$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: EFwQay9gkmggw85qyIS10cYJohwtt4BUUnH/y/FZuuk= Subject key identifier: 72:54:81:FB:7F:F8:21:3B:A7:43:8D:DA:AF:B3:66:44:A1:8B:18:C3 Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 57AAEDA29F2BE22EE9E9550DF42939183AB0D96D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:02:00 +0000 Manifest this update: Tue 21 Jul 2026 04:57:00 +0000 Manifest next update: Wed 22 Jul 2026 05:38:00 +0000 Files and hashes: 1: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: ebseU/Nj7dQk/0WHkbN2xafaA5AHFVhdsmcXWJ6X1f8=) 2: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 3: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 4: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 5: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 6: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 7: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:aa:ed:a2:9f:2b:e2:2e:e9:e9:55:0d:f4:29:39:18:3a:b0:d9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Jul 21 04:57:00 2026 GMT Not After : Jul 22 05:38:00 2026 GMT Subject: CN=725481FB7FF8213BA7438DDAAFB36644A18B18C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:3e:97:54:ff:43:84:09:30:ca:ae:0c:30: c4:b7:c6:88:47:cd:b0:79:38:2a:58:3b:ee:af:f1: 71:46:05:5d:d5:02:d9:19:85:85:53:aa:a7:f8:7f: 71:3b:a8:02:80:10:a5:33:2a:07:76:ef:f1:c7:ce: 0a:e1:ac:a5:34:d4:9f:31:08:5f:0e:77:53:85:c2: fe:09:3b:10:3a:7a:4f:0f:62:d3:26:c8:89:00:e9: 9a:e8:3b:73:51:36:3f:8d:b7:d5:c1:a5:79:d5:b1: 93:ed:51:59:5a:96:16:7e:0f:9a:de:81:86:45:35: 96:c3:3a:f5:90:a7:ed:cd:66:7b:32:e2:46:d9:06: 08:5c:bd:cd:a2:d7:0c:ba:3a:0f:89:9d:50:3b:51: b6:e3:40:7b:6f:b5:9d:a1:c7:f3:ae:a1:fe:ef:ae: c0:7c:b1:12:9f:b3:3b:50:9a:f6:00:2c:2a:2f:ed: 30:ab:e7:3a:1f:3d:39:49:07:c5:a9:3c:61:43:43: 6e:43:35:a7:73:be:3c:76:45:1f:f1:4d:af:04:6f: 96:c9:b2:b0:47:96:a1:df:ba:60:a9:42:33:09:ec: ee:61:8b:36:70:66:45:d7:25:f7:67:7b:fc:83:f5: 63:bd:34:c9:15:8a:b9:c8:02:b4:3b:11:aa:ab:35: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:81:FB:7F:F8:21:3B:A7:43:8D:DA:AF:B3:66:44:A1:8B:18:C3 X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:46:53:35:0b:d1:4e:e1:f0:23:b5:58:95:33:60:79:e9: 8e:2e:99:61:d6:58:7d:58:81:0f:67:3e:3f:b6:0b:60:83:38: 1b:79:af:4c:b0:9e:56:49:ea:9f:ce:a8:e4:b0:81:25:fd:15: 6c:6f:1b:24:44:88:49:8a:f1:dc:69:e1:bf:77:5d:b6:a8:6f: 8c:e9:33:27:91:8e:3b:19:22:48:c6:27:25:df:d0:20:71:b7: 6c:35:e2:ab:0a:25:8d:3f:50:ff:72:9e:18:4f:45:da:63:89: cf:18:44:d4:0c:4b:4e:2b:9c:5e:11:4e:85:7e:d4:ae:8a:4f: 08:d7:1e:6c:27:d1:8c:9f:53:3f:bc:4b:52:8e:58:d8:d5:06: 18:bc:41:9d:ee:85:77:3f:fe:7f:ab:7d:86:5a:ae:85:10:95: 82:41:bf:ac:16:51:e2:9e:e1:0f:b8:f0:43:69:d5:37:0d:c2: e8:79:11:ab:de:45:6a:d2:ef:53:82:42:24:59:d0:6d:88:8b: 06:7d:2f:b2:c3:94:7b:be:3e:61:8e:db:6b:37:d0:58:e0:1f: 84:a8:d3:a2:be:6a:99:98:4f:af:f1:64:65:56:bb:69:e5:30: b3:80:15:70:7c:5a:4f:2c:5a:60:3c:51:ac:60:6c:af:a9:a8: 64:2e:3f:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6rtop8r4i7p6VUN9Ck5GDqw2W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA3MjEwNDU3MDBaFw0yNjA3MjIwNTM4MDBaMDMxMTAvBgNV BAMTKDcyNTQ4MUZCN0ZGODIxM0JBNzQzOEREQUFGQjM2NjQ0QTE4QjE4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIj6XVP9DhAkwyq4MMMS3xohH zbB5OCpYO+6v8XFGBV3VAtkZhYVTqqf4f3E7qAKAEKUzKgd27/HHzgrhrKU01J8x CF8Od1OFwv4JOxA6ek8PYtMmyIkA6ZroO3NRNj+Nt9XBpXnVsZPtUVlalhZ+D5re gYZFNZbDOvWQp+3NZnsy4kbZBghcvc2i1wy6Og+JnVA7UbbjQHtvtZ2hx/Ouof7v rsB8sRKfsztQmvYALCov7TCr5zofPTlJB8WpPGFDQ25DNadzvjx2RR/xTa8Eb5bJ srBHlqHfumCpQjMJ7O5hizZwZkXXJfdne/yD9WO9NMkVirnIArQ7EaqrNaRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUclSB+3/4ITunQ43ar7NmRKGLGMMwHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj8RlM1C9FO4fAjtViVM2B56Y4umWHWWH1Y gQ9nPj+2C2CDOBt5r0ywnlZJ6p/OqOSwgSX9FWxvGyREiEmK8dxp4b93Xbaob4zp MyeRjjsZIkjGJyXf0CBxt2w14qsKJY0/UP9ynhhPRdpjic8YRNQMS04rnF4RToV+ 1K6KTwjXHmwn0YyfUz+8S1KOWNjVBhi8QZ3uhXc//n+rfYZaroUQlYJBv6wWUeKe 4Q+48ENp1TcNwuh5EaveRWrS71OCQiRZ0G2IiwZ9L7LDlHu+PmGO22s30FjgH4So 06K+apmYT6/xZGVWu2nlMLOAFXB8Wk8sWmA8UaxgbK+pqGQuP6g= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:15 2026 by rpki-client