$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: dxuALk9bf20MGNtCMySeV8svb9LyM3J/E4bo58wN9uU= Subject key identifier: EF:4A:C5:E0:92:86:0F:16:8F:1F:10:50:4E:5A:56:22:91:4F:B2:97 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 1F6C794F800B637617EC5952D69E9D974D56392B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:07:13 +0000 Manifest this update: Tue 16 Jun 2026 19:02:13 +0000 Manifest next update: Wed 17 Jun 2026 21:37:13 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 2: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 3: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 4: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: aJ+g8Gsrj/MatkQcAAsj0t1Xc2uIBykwJPHUFb7DtLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6c:79:4f:80:0b:63:76:17:ec:59:52:d6:9e:9d:97:4d:56:39:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Jun 16 19:02:13 2026 GMT Not After : Jun 17 21:37:13 2026 GMT Subject: CN=EF4AC5E092860F168F1F10504E5A5622914FB297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:5f:f0:d0:92:a2:de:85:d5:72:43:d0:80: 9d:57:a3:cd:0a:55:71:b2:0a:d6:63:5f:85:d8:8a: 05:ae:d9:37:06:6e:78:8c:90:c7:1c:b8:64:df:fa: fc:74:24:37:42:53:4e:7d:3e:b3:7a:a9:3c:77:85: 3a:f6:e7:00:3c:20:c3:13:09:90:18:fe:9d:6d:99: 06:ca:91:95:b3:a4:23:71:9b:27:6d:40:2a:1e:4e: eb:83:e9:9a:b9:09:d3:66:c3:87:cf:be:4d:48:b9: 7b:78:74:86:9a:3c:bd:b4:89:eb:a3:be:bb:ff:cb: e4:1b:29:d5:38:8c:c1:72:f0:64:91:bc:39:71:fc: b1:6b:9c:97:f4:a3:f8:37:22:2f:f8:ff:43:36:48: b8:fe:38:66:b2:14:d9:1c:c5:ca:e0:9f:0a:05:23: 20:6c:48:b1:b7:e7:b0:ba:ed:4e:10:93:8f:8f:89: bf:a6:75:93:91:b3:62:4e:ff:1c:fd:2e:73:1e:16: 76:1b:3f:f3:e4:fe:09:f0:05:a8:bf:d1:bd:cd:e7: 29:03:74:68:a5:29:da:cc:a1:ad:0f:50:25:22:ec: 79:7d:de:93:58:a2:87:67:a2:89:a8:05:bb:04:03: 67:79:86:51:4d:f6:15:bc:98:ab:36:95:b2:be:48: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4A:C5:E0:92:86:0F:16:8F:1F:10:50:4E:5A:56:22:91:4F:B2:97 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ce:f0:90:ec:80:6d:d2:fe:5c:ca:63:a7:a4:46:15:b2:bf: 9b:08:4a:a4:59:8b:0e:47:1f:67:d4:18:25:3f:01:38:a6:59: dc:40:80:97:0c:da:e7:5b:c8:f6:17:40:fa:84:e0:2c:bd:b7: 29:f4:46:22:c8:68:ba:53:63:8b:65:f5:b0:1d:37:63:03:9e: 21:7b:a9:51:4c:f1:49:f8:c1:0b:d7:de:ee:7f:84:34:6c:8e: 62:c2:35:c3:70:a6:8c:97:09:9a:5d:fe:e1:6b:10:26:0d:51: 74:14:7c:84:a7:8d:8a:ea:f1:b1:79:a0:34:91:cf:01:e0:41: 3b:66:97:45:35:63:4c:5c:df:15:41:12:b9:74:d4:c3:3c:e4: 5f:41:72:e9:dd:11:99:1d:84:88:53:95:9f:fa:ad:76:cd:3e: a4:66:09:71:86:09:47:16:28:86:18:ea:45:17:88:1c:f3:9b: 46:c3:77:30:71:a2:4c:74:a2:37:7b:88:9d:58:ba:dd:28:07: c6:7c:5c:c6:17:cd:79:14:d2:d7:36:23:ba:ad:c2:1f:49:58: 5c:6b:8a:dd:be:c1:a6:2c:07:f1:00:ff:7d:e3:37:3c:be:bb: 45:ab:69:31:2f:cc:f8:0c:11:66:e1:40:3c:85:40:5f:43:d6: aa:7d:dc:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2x5T4ALY3YX7FlS1p6dl01WOSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA2MTYxOTAyMTNaFw0yNjA2MTcyMTM3MTNaMDMxMTAvBgNV BAMTKEVGNEFDNUUwOTI4NjBGMTY4RjFGMTA1MDRFNUE1NjIyOTE0RkIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCV/w0JKi3oXVckPQgJ1Xo80K VXGyCtZjX4XYigWu2TcGbniMkMccuGTf+vx0JDdCU059PrN6qTx3hTr25wA8IMMT CZAY/p1tmQbKkZWzpCNxmydtQCoeTuuD6Zq5CdNmw4fPvk1IuXt4dIaaPL20ieuj vrv/y+QbKdU4jMFy8GSRvDlx/LFrnJf0o/g3Ii/4/0M2SLj+OGayFNkcxcrgnwoF IyBsSLG357C67U4Qk4+Pib+mdZORs2JO/xz9LnMeFnYbP/Pk/gnwBai/0b3N5ykD dGilKdrMoa0PUCUi7Hl93pNYoodnoomoBbsEA2d5hlFN9hW8mKs2lbK+SEX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70rF4JKGDxaPHxBQTlpWIpFPspcwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHO8JDsgG3S/lzKY6ekRhWyv5sISqRZiw5H H2fUGCU/ATimWdxAgJcM2udbyPYXQPqE4Cy9tyn0RiLIaLpTY4tl9bAdN2MDniF7 qVFM8Un4wQvX3u5/hDRsjmLCNcNwpoyXCZpd/uFrECYNUXQUfISnjYrq8bF5oDSR zwHgQTtml0U1Y0xc3xVBErl01MM85F9BcundEZkdhIhTlZ/6rXbNPqRmCXGGCUcW KIYY6kUXiBzzm0bDdzBxokx0ojd7iJ1Yut0oB8Z8XMYXzXkU0tc2I7qtwh9JWFxr it2+waYsB/EA/33jNzy+u0WraTEvzPgMEWbhQDyFQF9D1qp93JE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:06 2026 by rpki-client