$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: mcajrmeqayAFC0vdz5Pac/xVJTXonQxm5wIkWKYPhC4= Subject key identifier: B4:6C:16:C3:BE:6B:C8:51:48:39:19:90:F7:BA:8E:2D:9D:45:DB:55 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 5B5F96F7EDA6A079258B59CF27D7AAB36DA1BE16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:17:23 +0000 Manifest this update: Tue 21 Jul 2026 01:12:23 +0000 Manifest next update: Wed 22 Jul 2026 02:45:23 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 2: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) 3: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: NdLM0xwb29Xo+Y8sJMDAqm+FnenjVge+E2hNhD1xqDA=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5f:96:f7:ed:a6:a0:79:25:8b:59:cf:27:d7:aa:b3:6d:a1:be:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Jul 21 01:12:23 2026 GMT Not After : Jul 22 02:45:23 2026 GMT Subject: CN=B46C16C3BE6BC85148391990F7BA8E2D9D45DB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:dd:62:f1:f6:1e:95:b3:36:52:31:de:54: af:cf:31:4c:67:da:a8:37:a6:31:1c:46:7b:e6:32: 2e:a7:48:53:03:a3:73:6f:b5:b4:f0:76:f4:4a:a2: ca:c2:98:95:0e:62:bd:52:3b:89:b0:7f:02:44:0a: 73:7f:08:cb:d1:02:80:ae:9f:38:54:30:37:d0:0e: 66:53:0d:fe:41:e0:4e:d1:cc:d0:08:35:9c:d3:9d: 8b:01:78:fd:db:27:ad:8f:68:0b:ff:0d:99:87:30: f5:ce:6d:50:e2:35:b7:09:70:79:08:c9:ea:7b:72: b0:00:86:e3:5e:ac:03:91:d9:b1:05:2b:50:e6:77: 9e:fa:a2:3f:3e:85:23:c7:ae:36:d4:f7:d4:e2:45: f1:a8:a0:12:4d:19:a2:f1:e0:b7:a9:9a:b0:31:f8: 3c:0c:ed:5e:25:58:ef:a0:6c:ba:61:52:c0:70:e7: 4e:e0:0c:65:7d:d2:4e:a0:d9:22:50:2f:db:f7:ce: 40:09:79:6a:bb:16:c6:41:7a:af:a6:1b:83:2b:43: 85:c5:86:a8:5b:0c:d0:4f:d8:52:7c:6b:28:90:9c: 57:f4:30:fe:53:6f:42:ff:cf:94:cd:b8:2d:ab:e5: 26:7d:a4:56:23:1d:0a:38:70:e4:47:cd:1c:2e:0f: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6C:16:C3:BE:6B:C8:51:48:39:19:90:F7:BA:8E:2D:9D:45:DB:55 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:d5:6b:96:fa:de:77:92:c6:cc:72:f7:f3:0a:18:c6:29:65: 54:80:af:a6:2f:a6:c6:c2:c0:a1:4f:f5:05:e2:48:fb:a5:ed: 74:13:d8:44:06:ca:0d:e8:6d:cc:93:88:1d:b8:c8:a5:34:32: 8b:3d:0c:8e:8b:2e:71:9d:f1:8c:84:a2:4b:e5:23:59:48:1c: 57:b7:5c:f2:d0:62:4b:61:22:2e:f6:28:b8:28:b1:e6:83:d2: dc:fc:97:6d:05:4f:8e:29:67:47:95:88:78:3a:e5:48:70:9f: 26:37:21:eb:ef:45:99:16:0e:e6:a6:44:7f:15:5b:65:9b:5b: 17:ed:3a:90:9e:f7:f3:5d:4f:af:20:6c:e1:16:ba:4b:23:e3: 2d:5f:2a:73:79:06:26:60:5e:f8:80:7d:7e:70:cc:9e:13:e9: e6:c3:b7:ea:a9:32:19:5f:57:07:8b:d4:88:10:a9:ac:eb:17: 47:7d:5d:8e:0c:c2:db:46:4d:d4:45:24:d1:f9:04:12:b7:4e: 9c:58:16:95:7b:ac:49:59:d3:10:e4:f9:9c:ac:6f:f2:eb:50: ab:7a:74:a5:82:3c:ca:bd:28:cd:f7:43:d0:93:a5:c1:6d:00: 27:0b:71:c1:45:a3:07:b3:60:4f:34:9a:66:e2:77:04:16:f8: 97:4f:8d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1+W9+2moHkli1nPJ9eqs22hvhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA3MjEwMTEyMjNaFw0yNjA3MjIwMjQ1MjNaMDMxMTAvBgNV BAMTKEI0NkMxNkMzQkU2QkM4NTE0ODM5MTk5MEY3QkE4RTJEOUQ0NURCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLxt1i8fYelbM2UjHeVK/PMUxn 2qg3pjEcRnvmMi6nSFMDo3NvtbTwdvRKosrCmJUOYr1SO4mwfwJECnN/CMvRAoCu nzhUMDfQDmZTDf5B4E7RzNAINZzTnYsBeP3bJ62PaAv/DZmHMPXObVDiNbcJcHkI yep7crAAhuNerAOR2bEFK1Dmd576oj8+hSPHrjbU99TiRfGooBJNGaLx4LepmrAx +DwM7V4lWO+gbLphUsBw507gDGV90k6g2SJQL9v3zkAJeWq7FsZBeq+mG4MrQ4XF hqhbDNBP2FJ8ayiQnFf0MP5Tb0L/z5TNuC2r5SZ9pFYjHQo4cORHzRwuD0lHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGwWw75ryFFIORmQ97qOLZ1F21UwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANbVa5b63neSxsxy9/MKGMYpZVSAr6YvpsbC wKFP9QXiSPul7XQT2EQGyg3obcyTiB24yKU0Mos9DI6LLnGd8YyEokvlI1lIHFe3 XPLQYkthIi72KLgoseaD0tz8l20FT44pZ0eViHg65UhwnyY3IevvRZkWDuamRH8V W2WbWxftOpCe9/NdT68gbOEWuksj4y1fKnN5BiZgXviAfX5wzJ4T6ebDt+qpMhlf VweL1IgQqazrF0d9XY4MwttGTdRFJNH5BBK3TpxYFpV7rElZ0xDk+Zysb/LrUKt6 dKWCPMq9KM33Q9CTpcFtACcLccFFowezYE80mmbidwQW+JdPjRI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:49:58 2026 by rpki-client