$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: X9mZ+Lm0QulelaR0cLCv+2uSnVmQyA33IKDFgNdliX4= Subject key identifier: 60:EC:BA:B0:62:01:C9:2D:7C:07:C7:5C:47:5F:40:3E:D5:93:4E:79 Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 73A351419D16B4B4C99E6345D1F8B14A28E1C363 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 09:16:59 +0000 Manifest this update: Wed 29 Jul 2026 09:11:59 +0000 Manifest next update: Thu 30 Jul 2026 09:16:59 +0000 Files and hashes: 1: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 2: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 4: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: q3L9NLN/2vw/xObyVmMwKUrv/CUNtIYutPriNj4g3QU=) 5: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a3:51:41:9d:16:b4:b4:c9:9e:63:45:d1:f8:b1:4a:28:e1:c3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Jul 29 09:11:59 2026 GMT Not After : Jul 30 09:16:59 2026 GMT Subject: CN=60ECBAB06201C92D7C07C75C475F403ED5934E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:15:61:a1:be:18:17:10:43:a7:8a:6a:44: 29:97:72:28:ad:6a:d6:66:06:c9:90:14:a4:d6:ef: 8e:e4:30:15:8c:eb:2f:e1:58:8c:77:d8:16:f3:4d: e4:84:86:d5:a2:bd:9d:29:f1:90:f1:f4:95:f1:f3: 9e:89:2c:6f:95:9e:b6:5c:08:be:7f:59:78:d4:03: 1b:24:ab:2b:0d:dc:01:65:34:a5:e6:4d:85:04:2a: 31:7a:f1:3b:f2:f8:eb:a3:24:0d:2c:a3:2f:4f:94: 4d:4a:85:e1:86:6c:af:28:24:d2:d0:98:4a:6b:e7: 18:51:31:2b:13:f6:91:f6:b5:89:d5:b8:47:aa:ff: a6:3c:6f:bf:8e:03:63:9d:f1:cf:33:83:4f:38:42: 1c:33:c9:ab:67:a0:9c:89:df:e5:2c:0b:a0:7f:b7: 27:91:79:cc:9b:a7:36:68:59:37:22:15:a7:2d:7b: af:e6:4f:21:d1:37:12:47:cd:8e:2a:d3:8c:76:6a: c3:9b:10:4c:9b:e0:6f:b2:66:c7:80:bb:2b:96:6c: ce:14:5f:9f:d8:a7:92:ac:23:d1:dd:41:69:8d:f7: 1a:f0:62:49:3e:01:a7:55:32:81:ec:ea:c0:3c:bd: 37:f5:9c:3c:b7:10:96:03:c6:50:71:ed:22:2a:f5: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:BA:B0:62:01:C9:2D:7C:07:C7:5C:47:5F:40:3E:D5:93:4E:79 X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:47:fd:3c:44:86:30:65:18:be:cd:69:89:e8:45:da:81: 57:9a:ca:00:03:f6:f8:4b:3f:28:d8:18:a9:c5:dc:51:69:bb: 9e:b1:c5:7f:1c:4f:6f:8c:a6:b8:f1:a3:0e:23:e0:3b:98:22: 2d:34:06:8a:f1:fd:f9:84:98:68:0c:f0:f5:57:b8:7b:95:ec: ad:76:5d:ae:47:31:0e:b0:a2:dc:e8:92:96:a7:00:d0:de:3c: 49:84:0d:9f:ed:2c:49:06:f8:89:f2:08:3f:a1:54:32:c5:06: 18:3b:d2:63:cd:e4:65:ac:a6:54:52:8d:f4:f2:76:c6:44:51: b1:2c:b5:9b:0d:74:d2:72:a7:4f:e8:3a:87:31:8b:bc:af:40: b8:03:df:36:7e:aa:96:6c:44:5b:76:e4:f8:f5:2e:30:4e:73: c1:aa:7e:f2:a1:f9:d8:4c:5e:30:3e:bc:fa:29:e6:ae:80:db: 39:5a:0d:7c:ee:9d:7a:f2:ec:2d:1b:66:a2:9f:ae:38:b6:21: 35:b7:f6:50:0d:d1:c1:66:5c:35:45:e5:94:2e:c5:ba:c0:d7: 79:a0:98:be:a7:cf:ad:7e:79:49:4d:15:73:09:c0:89:f2:fb: 58:00:78:76:3f:e0:d1:4c:d5:3a:9a:41:bc:ce:c0:5e:96:a8: 3b:fd:4c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6NRQZ0WtLTJnmNF0fixSijhw2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA3MjkwOTExNTlaFw0yNjA3MzAwOTE2NTlaMDMxMTAvBgNV BAMTKDYwRUNCQUIwNjIwMUM5MkQ3QzA3Qzc1QzQ3NUY0MDNFRDU5MzRFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfxVhob4YFxBDp4pqRCmXciit atZmBsmQFKTW747kMBWM6y/hWIx32BbzTeSEhtWivZ0p8ZDx9JXx856JLG+VnrZc CL5/WXjUAxskqysN3AFlNKXmTYUEKjF68Tvy+OujJA0soy9PlE1KheGGbK8oJNLQ mEpr5xhRMSsT9pH2tYnVuEeq/6Y8b7+OA2Od8c8zg084QhwzyatnoJyJ3+UsC6B/ tyeRecybpzZoWTciFacte6/mTyHRNxJHzY4q04x2asObEEyb4G+yZseAuyuWbM4U X5/Yp5KsI9HdQWmN9xrwYkk+AadVMoHs6sA8vTf1nDy3EJYDxlBx7SIq9di5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYOy6sGIByS18B8dcR19APtWTTnkwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4XR/08RIYwZRi+zWmJ6EXagVeaygAD9vhL PyjYGKnF3FFpu56xxX8cT2+Mprjxow4j4DuYIi00Borx/fmEmGgM8PVXuHuV7K12 Xa5HMQ6wotzokpanANDePEmEDZ/tLEkG+InyCD+hVDLFBhg70mPN5GWsplRSjfTy dsZEUbEstZsNdNJyp0/oOocxi7yvQLgD3zZ+qpZsRFt25Pj1LjBOc8GqfvKh+dhM XjA+vPop5q6A2zlaDXzunXry7C0bZqKfrji2ITW39lAN0cFmXDVF5ZQuxbrA13mg mL6nz61+eUlNFXMJwIny+1gAeHY/4NFM1TqaQbzOwF6WqDv9TEI= -----END CERTIFICATE-----Generated at Wed Jul 29 18:28:27 2026 by rpki-client