$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: 2/V/IVihWmdHWa8PArkQrLPp+X/IF/Mt/AmOJ3JUfOM= Subject key identifier: 45:BA:C9:6F:3C:F2:27:76:34:15:78:CE:BC:F3:22:FA:A6:35:14:5C Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 1CCA53D613656577449B921D18A7B34C2FFCD16E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: 55 Signing time: Sat 04 Jul 2026 04:38:26 +0000 Manifest this update: Sat 04 Jul 2026 04:33:26 +0000 Manifest next update: Sun 05 Jul 2026 08:26:26 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 2: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: H9zhgbx5U/bNH1+QN0B7bqAEHVR9gAoGzff09EFv8+I=) 3: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 4: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 5: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ca:53:d6:13:65:65:77:44:9b:92:1d:18:a7:b3:4c:2f:fc:d1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Jul 4 04:33:26 2026 GMT Not After : Jul 5 08:26:26 2026 GMT Subject: CN=45BAC96F3CF22776341578CEBCF322FAA635145C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:be:de:b7:68:a4:c5:80:67:8b:1b:11:45: 1b:38:cf:af:93:3f:d5:76:ff:69:01:a8:23:5d:bc: 2d:c4:94:af:7a:37:0a:a5:fa:3c:e1:cf:6c:9a:ee: d4:e2:d3:b7:57:a1:52:9d:62:22:eb:25:17:bd:e0: 73:0a:9f:71:d4:0f:f9:31:3f:45:0d:17:c3:b8:52: 53:bf:cd:79:22:61:45:ed:be:b9:40:36:0d:f7:13: 36:61:2d:b8:ff:f0:e9:e2:7b:04:ca:5f:5e:bf:8b: 4a:75:cb:9b:60:68:28:63:af:2a:21:2f:d4:cf:45: 9a:c2:61:fd:f5:0c:7b:0f:27:03:a1:54:7e:bc:93: 24:85:fb:49:8a:7d:bc:05:62:cc:88:de:1b:1c:9a: 01:4c:6e:62:b3:13:c3:22:64:a2:fe:ed:b1:23:dd: c9:23:68:77:45:e6:a3:ef:97:dd:46:ed:42:fe:40: c4:44:95:4d:5d:79:f4:d9:84:20:29:4e:56:c1:71: f9:94:08:ac:b3:10:27:a7:3e:de:1c:f5:4c:49:19: 71:fc:67:75:10:ea:e6:5f:08:bc:49:7f:e6:5b:de: cb:47:51:a8:08:37:94:a4:60:5c:46:e0:8c:4f:2e: d4:e5:0d:33:a1:65:1c:81:3a:38:f3:74:5b:e3:b5: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BA:C9:6F:3C:F2:27:76:34:15:78:CE:BC:F3:22:FA:A6:35:14:5C X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:8c:c3:86:2f:3f:74:f4:42:b9:5d:76:fc:3c:c0:90:47: 5a:0f:93:01:13:84:db:bf:23:53:42:0f:ff:a5:e2:13:cf:e1: 25:cb:e6:86:46:7a:d9:7e:42:6b:75:4b:a6:14:f8:57:73:59: 82:7c:d4:0d:0a:ba:b3:4f:da:2f:c6:ce:6e:ae:84:f7:5b:35: 71:2a:50:d8:3f:d5:52:4d:fe:22:b3:09:5f:f0:24:3b:c6:ce: 57:65:4e:fc:a1:64:c6:c8:1f:f3:a8:a0:22:f1:b1:6f:62:8d: 84:e1:52:32:44:b4:6b:81:d9:4e:52:fe:8a:b0:79:36:fc:b3: 3b:a7:5a:71:59:b3:13:ce:88:10:b0:d7:c1:c2:2d:46:2c:ea: 28:4b:b1:74:fe:54:9b:88:1d:26:97:c4:3d:e5:04:9e:9f:48: 02:f0:e7:14:c9:2f:b8:f9:9b:e4:a8:df:a3:72:85:3d:a6:15: 48:64:31:ec:25:70:53:b8:02:ea:68:ea:10:2b:da:3a:5d:2c: 3f:91:30:32:59:13:11:2c:83:7c:21:56:e0:3f:f6:cf:cd:89: e1:02:c5:67:a6:ae:ad:ba:84:55:b2:57:1b:b7:73:56:70:af: dc:6b:e8:a2:eb:43:e6:92:f9:f3:70:c6:e0:cc:cf:b7:52:ea: f5:80:34:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMpT1hNlZXdEm5IdGKezTC/80W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA3MDQwNDMzMjZaFw0yNjA3MDUwODI2MjZaMDMxMTAvBgNV BAMTKDQ1QkFDOTZGM0NGMjI3NzYzNDE1NzhDRUJDRjMyMkZBQTYzNTE0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aL7et2ikxYBnixsRRRs4z6+T P9V2/2kBqCNdvC3ElK96Nwql+jzhz2ya7tTi07dXoVKdYiLrJRe94HMKn3HUD/kx P0UNF8O4UlO/zXkiYUXtvrlANg33EzZhLbj/8OniewTKX16/i0p1y5tgaChjryoh L9TPRZrCYf31DHsPJwOhVH68kySF+0mKfbwFYsyI3hscmgFMbmKzE8MiZKL+7bEj 3ckjaHdF5qPvl91G7UL+QMRElU1defTZhCApTlbBcfmUCKyzECenPt4c9UxJGXH8 Z3UQ6uZfCLxJf+Zb3stHUagIN5SkYFxG4IxPLtTlDTOhZRyBOjjzdFvjtbS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbrJbzzyJ3Y0FXjOvPMi+qY1FFwwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG38jMOGLz909EK5XXb8PMCQR1oPkwEThNu/ I1NCD/+l4hPP4SXL5oZGetl+Qmt1S6YU+FdzWYJ81A0KurNP2i/Gzm6uhPdbNXEq UNg/1VJN/iKzCV/wJDvGzldlTvyhZMbIH/OooCLxsW9ijYThUjJEtGuB2U5S/oqw eTb8szunWnFZsxPOiBCw18HCLUYs6ihLsXT+VJuIHSaXxD3lBJ6fSALw5xTJL7j5 m+So36NyhT2mFUhkMewlcFO4Aupo6hAr2jpdLD+RMDJZExEsg3whVuA/9s/NieEC xWemrq26hFWyVxu3c1Zwr9xr6KLrQ+aS+fNwxuDMz7dS6vWANEI= -----END CERTIFICATE-----Generated at Sat Jul 4 20:48:58 2026 by rpki-client