$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: 2c+CG+eLGoHk1IfHMJmxgIWCpNK81vdYLBO6Ql2I+Bk= Subject key identifier: 08:5C:59:38:89:1D:AA:22:83:D2:75:1F:D1:26:14:4F:36:CF:38:E5 Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 49CCCDCD7CA01D5BB345B96DAA4FD804669C24F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 01:45:02 +0000 Manifest this update: Sun 14 Jun 2026 01:40:02 +0000 Manifest next update: Mon 15 Jun 2026 03:46:02 +0000 Files and hashes: 1: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 2: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: h0eNOpQjzbuSjERBBqJ/5uOHxxMoIHrrOt9ks+fnQwg=) 3: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 4: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 5: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 03:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cc:cd:cd:7c:a0:1d:5b:b3:45:b9:6d:aa:4f:d8:04:66:9c:24:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Jun 14 01:40:02 2026 GMT Not After : Jun 15 03:46:02 2026 GMT Subject: CN=085C5938891DAA2283D2751FD126144F36CF38E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:d2:e6:e6:03:60:10:a0:79:89:ce:1a:83: 7f:03:5f:06:c3:d4:0e:67:b0:42:25:bd:6b:b9:96: 69:e0:c7:14:eb:42:0d:76:2a:14:f4:20:9f:af:0c: 12:e8:10:0c:9c:e3:4a:84:50:60:3a:be:88:70:1a: 78:08:3c:09:83:9e:a0:d2:5d:3c:4c:46:52:52:1a: 40:18:e7:e0:98:d5:dc:ae:2d:b9:dd:13:c4:b3:a3: cc:fc:17:67:cc:ba:32:70:24:c7:a6:76:ee:ac:f0: d6:60:44:29:6b:ca:0e:a0:96:5b:bb:cb:c5:d2:22: f9:7e:6d:02:0c:d3:01:6c:39:ce:c4:f5:a7:41:0a: bc:3c:ee:89:4f:8a:56:c9:08:4e:1a:e2:bd:09:31: fa:2a:3d:8d:3d:37:e2:fc:e8:72:02:97:47:d3:96: ef:b5:0e:1a:05:78:45:17:f9:ab:64:1d:f4:f6:bb: 89:ad:0e:60:04:19:1e:13:00:58:e9:09:8d:63:ab: 9e:94:e5:46:a0:97:55:52:7a:5f:45:56:aa:9a:24: aa:fd:25:db:8e:a1:d2:d5:54:71:d0:3b:22:26:9f: ba:c3:f9:5d:20:a4:cf:17:ec:94:89:fd:f4:7e:cb: 6f:fa:85:ec:94:8a:76:01:2e:85:2c:17:60:23:9f: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:59:38:89:1D:AA:22:83:D2:75:1F:D1:26:14:4F:36:CF:38:E5 X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:45:2c:e1:ee:5d:5f:26:43:27:42:33:66:cc:db:a4:f1:f8: a2:55:75:d8:ef:3d:80:4f:e1:b4:25:52:47:44:78:ba:5a:7c: 40:dc:83:9b:fc:dc:48:ed:b7:91:87:7f:08:2b:80:e3:0a:d4: a6:13:e2:c1:ca:ad:a0:79:69:61:02:f6:5e:2f:ba:f4:6c:75: 0e:cf:5d:9d:fd:98:6d:34:3a:b2:0c:a1:8b:e8:8e:6e:1d:20: 9c:b4:7a:b9:47:c4:8e:5f:f3:03:38:25:18:81:16:53:eb:aa: 98:75:49:22:86:98:ca:9f:e3:3f:04:91:8c:6c:c5:0f:12:99: e4:a6:d7:65:08:89:39:36:42:7d:f1:70:4f:34:ef:e3:24:29: b2:ad:34:05:c1:c4:f1:c1:9e:6c:9b:4d:be:84:7d:b5:87:59: 41:ef:11:5b:74:ad:85:59:08:34:ad:0e:8c:00:95:49:44:a8: f9:07:c1:10:6a:b7:a7:2c:b9:0a:d2:95:05:56:27:ee:20:e1: fe:79:0d:c9:fd:13:8a:a6:f2:90:68:08:23:50:55:14:62:f2: 37:2c:b6:f0:e5:49:e2:f9:ee:84:3a:92:ea:aa:43:23:bb:66: 37:49:3d:a8:9c:24:97:7b:6f:56:f0:21:d2:c5:13:57:41:fa: e9:25:82:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSczNzXygHVuzRbltqk/YBGacJPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA2MTQwMTQwMDJaFw0yNjA2MTUwMzQ2MDJaMDMxMTAvBgNV BAMTKDA4NUM1OTM4ODkxREFBMjI4M0QyNzUxRkQxMjYxNDRGMzZDRjM4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygNLm5gNgEKB5ic4ag38DXwbD 1A5nsEIlvWu5lmngxxTrQg12KhT0IJ+vDBLoEAyc40qEUGA6vohwGngIPAmDnqDS XTxMRlJSGkAY5+CY1dyuLbndE8Szo8z8F2fMujJwJMemdu6s8NZgRClryg6gllu7 y8XSIvl+bQIM0wFsOc7E9adBCrw87olPilbJCE4a4r0JMfoqPY09N+L86HICl0fT lu+1DhoFeEUX+atkHfT2u4mtDmAEGR4TAFjpCY1jq56U5Uagl1VSel9FVqqaJKr9 JduOodLVVHHQOyImn7rD+V0gpM8X7JSJ/fR+y2/6heyUinYBLoUsF2Ajn7N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFxZOIkdqiKD0nUf0SYUTzbPOOUwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxFLOHuXV8mQydCM2bM26Tx+KJVddjvPYBP 4bQlUkdEeLpafEDcg5v83Ejtt5GHfwgrgOMK1KYT4sHKraB5aWEC9l4vuvRsdQ7P XZ39mG00OrIMoYvojm4dIJy0erlHxI5f8wM4JRiBFlPrqph1SSKGmMqf4z8EkYxs xQ8SmeSm12UIiTk2Qn3xcE807+MkKbKtNAXBxPHBnmybTb6EfbWHWUHvEVt0rYVZ CDStDowAlUlEqPkHwRBqt6csuQrSlQVWJ+4g4f55Dcn9E4qm8pBoCCNQVRRi8jcs tvDlSeL57oQ6kuqqQyO7ZjdJPaicJJd7b1bwIdLFE1dB+uklgt8= -----END CERTIFICATE-----Generated at Sun Jun 14 12:03:30 2026 by rpki-client