$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: 3KZdvl/fDwoKrPZWMU2zSz6yEJHiPfTzTK+aKY3eGQE= Subject key identifier: 89:F4:61:7F:9C:6A:67:7C:37:B1:33:40:8F:A2:C9:A2:B0:27:09:37 Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 519F190F2AF5D9BF6696C299E537D08E04722A00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:43:33 +0000 Manifest this update: Wed 17 Jun 2026 08:38:33 +0000 Manifest next update: Thu 18 Jun 2026 09:07:33 +0000 Files and hashes: 1: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 2: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) 3: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: Qgk7g3eIsJGNshiymUR+hS7xdciwiSZpfs60fmzsDSc=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) 5: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) 6: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9f:19:0f:2a:f5:d9:bf:66:96:c2:99:e5:37:d0:8e:04:72:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Jun 17 08:38:33 2026 GMT Not After : Jun 18 09:07:33 2026 GMT Subject: CN=89F4617F9C6A677C37B133408FA2C9A2B0270937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:66:83:cd:e1:89:c5:11:7a:72:bc:16:89: 36:6a:8f:74:de:6b:4f:1c:30:b7:58:f7:11:07:08: 67:87:16:cf:9a:69:e9:b8:34:79:1b:5e:1c:31:d9: 5d:25:7d:7d:19:d8:c9:55:ec:56:79:17:64:8f:43: b7:ce:bb:31:b6:f7:f3:db:d6:15:ed:6f:d3:89:56: 84:fc:cb:d4:2b:65:ab:75:1d:ed:48:e6:0c:fd:8a: 4d:67:47:5b:25:0b:5d:f2:57:e5:50:58:2d:42:96: fb:9b:97:a1:20:a1:dc:35:52:e3:4d:55:99:38:70: 61:85:77:9c:5e:ef:57:8c:a2:ae:69:89:aa:1a:2d: 72:c7:3a:49:fe:96:8d:29:78:1b:06:e2:2e:44:da: df:18:68:f3:5b:5e:38:62:d2:f8:a0:ec:31:7f:e9: 34:04:9a:a5:60:eb:c2:e3:2e:7d:ca:66:b2:5c:20: 99:96:d8:e0:10:5c:e8:61:92:dc:87:a0:0d:01:07: 73:e8:8b:db:d3:e9:c8:80:db:52:9e:2e:3f:af:70: 2e:dc:b7:0f:a0:46:b4:91:a6:c1:1b:7c:79:65:44: d0:c5:39:0b:9e:35:3c:49:d7:56:55:bc:42:99:b8: d6:8d:7c:bd:c2:ef:b8:46:d3:b2:e8:dc:54:e5:fe: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:61:7F:9C:6A:67:7C:37:B1:33:40:8F:A2:C9:A2:B0:27:09:37 X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:42:c0:67:7b:af:1d:7e:ac:6c:83:ae:44:be:2c:81:33:f6: e4:00:c1:48:30:6d:3d:a0:18:fd:cf:61:63:59:09:15:62:f1: 1c:b6:01:2c:0b:f5:4c:33:ed:6f:0a:b1:05:eb:b2:f3:e8:38: 02:d1:20:b4:1d:88:e0:a2:f5:d5:d6:36:f0:57:81:ba:f1:97: 3b:8b:8a:d9:3c:de:2a:4b:45:c8:07:da:55:f3:17:f4:da:69: ab:48:7c:d0:8a:d1:49:9a:94:38:59:4c:97:8c:34:4a:74:75: 9c:93:99:de:d0:9e:5d:16:16:b2:03:2a:ab:38:ed:e5:35:04: 0b:4b:1c:65:d1:f1:b1:46:fb:67:bb:f3:38:e4:3a:ca:b9:68: 7c:fa:34:83:54:51:b9:40:d1:23:e2:9a:fa:e4:45:12:c6:0c: 6f:93:b8:a0:17:78:17:f0:47:f7:3f:6a:81:1a:1e:03:21:66: f9:c5:0e:1a:ed:7d:54:6f:8b:c1:5b:f8:73:e5:89:67:bf:60: 3a:aa:ee:ac:4f:98:c7:15:a3:f7:f3:f5:67:88:cf:fd:99:27: 13:84:c7:d7:58:d7:9b:bd:07:2a:38:8e:81:54:8a:82:4d:e0: ea:6d:df:4b:c9:ae:72:35:3b:d8:fb:05:c4:89:00:2c:45:d9: bf:93:9d:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZ8ZDyr12b9mlsKZ5TfQjgRyKgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA2MTcwODM4MzNaFw0yNjA2MTgwOTA3MzNaMDMxMTAvBgNV BAMTKDg5RjQ2MTdGOUM2QTY3N0MzN0IxMzM0MDhGQTJDOUEyQjAyNzA5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgWaDzeGJxRF6crwWiTZqj3Te a08cMLdY9xEHCGeHFs+aaem4NHkbXhwx2V0lfX0Z2MlV7FZ5F2SPQ7fOuzG29/Pb 1hXtb9OJVoT8y9QrZat1He1I5gz9ik1nR1slC13yV+VQWC1Clvubl6Egodw1UuNN VZk4cGGFd5xe71eMoq5piaoaLXLHOkn+lo0peBsG4i5E2t8YaPNbXjhi0vig7DF/ 6TQEmqVg68LjLn3KZrJcIJmW2OAQXOhhktyHoA0BB3Poi9vT6ciA21KeLj+vcC7c tw+gRrSRpsEbfHllRNDFOQueNTxJ11ZVvEKZuNaNfL3C77hG07Lo3FTl/hFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUifRhf5xqZ3w3sTNAj6LJorAnCTcwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExCwGd7rx1+rGyDrkS+LIEz9uQAwUgwbT2g GP3PYWNZCRVi8Ry2ASwL9Uwz7W8KsQXrsvPoOALRILQdiOCi9dXWNvBXgbrxlzuL itk83ipLRcgH2lXzF/TaaatIfNCK0UmalDhZTJeMNEp0dZyTmd7Qnl0WFrIDKqs4 7eU1BAtLHGXR8bFG+2e78zjkOsq5aHz6NINUUblA0SPimvrkRRLGDG+TuKAXeBfw R/c/aoEaHgMhZvnFDhrtfVRvi8Fb+HPliWe/YDqq7qxPmMcVo/fz9WeIz/2ZJxOE x9dY15u9Byo4joFUioJN4Opt30vJrnI1O9j7BcSJACxF2b+TnXo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:36 2026 by rpki-client