$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: /TS4usIWskUp1Uum+Tx0hz9GRcXZ75l3mW/Z17+saO4= Subject key identifier: E6:93:BB:50:11:B6:B5:30:A0:89:7E:31:32:FC:D4:6B:8C:BC:77:A7 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 0C626FFB9BE063D5993A69B77A2388F5711DBA03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:54:25 +0000 Manifest this update: Tue 16 Jun 2026 20:49:25 +0000 Manifest next update: Wed 17 Jun 2026 22:50:25 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) 2: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) 3: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 4: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: WFF3Kxbun+h38nvy46rvE5h5eZ55ijF2pHY2I7YFITo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:62:6f:fb:9b:e0:63:d5:99:3a:69:b7:7a:23:88:f5:71:1d:ba:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: Jun 16 20:49:25 2026 GMT Not After : Jun 17 22:50:25 2026 GMT Subject: CN=E693BB5011B6B530A0897E3132FCD46B8CBC77A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:78:5a:26:b1:d9:3a:a5:93:26:98:32:a0: 66:f6:d1:19:e8:a1:34:1a:02:76:28:89:fa:73:97: a7:ee:fe:31:f2:c8:23:a2:58:3d:32:0f:af:7a:74: 57:e5:9f:db:3a:93:35:d5:ab:ce:51:33:43:dd:a6: b3:e0:57:0d:cc:79:ec:25:6e:b9:b4:95:22:36:ef: 95:0b:b3:93:9d:b2:10:c9:1e:fd:47:6c:17:9a:64: 50:33:d7:c6:87:e4:d2:17:31:09:87:cc:ed:69:12: 43:e0:cc:d1:09:4b:90:b6:50:68:b4:67:05:a5:4e: f5:1e:ab:b6:c3:5c:10:04:42:d2:79:b2:d0:8f:ef: 2e:cb:bb:23:ea:45:30:4b:0d:06:3f:07:e1:d7:59: 39:07:05:1c:0a:7d:4e:8a:bb:90:79:1e:97:07:ad: a0:8c:36:f5:5a:5b:cf:a1:49:e9:b8:23:e5:8e:b2: b1:69:b6:2b:71:ee:80:d7:3a:ce:58:57:8d:d9:ae: 7a:82:45:d0:5e:50:7e:99:0c:99:4b:dd:aa:51:f2: 6d:f3:1c:41:1f:9c:ee:83:52:37:00:44:76:df:a7: 68:9e:b5:6d:bb:6b:01:ad:25:8e:e3:13:ff:2c:b4: b6:19:1b:1e:ca:73:1c:bd:74:fc:71:0a:28:61:3c: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:BB:50:11:B6:B5:30:A0:89:7E:31:32:FC:D4:6B:8C:BC:77:A7 X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:51:1a:f3:7a:7d:a5:c3:89:df:01:56:04:77:a5:b2:f0:42: 4b:b3:f4:b2:67:1d:5e:39:76:df:65:24:7d:de:d0:a5:9c:70: 73:75:fa:46:5c:3e:b8:57:05:e7:08:1f:c7:6b:67:c8:64:f3: d7:83:17:f9:1a:e3:63:03:54:dc:72:4e:2e:8f:a3:4f:c5:e0: b7:81:03:01:b4:06:0c:bc:a9:aa:83:6a:f0:23:d1:a9:09:39: 13:22:7e:da:2f:5b:24:03:e8:37:85:4c:8a:3a:55:7d:b8:e4: 17:b7:99:78:b9:ad:58:b0:d6:0a:54:ad:a1:db:8f:64:07:57: d0:fd:93:c0:9d:69:18:da:b3:e3:94:a1:60:ba:4a:49:6e:7b: e1:26:e8:c3:d5:ca:0b:4e:f2:75:f4:3f:d0:ca:1a:33:cf:7a: 22:87:78:c0:e5:30:5e:e0:8c:2f:b2:4e:d6:45:96:53:1a:5f: d9:94:60:ac:2d:e3:7c:8f:de:88:f1:e5:1d:45:dc:e5:7a:15: 84:ba:b6:dd:83:a7:90:9b:05:c9:ad:73:ea:07:58:95:35:e2: 9d:68:7f:ed:55:d9:25:e5:31:f5:37:2e:01:49:41:43:f9:cd: ec:3e:2f:9c:e8:ed:59:7b:95:c4:b7:74:8f:95:b9:0f:c8:a2: bd:26:f5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGJv+5vgY9WZOmm3eiOI9XEdugMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA2MTYyMDQ5MjVaFw0yNjA2MTcyMjUwMjVaMDMxMTAvBgNV BAMTKEU2OTNCQjUwMTFCNkI1MzBBMDg5N0UzMTMyRkNENDZCOENCQzc3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcnhaJrHZOqWTJpgyoGb20Rno oTQaAnYoifpzl6fu/jHyyCOiWD0yD696dFfln9s6kzXVq85RM0PdprPgVw3Meewl brm0lSI275ULs5OdshDJHv1HbBeaZFAz18aH5NIXMQmHzO1pEkPgzNEJS5C2UGi0 ZwWlTvUeq7bDXBAEQtJ5stCP7y7LuyPqRTBLDQY/B+HXWTkHBRwKfU6Ku5B5HpcH raCMNvVaW8+hSem4I+WOsrFptitx7oDXOs5YV43ZrnqCRdBeUH6ZDJlL3apR8m3z HEEfnO6DUjcARHbfp2ietW27awGtJY7jE/8stLYZGx7Kcxy9dPxxCihhPCvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pO7UBG2tTCgiX4xMvzUa4y8d6cwHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJRGvN6faXDid8BVgR3pbLwQkuz9LJnHV45 dt9lJH3e0KWccHN1+kZcPrhXBecIH8drZ8hk89eDF/ka42MDVNxyTi6Po0/F4LeB AwG0Bgy8qaqDavAj0akJORMiftovWyQD6DeFTIo6VX245Be3mXi5rViw1gpUraHb j2QHV9D9k8CdaRjas+OUoWC6Sklue+Em6MPVygtO8nX0P9DKGjPPeiKHeMDlMF7g jC+yTtZFllMaX9mUYKwt43yP3ojx5R1F3OV6FYS6tt2Dp5CbBcmtc+oHWJU14p1o f+1V2SXlMfU3LgFJQUP5zew+L5zo7Vl7lcS3dI+VuQ/Ior0m9Rk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:57 2026 by rpki-client