$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: WP8vh9nL8FpPEV99gOQREdrzQWdwrXU5aOqI/J1pevM= Subject key identifier: A5:00:97:A6:30:85:A0:A0:4A:7F:F8:35:E3:37:24:4A:52:6A:AA:01 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 66552133C6E572852ADD34097D0AFF6E269B851F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:12:23 +0000 Manifest this update: Tue 02 Jun 2026 14:07:23 +0000 Manifest next update: Wed 03 Jun 2026 16:21:23 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 4: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: Xd09WLdn25oWESHtpy/wHORGJYkw37ZD7shJmWIAEXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:55:21:33:c6:e5:72:85:2a:dd:34:09:7d:0a:ff:6e:26:9b:85:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Jun 2 14:07:23 2026 GMT Not After : Jun 3 16:21:23 2026 GMT Subject: CN=A50097A63085A0A04A7FF835E337244A526AAA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:a6:68:72:a6:da:8b:5d:7a:4b:ff:24:0a: 10:67:8f:30:5d:0a:b2:c8:91:ed:20:7d:21:12:7d: c2:bd:16:c7:a2:47:61:45:2c:14:a2:1d:bc:e2:1d: fa:8b:18:3d:99:3a:49:89:25:de:9b:09:dd:98:8e: da:a2:7b:eb:74:96:4d:65:db:c8:04:30:3e:68:89: 4c:83:a8:c3:9e:88:a6:60:90:3e:8d:19:3a:c5:cb: df:9e:7f:ee:4d:ee:4e:9a:e2:4a:50:2e:5c:08:b1: 4c:aa:e6:4f:0d:14:3e:28:49:ac:0f:a6:8b:b7:c3: cf:8a:36:9b:89:8a:50:09:40:2c:65:8e:de:e2:31: 94:a2:e7:bb:f3:9d:5a:88:9e:1e:a4:f8:08:cf:21: 21:3b:b5:0a:ce:88:0c:22:49:16:3d:53:90:f0:22: ca:72:34:6f:d2:e9:07:b3:92:32:98:e1:df:57:f4: 36:d6:2e:64:7a:65:da:95:a7:16:5b:bf:71:0a:ba: be:ae:b1:52:c5:04:5c:9a:18:58:dc:a3:ea:d1:47: 5f:55:e0:d3:7b:ea:0c:6c:4f:e6:53:0c:a7:17:4d: a8:8b:be:0c:af:ab:09:9f:39:ca:25:b5:ad:f4:4a: 24:5e:47:af:a8:1c:ca:0b:ac:45:01:5e:db:23:26: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:97:A6:30:85:A0:A0:4A:7F:F8:35:E3:37:24:4A:52:6A:AA:01 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:57:80:70:83:c7:ee:3e:6f:f8:df:67:4c:04:6b:99:e7:43: 26:b3:8b:42:59:89:fb:c0:52:0b:e9:ea:6b:68:cd:35:4e:15: f6:8c:06:23:34:dd:e0:49:60:c5:77:03:ba:e8:ef:b8:f9:69: f4:ff:9b:49:97:6f:af:d2:67:8e:63:9e:cf:d1:7a:d2:9e:41: 5d:7c:0b:a5:90:66:18:2e:0f:c1:e0:a6:b5:6a:4b:24:13:0c: 4c:2f:c2:63:96:4b:9d:8b:00:3c:5c:91:65:f1:7d:18:06:10: 1b:85:cd:93:38:74:69:bb:f5:d6:66:6d:56:1f:4d:16:8f:15: b9:1f:c5:aa:44:6b:62:d1:e4:77:d9:a6:22:8c:39:92:6a:0a: 0f:b1:26:32:36:cd:a5:3d:d7:b9:e3:52:c2:6b:a7:76:a9:4b: fb:79:ca:5a:3e:68:82:a8:87:a8:64:02:1b:10:ee:f8:20:0f: a5:3d:8e:60:b9:cf:b0:f8:6e:49:9f:06:74:a5:e8:c9:d3:41: a1:7e:77:a4:c0:8c:7a:8f:4b:09:16:98:1f:56:05:a0:73:c3: 72:0c:ea:01:05:e4:f7:3a:85:f3:a9:43:4a:32:09:df:b9:12: 6e:a9:0e:a5:cc:a0:bd:29:01:ce:46:a3:7c:f5:46:43:a1:83: 35:4f:d1:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlUhM8blcoUq3TQJfQr/biabhR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA2MDIxNDA3MjNaFw0yNjA2MDMxNjIxMjNaMDMxMTAvBgNV BAMTKEE1MDA5N0E2MzA4NUEwQTA0QTdGRjgzNUUzMzcyNDRBNTI2QUFBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/qZocqbai116S/8kChBnjzBd CrLIke0gfSESfcK9FseiR2FFLBSiHbziHfqLGD2ZOkmJJd6bCd2Yjtqie+t0lk1l 28gEMD5oiUyDqMOeiKZgkD6NGTrFy9+ef+5N7k6a4kpQLlwIsUyq5k8NFD4oSawP pou3w8+KNpuJilAJQCxljt7iMZSi57vznVqInh6k+AjPISE7tQrOiAwiSRY9U5Dw IspyNG/S6QezkjKY4d9X9DbWLmR6ZdqVpxZbv3EKur6usVLFBFyaGFjco+rRR19V 4NN76gxsT+ZTDKcXTaiLvgyvqwmfOcolta30SiReR6+oHMoLrEUBXtsjJk9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQCXpjCFoKBKf/g14zckSlJqqgEwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1XgHCDx+4+b/jfZ0wEa5nnQyazi0JZifvA Ugvp6mtozTVOFfaMBiM03eBJYMV3A7ro77j5afT/m0mXb6/SZ45jns/RetKeQV18 C6WQZhguD8HgprVqSyQTDEwvwmOWS52LADxckWXxfRgGEBuFzZM4dGm79dZmbVYf TRaPFbkfxapEa2LR5HfZpiKMOZJqCg+xJjI2zaU917njUsJrp3apS/t5ylo+aIKo h6hkAhsQ7vggD6U9jmC5z7D4bkmfBnSl6MnTQaF+d6TAjHqPSwkWmB9WBaBzw3IM 6gEF5Pc6hfOpQ0oyCd+5Em6pDqXMoL0pAc5Go3z1RkOhgzVP0cc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:39 2026 by rpki-client