$ rpki-client -vvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: Bj/97b8KdH+/uEfiiOoL+qyuCl4XneJvj8QzAlc7h3o= Subject key identifier: AF:37:87:7F:9B:5F:79:11:B1:95:04:5C:79:08:CE:7D:B8:CF:1D:62 Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 017812DED5C15429E3E6B421FA6356F3F53F9855 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 08:15:41 +0000 Manifest this update: Wed 29 Jul 2026 08:10:41 +0000 Manifest next update: Thu 30 Jul 2026 09:12:41 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 2: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: WETbQtyJXXKgsBU8ReV1VUh1DXRxuSpRIuKPfxv7pNs=) 3: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: fmfwcql8BPTZXrBSOzyjpVBCvfAqL/VgrqcNagVB8MY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:78:12:de:d5:c1:54:29:e3:e6:b4:21:fa:63:56:f3:f5:3f:98:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Jul 29 08:10:41 2026 GMT Not After : Jul 30 09:12:41 2026 GMT Subject: CN=AF37877F9B5F7911B195045C7908CE7DB8CF1D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:39:d9:b5:23:82:8f:67:07:01:b2:46:9f: 2b:4d:54:a8:a3:de:05:74:67:47:71:5d:c2:b9:41: 81:96:96:5a:cc:a8:84:3e:80:c5:c4:65:65:08:58: 23:b3:a3:0c:bd:fc:75:c4:e8:bd:99:a5:0a:4e:0f: 89:07:36:68:96:bd:ee:b7:d5:75:1c:b8:8b:a5:a7: 86:c2:8a:af:2f:53:b4:0a:77:8b:5a:c9:66:fd:77: d1:5a:c6:0b:c5:dd:6b:fc:95:dc:18:fc:ba:6c:a0: c7:b6:85:78:64:17:7f:f2:44:53:b8:63:6f:1c:c5: 2b:cb:e0:96:fb:ef:c7:26:28:1e:f2:d0:e7:64:46: ca:03:be:34:2b:9e:cd:eb:c2:e5:d6:23:21:af:35: 9f:7f:0e:a8:b4:71:6f:5a:cc:58:6b:68:19:57:ff: 5a:3f:55:ef:2c:30:43:f3:1d:dc:a4:f2:50:69:5f: f3:fc:ae:b8:92:e2:da:f7:29:be:a3:6f:1e:fa:39: ac:09:32:fb:bf:88:17:f0:ee:35:3c:00:96:ec:a1: 04:83:51:56:08:4c:3c:1f:48:41:73:dd:ef:4e:5e: f3:3b:ce:74:b1:08:e3:09:ce:c1:b6:88:d8:9c:9e: fa:56:df:1c:d4:0c:d7:1b:ff:55:09:00:90:08:3a: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:37:87:7F:9B:5F:79:11:B1:95:04:5C:79:08:CE:7D:B8:CF:1D:62 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:66:90:e2:ea:b8:55:99:c5:30:d0:bd:6c:c6:b4:44:67:80: a3:e4:2f:55:9e:cc:86:bf:c5:e4:fd:dc:00:44:8f:3e:f9:25: ef:12:51:16:3b:8c:c9:9e:07:14:0c:de:73:41:6f:a3:53:e8: b0:ba:e3:73:94:b0:62:60:c2:e5:f1:96:19:24:f6:26:7e:c6: 64:01:d0:92:cb:90:87:53:1e:ea:3f:0f:72:d9:f1:a9:63:3d: f4:15:53:3a:0b:e4:75:38:6f:92:e7:1e:b9:57:5c:4a:1d:1b: d3:5e:f2:77:d6:29:12:e3:ca:3c:63:ac:47:93:a2:e5:b2:fc: 42:2a:94:b9:38:39:82:97:cb:50:b1:8d:87:2f:06:3f:8e:42: 05:b4:03:a6:0c:7d:f9:52:a5:16:ef:71:a5:95:e8:e2:b1:26: 08:fa:4e:bf:af:a2:e5:39:ee:e0:0d:d9:3b:eb:3b:75:f9:87: a0:ee:0a:84:01:1b:d2:d4:4e:cf:02:4a:92:bb:2e:b6:47:40: c6:6a:03:91:81:ec:f5:78:09:69:ed:98:ea:e1:7e:b3:c6:08: 4e:cc:ee:0d:dc:ea:2f:00:1e:13:5a:3d:1b:39:58:bf:4e:bf: 1b:28:cc:42:ae:1b:00:e3:17:50:06:c4:b6:a1:b0:42:f2:00: db:c7:31:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXgS3tXBVCnj5rQh+mNW8/U/mFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA3MjkwODEwNDFaFw0yNjA3MzAwOTEyNDFaMDMxMTAvBgNV BAMTKEFGMzc4NzdGOUI1Rjc5MTFCMTk1MDQ1Qzc5MDhDRTdEQjhDRjFENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptjnZtSOCj2cHAbJGnytNVKij 3gV0Z0dxXcK5QYGWllrMqIQ+gMXEZWUIWCOzowy9/HXE6L2ZpQpOD4kHNmiWve63 1XUcuIulp4bCiq8vU7QKd4tayWb9d9FaxgvF3Wv8ldwY/LpsoMe2hXhkF3/yRFO4 Y28cxSvL4Jb778cmKB7y0OdkRsoDvjQrns3rwuXWIyGvNZ9/Dqi0cW9azFhraBlX /1o/Ve8sMEPzHdyk8lBpX/P8rriS4tr3Kb6jbx76OawJMvu/iBfw7jU8AJbsoQSD UVYITDwfSEFz3e9OXvM7znSxCOMJzsG2iNicnvpW3xzUDNcb/1UJAJAIOrP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzeHf5tfeRGxlQRceQjOfbjPHWIwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVmkOLquFWZxTDQvWzGtERngKPkL1WezIa/ xeT93ABEjz75Je8SURY7jMmeBxQM3nNBb6NT6LC643OUsGJgwuXxlhkk9iZ+xmQB 0JLLkIdTHuo/D3LZ8aljPfQVUzoL5HU4b5LnHrlXXEodG9Ne8nfWKRLjyjxjrEeT ouWy/EIqlLk4OYKXy1CxjYcvBj+OQgW0A6YMfflSpRbvcaWV6OKxJgj6Tr+vouU5 7uAN2TvrO3X5h6DuCoQBG9LUTs8CSpK7LrZHQMZqA5GB7PV4CWntmOrhfrPGCE7M 7g3c6i8AHhNaPRs5WL9OvxsozEKuGwDjF1AGxLahsELyANvHMSk= -----END CERTIFICATE-----Generated at Wed Jul 29 12:02:38 2026 by rpki-client