$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: EXNeBZbnUT4fs5GGC0HkM+rz2Iey5vg8Y/mxfy2/j4M= Subject key identifier: D0:AA:75:51:F5:A9:7D:9D:CB:DC:C0:71:BD:18:BC:76:71:FA:E3:D2 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 07EB2C81B0A0E38EB758F57D437FB480E1CA24F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:11:06 +0000 Manifest this update: Tue 16 Jun 2026 18:06:06 +0000 Manifest next update: Wed 17 Jun 2026 19:57:06 +0000 Files and hashes: 1: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: bkFuhjeLurrSQXOEyFOJIVvr/m+3UvS5TWm2igfK29k=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:eb:2c:81:b0:a0:e3:8e:b7:58:f5:7d:43:7f:b4:80:e1:ca:24:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Jun 16 18:06:06 2026 GMT Not After : Jun 17 19:57:06 2026 GMT Subject: CN=D0AA7551F5A97D9DCBDCC071BD18BC7671FAE3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:8d:86:3b:bc:3d:c8:df:67:86:09:1d:5a: a0:9a:e0:f4:ca:ac:78:9d:c7:ef:46:fb:5d:4e:cf: 68:2f:d2:e0:3d:a6:02:67:3a:e6:eb:81:48:a0:e3: b5:92:15:66:1f:9c:96:af:15:13:84:a0:40:6c:96: 6f:d1:97:6b:17:76:fe:b2:6e:4a:09:0f:1c:21:25: f8:4b:83:04:df:5d:5b:94:bc:90:17:f4:d7:b2:fd: f8:7b:62:37:61:98:94:de:5c:cf:f5:53:f4:dc:84: 31:4c:2f:ff:33:98:04:bc:30:bf:14:51:2c:7d:66: 8d:21:2f:cd:61:2b:de:fa:b8:9c:48:c8:0b:ee:da: d6:64:5e:18:b8:93:6f:ab:07:1c:c6:3f:d6:fd:ea: c2:8d:5d:2c:6a:f8:82:9b:91:69:c5:a7:9e:f1:4b: 27:21:00:25:dc:c0:f8:20:3b:24:d5:9b:fa:d3:24: f5:43:0d:a4:e2:1c:51:6d:d5:44:10:a9:ff:d2:6a: e2:f3:e4:58:91:67:96:7f:6e:98:2c:96:ad:2c:f0: 01:46:66:2a:9c:58:52:2d:68:40:84:fe:da:87:39: 5d:09:37:3d:ce:b8:00:82:08:a5:71:46:a0:6e:1f: 86:0c:be:ba:88:1f:b6:63:99:4b:e8:4d:54:3a:a3: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AA:75:51:F5:A9:7D:9D:CB:DC:C0:71:BD:18:BC:76:71:FA:E3:D2 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a5:05:91:6b:f8:ee:81:4b:41:cf:71:1f:76:e1:d8:c9:dc: bc:04:fe:af:3e:97:37:c2:1b:5d:96:e6:46:45:7e:3d:79:4a: 5d:8c:1f:b0:5d:b8:65:c5:ae:7b:5e:cd:7b:80:73:55:00:1b: 02:83:f3:3b:91:3e:e7:f2:60:53:05:11:42:a5:e1:8d:3a:95: 9a:1c:55:9b:68:cf:ab:33:94:0b:55:d9:b5:17:60:85:c5:2d: 9d:07:09:d8:f4:92:d3:38:0b:3a:ef:09:b7:71:33:bf:ba:25: 55:c8:2f:a8:41:c0:3f:7f:bd:4e:87:58:83:dc:a4:b6:81:8f: a9:28:d6:3e:3a:d1:1c:a3:3f:60:83:da:0a:d6:d9:a0:ca:15: 30:9d:2a:46:7b:3d:77:b4:1c:6d:16:de:1d:bd:26:1b:65:89: 7e:0d:55:7e:51:0d:60:c7:22:c1:05:80:42:e8:77:fb:ea:23: e6:a2:5d:65:a5:bc:48:33:2c:52:e2:84:f2:9a:f5:69:5a:c0: be:68:92:1f:91:66:fb:c7:ed:94:f0:2d:f9:5f:4a:4b:df:c8: 01:1e:cd:3d:91:f1:7b:6f:f4:5c:35:d0:ae:a0:b9:c4:af:4f: 9d:fd:87:71:f4:28:22:8e:07:41:7e:f1:c9:c4:cf:80:1d:96: f6:5a:ea:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+ssgbCg4463WPV9Q3+0gOHKJPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA2MTYxODA2MDZaFw0yNjA2MTcxOTU3MDZaMDMxMTAvBgNV BAMTKEQwQUE3NTUxRjVBOTdEOURDQkRDQzA3MUJEMThCQzc2NzFGQUUzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWiY2GO7w9yN9nhgkdWqCa4PTK rHidx+9G+11Oz2gv0uA9pgJnOubrgUig47WSFWYfnJavFROEoEBslm/Rl2sXdv6y bkoJDxwhJfhLgwTfXVuUvJAX9Ney/fh7YjdhmJTeXM/1U/TchDFML/8zmAS8ML8U USx9Zo0hL81hK976uJxIyAvu2tZkXhi4k2+rBxzGP9b96sKNXSxq+IKbkWnFp57x SychACXcwPggOyTVm/rTJPVDDaTiHFFt1UQQqf/SauLz5FiRZ5Z/bpgslq0s8AFG ZiqcWFItaECE/tqHOV0JNz3OuACCCKVxRqBuH4YMvrqIH7ZjmUvoTVQ6o8mPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Kp1UfWpfZ3L3MBxvRi8dnH649IwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALulBZFr+O6BS0HPcR924djJ3LwE/q8+lzfC G12W5kZFfj15Sl2MH7BduGXFrntezXuAc1UAGwKD8zuRPufyYFMFEUKl4Y06lZoc VZtoz6szlAtV2bUXYIXFLZ0HCdj0ktM4CzrvCbdxM7+6JVXIL6hBwD9/vU6HWIPc pLaBj6ko1j460RyjP2CD2grW2aDKFTCdKkZ7PXe0HG0W3h29JhtliX4NVX5RDWDH IsEFgELod/vqI+aiXWWlvEgzLFLihPKa9WlawL5okh+RZvvH7ZTwLflfSkvfyAEe zT2R8Xtv9Fw10K6gucSvT539h3H0KCKOB0F+8cnEz4AdlvZa6nk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:48 2026 by rpki-client