$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: CBhIDLjAkrzh1L4W0e8K6ysnpgGkdHoimWY/Hs9u2/k= Subject key identifier: 88:7B:85:1A:A1:7E:D8:A9:85:77:D2:B9:D4:B8:D7:BC:BE:8C:4F:69 Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 6A7A8AC5B349CE9AC6726E8A475539D00AF7193E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:11:49 +0000 Manifest this update: Sat 13 Jun 2026 14:06:49 +0000 Manifest next update: Sun 14 Jun 2026 17:21:49 +0000 Files and hashes: 1: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: jRQtMQYJxzBin+cW87j8F9g45bl2mv4hg/Qp/+VNP2g=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7a:8a:c5:b3:49:ce:9a:c6:72:6e:8a:47:55:39:d0:0a:f7:19:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Jun 13 14:06:49 2026 GMT Not After : Jun 14 17:21:49 2026 GMT Subject: CN=887B851AA17ED8A98577D2B9D4B8D7BCBE8C4F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:81:b3:0c:8f:4c:97:e9:b0:b2:a7:68:38: b7:d6:4c:6d:c7:49:66:17:77:2b:7c:95:61:fe:36: 5f:6f:d5:4d:70:8c:92:1c:de:8b:f4:76:a7:83:d7: 63:06:c3:0f:64:3b:b9:42:81:77:5c:32:2c:21:f6: 4f:71:59:99:b2:28:d5:b1:8b:89:c8:8c:3b:96:45: 3b:ef:ad:97:d7:54:fd:11:cb:3f:9a:2a:08:1a:66: 07:18:f1:27:1e:6b:a6:1b:79:28:ea:08:47:29:59: 98:dc:ff:e9:f2:a4:4d:b1:0e:01:73:e0:19:9d:9d: 19:6a:92:5c:3a:46:32:6d:44:69:5e:20:7c:a7:2a: a2:4a:5b:11:b2:1e:1e:a8:94:fa:d4:a5:30:5b:54: 1b:7e:38:34:77:6c:6c:4c:ef:44:e8:a8:e1:dd:bb: 2f:3e:34:09:55:a5:3f:41:68:ba:44:9d:69:e2:84: c7:91:0c:60:aa:2f:64:22:ff:79:54:2d:d4:f2:64: 7b:2b:92:56:23:8c:54:5a:16:ca:97:8f:51:c3:72: 72:09:df:4c:15:f5:61:0c:e5:ed:ea:6c:a2:28:87: 15:9b:94:ef:43:ca:13:85:94:92:6d:ba:35:e5:2d: 20:4e:23:d5:83:d8:d4:62:06:e2:09:98:65:4b:dd: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7B:85:1A:A1:7E:D8:A9:85:77:D2:B9:D4:B8:D7:BC:BE:8C:4F:69 X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:58:9e:1a:8a:af:8b:2e:4f:9e:f6:73:3c:3e:53:81:38:8b: 4a:3a:15:c2:c2:56:2d:ef:36:ab:5e:c8:cb:ec:d1:49:9f:fa: 11:65:11:06:0b:06:94:7f:34:0f:b0:4b:20:80:f5:c7:12:23: 77:dc:28:85:3c:3c:c6:d7:e3:03:cd:ea:bd:9a:47:67:7d:8d: 6e:a5:9c:29:ef:1a:57:82:ac:f0:cb:3b:cb:48:66:ac:6f:e4: d9:6c:e1:bd:b4:01:5b:46:32:27:91:cc:bb:20:76:a7:ca:ed: 63:a6:a3:98:4b:8e:bc:6e:2b:4c:58:db:71:11:92:ba:cc:ee: 13:a1:71:93:c0:10:53:f3:15:8f:4e:60:67:94:11:5b:57:22: 62:de:4d:a9:35:44:8c:b3:f7:53:b4:50:f8:53:d9:c3:74:c0: 71:61:6b:7c:67:1e:20:1b:ef:01:99:63:22:c3:fd:70:11:6b: e1:cf:4a:f9:f2:3d:04:b9:1e:ba:de:bc:61:a9:24:07:9b:a4: f3:c6:f3:2f:70:b7:b4:16:b1:dd:1c:a6:7e:62:32:15:eb:44: ab:50:e2:e7:72:17:57:b9:0d:b8:da:17:03:60:3e:b7:28:2a: 66:09:ad:71:af:63:a3:22:e0:b3:e3:48:82:57:25:27:bc:64: e9:51:52:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanqKxbNJzprGcm6KR1U50Ar3GT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA2MTMxNDA2NDlaFw0yNjA2MTQxNzIxNDlaMDMxMTAvBgNV BAMTKDg4N0I4NTFBQTE3RUQ4QTk4NTc3RDJCOUQ0QjhEN0JDQkU4QzRGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OIGzDI9Ml+mwsqdoOLfWTG3H SWYXdyt8lWH+Nl9v1U1wjJIc3ov0dqeD12MGww9kO7lCgXdcMiwh9k9xWZmyKNWx i4nIjDuWRTvvrZfXVP0Ryz+aKggaZgcY8Scea6YbeSjqCEcpWZjc/+nypE2xDgFz 4BmdnRlqklw6RjJtRGleIHynKqJKWxGyHh6olPrUpTBbVBt+ODR3bGxM70ToqOHd uy8+NAlVpT9BaLpEnWnihMeRDGCqL2Qi/3lULdTyZHsrklYjjFRaFsqXj1HDcnIJ 30wV9WEM5e3qbKIohxWblO9DyhOFlJJtujXlLSBOI9WD2NRiBuIJmGVL3TLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHuFGqF+2KmFd9K51LjXvL6MT2kwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBYnhqKr4suT572czw+U4E4i0o6FcLCVi3v NqteyMvs0Umf+hFlEQYLBpR/NA+wSyCA9ccSI3fcKIU8PMbX4wPN6r2aR2d9jW6l nCnvGleCrPDLO8tIZqxv5Nls4b20AVtGMieRzLsgdqfK7WOmo5hLjrxuK0xY23ER krrM7hOhcZPAEFPzFY9OYGeUEVtXImLeTak1RIyz91O0UPhT2cN0wHFha3xnHiAb 7wGZYyLD/XARa+HPSvnyPQS5HrrevGGpJAebpPPG8y9wt7QWsd0cpn5iMhXrRKtQ 4udyF1e5DbjaFwNgPrcoKmYJrXGvY6Mi4LPjSIJXJSe8ZOlRUt4= -----END CERTIFICATE-----Generated at Sat Jun 13 21:18:27 2026 by rpki-client