$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: mZxfTYm/uRuQl0eq1g2AK9GD1naWoVtFfwjk5Yptu9o= Subject key identifier: 74:10:3E:FE:F3:CB:00:D5:3F:93:CC:C3:4A:84:3F:17:9F:EC:A1:47 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 02992361DB42F501100E3B1C191A80CC06850907 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:05:27 +0000 Manifest this update: Sat 13 Jun 2026 13:00:27 +0000 Manifest next update: Sun 14 Jun 2026 14:28:27 +0000 Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) 2: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: iko52M+ARcAi9CWoVG8GrmMn1xO7w2D4qj7RIKasx2A=) 3: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:99:23:61:db:42:f5:01:10:0e:3b:1c:19:1a:80:cc:06:85:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: Jun 13 13:00:27 2026 GMT Not After : Jun 14 14:28:27 2026 GMT Subject: CN=74103EFEF3CB00D53F93CCC34A843F179FECA147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:aa:9a:da:27:88:cb:9c:dc:d5:e5:d6:f2:9c: 24:44:31:c1:81:c2:6f:de:32:7d:f8:ee:4a:c1:fe: 91:e4:70:65:2d:51:a2:5a:19:0c:14:6a:db:42:42: 7c:84:7d:5f:7b:93:7e:09:7f:94:e7:25:ea:08:19: cc:ab:34:7a:e2:23:23:26:c4:95:79:a2:0b:fb:f9: f5:29:6f:1f:b0:00:62:ac:3a:b7:42:95:c5:09:5a: 6f:36:c1:76:b1:6f:76:eb:35:5b:8f:bd:94:77:e2: 8c:c0:8e:d2:d0:d2:1e:6c:27:90:18:9a:e0:0b:b7: 3c:e9:3d:a8:e1:2a:7d:36:17:66:9f:4b:58:cb:bb: 39:d0:99:9e:d3:6d:73:1b:8a:66:3b:31:af:d0:5c: 45:28:01:45:f7:fb:c9:09:a6:85:e9:6f:ac:44:8c: 17:7b:36:ce:50:bd:3c:53:f6:49:0f:db:9f:87:b7: 28:5e:e5:9d:48:f2:07:85:d4:3a:82:37:3c:5d:a8: 5d:1f:78:36:71:0a:b0:fb:0c:33:c7:4c:56:44:22: e2:b5:37:30:c3:92:6b:fc:52:f8:94:66:bc:cc:86: bc:cf:d3:0b:33:e3:31:5f:c7:58:e1:80:0b:0c:a9: 6e:f1:67:3e:75:9f:95:aa:19:56:cc:05:c4:c1:4b: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:10:3E:FE:F3:CB:00:D5:3F:93:CC:C3:4A:84:3F:17:9F:EC:A1:47 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:46:08:f8:f1:b3:79:b1:1a:da:12:df:4e:7a:72:e0:84:bb: bd:f9:09:70:6a:62:22:09:08:48:fc:23:bb:2b:8f:c9:b6:28: 64:86:fb:aa:36:bc:05:96:bd:bb:44:61:9c:26:25:c1:ed:e7: 6f:9d:27:d2:80:cb:17:5c:17:40:32:7b:62:de:b0:11:70:a7: 0a:56:3c:e3:b4:e0:02:a7:b2:fc:c9:e0:7e:cf:b9:93:5e:9c: 2f:5a:c1:a7:ae:a6:b0:81:18:2d:5e:c5:26:6c:fb:c6:53:36: c7:09:a0:5f:72:3a:ae:b1:9c:55:37:9d:1f:19:7a:33:ff:fd: ba:45:ee:da:8b:3d:ef:45:ad:c8:28:20:77:24:16:2f:c4:ba: 12:70:02:f6:90:1a:52:bb:7a:18:17:20:67:d5:59:3c:5d:1d: 00:37:f0:40:62:33:6f:ed:35:c5:ed:bc:1b:0b:44:53:f0:89: 97:a8:29:3e:d9:25:a5:27:a4:90:91:79:63:a2:bb:98:6f:f1: bb:5f:9e:b5:ad:c9:c9:6c:39:28:27:72:b7:cd:19:18:77:ab: 47:7c:4b:46:9d:14:cb:fe:ed:64:c1:b5:90:ed:34:b9:e2:de: ef:98:cd:b7:09:66:cd:eb:07:86:9f:96:ef:43:39:fb:28:86: 0f:d4:f0:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApkjYdtC9QEQDjscGRqAzAaFCQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjA2MTMxMzAwMjdaFw0yNjA2MTQxNDI4MjdaMDMxMTAvBgNV BAMTKDc0MTAzRUZFRjNDQjAwRDUzRjkzQ0NDMzRBODQzRjE3OUZFQ0ExNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuqpraJ4jLnNzV5dbynCREMcGB wm/eMn347krB/pHkcGUtUaJaGQwUattCQnyEfV97k34Jf5TnJeoIGcyrNHriIyMm xJV5ogv7+fUpbx+wAGKsOrdClcUJWm82wXaxb3brNVuPvZR34ozAjtLQ0h5sJ5AY muALtzzpPajhKn02F2afS1jLuznQmZ7TbXMbimY7Ma/QXEUoAUX3+8kJpoXpb6xE jBd7Ns5QvTxT9kkP25+Htyhe5Z1I8geF1DqCNzxdqF0feDZxCrD7DDPHTFZEIuK1 NzDDkmv8UviUZrzMhrzP0wsz4zFfx1jhgAsMqW7xZz51n5WqGVbMBcTBS6nrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdBA+/vPLANU/k8zDSoQ/F5/soUcwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtGCPjxs3mxGtoS3056cuCEu735CXBqYiIJ CEj8I7srj8m2KGSG+6o2vAWWvbtEYZwmJcHt52+dJ9KAyxdcF0Aye2LesBFwpwpW POO04AKnsvzJ4H7PuZNenC9awaeuprCBGC1exSZs+8ZTNscJoF9yOq6xnFU3nR8Z ejP//bpF7tqLPe9FrcgoIHckFi/EuhJwAvaQGlK7ehgXIGfVWTxdHQA38EBiM2/t NcXtvBsLRFPwiZeoKT7ZJaUnpJCReWOiu5hv8btfnrWtyclsOSgncrfNGRh3q0d8 S0adFMv+7WTBtZDtNLni3u+YzbcJZs3rB4aflu9DOfsohg/U8I8= -----END CERTIFICATE-----Generated at Sat Jun 13 18:40:27 2026 by rpki-client