$ rpki-client -vvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json) Hash identifier: 0JerGnxxvKbspEyqPAMonYWr7iT2Zi3MOcQDZ+UtJt0= Subject key identifier: E7:21:51:6C:EE:42:5C:41:DC:67:E3:78:A0:85:B0:13:FC:90:21:4D Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Certificate serial: 3BD3BC34B6B244166CB9736E046417D2A88AF4C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:20 +0000 Manifest this update: Tue 02 Jun 2026 19:13:20 +0000 Manifest next update: Wed 03 Jun 2026 20:44:20 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=) 2: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: +PYS64I119Gv0dXpzmiaQLePqyqfUat0+oaWHUPLcoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:bc:34:b6:b2:44:16:6c:b9:73:6e:04:64:17:d2:a8:8a:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Validity Not Before: Jun 2 19:13:20 2026 GMT Not After : Jun 3 20:44:20 2026 GMT Subject: CN=E721516CEE425C41DC67E378A085B013FC90214D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:fb:61:bc:77:09:35:a9:db:e7:a5:31:2d: ad:5d:5c:85:77:4f:c6:3f:7a:d3:7e:f2:63:0f:d3: b9:e7:cb:61:ff:42:f7:54:80:18:93:9d:d7:a3:fe: 5a:34:47:46:e4:02:27:15:b7:3d:aa:9a:e2:3e:6a: 8d:9f:71:0b:af:6b:ea:b4:c8:f5:50:f3:22:bd:22: 5a:d3:08:89:7c:77:d6:70:5d:bd:d8:aa:64:c0:2d: 9b:82:8f:11:c7:24:0e:47:6a:64:07:42:20:de:dd: a7:39:16:53:e2:c6:15:82:13:7b:3d:13:f8:b1:80: ed:b0:43:05:91:01:89:31:4a:d2:62:df:28:22:d7: 03:26:05:3c:4a:e6:33:d7:c8:72:89:36:17:d6:8c: 5e:3c:e6:78:3b:bb:6c:ec:95:f8:9a:34:26:de:73: 3c:34:cf:32:69:5f:c4:d8:a4:96:df:4b:29:51:be: ce:fd:c5:d6:64:21:60:2b:9b:fa:08:d3:4c:a5:18: 5a:78:61:7b:7d:66:54:62:98:22:91:94:7a:10:c1: 34:51:f2:f5:df:bb:b7:90:96:05:73:6f:ed:ac:8e: a5:7e:27:85:43:33:18:30:14:de:55:93:54:94:ba: dd:f3:ff:24:54:00:51:ff:1b:44:87:b8:ba:bf:1a: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:21:51:6C:EE:42:5C:41:DC:67:E3:78:A0:85:B0:13:FC:90:21:4D X509v3 Authority Key Identifier: keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c1:ed:88:a9:28:3b:8e:f5:8b:29:71:5e:d4:1b:ce:d8:bf: f8:82:08:42:78:e3:4c:e0:8e:6c:57:43:12:26:a6:2f:55:51: 82:8f:b0:c2:24:e2:50:57:01:46:b7:0b:3c:df:64:2e:20:6a: 10:5f:99:b7:ab:e6:0d:2a:1d:8d:6c:0b:38:e4:b8:71:e1:af: 6a:02:22:b5:f3:5e:99:7c:6b:1f:d8:45:b3:2b:8c:fa:8f:35: 2c:63:c7:d0:55:a4:37:e2:de:49:5a:8d:58:d6:ca:94:0a:8d: d6:61:3c:ac:83:34:15:8a:83:ee:7f:da:5f:03:ea:d6:98:0d: 00:5d:f1:11:6e:47:f1:1f:fd:a2:a3:4d:9b:8d:4d:c0:f0:62: 29:6c:b6:29:e8:a2:ac:68:37:c5:aa:05:9a:48:14:fb:51:d7: e4:fb:b9:54:f8:e4:28:58:80:a3:6d:a7:ca:c2:a7:60:b9:9e: 78:fe:7c:f8:81:02:fa:c4:03:e0:23:22:af:ed:8b:b6:50:90: 9b:85:af:06:6b:a6:7e:be:9e:5b:5a:6f:41:23:fa:9f:c9:7b: 7d:f9:5a:4a:02:44:bb:1e:76:bc:75:fd:32:2e:33:60:9d:42: 89:8a:da:9b:6a:f2:82:0a:3d:37:4d:b3:c3:3f:63:1b:91:84: 46:1a:7f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9O8NLayRBZsuXNuBGQX0qiK9MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1 MUVDRkFGOTAeFw0yNjA2MDIxOTEzMjBaFw0yNjA2MDMyMDQ0MjBaMDMxMTAvBgNV BAMTKEU3MjE1MTZDRUU0MjVDNDFEQzY3RTM3OEEwODVCMDEzRkM5MDIxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0A/thvHcJNanb56UxLa1dXIV3 T8Y/etN+8mMP07nny2H/QvdUgBiTndej/lo0R0bkAicVtz2qmuI+ao2fcQuva+q0 yPVQ8yK9IlrTCIl8d9ZwXb3YqmTALZuCjxHHJA5HamQHQiDe3ac5FlPixhWCE3s9 E/ixgO2wQwWRAYkxStJi3ygi1wMmBTxK5jPXyHKJNhfWjF485ng7u2zslfiaNCbe czw0zzJpX8TYpJbfSylRvs79xdZkIWArm/oI00ylGFp4YXt9ZlRimCKRlHoQwTRR 8vXfu7eQlgVzb+2sjqV+J4VDMxgwFN5Vk1SUut3z/yRUAFH/G0SHuLq/GuLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5yFRbO5CXEHcZ+N4oIWwE/yQIU0wHwYDVR0j BBgwFoAUfvZrSI7kjlcbg30rMPC1z1Hs+vkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRjYTU4NjgtNTdlOS00OWI5LWJmZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4 RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1MUVDRkFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUY2NkI0ODhFRTQ4RTU3MUI4MzdEMkIzMEYwQjVDRjUxRUNG QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1 Q0Y1MUVDRkFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDB7YipKDuO9YspcV7UG87Yv/iCCEJ440zg jmxXQxImpi9VUYKPsMIk4lBXAUa3CzzfZC4gahBfmber5g0qHY1sCzjkuHHhr2oC IrXzXpl8ax/YRbMrjPqPNSxjx9BVpDfi3klajVjWypQKjdZhPKyDNBWKg+5/2l8D 6taYDQBd8RFuR/Ef/aKjTZuNTcDwYilstinooqxoN8WqBZpIFPtR1+T7uVT45ChY gKNtp8rCp2C5nnj+fPiBAvrEA+AjIq/ti7ZQkJuFrwZrpn6+nltab0Ej+p/Je335 WkoCRLsedrx1/TIuM2CdQomK2ptq8oIKPTdNs8M/YxuRhEYafyQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:29 2026 by rpki-client