$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: 7J8jIQeQHveRpXZQZQXFEIaila5a2XLOUD+ykGdTKiw= Subject key identifier: A3:4E:4F:31:2F:9D:6D:8D:E7:23:8D:26:D0:4B:5D:65:4D:64:B1:E3 Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 2AD80F0EEF61D7909E0BBE2103C737B10873B319 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:28:26 +0000 Manifest this update: Sat 13 Jun 2026 11:23:26 +0000 Manifest next update: Sun 14 Jun 2026 15:19:26 +0000 Files and hashes: 1: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: MikDO9Ra0vwsxYaxsaCHIbTxwmW0HL9wqfU3yx1w6OA=) 2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d8:0f:0e:ef:61:d7:90:9e:0b:be:21:03:c7:37:b1:08:73:b3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Jun 13 11:23:26 2026 GMT Not After : Jun 14 15:19:26 2026 GMT Subject: CN=A34E4F312F9D6D8DE7238D26D04B5D654D64B1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:aa:d3:af:12:1c:8a:ef:a0:1f:85:91:c2: b2:56:38:3d:95:16:3d:df:c7:3e:e8:f4:45:ea:f6: 8b:fa:1d:30:6d:b9:e1:99:c5:6c:28:c7:ce:ed:65: b8:d8:1f:80:1f:ab:4b:6b:91:ae:b4:bc:b5:4d:8c: e9:f3:d8:06:55:25:34:01:1f:58:de:f1:67:e1:09: 49:04:c5:bf:a6:66:90:c5:ad:75:69:f5:80:e0:57: a8:15:8b:8b:24:7a:ab:40:47:89:e7:a2:ba:09:c6: b2:8f:3f:8d:78:a2:65:90:42:cd:b8:e7:46:39:43: 2f:c9:03:c2:79:2c:b7:f7:86:d9:3a:f0:0f:31:4f: 1e:9b:af:12:84:37:3a:2b:4f:9b:49:57:60:74:bb: 43:15:0d:a4:71:ab:75:1c:e1:42:42:a1:ae:69:17: 6e:d8:16:72:a8:e0:41:e4:41:ff:c2:8e:d5:64:82: 0e:1a:6d:50:da:92:b1:54:0b:cf:d1:28:46:c9:ac: 95:40:5a:3c:d0:10:23:01:92:14:a9:46:2c:a1:41: 48:db:27:58:84:5a:2a:54:f1:7d:1e:ba:96:d3:e6: 61:01:d3:75:12:ef:34:aa:65:83:c8:ff:6c:b9:cf: 9f:d8:db:bb:30:b9:41:32:6d:14:ea:8f:de:63:bd: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4E:4F:31:2F:9D:6D:8D:E7:23:8D:26:D0:4B:5D:65:4D:64:B1:E3 X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:54:ea:d5:50:2b:50:de:10:e5:33:f1:b1:70:b3:06:89: 34:e5:e1:b0:c0:23:c9:25:de:c2:e8:62:68:28:df:66:96:0b: bd:c9:45:fe:ec:f9:d6:40:08:c7:a5:63:c3:49:fc:37:37:7d: 24:47:02:0d:7a:b7:4d:73:b0:16:64:e0:51:e4:2f:24:35:12: d2:bc:eb:d6:8e:43:36:bb:56:07:8b:8b:cb:42:75:58:fd:d1: 2e:b3:78:df:62:ac:da:e6:0f:ce:75:85:66:1e:6d:8a:b4:8e: 7e:3b:65:ce:f0:2d:bb:ab:7f:0a:7f:cf:5f:1d:36:a3:8d:2a: 4d:65:74:e7:41:de:77:f3:6c:95:82:e4:ee:6f:c2:02:3f:14: 31:20:1a:33:c2:fb:d8:f5:0e:41:d9:8c:2b:69:cf:82:34:75: 8b:04:01:d7:f5:3c:11:a7:59:6f:a8:81:5d:da:40:4f:fa:24: 1b:bd:c2:1b:97:8f:8c:91:39:35:13:17:3d:cb:af:60:a0:bd: 06:5f:0c:67:21:78:b6:0e:a8:d3:a3:2c:0c:48:83:ae:49:b6: d1:fa:b6:cd:e3:1c:5f:15:17:c6:de:dd:b5:a5:da:71:fb:eb: 0a:fd:ab:e5:42:3e:88:8e:05:38:03:5e:10:e9:42:51:c7:2c: f5:ee:02:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtgPDu9h15CeC74hA8c3sQhzsxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA2MTMxMTIzMjZaFw0yNjA2MTQxNTE5MjZaMDMxMTAvBgNV BAMTKEEzNEU0RjMxMkY5RDZEOERFNzIzOEQyNkQwNEI1RDY1NEQ2NEIxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcarTrxIciu+gH4WRwrJWOD2V Fj3fxz7o9EXq9ov6HTBtueGZxWwox87tZbjYH4Afq0trka60vLVNjOnz2AZVJTQB H1je8WfhCUkExb+mZpDFrXVp9YDgV6gVi4skeqtAR4nnoroJxrKPP414omWQQs24 50Y5Qy/JA8J5LLf3htk68A8xTx6brxKENzorT5tJV2B0u0MVDaRxq3Uc4UJCoa5p F27YFnKo4EHkQf/CjtVkgg4abVDakrFUC8/RKEbJrJVAWjzQECMBkhSpRiyhQUjb J1iEWipU8X0eupbT5mEB03US7zSqZYPI/2y5z5/Y27swuUEybRTqj95jvclNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo05PMS+dbY3nI40m0EtdZU1kseMwHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfAVOrVUCtQ3hDlM/GxcLMGiTTl4bDAI8kl 3sLoYmgo32aWC73JRf7s+dZACMelY8NJ/Dc3fSRHAg16t01zsBZk4FHkLyQ1EtK8 69aOQza7VgeLi8tCdVj90S6zeN9irNrmD851hWYebYq0jn47Zc7wLburfwp/z18d NqONKk1ldOdB3nfzbJWC5O5vwgI/FDEgGjPC+9j1DkHZjCtpz4I0dYsEAdf1PBGn WW+ogV3aQE/6JBu9whuXj4yROTUTFz3Lr2CgvQZfDGcheLYOqNOjLAxIg65JttH6 ts3jHF8VF8be3bWl2nH76wr9q+VCPoiOBTgDXhDpQlHHLPXuArA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:10:14 2026 by rpki-client