$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: DYicoZMF4DNRnmXzlzB6zgyrUzPWknzff53iQr1m6W8= Subject key identifier: E4:DA:C8:80:7C:06:0D:09:8F:3F:AE:21:55:68:37:C9:4A:C3:EC:99 Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 670D5394D17CF3AFE6F2DEFFFB3A37A8C01A1884 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:13:40 +0000 Manifest this update: Tue 16 Jun 2026 20:08:40 +0000 Manifest next update: Wed 17 Jun 2026 23:49:40 +0000 Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) 2: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: 8BibeOnCCHOpuCnReIS1IDjVhBZLN3FgaFyIZ4yZ7kA=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0d:53:94:d1:7c:f3:af:e6:f2:de:ff:fb:3a:37:a8:c0:1a:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: Jun 16 20:08:40 2026 GMT Not After : Jun 17 23:49:40 2026 GMT Subject: CN=E4DAC8807C060D098F3FAE21556837C94AC3EC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:2a:e6:75:fe:93:26:ac:d0:ab:b4:31:0c: 26:a3:3c:41:b3:d8:b7:83:28:52:6d:31:c1:72:46: 08:34:7d:13:d0:17:64:4c:af:46:9e:4b:df:aa:b7: 67:83:6e:ad:23:a1:bc:14:46:44:cf:95:a5:bd:c8: 64:94:e3:bd:44:9d:7b:04:79:5d:f2:62:8d:47:75: ea:cb:15:dc:e0:9f:23:c4:ed:0f:57:e1:8d:dd:fd: d6:ee:b8:5f:41:a9:5a:ff:a1:42:a0:aa:3d:b3:f2: ce:e2:59:13:f5:76:c3:52:86:52:58:f9:4a:1d:ea: b6:b4:47:cf:99:c6:97:cd:1f:2d:3c:3d:89:3f:62: 1d:59:27:27:2d:d7:cc:f1:1d:38:28:7f:e8:c3:27: 1a:00:3a:28:0b:02:a1:67:b3:f9:0e:cd:ea:67:c6: 80:42:d0:8e:af:68:36:dd:4b:f5:66:42:dc:b6:a2: 9c:a2:7c:06:1a:5d:c0:b0:f5:e9:59:3f:a1:ff:f2: ca:05:06:80:85:9a:96:50:3d:df:ca:7b:e7:9b:4b: bf:cd:22:e6:29:45:ac:e5:a5:34:30:2d:43:c4:51: e0:8e:8a:21:29:9a:66:8b:50:ea:eb:3c:d0:08:63: 00:19:99:de:0e:a1:bf:01:90:c0:29:a4:14:db:6d: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:C8:80:7C:06:0D:09:8F:3F:AE:21:55:68:37:C9:4A:C3:EC:99 X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fc:b2:57:55:fc:ca:4d:5e:fe:b0:e6:0e:96:80:e4:7f:f6: 95:02:6a:72:76:63:93:4f:20:0f:cf:ca:7a:39:b8:25:f1:dc: 6c:d8:58:d6:53:1a:69:e6:90:4f:f8:3b:40:6c:d7:9a:65:ec: d2:b2:23:d1:f7:00:5c:6a:32:c8:d3:3a:ec:7a:86:f1:ed:19: 99:22:4a:8a:e4:a8:87:46:62:79:08:25:5d:7a:50:ba:f0:1d: 42:ca:55:d9:3c:43:09:e2:bf:9e:a5:be:e0:40:2f:d9:ea:48: dc:bc:8e:bc:78:36:25:24:0b:1c:d0:c0:7f:74:ee:c2:15:7e: ca:04:aa:07:ee:f9:6c:38:09:40:bb:43:d3:0a:32:5f:b4:7c: 17:5a:4a:32:99:22:c6:ad:08:11:8f:b5:b0:3b:2c:44:59:b7: 76:59:3d:ab:ef:c7:4b:c3:8e:6f:95:f5:aa:bc:b0:b6:de:f2: 3d:17:5d:68:c1:3f:c6:ef:85:e7:e0:dd:6f:cf:8e:13:a6:1c: 90:65:b1:73:31:b2:ca:8b:44:c9:39:54:78:1a:e2:01:fa:9e: 4e:05:c2:ed:b2:7e:16:b5:8a:8b:2c:cf:eb:8a:fa:4c:55:8b: 9c:ad:0d:e2:48:18:d6:84:72:b3:f0:94:8d:3a:be:b6:20:f4: 79:c2:19:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZw1TlNF886/m8t7/+zo3qMAaGIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjA2MTYyMDA4NDBaFw0yNjA2MTcyMzQ5NDBaMDMxMTAvBgNV BAMTKEU0REFDODgwN0MwNjBEMDk4RjNGQUUyMTU1NjgzN0M5NEFDM0VDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDSrmdf6TJqzQq7QxDCajPEGz 2LeDKFJtMcFyRgg0fRPQF2RMr0aeS9+qt2eDbq0jobwURkTPlaW9yGSU471EnXsE eV3yYo1HderLFdzgnyPE7Q9X4Y3d/dbuuF9BqVr/oUKgqj2z8s7iWRP1dsNShlJY +Uod6ra0R8+ZxpfNHy08PYk/Yh1ZJyct18zxHTgof+jDJxoAOigLAqFns/kOzepn xoBC0I6vaDbdS/VmQty2opyifAYaXcCw9elZP6H/8soFBoCFmpZQPd/Ke+ebS7/N IuYpRazlpTQwLUPEUeCOiiEpmmaLUOrrPNAIYwAZmd4Oob8BkMAppBTbbWcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5NrIgHwGDQmPP64hVWg3yUrD7JkwHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn8sldV/MpNXv6w5g6WgOR/9pUCanJ2Y5NP IA/Pyno5uCXx3GzYWNZTGmnmkE/4O0Bs15pl7NKyI9H3AFxqMsjTOux6hvHtGZki SorkqIdGYnkIJV16ULrwHULKVdk8Qwniv56lvuBAL9nqSNy8jrx4NiUkCxzQwH90 7sIVfsoEqgfu+Ww4CUC7Q9MKMl+0fBdaSjKZIsatCBGPtbA7LERZt3ZZPavvx0vD jm+V9aq8sLbe8j0XXWjBP8bvhefg3W/PjhOmHJBlsXMxssqLRMk5VHga4gH6nk4F wu2yfha1iossz+uK+kxVi5ytDeJIGNaEcrPwlI06vrYg9HnCGe0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:38 2026 by rpki-client