$ rpki-client -vvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: DzrHz2gEODe1Cb1s+XAyHihveV+Lc1kAJnZSstfsT+0= Subject key identifier: 60:75:B7:38:48:C9:92:79:D4:D5:67:89:57:B7:68:6C:65:8F:FE:CC Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 3194364E20E0DF8AF0DF481416DBF7EC061984FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:06:27 +0000 Manifest this update: Wed 17 Jun 2026 07:01:27 +0000 Manifest next update: Thu 18 Jun 2026 08:12:27 +0000 Files and hashes: 1: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 3: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: HMp0P8g0LSRSn0okN5/zIYPJZGFY9jIvbmp1A+Z1Uh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:94:36:4e:20:e0:df:8a:f0:df:48:14:16:db:f7:ec:06:19:84:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Jun 17 07:01:27 2026 GMT Not After : Jun 18 08:12:27 2026 GMT Subject: CN=6075B73848C99279D4D5678957B7686C658FFECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:1c:9c:5e:ec:89:c9:bf:43:30:66:0d:18: 76:71:41:05:df:37:c0:ff:87:58:36:87:96:5c:6d: a5:b3:87:49:ae:6c:b3:1d:66:1a:1c:a6:92:b0:8e: 0b:0c:5c:af:29:06:d4:4c:d3:cb:22:3a:50:b6:bf: 81:69:e4:07:1f:86:c9:16:23:2a:fe:54:98:38:fb: db:95:bf:a3:ba:d5:f4:e0:b3:37:4d:c6:f8:7d:ea: d4:b8:17:5c:ef:74:95:84:46:89:b6:fa:51:b1:e4: 67:bb:47:5f:a9:4d:85:06:8f:52:29:99:f8:c6:90: 7d:16:7f:e8:e5:77:eb:a4:30:32:5c:04:d4:25:5a: 26:d1:fc:08:46:35:3b:68:9e:b9:91:54:5a:da:ce: 37:f8:f0:b7:5a:5a:df:79:aa:fa:98:16:bc:d3:2b: 32:8b:da:b2:c6:14:c8:2d:b5:68:80:01:30:ac:a5: 77:e9:36:5f:74:86:d8:2d:76:03:e9:53:98:b3:35: 50:88:aa:2a:47:c2:94:de:f0:85:d6:95:3e:56:aa: 7f:9b:c2:de:c1:10:f3:38:71:32:47:47:da:65:30: d3:ac:77:ed:fb:cd:06:dd:16:91:32:0f:f5:b3:fc: c5:bc:fc:07:f1:4a:69:b4:b8:83:60:94:13:96:c0: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:75:B7:38:48:C9:92:79:D4:D5:67:89:57:B7:68:6C:65:8F:FE:CC X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0b:4c:2b:a5:e1:20:3d:ca:32:41:97:2b:5b:e7:ba:9f:93: 18:e8:8c:42:04:7c:8a:81:a8:19:69:eb:e5:86:5b:a9:27:7a: 40:e3:28:e3:42:4a:c6:ca:aa:06:84:b3:ce:51:8d:33:5a:bf: 4a:e8:64:cd:95:c0:5b:8b:c6:fc:24:78:46:3a:25:d3:9e:e0: e5:8c:dc:08:be:c8:61:9c:09:f1:be:75:97:5d:86:b5:4c:d0: 1b:1c:97:97:84:63:d1:34:fb:72:65:96:80:fa:0e:62:7e:5e: 7c:b3:9f:37:d3:7d:20:aa:20:cc:db:c4:5d:55:80:5b:a7:08: eb:4d:84:3e:82:5e:e7:52:42:90:a2:9f:03:66:09:54:ae:2d: 6f:75:a2:a1:92:3b:99:bb:82:4a:4e:d8:8d:b9:85:6a:88:5e: 80:20:ff:b9:b0:90:07:89:82:50:8f:d4:35:e8:4b:3d:00:26: 74:f7:0c:31:91:69:48:98:1d:76:d1:ec:e4:bb:ef:b8:e5:08: 9b:7d:8b:ad:31:3e:7b:cb:ac:f2:20:96:c1:37:44:62:09:ed: bc:81:1d:f3:f3:7c:e0:25:c7:85:43:5d:0c:9d:03:5e:d8:7d: be:8a:e5:f0:3e:a7:32:65:77:d9:12:d0:25:80:3f:6f:9d:27: c5:c7:f6:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZQ2TiDg34rw30gUFtv37AYZhP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA2MTcwNzAxMjdaFw0yNjA2MTgwODEyMjdaMDMxMTAvBgNV BAMTKDYwNzVCNzM4NDhDOTkyNzlENEQ1Njc4OTU3Qjc2ODZDNjU4RkZFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8RycXuyJyb9DMGYNGHZxQQXf N8D/h1g2h5ZcbaWzh0mubLMdZhocppKwjgsMXK8pBtRM08siOlC2v4Fp5AcfhskW Iyr+VJg4+9uVv6O61fTgszdNxvh96tS4F1zvdJWERom2+lGx5Ge7R1+pTYUGj1Ip mfjGkH0Wf+jld+ukMDJcBNQlWibR/AhGNTtonrmRVFrazjf48LdaWt95qvqYFrzT KzKL2rLGFMgttWiAATCspXfpNl90htgtdgPpU5izNVCIqipHwpTe8IXWlT5Wqn+b wt7BEPM4cTJHR9plMNOsd+37zQbdFpEyD/Wz/MW8/AfxSmm0uINglBOWwN65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHW3OEjJknnU1WeJV7dobGWP/swwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4LTCul4SA9yjJBlytb57qfkxjojEIEfIqB qBlp6+WGW6knekDjKONCSsbKqgaEs85RjTNav0roZM2VwFuLxvwkeEY6JdOe4OWM 3Ai+yGGcCfG+dZddhrVM0Bscl5eEY9E0+3JlloD6DmJ+XnyznzfTfSCqIMzbxF1V gFunCOtNhD6CXudSQpCinwNmCVSuLW91oqGSO5m7gkpO2I25hWqIXoAg/7mwkAeJ glCP1DXoSz0AJnT3DDGRaUiYHXbR7OS777jlCJt9i60xPnvLrPIglsE3RGIJ7byB HfPzfOAlx4VDXQydA17Yfb6K5fA+pzJld9kS0CWAP2+dJ8XH9lI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:46 2026 by rpki-client