$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json) Hash identifier: zvgnq2APzO70arp+4zECsIolCPGsBAveUxPn9QZsB10= Subject key identifier: 6F:4D:EE:D7:52:71:6C:A7:44:25:C4:F0:9E:6F:AA:06:A5:79:90:28 Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Certificate serial: 31861F99B037E0776DF038BBAE8CAFD1F608C7BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 03:26:59 +0000 Manifest this update: Wed 17 Jun 2026 03:21:59 +0000 Manifest next update: Thu 18 Jun 2026 06:52:59 +0000 Files and hashes: 1: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: dSUSP6dL/Xfo+S+jB+LheUaqmFqZX9CZ6A9GAz0jfvo=) 2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:1f:99:b0:37:e0:77:6d:f0:38:bb:ae:8c:af:d1:f6:08:c7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Validity Not Before: Jun 17 03:21:59 2026 GMT Not After : Jun 18 06:52:59 2026 GMT Subject: CN=6F4DEED752716CA74425C4F09E6FAA06A5799028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:a5:0b:45:a2:26:88:1c:44:ab:54:82:72: bb:bc:73:69:0f:c6:02:97:c0:07:5a:07:ee:0e:ce: f7:cc:e2:fb:b1:62:f7:f0:dd:57:96:e0:13:02:da: 86:1f:10:4d:ad:5b:40:ee:89:af:c7:37:8d:03:9b: 3b:e7:ba:fe:91:42:05:d9:da:93:38:d1:1d:84:5e: fb:7d:d3:32:e4:3b:4d:ec:0b:f0:10:9a:cc:6c:84: 55:39:68:c3:66:c6:95:27:ea:2e:94:46:52:10:ff: 2e:1a:3d:04:fd:54:1b:bf:22:23:fd:b6:2f:5a:17: 3b:72:69:e6:30:e4:45:47:4c:65:f5:12:33:0a:ea: 1c:0c:6f:5e:cb:3f:68:5a:94:d1:d0:32:d5:9c:7f: c1:3a:c1:bf:9c:47:a0:76:25:99:ea:cc:e2:4a:62: fd:79:47:d2:ae:60:8c:02:d9:76:41:ca:9d:48:e7: b8:5f:c6:98:6a:4b:e6:8d:cb:db:4e:f2:51:a8:dd: 93:13:68:de:43:05:dd:5a:d4:45:79:81:f6:50:bb: 7d:e6:5e:34:a5:05:84:e6:46:0a:57:79:9f:91:d7: 9d:48:95:0f:87:26:ae:94:96:73:d3:b6:6a:a5:5d: b7:52:e6:f6:eb:71:e3:63:76:55:b1:d6:44:81:a8: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4D:EE:D7:52:71:6C:A7:44:25:C4:F0:9E:6F:AA:06:A5:79:90:28 X509v3 Authority Key Identifier: keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:04:d5:1b:32:77:47:3e:4b:22:b0:cb:fb:bd:d4:b8:05: a8:e8:b5:a2:2b:4d:fa:b5:24:79:6b:21:9b:55:b1:c9:b4:a5: 07:16:44:7c:f8:b7:74:eb:47:04:73:93:75:bf:d9:ba:5a:15: 32:6f:f2:66:48:f9:66:83:6f:a1:dc:ca:25:20:c9:a8:05:8b: f2:c8:48:99:66:48:ad:ef:fc:a8:76:c2:8a:6e:b8:c8:e8:59: 51:ad:5f:e3:69:58:c3:62:4d:43:b9:0e:c5:da:b7:8f:81:77: f3:eb:a4:e6:47:cb:7a:a4:ad:f0:f1:34:02:37:f6:21:e8:f1: c3:f7:72:c3:a7:2a:65:a7:66:60:8b:85:18:c1:be:91:dc:08: 68:d2:5f:d1:f3:95:fb:dc:c8:61:ed:e3:35:c7:c8:b3:b4:e1: 2c:e1:48:ed:2f:6f:4e:49:8f:ad:5c:60:2a:9a:c6:05:4d:e5: a2:8e:42:2f:9f:0c:01:6b:fa:0f:05:0a:77:fa:df:c3:f0:7d: b5:04:fc:8c:a4:0c:9e:df:95:02:8a:d8:70:9d:07:17:8f:6b: f1:8c:25:4d:7f:f5:1c:76:d2:7e:08:ad:9b:13:c7:10:8a:a4: f4:e6:57:0d:fa:21:f3:5c:aa:83:cf:e0:be:f9:80:b5:90:4f: 7b:b6:c3:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYYfmbA34Hdt8Di7royv0fYIx70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3 RjMxNTFGODAeFw0yNjA2MTcwMzIxNTlaFw0yNjA2MTgwNjUyNTlaMDMxMTAvBgNV BAMTKDZGNERFRUQ3NTI3MTZDQTc0NDI1QzRGMDlFNkZBQTA2QTU3OTkwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4aULRaImiBxEq1SCcru8c2kP xgKXwAdaB+4OzvfM4vuxYvfw3VeW4BMC2oYfEE2tW0Duia/HN40Dmzvnuv6RQgXZ 2pM40R2EXvt90zLkO03sC/AQmsxshFU5aMNmxpUn6i6URlIQ/y4aPQT9VBu/IiP9 ti9aFztyaeYw5EVHTGX1EjMK6hwMb17LP2halNHQMtWcf8E6wb+cR6B2JZnqzOJK Yv15R9KuYIwC2XZByp1I57hfxphqS+aNy9tO8lGo3ZMTaN5DBd1a1EV5gfZQu33m XjSlBYTmRgpXeZ+R151IlQ+HJq6UlnPTtmqlXbdS5vbrceNjdlWx1kSBqHlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb03u11JxbKdEJcTwnm+qBqV5kCgwHwYDVR0j BBgwFoAUt9Dd/pAUbgbTvqE8LHlLUn8xUfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjEwODcxNTktMzBkZC00MWJhLTk5NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5 MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3RjMxNTFGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0QwRERGRTkwMTQ2RTA2RDNCRUExM0MyQzc5NEI1MjdGMzE1 MUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRC NTI3RjMxNTFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtKBNUbMndHPksisMv7vdS4BajotaIrTfq1 JHlrIZtVscm0pQcWRHz4t3TrRwRzk3W/2bpaFTJv8mZI+WaDb6HcyiUgyagFi/LI SJlmSK3v/Kh2wopuuMjoWVGtX+NpWMNiTUO5DsXat4+Bd/PrpOZHy3qkrfDxNAI3 9iHo8cP3csOnKmWnZmCLhRjBvpHcCGjSX9HzlfvcyGHt4zXHyLO04SzhSO0vb05J j61cYCqaxgVN5aKOQi+fDAFr+g8FCnf638PwfbUE/IykDJ7flQKK2HCdBxePa/GM JU1/9Rx20n4IrZsTxxCKpPTmVw36IfNcqoPP4L75gLWQT3u2w/0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:22 2026 by rpki-client