$ rpki-client -vvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json) Hash identifier: 6PW2IgyNiP2Z5fj8OwuSCcGqjDj1iqgVUFCcwVpAq5A= Subject key identifier: A5:35:EF:3C:F7:FE:A5:12:A7:48:52:88:8E:43:27:11:8B:CC:D7:52 Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Certificate serial: 5F0A90FA0A68AF70A6642BF43F3BFAC058F48E46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:00:58 +0000 Manifest this update: Tue 16 Jun 2026 21:55:58 +0000 Manifest next update: Wed 17 Jun 2026 23:29:58 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=) 2: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: 4VEAKwBwM3OlGJVcLaaKSkyKI6ewRgxhloYKjEGrtYg=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0a:90:fa:0a:68:af:70:a6:64:2b:f4:3f:3b:fa:c0:58:f4:8e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Validity Not Before: Jun 16 21:55:58 2026 GMT Not After : Jun 17 23:29:58 2026 GMT Subject: CN=A535EF3CF7FEA512A74852888E4327118BCCD752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:08:63:12:0c:f7:10:f6:bb:18:8c:51:b0: 77:65:3a:d1:eb:15:7d:64:72:75:61:1f:c3:91:1b: 57:52:d0:d3:b3:66:25:37:df:76:91:1d:5e:c7:96: ef:97:8f:7c:5b:85:53:8e:6e:d9:e2:21:01:f0:83: 82:38:70:78:66:84:a9:8c:17:ae:64:6a:40:0a:20: 46:df:3c:41:25:aa:07:bb:04:59:a6:6b:a5:bc:36: 71:50:2e:f7:e0:56:76:86:67:9b:9d:5f:92:0c:a4: 89:76:99:2a:f0:c2:82:20:c8:4a:5e:d9:44:2c:85: aa:f6:99:bd:31:71:34:54:d3:38:60:e8:7c:78:f1: 85:ba:a1:c1:c8:d3:4e:45:1f:ca:e9:1c:71:64:9c: dc:2f:ef:4b:75:d5:2b:f8:8c:b1:f8:6c:65:5f:30: 7e:f5:5d:f5:1e:91:49:41:f4:46:0d:9c:b4:13:67: 1a:c6:b0:fe:a8:8a:53:17:3c:5f:63:dc:cb:1b:4f: fe:e2:08:f5:38:2d:e7:0e:f7:86:33:4c:bc:d3:6f: f6:c7:fb:b9:0c:b9:34:47:d2:35:11:5a:3a:ee:75: dc:bc:83:b7:87:35:41:ef:96:29:fe:71:07:23:89: 36:13:66:63:37:9f:23:c6:81:40:d5:51:13:ee:26: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:EF:3C:F7:FE:A5:12:A7:48:52:88:8E:43:27:11:8B:CC:D7:52 X509v3 Authority Key Identifier: keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:62:62:71:64:53:a5:82:29:52:f8:97:af:e0:b4:e1:0d:dc: 9a:df:f4:0f:ab:a6:d6:ad:14:c3:38:9a:84:da:3f:b5:c1:77: 93:16:97:73:6b:d9:d5:b9:5e:a2:d7:8c:03:8e:cd:b6:7e:c4: 1e:e5:6c:57:e2:28:d6:c7:cd:6c:2a:16:db:f7:46:33:14:14: f5:6f:32:f6:69:c3:f7:f0:e6:db:37:1a:7c:8b:d8:ad:cd:9f: 71:dc:fd:97:17:62:04:8c:5f:54:8a:e7:2c:78:43:28:f4:f3: 98:75:1f:50:fc:17:2f:8f:c2:8b:8d:1d:3b:be:3f:8a:8d:44: 24:5d:8e:c9:53:1a:32:0b:8a:da:78:65:c7:bc:44:41:45:75: 35:da:86:19:e5:b4:a0:2b:c9:50:5d:cb:d7:34:8e:54:52:90: d1:f7:4f:62:40:4e:d7:bf:f7:6a:71:1c:5a:10:ca:5d:db:5d: a5:c8:70:ba:a6:f7:04:62:15:d5:63:8e:29:b0:fd:f0:7e:7a: 9c:58:75:ee:f9:c0:e8:da:bf:73:0c:49:8f:df:f4:ea:6e:a7: 1f:ac:94:d1:a6:9d:3f:1e:fb:67:f8:e4:43:0a:4d:ec:34:51: 4f:28:f7:23:af:61:13:81:44:77:61:ea:9b:06:a0:b9:cd:34: 51:7e:b3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwqQ+gpor3CmZCv0Pzv6wFj0jkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZDNDRB N0U4RDk0MTAeFw0yNjA2MTYyMTU1NThaFw0yNjA2MTcyMzI5NThaMDMxMTAvBgNV BAMTKEE1MzVFRjNDRjdGRUE1MTJBNzQ4NTI4ODhFNDMyNzExOEJDQ0Q3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6QhjEgz3EPa7GIxRsHdlOtHr FX1kcnVhH8ORG1dS0NOzZiU333aRHV7Hlu+Xj3xbhVOObtniIQHwg4I4cHhmhKmM F65kakAKIEbfPEElqge7BFmma6W8NnFQLvfgVnaGZ5udX5IMpIl2mSrwwoIgyEpe 2UQshar2mb0xcTRU0zhg6Hx48YW6ocHI005FH8rpHHFknNwv70t11Sv4jLH4bGVf MH71XfUekUlB9EYNnLQTZxrGsP6oilMXPF9j3MsbT/7iCPU4LecO94YzTLzTb/bH +7kMuTRH0jURWjruddy8g7eHNUHvlin+cQcjiTYTZmM3nyPGgUDVURPuJhMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTXvPPf+pRKnSFKIjkMnEYvM11IwHwYDVR0j BBgwFoAUeulJHeER2vsJushsl3f8RKfo2UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjcyOGM3N2ItMjEwMC00ZjJhLTkwZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURF MTExREFGQjA5QkFDODZDOTc3N0ZDNDRBN0U4RDk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUU5NDkxREUxMTFEQUZCMDlCQUM4NkM5Nzc3RkM0NEE3RThE OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZD NDRBN0U4RDk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5iYnFkU6WCKVL4l6/gtOEN3Jrf9A+rptat FMM4moTaP7XBd5MWl3Nr2dW5XqLXjAOOzbZ+xB7lbFfiKNbHzWwqFtv3RjMUFPVv MvZpw/fw5ts3GnyL2K3Nn3Hc/ZcXYgSMX1SK5yx4Qyj085h1H1D8Fy+PwouNHTu+ P4qNRCRdjslTGjILitp4Zce8REFFdTXahhnltKAryVBdy9c0jlRSkNH3T2JATte/ 92pxHFoQyl3bXaXIcLqm9wRiFdVjjimw/fB+epxYde75wOjav3MMSY/f9Opupx+s lNGmnT8e+2f45EMKTew0UU8o9yOvYROBRHdh6psGoLnNNFF+s4M= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:26 2026 by rpki-client