$ rpki-client -vvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: sV9yIKWLf8ThDubF7BqP0w1gujpWYQoLKEdIe7TLELU= Subject key identifier: 4E:2E:2F:6E:5D:28:8D:71:E8:7A:A5:52:B2:8E:BB:BB:05:91:A8:B6 Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 4E8E1070B55ADB87DF762B9A044F8A333B741371 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:41:43 +0000 Manifest this update: Tue 16 Jun 2026 18:36:43 +0000 Manifest next update: Wed 17 Jun 2026 20:22:43 +0000 Files and hashes: 1: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) 2: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) 3: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: fQluRhp3plPPwKcDiYWe+Ah2fBdLz/YvlcLDiyeAnJo=) 4: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 5: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:10:70:b5:5a:db:87:df:76:2b:9a:04:4f:8a:33:3b:74:13:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Jun 16 18:36:43 2026 GMT Not After : Jun 17 20:22:43 2026 GMT Subject: CN=4E2E2F6E5D288D71E87AA552B28EBBBB0591A8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:b5:c9:91:13:9b:67:24:4e:8b:20:91:9b: d0:06:1d:b0:96:f1:52:45:e1:a6:61:b4:0a:aa:d8: 25:9f:d4:74:a3:63:18:71:25:bd:08:a9:d3:76:96: 2c:75:f4:a8:9c:2c:50:fa:2e:a5:b5:91:91:20:51: 08:99:80:25:c0:07:22:60:6a:4e:a9:e9:98:ef:d2: da:c3:2b:af:0d:cd:21:81:06:e8:25:d7:26:19:83: 31:42:d8:d6:26:9f:0f:9a:79:96:4b:f0:2d:e2:8c: 5e:2a:d9:29:6d:29:30:ee:55:0a:7e:9d:24:a2:bc: 80:cf:a6:8f:07:b4:fc:51:48:0e:8a:c2:21:6d:59: 37:f4:82:cd:ae:b7:23:50:40:dd:32:4d:f2:5f:c3: 1f:76:db:50:77:68:4e:df:d8:f6:4e:c5:98:44:44: 9a:b2:f1:59:ec:dd:1e:c8:df:fd:65:56:6e:47:3a: cd:fb:39:83:6d:aa:46:32:71:03:50:eb:a8:bb:2a: 98:81:0a:53:a3:ea:22:cf:9e:5f:af:f1:7a:1c:cb: b8:07:77:db:b3:e5:60:fe:a6:1c:2e:b7:89:38:2c: 2d:f6:16:3b:41:80:0a:08:88:8d:64:d8:5c:8b:ae: 0e:24:3c:56:fc:5a:6d:27:5d:c7:c5:9b:cc:1c:34: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2E:2F:6E:5D:28:8D:71:E8:7A:A5:52:B2:8E:BB:BB:05:91:A8:B6 X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:4a:15:f6:dc:30:6c:c1:70:f1:57:a4:80:ff:6d:2d:ac: 14:f4:31:62:90:aa:b3:1f:95:b2:4d:24:45:52:55:1a:22:24: 28:cb:6a:df:00:d4:e5:66:7e:94:f0:c5:ea:c9:47:78:62:ff: 2e:1f:72:cc:f7:a6:ff:09:7f:d0:66:77:59:a6:bc:39:aa:b8: cf:a4:22:0c:75:d4:0d:21:a9:b1:2d:07:b6:ae:bc:4e:56:35: dd:b2:c3:2a:0f:a8:17:48:c9:c1:14:78:bf:f8:84:1b:f8:91: 29:f4:5e:ff:71:51:b2:de:88:86:4d:d7:2d:b5:49:64:48:75: f7:3f:05:88:0f:74:20:9d:81:56:44:30:97:02:aa:8a:72:e9: 9a:66:5b:32:64:07:63:39:aa:2a:60:ba:d3:e6:32:12:b7:47: ed:4e:b7:a6:d2:57:e6:13:fa:79:d1:5d:4d:f3:89:0e:05:61: f6:19:d8:81:46:66:5b:f8:f3:a0:50:37:a8:00:80:40:24:61: 52:83:df:01:82:bc:7a:37:d2:be:80:e6:10:79:1f:ab:37:b8: 23:9e:10:13:ec:d7:2b:68:8c:66:31:78:9b:8f:a7:96:df:90: 17:fc:d8:c7:e7:8f:9e:c9:bb:be:9a:ab:91:0c:8a:41:ea:e6: b1:88:5d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTo4QcLVa24ffdiuaBE+KMzt0E3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjA2MTYxODM2NDNaFw0yNjA2MTcyMDIyNDNaMDMxMTAvBgNV BAMTKDRFMkUyRjZFNUQyODhENzFFODdBQTU1MkIyOEVCQkJCMDU5MUE4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NrXJkRObZyROiyCRm9AGHbCW 8VJF4aZhtAqq2CWf1HSjYxhxJb0IqdN2lix19KicLFD6LqW1kZEgUQiZgCXAByJg ak6p6Zjv0trDK68NzSGBBugl1yYZgzFC2NYmnw+aeZZL8C3ijF4q2SltKTDuVQp+ nSSivIDPpo8HtPxRSA6KwiFtWTf0gs2utyNQQN0yTfJfwx9221B3aE7f2PZOxZhE RJqy8Vns3R7I3/1lVm5HOs37OYNtqkYycQNQ66i7KpiBClOj6iLPnl+v8Xocy7gH d9uz5WD+phwut4k4LC32FjtBgAoIiI1k2FyLrg4kPFb8Wm0nXcfFm8wcNBrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTi4vbl0ojXHoeqVSso67uwWRqLYwHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhRShX23DBswXDxV6SA/20trBT0MWKQqrMf lbJNJEVSVRoiJCjLat8A1OVmfpTwxerJR3hi/y4fcsz3pv8Jf9Bmd1mmvDmquM+k Igx11A0hqbEtB7auvE5WNd2ywyoPqBdIycEUeL/4hBv4kSn0Xv9xUbLeiIZN1y21 SWRIdfc/BYgPdCCdgVZEMJcCqopy6ZpmWzJkB2M5qipgutPmMhK3R+1Ot6bSV+YT +nnRXU3ziQ4FYfYZ2IFGZlv486BQN6gAgEAkYVKD3wGCvHo30r6A5hB5H6s3uCOe EBPs1ytojGYxeJuPp5bfkBf82Mfnj57Ju76aq5EMikHq5rGIXYA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:26 2026 by rpki-client