$ rpki-client -vvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: ZanY+kSdUzREtJctHYi6dfemJiZYrmD3jNnQSp5WFvY= Subject key identifier: 78:C0:4C:DE:FF:D5:06:01:3A:B9:F6:1C:56:28:1E:91:3F:50:46:D3 Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 2798AFD1AC8ABC15B74358F44402AA3ED832A6DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:34:41 +0000 Manifest this update: Wed 17 Jun 2026 01:29:41 +0000 Manifest next update: Thu 18 Jun 2026 03:00:41 +0000 Files and hashes: 1: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 3: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: dnq+k4Ck/wivgCeTJXsBf54FMLLn2LRMA/YcpsJkefs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:98:af:d1:ac:8a:bc:15:b7:43:58:f4:44:02:aa:3e:d8:32:a6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: Jun 17 01:29:41 2026 GMT Not After : Jun 18 03:00:41 2026 GMT Subject: CN=78C04CDEFFD506013AB9F61C56281E913F5046D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4a:0a:74:25:2e:e1:d8:c3:17:77:f6:7c:c4: 07:6f:85:18:22:64:13:98:e7:2a:61:8c:52:37:90: 70:ea:18:84:47:c2:b0:1e:e7:70:6a:ef:c0:bf:db: 20:6c:b0:a5:db:74:2f:b0:a6:b0:81:7c:58:64:7e: 3a:45:fc:4e:24:35:d0:11:d1:71:65:21:87:e7:5d: 87:2c:7a:d7:4d:6c:da:9f:fc:37:bb:b0:be:3f:3f: 90:bd:d1:5e:3b:4a:4c:0f:92:2e:c5:d4:91:1c:d6: d5:7a:47:ff:e6:f8:78:64:70:11:08:b5:8d:1a:60: 5c:a9:0d:bf:6c:0f:36:1b:0b:db:e9:89:47:17:c0: b9:fd:33:70:9b:10:34:55:61:6d:0d:48:20:41:80: 0e:9c:ad:b8:f9:5e:20:1b:d9:bc:57:3e:ff:a6:b9: 7c:92:66:21:80:19:59:96:65:28:e3:84:b8:4e:40: c7:c2:0f:21:1f:27:35:57:b9:ee:ed:78:80:1d:18: e6:e3:f6:20:86:db:5c:8c:cd:59:80:b8:aa:ef:15: 76:f4:0f:9d:55:0e:6f:e3:6f:b3:6a:14:b2:b1:bc: 33:80:ab:04:ca:13:f8:1e:19:e5:fc:7b:c9:9f:67: 97:bc:c0:07:31:d5:08:dc:9f:c7:5b:af:2e:a2:c1: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C0:4C:DE:FF:D5:06:01:3A:B9:F6:1C:56:28:1E:91:3F:50:46:D3 X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ed:a7:94:5a:1e:41:db:0c:79:0d:f0:c7:28:c4:26:78:ee: 94:21:7c:fc:18:9b:53:f7:f7:ef:d2:0a:b9:75:b5:d5:01:0b: 93:d3:0f:09:e2:d8:aa:87:f1:9d:fd:9b:38:10:a3:cf:0b:8d: 92:e8:02:2e:32:db:67:44:39:b0:28:cb:db:37:fa:9b:20:b5: b4:72:d0:67:04:2c:da:0e:cd:78:c6:a9:28:1e:ec:c3:f7:ec: b0:fe:7d:66:13:83:cf:f8:84:03:22:34:06:b1:c0:26:26:a1: 60:25:31:64:e8:35:d1:70:03:cb:49:25:61:7c:7a:39:46:d0: 23:04:27:6e:0e:c6:77:6e:a3:cd:81:e9:2c:60:58:5b:24:36: e0:e9:2b:6d:29:39:0a:2a:15:63:a3:13:b2:94:66:c4:22:e7: d3:18:5b:69:4b:ff:5e:13:88:57:d1:90:df:68:fb:00:0f:cb: c8:c4:37:9e:2f:9e:82:c0:9c:07:13:af:8f:2f:d4:66:1a:fb: df:e6:dd:35:b4:e6:7d:e5:fb:8a:53:c0:af:3e:d4:38:33:43: 42:15:15:af:1f:ce:84:61:84:da:a7:3e:f8:66:78:c6:2f:3a: e6:09:ed:b4:94:5c:d8:a3:14:39:f2:d5:35:e1:50:cb:b0:1f: 49:fc:84:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5iv0ayKvBW3Q1j0RAKqPtgyptwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA2MTcwMTI5NDFaFw0yNjA2MTgwMzAwNDFaMDMxMTAvBgNV BAMTKDc4QzA0Q0RFRkZENTA2MDEzQUI5RjYxQzU2MjgxRTkxM0Y1MDQ2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSgp0JS7h2MMXd/Z8xAdvhRgi ZBOY5yphjFI3kHDqGIRHwrAe53Bq78C/2yBssKXbdC+wprCBfFhkfjpF/E4kNdAR 0XFlIYfnXYcsetdNbNqf/De7sL4/P5C90V47SkwPki7F1JEc1tV6R//m+HhkcBEI tY0aYFypDb9sDzYbC9vpiUcXwLn9M3CbEDRVYW0NSCBBgA6crbj5XiAb2bxXPv+m uXySZiGAGVmWZSjjhLhOQMfCDyEfJzVXue7teIAdGObj9iCG21yMzVmAuKrvFXb0 D51VDm/jb7NqFLKxvDOAqwTKE/geGeX8e8mfZ5e8wAcx1Qjcn8dbry6iwTubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMBM3v/VBgE6ufYcVigekT9QRtMwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXtp5RaHkHbDHkN8McoxCZ47pQhfPwYm1P3 9+/SCrl1tdUBC5PTDwni2KqH8Z39mzgQo88LjZLoAi4y22dEObAoy9s3+psgtbRy 0GcELNoOzXjGqSge7MP37LD+fWYTg8/4hAMiNAaxwCYmoWAlMWToNdFwA8tJJWF8 ejlG0CMEJ24Oxnduo82B6SxgWFskNuDpK20pOQoqFWOjE7KUZsQi59MYW2lL/14T iFfRkN9o+wAPy8jEN54vnoLAnAcTr48v1GYa+9/m3TW05n3l+4pTwK8+1DgzQ0IV Fa8fzoRhhNqnPvhmeMYvOuYJ7bSUXNijFDny1TXhUMuwH0n8hKU= -----END CERTIFICATE-----Generated at Wed Jun 17 13:17:10 2026 by rpki-client