$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: TBuSMxGCqi1IOlANoE2OYUV3d2xE46q1kGW15rAlxqk= Subject key identifier: C5:2B:D5:68:38:D9:25:73:4C:B8:A8:35:FA:11:57:A1:63:FE:1D:05 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 3FBA46C9632054C09705EB117BE551667B7E4238 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:58:40 +0000 Manifest this update: Tue 16 Jun 2026 15:53:40 +0000 Manifest next update: Wed 17 Jun 2026 19:39:40 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 3: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 4: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: d39iKIq/NdI/stx0j1fQiSFKTj1KVN/lYqxgV6tpuVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ba:46:c9:63:20:54:c0:97:05:eb:11:7b:e5:51:66:7b:7e:42:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Jun 16 15:53:40 2026 GMT Not After : Jun 17 19:39:40 2026 GMT Subject: CN=C52BD56838D925734CB8A835FA1157A163FE1D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:18:4a:78:ab:fb:6e:f8:4a:2b:ce:c4:41:af: c7:f6:0e:6b:7e:ac:96:51:d8:4a:98:05:e3:b7:56: 47:95:62:7d:01:c4:51:4c:a3:08:6c:d1:a5:ec:e5: 39:64:8d:ad:f4:18:6e:d2:a1:bf:7f:71:8d:92:e6: bf:24:7a:7b:b0:cf:b5:76:d0:2d:03:74:22:af:1d: a0:87:92:a3:10:f6:45:b3:6c:73:74:6c:30:c4:d5: 95:5f:ec:43:dd:1f:c0:d2:9c:59:e0:5b:5e:fa:bd: 9c:db:11:d3:da:ae:72:ad:e1:d7:7d:d3:6d:27:16: 9b:43:10:80:39:14:e3:08:e5:13:40:e8:77:86:bc: f7:e5:05:04:74:8b:8f:59:7b:30:62:b2:b0:ff:8f: e8:fc:23:e1:85:3c:ee:06:b1:48:9a:01:4d:a8:7b: 4f:e3:69:73:94:f1:ae:d0:3e:8e:5e:2a:bc:52:8b: 09:b2:ca:7c:de:d6:25:d9:68:07:7e:0d:76:28:74: b8:a4:cc:eb:58:d8:2a:25:68:16:1a:da:77:2a:c4: e2:c4:f1:31:d8:30:75:4d:40:e1:72:04:a8:cf:af: 02:0b:ba:ac:90:4c:d0:e6:5e:72:e9:f7:e1:51:7f: 48:97:cd:f5:95:5f:8c:1a:e5:63:a9:5c:06:b0:8c: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2B:D5:68:38:D9:25:73:4C:B8:A8:35:FA:11:57:A1:63:FE:1D:05 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f3:44:91:72:1e:23:8b:fa:23:ca:c4:ac:44:cf:be:84:1a: 8c:e0:fb:79:73:24:44:68:f4:59:f3:a3:f6:22:c1:40:c2:11: 17:30:5f:4a:05:b3:c0:e1:55:e9:b1:48:d4:b2:78:b7:de:85: 85:c9:02:af:1b:2e:9c:c6:78:ae:9a:3b:e1:53:3a:06:c6:89: d0:0d:ea:3d:d2:72:26:30:1c:a2:98:1c:d8:ca:44:cd:75:35: 5c:7e:cd:d1:de:7c:7f:26:7c:88:6a:c4:b4:75:69:71:26:85: 9a:0f:af:3c:cd:a9:c9:ad:dc:a5:9a:67:0f:e7:6f:10:02:ab: d2:9c:a2:6b:5c:c8:80:24:0c:a5:f5:be:17:0c:a0:29:93:9d: 5c:f0:e1:b0:cc:65:a8:5d:13:4d:ff:96:d6:f1:b9:4c:b8:aa: f3:92:9c:25:2a:e9:f7:30:55:a9:85:a4:c5:4c:df:8b:18:56: 44:f3:9c:1c:32:84:00:00:1e:a2:85:d9:d3:c0:c0:71:9e:ae: f9:55:94:af:f1:7a:14:f8:3e:53:05:5c:28:8c:a2:68:95:28: b2:a1:a3:b9:76:c3:2f:34:3d:f9:6f:70:d7:a3:fe:1d:26:63: ba:83:ff:fa:ea:7a:d7:f3:d1:f1:77:b2:d6:06:35:dd:dd:0b: 0d:d8:2c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7pGyWMgVMCXBesRe+VRZnt+QjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA2MTYxNTUzNDBaFw0yNjA2MTcxOTM5NDBaMDMxMTAvBgNV BAMTKEM1MkJENTY4MzhEOTI1NzM0Q0I4QTgzNUZBMTE1N0ExNjNGRTFEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGEp4q/tu+EorzsRBr8f2Dmt+ rJZR2EqYBeO3VkeVYn0BxFFMowhs0aXs5Tlkja30GG7Sob9/cY2S5r8kenuwz7V2 0C0DdCKvHaCHkqMQ9kWzbHN0bDDE1ZVf7EPdH8DSnFngW176vZzbEdParnKt4dd9 020nFptDEIA5FOMI5RNA6HeGvPflBQR0i49ZezBisrD/j+j8I+GFPO4GsUiaAU2o e0/jaXOU8a7QPo5eKrxSiwmyynze1iXZaAd+DXYodLikzOtY2ColaBYa2ncqxOLE 8THYMHVNQOFyBKjPrwILuqyQTNDmXnLp9+FRf0iXzfWVX4wa5WOpXAawjKcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSvVaDjZJXNMuKg1+hFXoWP+HQUwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnzRJFyHiOL+iPKxKxEz76EGozg+3lzJERo 9Fnzo/YiwUDCERcwX0oFs8DhVemxSNSyeLfehYXJAq8bLpzGeK6aO+FTOgbGidAN 6j3SciYwHKKYHNjKRM11NVx+zdHefH8mfIhqxLR1aXEmhZoPrzzNqcmt3KWaZw/n bxACq9KcomtcyIAkDKX1vhcMoCmTnVzw4bDMZahdE03/ltbxuUy4qvOSnCUq6fcw VamFpMVM34sYVkTznBwyhAAAHqKF2dPAwHGervlVlK/xehT4PlMFXCiMomiVKLKh o7l2wy80PflvcNej/h0mY7qD//rqetfz0fF3stYGNd3dCw3YLNA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:20 2026 by rpki-client