$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json) Hash identifier: fBEywf4V9SMiDq0s+gyPyQXcElGEFONnyPDge/1chZ0= Subject key identifier: A5:C0:76:4A:5E:85:AA:41:90:93:81:59:0D:16:0A:40:56:FF:FD:6B Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC Certificate serial: 127CB73BF89A74898516FAABF1825D38384F8BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:24:31 +0000 Manifest this update: Wed 17 Jun 2026 01:19:31 +0000 Manifest next update: Thu 18 Jun 2026 02:57:31 +0000 Files and hashes: 1: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=) 2: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: 65sWslDsjH1L+mJH/RbXD5rZCrACjwzJuy4MJHXc8bQ=) 3: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=) 4: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7c:b7:3b:f8:9a:74:89:85:16:fa:ab:f1:82:5d:38:38:4f:8b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC Validity Not Before: Jun 17 01:19:31 2026 GMT Not After : Jun 18 02:57:31 2026 GMT Subject: CN=A5C0764A5E85AA41909381590D160A4056FFFD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:bb:d5:af:83:cb:b5:f4:93:f7:b6:4d:03: 5f:f7:73:7e:6c:03:76:53:bf:4d:ab:ad:df:ba:78: 84:e7:9a:29:98:50:82:d7:25:90:68:2d:f1:83:73: e7:a0:ed:6e:bf:09:cd:3e:5f:57:85:e2:90:de:fd: 72:c2:7f:fc:e5:b6:2f:e3:1b:90:07:4b:a9:26:88: b9:c8:2a:5d:bf:1f:0b:c1:8d:56:a1:98:06:b3:f6: a9:17:19:03:5b:92:ba:35:73:86:75:ea:dc:72:9c: ee:28:27:0e:e0:d6:a4:2b:6f:ae:70:ad:7a:8d:8c: 0a:e6:95:81:86:f1:ec:1f:ed:63:75:32:34:5f:e2: 36:46:57:5a:fc:80:35:47:26:15:14:ec:ed:cb:8b: 68:c0:7e:25:f4:cf:07:72:ba:38:4d:8c:e1:12:af: ef:51:c4:7e:27:ad:2c:19:2e:11:63:1a:e0:6c:31: e9:2a:f9:64:01:fa:7e:96:35:03:75:7c:11:3f:3d: de:d6:76:bd:6e:0d:56:d5:a9:50:f6:49:4b:b8:26: e9:7e:1f:bd:76:87:6a:93:2d:33:1e:6e:13:b1:de: fe:80:6f:6d:c7:74:23:c0:66:52:64:ac:05:97:e9: be:d9:46:a2:e4:b3:4f:6b:15:80:47:e5:13:b6:8d: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:76:4A:5E:85:AA:41:90:93:81:59:0D:16:0A:40:56:FF:FD:6B X509v3 Authority Key Identifier: keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:69:33:f4:12:1a:a9:bc:21:ac:98:f9:8a:c0:7c:ba:e6:5e: c2:48:b1:5c:d3:15:f9:08:52:47:88:99:39:9a:d2:2b:25:51: 59:f5:f8:6f:9f:e3:8b:13:a3:5c:47:a1:af:69:38:76:ba:94: 74:d3:6c:88:19:7e:1b:9c:da:90:ac:55:c8:33:f9:20:ae:36: 2f:61:78:ea:bc:4c:b8:c5:12:96:c1:0d:6d:25:bb:92:f2:bb: 4f:e8:01:29:bd:ed:db:be:f6:f7:15:28:4b:9d:32:3d:76:93: 7f:27:65:fd:8c:44:42:1e:dc:63:c8:13:95:b3:27:83:46:00: ee:76:cb:dd:89:2d:30:82:64:98:98:fb:f7:e7:b1:ae:f5:c7: 50:c9:c0:b5:ff:cb:83:9c:77:0b:78:d9:e1:ee:89:b8:1c:72: 33:60:b3:31:f8:e0:0b:fd:76:48:91:0e:58:4e:e7:4e:16:20: c3:fb:d9:a2:86:6a:eb:a5:f5:73:43:11:96:db:ff:ff:89:ef: 4a:32:1d:1b:64:bf:73:a5:ec:99:88:3a:30:fa:65:e2:5c:b1: fa:f2:62:f3:e3:3e:06:2e:96:42:14:a6:d2:13:c2:64:37:2d: ee:30:e3:07:be:83:84:e7:fc:10:d1:65:81:ce:14:67:56:57: 1d:13:26:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEny3O/iadImFFvqr8YJdODhPi7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4 RDM4NjhGQzAeFw0yNjA2MTcwMTE5MzFaFw0yNjA2MTgwMjU3MzFaMDMxMTAvBgNV BAMTKEE1QzA3NjRBNUU4NUFBNDE5MDkzODE1OTBEMTYwQTQwNTZGRkZENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO3rvVr4PLtfST97ZNA1/3c35s A3ZTv02rrd+6eITnmimYUILXJZBoLfGDc+eg7W6/Cc0+X1eF4pDe/XLCf/zlti/j G5AHS6kmiLnIKl2/HwvBjVahmAaz9qkXGQNbkro1c4Z16txynO4oJw7g1qQrb65w rXqNjArmlYGG8ewf7WN1MjRf4jZGV1r8gDVHJhUU7O3Li2jAfiX0zwdyujhNjOES r+9RxH4nrSwZLhFjGuBsMekq+WQB+n6WNQN1fBE/Pd7Wdr1uDVbVqVD2SUu4Jul+ H712h2qTLTMebhOx3v6Ab23HdCPAZlJkrAWX6b7ZRqLks09rFYBH5RO2jVDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcB2Sl6FqkGQk4FZDRYKQFb//WswHwYDVR0j BBgwFoAUp7FozkZq50RGtlDPgkYYlY04aPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMGQ3ZmEtZDZmOC00YzIyLWI0OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0 NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4RDM4NjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0IxNjhDRTQ2NkFFNzQ0NDZCNjUwQ0Y4MjQ2MTg5NThEMzg2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4 OTU4RDM4NjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtpM/QSGqm8IayY+YrAfLrmXsJIsVzTFfkI UkeImTma0islUVn1+G+f44sTo1xHoa9pOHa6lHTTbIgZfhuc2pCsVcgz+SCuNi9h eOq8TLjFEpbBDW0lu5Lyu0/oASm97du+9vcVKEudMj12k38nZf2MREIe3GPIE5Wz J4NGAO52y92JLTCCZJiY+/fnsa71x1DJwLX/y4Ocdwt42eHuibgccjNgszH44Av9 dkiRDlhO504WIMP72aKGauul9XNDEZbb//+J70oyHRtkv3Ol7JmIOjD6ZeJcsfry YvPjPgYulkIUptITwmQ3Le4w4we+g4Tn/BDRZYHOFGdWVx0TJog= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:14 2026 by rpki-client