$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: 1YBAtOh9WNfwGT8m8CXoE4PcqP2rJdosPgsZOk8gKlA= Subject key identifier: EA:DB:F9:5B:28:3B:17:F3:C9:F5:42:14:A0:5F:16:D9:A5:4D:82:72 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 2DC754A8AB08FA2A4D84B534AF6116D374DCAC40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 08:10:32 +0000 Manifest this update: Wed 29 Jul 2026 08:05:32 +0000 Manifest next update: Thu 30 Jul 2026 10:40:32 +0000 Files and hashes: 1: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 2: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 3: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 4: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) 5: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 6: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: ZUTvjwI9GrtZPic3+lM9Dq/uCe2zjcIQ/jVUsnCFxVA=) 7: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 8: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 9: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c7:54:a8:ab:08:fa:2a:4d:84:b5:34:af:61:16:d3:74:dc:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Jul 29 08:05:32 2026 GMT Not After : Jul 30 10:40:32 2026 GMT Subject: CN=EADBF95B283B17F3C9F54214A05F16D9A54D8272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:78:c2:3e:e3:86:a9:69:51:89:83:d2:51: 93:dc:60:06:58:9a:85:9c:a3:d6:78:4a:fb:6d:45: b7:53:f7:85:95:53:ba:8d:0f:6d:54:f8:ba:9f:12: 2c:44:9b:8f:52:0d:32:04:0f:d7:9e:32:03:08:c2: 1a:74:3f:33:b3:50:40:b1:9a:77:79:28:9e:46:97: dc:f6:2c:a1:0a:b1:c0:8e:e4:56:84:50:27:77:73: 03:90:d8:01:56:ab:e6:a7:54:81:fb:ff:6c:68:2e: d0:0f:51:0a:9c:ac:f6:07:df:e2:a9:66:e8:02:d6: 62:8a:7d:d3:62:88:a0:28:b8:8a:2c:3b:57:3e:2e: ec:d8:db:06:4a:bf:ce:87:7e:3c:84:d0:7c:f7:e4: b5:da:d2:7b:73:24:ef:77:d7:fc:80:ae:62:84:56: 5f:2d:6a:aa:8c:01:f0:fc:5c:67:45:70:c5:23:d7: 3b:9c:c4:3f:3a:00:17:ea:93:42:7b:c7:c7:9a:a1: 9d:4d:4a:33:f4:2e:30:80:23:93:9b:e4:e8:15:d7: 2f:f2:d9:21:68:51:e4:83:75:0b:2b:7a:5e:20:82: 6b:8a:14:7c:64:0b:2c:7a:40:9c:d1:b4:1b:7e:df: 38:e1:f1:cd:9a:45:e5:9c:bf:e9:d2:b3:af:21:a2: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DB:F9:5B:28:3B:17:F3:C9:F5:42:14:A0:5F:16:D9:A5:4D:82:72 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:48:9c:d7:70:03:f3:2b:fa:31:1e:98:6b:cc:9d:68:da:08: 01:8b:9f:60:63:96:ac:ec:9a:84:10:e6:79:b3:45:4d:43:e9: e0:3f:d7:37:c5:94:63:57:39:84:75:62:e7:d0:46:95:c3:c0: 08:44:07:74:8a:38:fd:c9:67:3b:d3:1e:58:f7:f7:4b:d7:f4: 7c:98:e9:46:ee:cd:9b:1e:b2:fd:f5:55:59:46:cc:0f:9c:f4: 70:e8:33:1c:26:29:a1:df:0f:75:73:c9:54:b9:83:28:92:2e: a4:f7:22:5d:b4:2b:7c:1c:7c:19:7f:fa:68:7c:a9:4d:80:ce: 0b:03:ba:e6:4e:2a:24:5b:f4:bc:a7:35:b3:f4:68:31:c4:21: 3f:b5:cc:26:eb:5c:eb:61:2e:67:2c:a7:53:9a:20:7e:de:97: ba:93:d2:79:30:cc:3e:4e:05:02:17:6b:de:ba:37:5d:19:ac: 12:39:bb:63:e2:0d:bd:90:43:8c:d3:66:10:0c:6c:da:34:61: 8c:e7:6c:b1:f2:67:ed:a2:4c:dc:15:22:fb:c1:9d:a5:76:24: 0e:5d:91:cd:18:88:86:69:fc:ab:18:2e:b3:70:67:79:65:07: 5d:80:9c:4d:92:6b:8a:de:8a:66:b9:ad:10:0a:5b:c8:69:e4: 62:94:56:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcdUqKsI+ipNhLU0r2EW03TcrEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA3MjkwODA1MzJaFw0yNjA3MzAxMDQwMzJaMDMxMTAvBgNV BAMTKEVBREJGOTVCMjgzQjE3RjNDOUY1NDIxNEEwNUYxNkQ5QTU0RDgyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+3jCPuOGqWlRiYPSUZPcYAZY moWco9Z4SvttRbdT94WVU7qND21U+LqfEixEm49SDTIED9eeMgMIwhp0PzOzUECx mnd5KJ5Gl9z2LKEKscCO5FaEUCd3cwOQ2AFWq+anVIH7/2xoLtAPUQqcrPYH3+Kp ZugC1mKKfdNiiKAouIosO1c+LuzY2wZKv86HfjyE0Hz35LXa0ntzJO931/yArmKE Vl8taqqMAfD8XGdFcMUj1zucxD86ABfqk0J7x8eaoZ1NSjP0LjCAI5Ob5OgV1y/y 2SFoUeSDdQsrel4ggmuKFHxkCyx6QJzRtBt+3zjh8c2aReWcv+nSs68hojH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6tv5Wyg7F/PJ9UIUoF8W2aVNgnIwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNInNdwA/Mr+jEemGvMnWjaCAGLn2Bjlqzs moQQ5nmzRU1D6eA/1zfFlGNXOYR1YufQRpXDwAhEB3SKOP3JZzvTHlj390vX9HyY 6UbuzZsesv31VVlGzA+c9HDoMxwmKaHfD3VzyVS5gyiSLqT3Il20K3wcfBl/+mh8 qU2AzgsDuuZOKiRb9LynNbP0aDHEIT+1zCbrXOthLmcsp1OaIH7el7qT0nkwzD5O BQIXa966N10ZrBI5u2PiDb2QQ4zTZhAMbNo0YYznbLHyZ+2iTNwVIvvBnaV2JA5d kc0YiIZp/KsYLrNwZ3llB12AnE2Sa4reima5rRAKW8hp5GKUVv0= -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:08 2026 by rpki-client