d9:59:d7:ba:ef:0f:c6:e9: 45:e4:a4:8f:d5:2e:21:cb:11:b4:37:17:6f:d7:57: b2:f2:cd:21:2a:3d:f6:67:33:4b:7d:4c:6b:28:e6: 74:37:d3:a6:fc:91:81:a6:46:31:5c:c0:0f:1c:79: 6d:92:c9:3f:d9:70:5c:e3:e0:17:15:55:6a:b3:67: 7f:9c:4d:73:4b:25:b3:c9:9e:3a:be:f9:a4:97:15: be:33:83:cf:f2:14:ba:ec:d7:eb:08:fb:8f:d3:09: fe:b8:de:30:57:8e:36:bc:d4:0a:59:c4:9b:44:4d: 76:e8:49:02:e4:e1:96:68:a4:36:93:d3:b1:56:84: 4e:9d:8a:f9:4d:45:22:22:2c:46:88:98:6e:c7:ec: ad:a7:b1:39:15:b4:cb:e1:dc:be:36:19:85:fe:32: 95:db:66:50:9c:c9:e3:f8:75:86:18:0d:23:59:af: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7C:D1:C4:08:AE:8F:D0:5A:6B:6D:B1:3D:76:20:E5:86:58:34:36 X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b3:b7:64:ef:6c:d7:7c:64:d5:25:db:d7:97:a1:56:35:92: f9:3d:27:c9:a4:82:d3:23:cb:28:1c:fe:80:e3:d1:7e:9f:30: ca:75:43:96:7e:83:47:13:07:e2:cf:2e:2f:f2:55:c2:f3:65: f0:1b:b4:d2:96:a0:cd:69:dc:aa:be:65:5a:9b:9a:44:92:a0: 0e:40:7c:af:ca:d1:d5:08:6c:e0:d6:68:70:d7:d1:f7:9e:3f: ca:eb:1d:c9:a6:93:80:0c:31:00:7a:b4:35:26:bd:5c:e0:4b: dc:64:31:f4:d6:b3:e7:98:b2:f6:4b:af:fb:91:92:f7:31:38: 91:8c:5b:fc:ef:0e:47:40:8e:b2:99:c3:d9:95:8d:d1:ea:5c: 49:b5:22:6c:6d:f8:d5:88:51:ac:8c:a9:5e:fa:70:ae:58:d0: 6e:2f:86:53:47:4e:02:f2:90:6e:63:f8:32:cb:30:05:0e:8e: df:ca:95:7e:b3:72:cb:da:1b:64:47:e8:5b:24:b3:23:bc:97: 5f:8a:bd:a5:70:a7:ab:b9:93:ef:4d:6a:26:70:83:e8:96:d5: 45:c9:d0:9d:c4:f4:c4:e6:19:65:dc:c9:a2:32:03:d7:d2:4c: 44:60:7c:73:84:93:26:89:55:41:cf:80:2e:4a:5d:83:62:d1: 13:b8:91:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNV9MYurMpAjDvC0kwnPdAJXbR6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjA2MTMxNDIyMDZaFw0yNjA2MTQxNTAzMDZaMDMxMTAvBgNV BAMTKEU3N0NEMUM0MDhBRThGRDA1QTZCNkRCMTNENzYyMEU1ODY1ODM0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TgKB4X3d5zBEVA4WVHEafeMi FD3YHL+mT4BGNTWIrJU2+msNYPqcWoVBj328l6gq6XhUtX/WE42xLhEO0N3lcut0 tmMTVJKoIIa8CVXL1YXZWde67w/G6UXkpI/VLiHLEbQ3F2/XV7LyzSEqPfZnM0t9 TGso5nQ306b8kYGmRjFcwA8ceW2SyT/ZcFzj4BcVVWqzZ3+cTXNLJbPJnjq++aSX Fb4zg8/yFLrs1+sI+4/TCf643jBXjja81ApZxJtETXboSQLk4ZZopDaT07FWhE6d ivlNRSIiLEaImG7H7K2nsTkVtMvh3L42GYX+MpXbZlCcyeP4dYYYDSNZr/afAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53zRxAiuj9Baa22xPXYg5YZYNDYwHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAizt2TvbNd8ZNUl29eXoVY1kvk9J8mkgtMj yygc/oDj0X6fMMp1Q5Z+g0cTB+LPLi/yVcLzZfAbtNKWoM1p3Kq+ZVqbmkSSoA5A fK/K0dUIbODWaHDX0feeP8rrHcmmk4AMMQB6tDUmvVzgS9xkMfTWs+eYsvZLr/uR kvcxOJGMW/zvDkdAjrKZw9mVjdHqXEm1Imxt+NWIUayMqV76cK5Y0G4vhlNHTgLy kG5j+DLLMAUOjt/KlX6zcsvaG2RH6FsksyO8l1+KvaVwp6u5k+9NaiZwg+iW1UXJ 0J3E9MTmGWXcyaIyA9fSTERgfHOEkyaJVUHPgC5KXYNi0RO4kSc= -----END CERTIFICATE-----Generated at Sun Jun 14 02:22:28 2026 by rpki-client