$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: dk5FPKPWVJWP25FpIwI6MZhq6nAt+v/Flujg4yENyYQ= Subject key identifier: 4B:2B:09:58:93:8D:D7:54:64:8F:B6:22:48:6A:8C:AF:66:CE:B6:1D Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 0578DAD8724CD7137540BC5A7CD6F522EF531276 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:12:59 +0000 Manifest this update: Tue 28 Jul 2026 17:07:59 +0000 Manifest next update: Wed 29 Jul 2026 21:10:59 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 3: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: V9NzWda27Jj4nLXgbpHfzhBBkU9vjsgU6yHVocQ/CYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:78:da:d8:72:4c:d7:13:75:40:bc:5a:7c:d6:f5:22:ef:53:12:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Jul 28 17:07:59 2026 GMT Not After : Jul 29 21:10:59 2026 GMT Subject: CN=4B2B0958938DD754648FB622486A8CAF66CEB61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:bd:68:b3:14:a3:59:41:69:ad:df:33:9a: 48:c7:b9:05:34:b8:79:ec:31:c6:65:dd:70:db:7e: 52:42:72:6e:c3:dd:73:79:6f:21:06:d2:5a:09:7f: a9:76:7f:26:f3:26:51:ad:86:9b:02:9b:cd:ad:37: 71:1b:18:b8:2a:0c:c2:62:53:8d:9a:d5:18:b5:61: 77:9f:2b:40:83:3b:cb:dc:3a:a9:3b:9c:95:45:1e: f7:e1:ff:df:86:1d:16:2f:b7:9e:de:4e:6c:39:23: 76:b3:6e:af:07:a7:28:6f:60:59:a8:4a:20:37:0f: bb:00:2e:da:9f:2f:fb:36:03:0e:c1:13:0b:77:0e: 74:0c:05:be:73:44:98:9f:f6:c1:06:bf:76:c2:04: ca:e5:00:70:19:2e:51:eb:f3:04:ef:77:d9:e5:0d: db:c1:71:18:78:32:2b:bd:c8:3e:ba:51:6e:74:7a: a9:dd:7b:75:6a:1e:84:05:28:e4:84:6c:35:ad:6a: 97:ec:d6:df:1b:c7:20:99:cc:8f:ab:d3:6d:5c:c1: d5:b1:a3:02:37:c6:83:4a:5b:08:35:82:55:f2:39: 24:7e:d5:ca:d5:01:18:92:01:80:d0:54:54:1a:4a: cf:63:e6:7e:19:3f:d0:f9:3d:af:a6:df:e7:ce:65: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2B:09:58:93:8D:D7:54:64:8F:B6:22:48:6A:8C:AF:66:CE:B6:1D X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b2:1e:09:2f:ae:cb:be:ba:83:9c:88:8b:bd:74:0e:b7:68: b6:07:eb:7e:1f:12:2b:b9:7c:74:2c:28:25:d5:07:18:44:0d: f1:d9:82:61:b1:e3:71:78:c4:81:fb:90:a1:a4:b7:6f:1e:14: 61:8c:5a:2b:3a:ec:9b:7f:5e:07:57:67:ec:a2:bf:8b:7c:6f: 25:25:f3:42:24:92:93:c6:cc:dd:e3:09:55:43:2e:39:03:2a: 52:cf:15:0f:f2:32:60:ed:3d:38:64:ca:e2:39:4d:58:34:38: 66:db:31:3b:c5:07:e3:75:6b:f4:6a:44:fe:03:d3:73:3b:ce: 1f:f9:c9:74:b8:6a:e6:10:38:91:01:f5:a6:51:07:f7:67:1f: e3:41:89:ed:9e:c8:23:a5:a3:63:25:67:4c:0c:ee:2f:a7:26: 36:a7:f0:36:bd:89:50:69:c4:51:bf:bd:69:3c:02:6f:ba:7a: ff:6c:33:70:4e:52:3e:ee:39:d6:2f:0c:20:2a:05:8d:e2:45: 28:88:ae:1f:39:28:31:2f:03:6d:79:99:80:05:7b:8d:ca:ae: fc:47:3e:8f:ae:d7:1c:3d:49:46:bb:8c:5d:b9:67:2e:ae:42: eb:eb:36:20:e0:07:a0:d9:aa:1b:3a:ac:b5:f2:d2:46:ca:33: d1:b6:07:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXja2HJM1xN1QLxafNb1Iu9TEnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA3MjgxNzA3NTlaFw0yNjA3MjkyMTEwNTlaMDMxMTAvBgNV BAMTKDRCMkIwOTU4OTM4REQ3NTQ2NDhGQjYyMjQ4NkE4Q0FGNjZDRUI2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWIb1osxSjWUFprd8zmkjHuQU0 uHnsMcZl3XDbflJCcm7D3XN5byEG0loJf6l2fybzJlGthpsCm82tN3EbGLgqDMJi U42a1Ri1YXefK0CDO8vcOqk7nJVFHvfh/9+GHRYvt57eTmw5I3azbq8HpyhvYFmo SiA3D7sALtqfL/s2Aw7BEwt3DnQMBb5zRJif9sEGv3bCBMrlAHAZLlHr8wTvd9nl DdvBcRh4Miu9yD66UW50eqnde3VqHoQFKOSEbDWtapfs1t8bxyCZzI+r021cwdWx owI3xoNKWwg1glXyOSR+1crVARiSAYDQVFQaSs9j5n4ZP9D5Pa+m3+fOZWNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSysJWJON11Rkj7YiSGqMr2bOth0wHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6yHgkvrsu+uoOciIu9dA63aLYH634fEiu5 fHQsKCXVBxhEDfHZgmGx43F4xIH7kKGkt28eFGGMWis67Jt/XgdXZ+yiv4t8byUl 80IkkpPGzN3jCVVDLjkDKlLPFQ/yMmDtPThkyuI5TVg0OGbbMTvFB+N1a/RqRP4D 03M7zh/5yXS4auYQOJEB9aZRB/dnH+NBie2eyCOlo2MlZ0wM7i+nJjan8Da9iVBp xFG/vWk8Am+6ev9sM3BOUj7uOdYvDCAqBY3iRSiIrh85KDEvA215mYAFe43KrvxH Po+u1xw9SUa7jF25Zy6uQuvrNiDgB6DZqhs6rLXy0kbKM9G2Bx8= -----END CERTIFICATE-----Generated at Wed Jul 29 07:36:54 2026 by rpki-client