$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: iLIEHVUNUo5b1bbftdhiMIyl5rkKIRHpnZ/d2tr/Q7E= Subject key identifier: EF:FD:A2:EC:3B:99:83:5B:85:67:F1:37:22:3F:77:35:86:7A:E6:6B Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 631E2AF8A04178FECCFC845DAD939117297DB6C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 11:10:40 +0000 Manifest this update: Sun 19 Jul 2026 11:05:40 +0000 Manifest next update: Mon 20 Jul 2026 11:46:40 +0000 Files and hashes: 1: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 4: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: sw26/vbA3ujuPupKa+1dvgjIveMEsKQ+F99jR7E91Xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 11:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1e:2a:f8:a0:41:78:fe:cc:fc:84:5d:ad:93:91:17:29:7d:b6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Jul 19 11:05:40 2026 GMT Not After : Jul 20 11:46:40 2026 GMT Subject: CN=EFFDA2EC3B99835B8567F137223F7735867AE66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:3d:1a:d4:64:26:bd:2b:5d:cd:8e:19:2b: 6f:0d:7b:09:23:a0:da:c6:6c:15:9f:7f:a0:53:a4: cd:09:87:f1:58:53:57:e7:98:cf:fe:31:c8:bf:97: 03:95:66:9a:d8:49:92:49:95:41:de:cf:b8:04:d7: 54:63:f1:58:93:8a:23:fa:2c:4d:5e:fd:91:f3:9b: 2c:d9:aa:1c:24:1f:27:1b:e5:ca:61:42:f9:ec:e3: d7:5f:62:d0:e1:47:b5:33:47:91:71:bd:61:22:72: 79:f0:92:58:db:bf:87:c2:eb:ca:13:12:54:dc:2b: db:96:48:3f:f3:a0:95:9c:4b:57:c2:13:9b:c9:60: 6c:7e:7c:3e:4a:24:d8:61:a2:05:93:06:23:87:33: ea:65:1e:82:fd:d2:72:34:ef:b7:ec:69:b2:e2:e7: 01:62:1a:9e:11:d9:ce:3d:73:cb:e1:85:d4:50:b7: a9:38:22:7d:58:37:07:d8:0a:83:c3:dd:47:25:87: 3e:b6:66:9d:6e:48:0a:34:81:64:c4:b4:55:6c:04: da:9b:40:68:0e:ac:9c:65:db:5f:4e:6a:1d:d2:dc: dc:8d:c1:72:8e:a9:92:1f:ed:d3:fa:b1:f3:79:2e: 51:59:eb:c5:02:6b:af:96:44:9f:4c:10:0b:b5:dd: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:A2:EC:3B:99:83:5B:85:67:F1:37:22:3F:77:35:86:7A:E6:6B X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:a1:4a:6c:22:2e:df:39:35:48:3e:3c:4a:4d:c0:82:04: b6:ce:fa:9f:92:b0:f6:be:10:fb:5d:b3:c0:04:df:61:54:59: f7:74:41:ff:f4:8a:dc:4e:cd:b7:a7:1c:a6:38:08:0b:0d:86: fc:5f:09:a9:5d:0b:d7:f8:c1:7a:59:1b:74:df:ac:62:0e:4a: 11:bd:9e:aa:22:cb:d3:9d:b3:ef:a7:da:70:bd:00:1b:55:4f: fc:b2:b7:49:82:8d:1e:c2:14:50:c9:e0:73:b0:7f:f7:3a:a0: 7d:58:08:14:4a:d8:e2:f0:c1:4e:eb:d3:21:fe:d7:3d:d5:04: 0d:32:0c:27:61:0d:36:69:48:7a:e7:34:4f:72:ac:c3:1d:e5: 98:78:95:fb:99:54:25:8b:9b:d9:ed:49:e0:a6:86:90:be:e0: 2a:54:5f:1a:00:79:3c:3c:b9:67:15:9d:80:20:2b:aa:1e:73: 39:30:3b:ce:70:22:24:c5:98:cb:19:d7:d5:a3:39:b5:c8:24: b9:ee:dc:c0:b3:f5:8b:bc:9a:39:22:61:d6:6f:6f:ab:8a:7d: 85:6e:a6:32:1b:dd:1a:81:a8:23:78:71:92:3e:f8:f9:11:62: a7:ac:74:ee:72:41:8f:e1:19:2a:0d:81:6b:b7:ea:6b:0d:3c: 78:2c:61:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYx4q+KBBeP7M/IRdrZORFyl9tscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA3MTkxMTA1NDBaFw0yNjA3MjAxMTQ2NDBaMDMxMTAvBgNV BAMTKEVGRkRBMkVDM0I5OTgzNUI4NTY3RjEzNzIyM0Y3NzM1ODY3QUU2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwz0a1GQmvStdzY4ZK28Newkj oNrGbBWff6BTpM0Jh/FYU1fnmM/+Mci/lwOVZprYSZJJlUHez7gE11Rj8ViTiiP6 LE1e/ZHzmyzZqhwkHycb5cphQvns49dfYtDhR7UzR5FxvWEicnnwkljbv4fC68oT ElTcK9uWSD/zoJWcS1fCE5vJYGx+fD5KJNhhogWTBiOHM+plHoL90nI077fsabLi 5wFiGp4R2c49c8vhhdRQt6k4In1YNwfYCoPD3Uclhz62Zp1uSAo0gWTEtFVsBNqb QGgOrJxl219Oah3S3NyNwXKOqZIf7dP6sfN5LlFZ68UCa6+WRJ9MEAu13THtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/2i7DuZg1uFZ/E3Ij93NYZ65mswHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSEoUpsIi7fOTVIPjxKTcCCBLbO+p+SsPa+ EPtds8AE32FUWfd0Qf/0itxOzbenHKY4CAsNhvxfCaldC9f4wXpZG3TfrGIOShG9 nqoiy9Ods++n2nC9ABtVT/yyt0mCjR7CFFDJ4HOwf/c6oH1YCBRK2OLwwU7r0yH+ 1z3VBA0yDCdhDTZpSHrnNE9yrMMd5Zh4lfuZVCWLm9ntSeCmhpC+4CpUXxoAeTw8 uWcVnYAgK6oeczkwO85wIiTFmMsZ19WjObXIJLnu3MCz9Yu8mjkiYdZvb6uKfYVu pjIb3RqBqCN4cZI++PkRYqesdO5yQY/hGSoNgWu36msNPHgsYak= -----END CERTIFICATE-----Generated at Mon Jul 20 04:19:07 2026 by rpki-client