$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: q9th01nRCvxPvlBXwETAFwr6a2wufi6/FSH9hP+xrbk= Subject key identifier: 18:77:86:F9:31:A5:3B:1A:AE:89:0B:DE:88:24:97:D4:0F:76:5D:3B Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 5A27CD828B6515AB2E24FBB04EA2C63F0B354202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:30:10 +0000 Manifest this update: Tue 16 Jun 2026 21:25:10 +0000 Manifest next update: Wed 17 Jun 2026 23:21:10 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) 2: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) 3: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: 0DdCQ0u19zcYVNb9P8AJ6XVQt8obF/BjQ9I0cSPQdUU=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:27:cd:82:8b:65:15:ab:2e:24:fb:b0:4e:a2:c6:3f:0b:35:42:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Jun 16 21:25:10 2026 GMT Not After : Jun 17 23:21:10 2026 GMT Subject: CN=187786F931A53B1AAE890BDE882497D40F765D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:06:53:61:29:a5:88:bc:3b:c9:b9:8a:dd: c9:bb:2e:2c:0d:6e:4f:4c:eb:0e:24:e2:b4:d5:eb: c2:e1:27:b2:4a:dc:f1:8c:3e:cb:21:34:03:70:9e: 17:52:f5:38:01:51:a2:52:ae:4f:13:fc:4c:36:b1: 40:cd:b7:d7:1d:3b:5f:67:59:69:ba:42:27:0f:f1: d8:42:c3:76:b9:ce:ff:6b:02:ac:e6:ba:19:d7:2c: 94:1a:ca:ea:74:a1:bd:6f:71:04:d0:e2:86:35:fe: d0:a1:83:6a:6b:ba:dd:b1:66:a0:74:7b:e5:2a:20: 09:fc:1e:f5:0c:a1:c4:51:bb:ed:38:b9:8a:42:2d: 77:77:a6:9c:42:63:bf:e2:9c:67:cd:6c:02:e7:7f: fa:6b:7b:4a:29:d3:81:7a:9f:c7:6d:2c:24:a7:f9: 18:38:f4:73:5d:b8:fd:05:73:3b:b0:10:5e:87:59: e0:59:d0:88:f1:ee:e4:7d:b8:8b:89:63:e4:21:5c: d4:9c:49:15:0f:b8:56:34:28:ea:6a:06:5e:c2:47: b6:e5:57:e9:1a:89:c6:6f:b0:19:44:31:15:8d:05: f6:b1:fc:19:16:10:69:47:d9:eb:2a:fd:52:7c:d5: c9:c5:39:fb:07:3f:a2:2c:f0:24:ed:6e:9e:e8:10: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:86:F9:31:A5:3B:1A:AE:89:0B:DE:88:24:97:D4:0F:76:5D:3B X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fa:ea:1c:15:eb:2e:95:ce:d0:bd:f2:b7:5e:64:54:e3:7b: ab:bc:33:f9:59:0a:c2:25:51:a6:ef:e6:fa:f8:ab:de:e2:68: 82:ee:bf:0f:77:39:f2:8b:f4:1c:de:ad:fc:d7:c1:a7:90:ad: c9:af:dc:5b:1b:ed:98:35:df:d5:19:8f:19:cb:73:1f:ae:fe: 80:1a:55:3e:61:b1:9a:4d:33:57:11:ad:ae:b3:44:2a:fa:6c: b7:00:ac:bb:e6:53:92:14:f6:7f:65:ba:94:c7:31:08:e4:06: e0:1c:9c:8f:5d:f8:86:8f:35:f5:16:7f:79:4b:32:1e:70:f5: 2f:01:32:37:f2:09:53:8d:f3:7b:34:1c:df:57:a7:99:d7:97: ce:d7:0d:f9:cc:7f:8b:45:e3:99:b5:74:72:3a:6a:5f:35:69: 37:89:3c:1b:a0:3f:08:d3:68:9d:2e:a1:a1:87:07:6c:12:e8: a1:55:5a:09:bd:3a:91:ff:5b:d8:8f:bb:65:89:18:b0:92:84: d4:80:ce:4a:9e:c1:b8:bc:7e:25:94:b2:d3:88:79:32:30:4d: f2:5a:8a:f6:b7:11:bf:36:2a:56:eb:e3:8a:8e:68:3e:82:f3: 54:95:69:d8:9e:46:f4:a3:f6:91:c9:06:c3:ee:6a:10:f5:f6: c9:57:a1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWifNgotlFasuJPuwTqLGPws1QgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjA2MTYyMTI1MTBaFw0yNjA2MTcyMzIxMTBaMDMxMTAvBgNV BAMTKDE4Nzc4NkY5MzFBNTNCMUFBRTg5MEJERTg4MjQ5N0Q0MEY3NjVEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYwAZTYSmliLw7ybmK3cm7LiwN bk9M6w4k4rTV68LhJ7JK3PGMPsshNANwnhdS9TgBUaJSrk8T/Ew2sUDNt9cdO19n WWm6QicP8dhCw3a5zv9rAqzmuhnXLJQayup0ob1vcQTQ4oY1/tChg2prut2xZqB0 e+UqIAn8HvUMocRRu+04uYpCLXd3ppxCY7/inGfNbALnf/pre0op04F6n8dtLCSn +Rg49HNduP0FczuwEF6HWeBZ0Ijx7uR9uIuJY+QhXNScSRUPuFY0KOpqBl7CR7bl V+kaicZvsBlEMRWNBfax/BkWEGlH2esq/VJ81cnFOfsHP6Is8CTtbp7oEDNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHeG+TGlOxquiQveiCSX1A92XTswHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz66hwV6y6VztC98rdeZFTje6u8M/lZCsIl Uabv5vr4q97iaILuvw93OfKL9BzerfzXwaeQrcmv3Fsb7Zg139UZjxnLcx+u/oAa VT5hsZpNM1cRra6zRCr6bLcArLvmU5IU9n9lupTHMQjkBuAcnI9d+IaPNfUWf3lL Mh5w9S8BMjfyCVON83s0HN9Xp5nXl87XDfnMf4tF45m1dHI6al81aTeJPBugPwjT aJ0uoaGHB2wS6KFVWgm9OpH/W9iPu2WJGLCShNSAzkqewbi8fiWUstOIeTIwTfJa iva3Eb82Klbr44qOaD6C81SVadieRvSj9pHJBsPuahD19slXoRU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:21:53 2026 by rpki-client