$ rpki-client -vvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: 26bjmsGIIeHxUU/hnBAUhqCvL6HkxZSIaA9MJoUQK6k= Subject key identifier: C5:C0:ED:40:36:B5:EA:91:A5:B8:F2:F6:75:08:B4:6B:4E:E7:2B:AC Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 2BD056A373A11A1C0BC087D3BF7A872CB06799D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:18:06 +0000 Manifest this update: Wed 17 Jun 2026 04:13:06 +0000 Manifest next update: Thu 18 Jun 2026 07:12:06 +0000 Files and hashes: 1: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: gtYhaCVJPlknhfAub9d3vYNkgq0oRVsHWRUkAj/m4Mg=) 2: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: h8+dhgJZAVYl5vhc9z1CI3Q73pMj8I+xGu7T9NSMlIk=) 3: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: HK/N3jJS+JzZ86LurZHVJQHoGpVJnd2NzI7n/JqdXTw=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d0:56:a3:73:a1:1a:1c:0b:c0:87:d3:bf:7a:87:2c:b0:67:99:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Jun 17 04:13:06 2026 GMT Not After : Jun 18 07:12:06 2026 GMT Subject: CN=C5C0ED4036B5EA91A5B8F2F67508B46B4EE72BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:33:55:37:b9:23:05:46:8a:ad:c0:75:45: 2f:fb:6d:70:5e:ab:66:d4:14:b9:5f:b6:36:88:c6: d9:5e:ce:32:10:29:b5:f1:91:25:df:e7:64:cc:d0: d9:58:80:84:67:44:cc:b9:de:09:66:17:58:e4:82: f6:de:33:86:03:d0:81:5a:91:5f:30:ed:4a:d1:4b: f3:59:38:93:a2:ba:42:3e:d1:ad:01:e9:72:16:c9: a5:6f:8d:80:cb:63:40:d5:eb:7d:43:72:f7:ce:4a: d0:eb:27:a2:b5:88:75:cc:d8:8a:58:21:f1:ba:26: 56:f3:bb:4e:ae:1f:30:47:2a:f8:00:0f:a2:d7:fb: 4b:3a:5a:24:12:c6:fb:bd:bd:8c:34:a5:7c:7d:82: 2f:3c:46:45:d3:16:d6:36:e7:98:f0:64:94:df:fc: a8:9c:15:80:b9:84:a5:a0:95:5f:c2:12:77:7f:1d: dd:98:89:dd:43:79:2b:06:f3:0a:1a:8d:d6:80:07: 85:4f:20:c3:48:bb:69:83:c3:40:1a:53:28:c8:60: c0:5a:13:d7:94:a1:9c:69:80:3d:b5:62:7a:50:27: ad:83:e4:03:1f:97:1f:fb:c7:de:1c:22:0d:70:c7: 43:71:66:4f:22:23:de:08:0a:a8:50:f3:db:c6:e8: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C0:ED:40:36:B5:EA:91:A5:B8:F2:F6:75:08:B4:6B:4E:E7:2B:AC X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ed:51:ff:54:3e:e0:72:70:05:00:b7:15:3d:a6:71:b7:ba: e2:7b:6e:14:52:70:b3:10:f7:05:82:05:25:36:2a:72:02:c2: 96:b6:52:47:ee:63:2e:53:dd:62:c5:b0:77:76:48:96:e9:aa: 51:28:f6:9f:10:f9:98:80:68:85:69:69:00:d0:d9:cb:26:41: 4e:c2:2a:ab:a6:6c:ac:c3:47:a6:42:24:19:0b:f5:e4:ce:eb: dc:79:50:cd:bd:d1:bb:d8:70:80:9f:ed:3a:28:61:02:16:63: 93:77:b3:18:0f:60:42:4c:09:46:e0:37:fe:0c:f0:c4:9f:5b: 9a:7b:82:86:15:30:bb:75:b6:86:de:73:cb:7f:41:41:2f:03: 21:ed:9f:51:09:d4:99:50:7a:cd:a2:32:04:2f:62:bd:fc:df: 69:8a:b1:93:28:b3:39:9d:b8:64:af:84:41:c6:b2:3f:ca:98: 17:b2:74:31:cd:bb:1e:61:95:74:22:7f:ca:21:e2:59:d9:50: f6:4a:ae:1a:89:50:9f:9d:d6:28:4d:c4:3a:7d:ab:7c:31:9c: 40:bd:8a:6c:3c:65:a1:2e:b6:44:d0:6d:6e:13:7c:ab:1e:d7: 2d:4c:c8:c3:4e:a6:b8:2b:88:0e:27:95:10:9c:6a:0b:94:ae: 6c:76:5f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9BWo3OhGhwLwIfTv3qHLLBnmdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjA2MTcwNDEzMDZaFw0yNjA2MTgwNzEyMDZaMDMxMTAvBgNV BAMTKEM1QzBFRDQwMzZCNUVBOTFBNUI4RjJGNjc1MDhCNDZCNEVFNzJCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDjNVN7kjBUaKrcB1RS/7bXBe q2bUFLlftjaIxtlezjIQKbXxkSXf52TM0NlYgIRnRMy53glmF1jkgvbeM4YD0IFa kV8w7UrRS/NZOJOiukI+0a0B6XIWyaVvjYDLY0DV631DcvfOStDrJ6K1iHXM2IpY IfG6Jlbzu06uHzBHKvgAD6LX+0s6WiQSxvu9vYw0pXx9gi88RkXTFtY255jwZJTf /KicFYC5hKWglV/CEnd/Hd2Yid1DeSsG8woajdaAB4VPIMNIu2mDw0AaUyjIYMBa E9eUoZxpgD21YnpQJ62D5AMflx/7x94cIg1wx0NxZk8iI94ICqhQ89vG6NC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcDtQDa16pGluPL2dQi0a07nK6wwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrtUf9UPuBycAUAtxU9pnG3uuJ7bhRScLMQ 9wWCBSU2KnICwpa2UkfuYy5T3WLFsHd2SJbpqlEo9p8Q+ZiAaIVpaQDQ2csmQU7C KqumbKzDR6ZCJBkL9eTO69x5UM290bvYcICf7TooYQIWY5N3sxgPYEJMCUbgN/4M 8MSfW5p7goYVMLt1tobec8t/QUEvAyHtn1EJ1JlQes2iMgQvYr3832mKsZMoszmd uGSvhEHGsj/KmBeydDHNux5hlXQif8oh4lnZUPZKrhqJUJ+d1ihNxDp9q3wxnEC9 imw8ZaEutkTQbW4TfKse1y1MyMNOprgriA4nlRCcaguUrmx2X54= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:33 2026 by rpki-client