$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: GKoufNEENrh3y+n1GXogX4E8eP268Yiz4ceANy50Qm8= Subject key identifier: 83:DB:99:D1:54:D6:F2:D0:0C:2B:C7:90:26:2B:6E:9D:2F:86:CE:8A Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 5D20DEE34A59E686E04C55411DFE41F90F9BA3D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:42:07 +0000 Manifest this update: Wed 17 Jun 2026 07:37:07 +0000 Manifest next update: Thu 18 Jun 2026 11:40:07 +0000 Files and hashes: 1: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 5: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: iMdcJpoYN0NzBwpxXTEuqpdGJdmV3wLF+7P9kidBtTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:de:e3:4a:59:e6:86:e0:4c:55:41:1d:fe:41:f9:0f:9b:a3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Jun 17 07:37:07 2026 GMT Not After : Jun 18 11:40:07 2026 GMT Subject: CN=83DB99D154D6F2D00C2BC790262B6E9D2F86CE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:1f:14:ac:9d:72:49:7e:82:51:3e:2f:0b: 70:9c:3c:3d:d8:7d:72:10:6e:99:24:aa:5d:ec:e3: 87:82:bb:f0:fc:74:f5:3d:44:bb:4a:63:ad:ad:91: a6:32:d8:08:30:05:28:f4:8e:49:d3:62:df:38:47: 1f:b3:04:39:a0:64:21:f3:ee:76:68:20:40:d9:5e: f7:44:35:e4:92:00:93:87:1c:90:f7:9d:e4:5c:8a: e9:e6:bd:00:28:57:8f:66:42:20:2f:a7:8c:a0:81: cf:4b:3c:d2:5a:f0:cd:2a:d7:ad:51:9a:37:15:22: 56:01:48:9e:9c:80:68:40:d4:07:ad:09:8a:fe:7d: b4:4a:86:22:88:b5:34:23:50:11:ac:4a:1b:6b:9b: 3d:b3:c8:eb:b7:a7:ff:6e:f2:33:e5:9e:14:03:60: 95:43:6d:fa:67:0d:72:fa:f2:13:1f:40:d4:6d:5d: 6e:2d:62:a9:bc:da:99:fc:79:85:d7:3c:b8:52:1f: bc:b3:a8:bf:bb:8c:d7:f1:91:f9:8d:60:43:84:f4: 32:7c:1c:51:83:36:e0:64:76:07:a9:a0:a4:dd:f6: 84:c2:da:a1:86:7d:dd:05:d3:20:53:5d:03:41:03: aa:7c:de:ba:09:5e:13:21:4f:cb:b1:68:57:d8:8c: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DB:99:D1:54:D6:F2:D0:0C:2B:C7:90:26:2B:6E:9D:2F:86:CE:8A X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b5:d9:81:f6:3d:ce:5a:a7:d4:0d:a2:28:d6:ae:21:23:14: 90:f2:19:a7:fe:bf:70:3f:c4:3d:34:33:ab:9c:e4:86:72:4c: 45:8e:2d:91:c9:8f:84:44:2a:7d:21:d3:2d:95:56:41:44:25: 20:35:da:82:43:80:42:1f:a8:f5:7c:46:db:4f:f4:3c:ad:6c: d1:43:3a:93:c1:c1:9f:70:52:06:f0:5a:00:7b:2c:95:eb:01: 27:d2:2f:63:28:0b:00:12:f2:46:e0:09:5d:27:ae:25:77:06: 2a:2c:a1:79:f3:2b:4f:d7:57:3c:17:7c:b4:22:f8:c2:64:5f: e0:3b:84:d2:24:b3:d9:a7:00:b5:2a:d4:e7:99:8a:c5:54:7e: 14:5d:6e:d8:3c:b0:c7:e4:69:c7:cd:62:60:72:fc:2a:e3:a8: aa:b2:03:e9:e7:d4:a6:87:6a:f2:24:7d:bb:00:3b:12:21:f1: b7:82:06:af:55:d4:c9:d0:1c:00:bf:20:68:ee:fb:09:9f:ae: 72:42:4f:88:e5:24:68:ca:de:04:5e:50:e5:3c:c3:09:42:de: 1b:52:dc:31:ee:f7:64:94:b0:0e:d6:7d:3c:b5:76:46:7c:22: c8:18:e6:5b:8b:3c:c4:26:17:28:d4:74:0d:24:fc:0a:ca:c8: a6:5b:b7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSDe40pZ5obgTFVBHf5B+Q+bo9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA2MTcwNzM3MDdaFw0yNjA2MTgxMTQwMDdaMDMxMTAvBgNV BAMTKDgzREI5OUQxNTRENkYyRDAwQzJCQzc5MDI2MkI2RTlEMkY4NkNFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseR8UrJ1ySX6CUT4vC3CcPD3Y fXIQbpkkql3s44eCu/D8dPU9RLtKY62tkaYy2AgwBSj0jknTYt84Rx+zBDmgZCHz 7nZoIEDZXvdENeSSAJOHHJD3neRciunmvQAoV49mQiAvp4yggc9LPNJa8M0q161R mjcVIlYBSJ6cgGhA1AetCYr+fbRKhiKItTQjUBGsShtrmz2zyOu3p/9u8jPlnhQD YJVDbfpnDXL68hMfQNRtXW4tYqm82pn8eYXXPLhSH7yzqL+7jNfxkfmNYEOE9DJ8 HFGDNuBkdgepoKTd9oTC2qGGfd0F0yBTXQNBA6p83roJXhMhT8uxaFfYjGETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg9uZ0VTW8tAMK8eQJitunS+GzoowHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK12YH2Pc5ap9QNoijWriEjFJDyGaf+v3A/ xD00M6uc5IZyTEWOLZHJj4REKn0h0y2VVkFEJSA12oJDgEIfqPV8RttP9DytbNFD OpPBwZ9wUgbwWgB7LJXrASfSL2MoCwAS8kbgCV0nriV3BiosoXnzK0/XVzwXfLQi +MJkX+A7hNIks9mnALUq1OeZisVUfhRdbtg8sMfkacfNYmBy/CrjqKqyA+nn1KaH avIkfbsAOxIh8beCBq9V1MnQHAC/IGju+wmfrnJCT4jlJGjK3gReUOU8wwlC3htS 3DHu92SUsA7WfTy1dkZ8IsgY5luLPMQmFyjUdA0k/ArKyKZbt/8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:18 2026 by rpki-client