$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: gfv/YjlWFpUV363KshByqpAuqRVs8aZNaelDwsF0Klw= Subject key identifier: F8:C5:D5:BB:27:D9:7C:66:43:7F:D8:F4:40:3C:CA:57:90:8D:24:54 Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 0F743DDD57E2EAFD8FA1B833DD1382A41DFD40A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:21:18 +0000 Manifest this update: Tue 16 Jun 2026 22:16:18 +0000 Manifest next update: Thu 18 Jun 2026 02:05:18 +0000 Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: IRl2f3IvyWFIMenroz04Y2SIS9FIYKeIApUkosH6VhE=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:74:3d:dd:57:e2:ea:fd:8f:a1:b8:33:dd:13:82:a4:1d:fd:40:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Jun 16 22:16:18 2026 GMT Not After : Jun 18 02:05:18 2026 GMT Subject: CN=F8C5D5BB27D97C66437FD8F4403CCA57908D2454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:bb:0f:5f:bf:9b:c9:f8:d6:39:72:cb:ab: 83:cc:8d:f2:a4:f4:42:37:0a:07:9d:ca:95:b2:f2: cc:f4:d0:73:b4:c9:42:15:98:d2:10:86:c2:f2:76: dc:d2:5a:0c:84:67:b1:77:6e:61:84:e4:c0:8b:f5: 31:b3:38:b8:a9:f5:83:0d:ca:9b:89:ff:b2:9f:28: 90:ed:44:36:8d:85:24:86:78:a3:3b:5c:0d:2b:e5: 31:00:fa:25:f9:35:cb:d5:af:ef:bf:60:83:5b:24: 50:b1:41:c4:12:8f:85:93:88:a8:ac:52:87:fd:c6: 15:5b:11:ae:a6:c9:24:db:be:18:5a:29:ec:10:84: 4d:89:87:ca:52:27:f1:77:98:32:bb:6f:90:62:56: 54:0a:d3:e5:fd:9b:ec:2e:43:0d:0b:63:57:1f:fb: 81:be:d8:2b:44:dc:94:12:03:89:b7:e4:c5:47:3c: ed:10:e4:03:4f:30:b0:be:06:34:ec:9d:fe:08:76: 12:b3:39:66:e5:62:d6:61:5b:29:23:b5:c2:2d:bb: 6a:c7:f9:4d:30:f4:39:9f:1e:07:45:ab:06:ee:5d: 37:02:61:e4:78:c5:3f:55:d6:16:66:79:32:57:06: f0:aa:3b:48:af:18:86:70:94:57:c8:3f:90:5b:88: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C5:D5:BB:27:D9:7C:66:43:7F:D8:F4:40:3C:CA:57:90:8D:24:54 X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a1:3c:cc:d0:a8:57:d9:78:8d:ca:d7:b9:bd:73:75:a2:77: 47:6c:a7:34:67:54:dc:e4:cf:6b:24:50:57:1a:c8:39:13:5f: 2d:b1:3b:76:b5:05:25:b1:a4:2c:70:5b:d1:4c:33:79:69:17: 8b:a3:e1:37:ef:d3:17:dd:4b:4f:b9:bd:20:83:d3:6c:12:66: 12:28:9d:1d:3f:3d:58:7a:bc:b8:71:80:6d:87:2f:c1:2c:59: 48:b4:31:eb:87:2c:bb:4e:ac:34:af:48:e9:3e:d7:df:00:74: 25:08:fa:e6:79:b3:3a:bc:1f:1d:da:d5:c4:f1:0e:6e:92:16: f7:e0:ec:9a:49:00:fc:8c:85:43:e5:31:b9:7d:8d:3c:31:c9: 65:f8:c8:89:a1:90:35:71:95:d5:3d:8b:9d:95:1e:e9:97:22: 7c:44:44:fb:c9:33:98:d7:fc:e4:22:24:50:f6:a9:b7:e9:b1: 8d:cd:32:9c:d1:31:39:d1:b4:d4:fa:06:db:45:be:d8:16:f0: 54:12:32:45:12:8d:01:aa:73:24:f6:36:10:6a:6d:2a:e2:60: 0d:b2:ef:b6:e7:5b:57:d6:86:7c:35:12:84:0a:8a:99:13:96: bc:d0:5e:3c:24:10:8d:87:31:45:a9:93:32:94:bd:fb:fd:d5: 68:bd:a2:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3Q93Vfi6v2Pobgz3ROCpB39QKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjA2MTYyMjE2MThaFw0yNjA2MTgwMjA1MThaMDMxMTAvBgNV BAMTKEY4QzVENUJCMjdEOTdDNjY0MzdGRDhGNDQwM0NDQTU3OTA4RDI0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW2bsPX7+byfjWOXLLq4PMjfKk 9EI3CgedypWy8sz00HO0yUIVmNIQhsLydtzSWgyEZ7F3bmGE5MCL9TGzOLip9YMN ypuJ/7KfKJDtRDaNhSSGeKM7XA0r5TEA+iX5NcvVr++/YINbJFCxQcQSj4WTiKis Uof9xhVbEa6mySTbvhhaKewQhE2Jh8pSJ/F3mDK7b5BiVlQK0+X9m+wuQw0LY1cf +4G+2CtE3JQSA4m35MVHPO0Q5ANPMLC+BjTsnf4IdhKzOWblYtZhWykjtcItu2rH +U0w9DmfHgdFqwbuXTcCYeR4xT9V1hZmeTJXBvCqO0ivGIZwlFfIP5BbiMUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+MXVuyfZfGZDf9j0QDzKV5CNJFQwHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyhPMzQqFfZeI3K17m9c3Wid0dspzRnVNzk z2skUFcayDkTXy2xO3a1BSWxpCxwW9FMM3lpF4uj4Tfv0xfdS0+5vSCD02wSZhIo nR0/PVh6vLhxgG2HL8EsWUi0MeuHLLtOrDSvSOk+198AdCUI+uZ5szq8Hx3a1cTx Dm6SFvfg7JpJAPyMhUPlMbl9jTwxyWX4yImhkDVxldU9i52VHumXInxERPvJM5jX /OQiJFD2qbfpsY3NMpzRMTnRtNT6BttFvtgW8FQSMkUSjQGqcyT2NhBqbSriYA2y 77bnW1fWhnw1EoQKipkTlrzQXjwkEI2HMUWpkzKUvfv91Wi9oko= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:27 2026 by rpki-client