$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: GYPxlEZ6QCAGowtBcmUznherAtD4+w5KAUNhDK5Vg0s= Subject key identifier: 32:F7:11:47:0E:8B:B2:36:E8:56:F6:97:E4:34:B4:0E:E4:70:D1:38 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 4E8FDB32695DD9A1A38551BEFD7E82DCECBF8C44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:03:28 +0000 Manifest this update: Tue 16 Jun 2026 19:58:28 +0000 Manifest next update: Wed 17 Jun 2026 22:35:28 +0000 Files and hashes: 1: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: n15jInQHdB5MNGduAkNUFaEe8xgw1WKmq1IHYKGZgy8=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8f:db:32:69:5d:d9:a1:a3:85:51:be:fd:7e:82:dc:ec:bf:8c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Jun 16 19:58:28 2026 GMT Not After : Jun 17 22:35:28 2026 GMT Subject: CN=32F711470E8BB236E856F697E434B40EE470D138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:27:6e:3e:af:9c:42:9f:82:cb:f4:92:e5: 06:46:c4:d5:46:b6:8e:74:b0:28:d6:dd:26:c1:d6: f5:3e:b6:86:53:8a:13:5c:e7:39:f1:65:62:f9:7c: b5:13:37:22:46:54:e6:0e:ab:0c:40:33:f2:65:f2: f8:82:0e:93:48:08:18:e6:66:a0:c7:c5:0a:8a:35: 5d:bf:31:82:50:1a:e1:e1:7f:ca:83:53:31:cc:cf: 7e:8d:14:9e:0c:dd:56:eb:7f:44:39:6f:42:ba:ca: 19:51:40:24:3b:df:75:cc:eb:37:e9:5c:c0:5a:5a: 46:7d:1e:4f:31:1c:d0:6d:95:92:79:22:44:22:6c: c6:c1:23:9a:27:75:19:4d:8c:e3:a7:b5:60:c7:86: d4:b0:fc:c8:88:e7:e9:3e:93:29:e2:20:b5:e6:a2: 47:ce:49:e8:a9:b3:d4:df:eb:f2:ce:85:4f:f3:4e: cd:2d:6a:dd:ee:58:81:59:ad:0e:66:04:03:e7:6c: 8d:65:c9:4b:63:f0:7e:f3:88:35:f4:59:a8:d1:27: 99:b8:b0:8c:95:74:a4:a4:46:0a:f3:0b:0b:7c:66: 99:4a:62:50:8d:10:bf:07:64:c3:67:69:e7:0a:9d: 2a:53:21:d7:ed:e5:0e:48:db:c6:9b:07:36:0f:e3: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:11:47:0E:8B:B2:36:E8:56:F6:97:E4:34:B4:0E:E4:70:D1:38 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:cb:41:df:6b:b7:18:02:42:d9:42:f6:9d:bd:5b:2e:f6:eb: 4f:14:b2:e6:01:ba:ab:8e:a4:96:a2:14:72:62:dc:f1:8d:f8: 74:63:34:19:b4:cd:a2:69:43:b2:22:50:24:41:5d:90:6c:a3: bd:9d:a9:2e:5a:54:97:cb:ff:cd:5b:a7:09:90:53:16:ca:d4: 17:8d:d2:63:65:23:1c:97:dc:e3:27:8e:e0:cd:b6:ba:1b:4e: b3:b1:3e:28:81:65:ff:2d:1a:af:9d:37:ce:7d:ff:b5:e4:20: 7a:05:3e:bd:fc:d5:98:83:65:ac:54:47:01:08:f8:3f:ec:48: 78:14:04:90:7d:ad:02:47:cf:23:fe:66:ce:07:e5:58:73:39: 69:7b:aa:fd:53:32:0e:49:d6:da:aa:b8:1c:63:f5:80:8a:d9: 79:a4:a0:ab:28:af:52:34:18:90:5e:e6:f8:da:ef:06:61:8a: c0:20:75:c8:6a:b6:83:11:73:0b:25:8e:1e:37:5f:90:b4:1a: c1:2e:cd:78:ff:70:c6:bb:bb:6b:e3:41:1e:c4:c2:e5:94:17: 1b:e4:a8:76:3b:30:b1:35:e1:d0:3d:94:b5:58:ac:a0:11:eb: 62:19:d9:62:ec:fa:1b:66:11:49:c7:c4:63:46:7f:b8:20:03: c1:a0:11:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTo/bMmld2aGjhVG+/X6C3Oy/jEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA2MTYxOTU4MjhaFw0yNjA2MTcyMjM1MjhaMDMxMTAvBgNV BAMTKDMyRjcxMTQ3MEU4QkIyMzZFODU2RjY5N0U0MzRCNDBFRTQ3MEQxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDGSduPq+cQp+Cy/SS5QZGxNVG to50sCjW3SbB1vU+toZTihNc5znxZWL5fLUTNyJGVOYOqwxAM/Jl8viCDpNICBjm ZqDHxQqKNV2/MYJQGuHhf8qDUzHMz36NFJ4M3Vbrf0Q5b0K6yhlRQCQ733XM6zfp XMBaWkZ9Hk8xHNBtlZJ5IkQibMbBI5ondRlNjOOntWDHhtSw/MiI5+k+kyniILXm okfOSeips9Tf6/LOhU/zTs0tat3uWIFZrQ5mBAPnbI1lyUtj8H7ziDX0WajRJ5m4 sIyVdKSkRgrzCwt8ZplKYlCNEL8HZMNnaecKnSpTIdft5Q5I28abBzYP4/XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMvcRRw6LsjboVvaX5DS0DuRw0TgwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHLQd9rtxgCQtlC9p29Wy72608UsuYBuquO pJaiFHJi3PGN+HRjNBm0zaJpQ7IiUCRBXZBso72dqS5aVJfL/81bpwmQUxbK1BeN 0mNlIxyX3OMnjuDNtrobTrOxPiiBZf8tGq+dN859/7XkIHoFPr381ZiDZaxURwEI +D/sSHgUBJB9rQJHzyP+Zs4H5VhzOWl7qv1TMg5J1tqquBxj9YCK2XmkoKsor1I0 GJBe5vja7wZhisAgdchqtoMRcwsljh43X5C0GsEuzXj/cMa7u2vjQR7EwuWUFxvk qHY7MLE14dA9lLVYrKAR62IZ2WLs+htmEUnHxGNGf7ggA8GgEZM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:02 2026 by rpki-client