$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json) Hash identifier: JAwWy2KVhHAINWUbAgB+dyB2H53VCyRAcnSPHs0sKHI= Subject key identifier: 2B:DA:E6:56:B1:79:E5:CB:4C:D8:5E:45:D4:68:D9:40:B7:B6:BC:C7 Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Certificate serial: 06A632DC0B2620B1DAD0182D3704335223084549 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:37:14 +0000 Manifest this update: Wed 17 Jun 2026 03:32:14 +0000 Manifest next update: Thu 18 Jun 2026 05:49:14 +0000 Files and hashes: 1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: DdDKyZhnVwJob1ioiscgE+A7PgMshid7L0dLpglI9LA=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a6:32:dc:0b:26:20:b1:da:d0:18:2d:37:04:33:52:23:08:45:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Validity Not Before: Jun 17 03:32:14 2026 GMT Not After : Jun 18 05:49:14 2026 GMT Subject: CN=2BDAE656B179E5CB4CD85E45D468D940B7B6BCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:47:de:55:61:62:94:c7:a7:0f:f7:49:1f: 49:12:9c:3c:be:ed:c3:62:3e:d0:77:2b:ef:ff:81: 8f:ff:a4:01:f3:5b:b7:47:7e:72:fc:e0:7e:50:74: b7:02:ab:e0:9e:66:14:4e:d0:3c:d2:b1:d5:4c:3f: 87:4f:b2:e9:d8:b1:3c:c5:43:74:6b:62:b6:0c:da: 52:8e:b9:f4:90:90:04:53:e7:ea:2e:5b:0b:2b:1d: f2:5b:57:0a:f5:26:f7:25:57:9c:5d:03:74:a0:cc: fd:63:86:08:b1:35:84:b6:91:d9:da:62:90:ac:78: 0c:2f:e2:cb:d9:d5:3c:a8:2f:40:be:92:96:f5:f6: 99:cc:c4:5c:f7:06:f3:cd:fb:9e:50:e2:a5:db:af: 59:f1:65:aa:53:60:bf:c5:4f:71:a9:a2:78:85:b5: 2a:b5:0f:93:40:34:94:29:45:3d:e3:15:93:3f:11: f5:b6:da:5a:11:c3:47:14:59:e1:be:6c:c2:75:46: 2a:c8:24:c8:8d:ea:7e:e2:03:9c:8c:f8:6d:d6:0a: 2c:e7:83:72:0c:1d:d2:a1:72:12:92:54:7c:2e:84: 1e:b4:0d:a6:d1:53:c5:36:28:f2:9f:f3:4d:43:ba: 67:ad:54:9e:37:b0:5b:3a:c3:7c:6d:1c:21:c1:bb: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DA:E6:56:B1:79:E5:CB:4C:D8:5E:45:D4:68:D9:40:B7:B6:BC:C7 X509v3 Authority Key Identifier: keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:53:78:0a:90:2a:a6:24:f8:3f:74:7c:2b:aa:97:04:2b:05: d5:76:5a:bd:0c:20:9d:8a:b0:cc:f9:33:17:e8:8f:0f:aa:98: af:8d:29:79:36:27:df:dc:c6:b5:2a:eb:06:58:df:01:7a:08: 69:32:33:ee:63:1c:fd:43:ae:44:23:34:74:ab:85:26:ec:d4: be:0a:00:32:8c:d6:9a:af:9d:0a:18:2c:c3:70:48:72:09:e6: 11:2a:45:82:f3:f5:e7:15:73:56:98:6b:60:d2:12:9a:cf:0d: 97:eb:91:90:d6:49:4a:5a:3d:c0:3b:38:07:61:95:05:15:b7: 44:11:a1:46:d6:31:9f:d3:21:3d:ac:a6:f6:83:54:cb:99:85: 99:bd:66:97:80:6d:75:72:c8:d9:0a:bb:73:9e:6e:cf:58:80: 59:ad:07:c0:55:9b:2e:73:47:73:d4:a7:31:ce:dd:52:16:81: e9:fe:88:e7:b2:e7:43:f7:7d:d4:24:fd:ef:53:7e:07:4d:2b: 06:f1:b9:d4:ab:79:da:b0:85:71:80:d0:8e:a8:da:e0:ad:08: 73:a0:c0:a8:8f:b3:aa:59:8c:b3:83:af:0a:17:06:8f:5e:37: 9b:44:26:2f:9c:36:fc:29:08:f1:c6:45:c1:79:75:97:e8:99: bf:72:75:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqYy3AsmILHa0BgtNwQzUiMIRUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0 OTRDOTI5NjAeFw0yNjA2MTcwMzMyMTRaFw0yNjA2MTgwNTQ5MTRaMDMxMTAvBgNV BAMTKDJCREFFNjU2QjE3OUU1Q0I0Q0Q4NUU0NUQ0NjhEOTQwQjdCNkJDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIUfeVWFilMenD/dJH0kSnDy+ 7cNiPtB3K+//gY//pAHzW7dHfnL84H5QdLcCq+CeZhRO0DzSsdVMP4dPsunYsTzF Q3RrYrYM2lKOufSQkART5+ouWwsrHfJbVwr1JvclV5xdA3SgzP1jhgixNYS2kdna YpCseAwv4svZ1TyoL0C+kpb19pnMxFz3BvPN+55Q4qXbr1nxZapTYL/FT3GponiF tSq1D5NANJQpRT3jFZM/EfW22loRw0cUWeG+bMJ1RirIJMiN6n7iA5yM+G3WCizn g3IMHdKhchKSVHwuhB60DabRU8U2KPKf801DumetVJ43sFs6w3xtHCHBu41rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9rmVrF55ctM2F5F1GjZQLe2vMcwHwYDVR0j BBgwFoAUevEIs+Drt59sOrvso0N0KUlMkpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNF MEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0OTRDOTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUYxMDhCM0UwRUJCNzlGNkMzQUJCRUNBMzQzNzQyOTQ5NEM5 Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0 Mjk0OTRDOTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNTeAqQKqYk+D90fCuqlwQrBdV2Wr0MIJ2K sMz5Mxfojw+qmK+NKXk2J9/cxrUq6wZY3wF6CGkyM+5jHP1DrkQjNHSrhSbs1L4K ADKM1pqvnQoYLMNwSHIJ5hEqRYLz9ecVc1aYa2DSEprPDZfrkZDWSUpaPcA7OAdh lQUVt0QRoUbWMZ/TIT2spvaDVMuZhZm9ZpeAbXVyyNkKu3Oebs9YgFmtB8BVmy5z R3PUpzHO3VIWgen+iOey50P3fdQk/e9TfgdNKwbxudSredqwhXGA0I6o2uCtCHOg wKiPs6pZjLODrwoXBo9eN5tEJi+cNvwpCPHGRcF5dZfomb9ydbg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:38 2026 by rpki-client