$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: JQ1t4qXiOyn8mHf0cTQtpuXbZRVH3+8ZxseWoyKwzZw= Subject key identifier: D8:5B:0C:CC:EA:31:98:FF:D9:67:18:27:B3:5F:8E:E8:66:F5:60:B5 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 6127F384309A3679EAC8C616CAC43FB9007137C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:49:32 +0000 Manifest this update: Tue 16 Jun 2026 16:44:32 +0000 Manifest next update: Wed 17 Jun 2026 20:02:32 +0000 Files and hashes: 1: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) 2: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: tGCxLJ6Gdifj1dbVI9vtDPnYq9W9ZiusoqYVtVPH9aM=) 3: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) 4: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:27:f3:84:30:9a:36:79:ea:c8:c6:16:ca:c4:3f:b9:00:71:37:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Jun 16 16:44:32 2026 GMT Not After : Jun 17 20:02:32 2026 GMT Subject: CN=D85B0CCCEA3198FFD9671827B35F8EE866F560B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:00:35:cd:6b:a4:9b:a1:37:00:6d:a9:06: 5d:1f:e1:e0:da:b6:8c:22:6b:aa:f5:c7:f3:0a:e9: 16:b7:10:95:24:1f:5b:7a:15:e8:37:4d:3b:2b:c2: 56:65:a2:fa:f3:cf:ee:87:23:91:56:c8:06:b8:dd: f5:65:c0:56:6e:47:a3:f0:dd:f6:79:fd:9b:a7:9c: 84:88:70:38:97:21:49:8c:94:84:1d:df:e5:ac:8e: 7e:aa:08:c5:3e:74:91:c0:ef:07:82:40:a9:5d:2c: 40:16:ea:21:01:a6:cd:b6:81:7f:0e:aa:a1:a3:37: 3d:eb:3c:0a:cc:48:94:6c:1b:9c:74:0e:cf:d1:45: d4:73:01:51:2f:a8:b1:f5:b6:7d:70:46:12:08:68: 0c:c6:be:9b:9c:10:aa:39:10:57:e9:30:42:da:31: 08:e5:77:41:7a:20:5a:28:bd:e9:c5:86:72:04:6d: 05:89:40:8a:07:3e:7c:7e:28:12:2b:44:b8:fe:52: f5:28:82:10:d8:65:b1:93:d7:36:d5:69:9e:55:51: 31:1f:8e:36:8f:6f:d5:66:af:ed:2f:5a:b3:da:e6: 5c:23:04:24:43:48:0f:52:2d:30:bc:bc:a6:36:65: 38:b0:66:9c:ab:38:5e:cc:26:4f:7b:99:d9:7b:a9: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:0C:CC:EA:31:98:FF:D9:67:18:27:B3:5F:8E:E8:66:F5:60:B5 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c1:6d:96:c3:2e:bf:01:72:77:85:68:1a:47:eb:af:70:50: 83:f7:18:1c:23:16:a6:9b:53:bb:7b:f0:be:99:12:6e:3e:06: 24:fd:72:1f:05:8c:80:3a:ec:ab:45:2e:2b:41:cf:2b:9c:31: 38:14:6d:49:96:02:08:44:25:72:ef:a2:0c:3a:d6:c8:02:e6: 96:3c:f6:0c:0f:b7:c7:98:6f:7d:21:bc:05:25:39:52:d8:b5: 0b:bc:be:ac:77:70:f8:89:dc:66:80:c2:07:b5:48:a0:d1:a0: ea:ca:0b:40:30:12:74:cf:ba:8e:26:58:50:19:29:08:8e:4c: e1:1f:fe:1b:29:7c:30:2e:02:98:34:a7:5a:d9:ab:73:b7:e1: 25:1d:7f:e2:44:88:24:e8:ed:85:c0:98:ad:67:1a:28:f9:6c: e6:e0:e2:e0:64:e9:27:1f:c7:65:31:ae:8a:9c:05:e5:7d:d2: 78:17:2f:fc:9f:f5:70:25:1f:6b:b7:a9:5f:b1:9c:ab:14:d0: 1e:c2:6f:34:f3:9c:55:1e:6c:f5:e0:7e:ea:7a:03:8f:ca:59: 85:12:77:5c:0b:62:93:b9:45:13:25:f9:a8:8a:98:39:8d:7a: 15:f8:e3:ba:4b:fd:db:4e:cc:c6:a9:e7:71:e0:6f:9e:e8:94: 2c:b5:e0:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSfzhDCaNnnqyMYWysQ/uQBxN8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA2MTYxNjQ0MzJaFw0yNjA2MTcyMDAyMzJaMDMxMTAvBgNV BAMTKEQ4NUIwQ0NDRUEzMTk4RkZEOTY3MTgyN0IzNUY4RUU4NjZGNTYwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMlgA1zWukm6E3AG2pBl0f4eDa towia6r1x/MK6Ra3EJUkH1t6Feg3TTsrwlZlovrzz+6HI5FWyAa43fVlwFZuR6Pw 3fZ5/ZunnISIcDiXIUmMlIQd3+Wsjn6qCMU+dJHA7weCQKldLEAW6iEBps22gX8O qqGjNz3rPArMSJRsG5x0Ds/RRdRzAVEvqLH1tn1wRhIIaAzGvpucEKo5EFfpMELa MQjld0F6IFoovenFhnIEbQWJQIoHPnx+KBIrRLj+UvUoghDYZbGT1zbVaZ5VUTEf jjaPb9Vmr+0vWrPa5lwjBCRDSA9SLTC8vKY2ZTiwZpyrOF7MJk97mdl7qRlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FsMzOoxmP/ZZxgns1+O6Gb1YLUwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLBbZbDLr8BcneFaBpH669wUIP3GBwjFqab U7t78L6ZEm4+BiT9ch8FjIA67KtFLitBzyucMTgUbUmWAghEJXLvogw61sgC5pY8 9gwPt8eYb30hvAUlOVLYtQu8vqx3cPiJ3GaAwge1SKDRoOrKC0AwEnTPuo4mWFAZ KQiOTOEf/hspfDAuApg0p1rZq3O34SUdf+JEiCTo7YXAmK1nGij5bObg4uBk6Scf x2UxroqcBeV90ngXL/yf9XAlH2u3qV+xnKsU0B7CbzTznFUebPXgfup6A4/KWYUS d1wLYpO5RRMl+aiKmDmNehX447pL/dtOzMap53Hgb57olCy14Fs= -----END CERTIFICATE-----Generated at Wed Jun 17 12:42:19 2026 by rpki-client