$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: /cl/zgmGD+QmmHgEmZ/7BzlP5WbN9/IVfZCWryqKYng= Subject key identifier: 64:F3:BE:E8:EB:5B:E2:C6:D4:43:70:26:03:56:A8:3E:64:3D:8D:A1 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 5D3875212B9BF6784DC2E496786F82144C3A4FDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:44:47 +0000 Manifest this update: Mon 20 Jul 2026 14:39:47 +0000 Manifest next update: Tue 21 Jul 2026 17:44:47 +0000 Files and hashes: 1: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 4: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: 13pSfx3f6yTKpPsiwc+OIVJq7Za7ywvZ3XWcbeBtUSk=) 5: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:38:75:21:2b:9b:f6:78:4d:c2:e4:96:78:6f:82:14:4c:3a:4f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Jul 20 14:39:47 2026 GMT Not After : Jul 21 17:44:47 2026 GMT Subject: CN=64F3BEE8EB5BE2C6D44370260356A83E643D8DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:af:7a:af:92:23:fd:e3:3a:35:16:41:2c: 63:52:3d:36:2b:63:dd:91:cf:2e:fd:a9:4c:7e:86: fe:cf:79:d1:4f:4b:5a:cd:98:06:f7:e9:f1:4c:10: 30:08:2d:46:5b:ff:eb:b2:4a:e1:e7:55:92:a4:80: 82:ea:35:d4:16:24:49:d1:69:f4:9d:d0:59:1c:58: 72:07:4e:5d:0e:8f:28:6d:35:48:13:49:c4:5f:84: ab:5b:74:fd:f9:13:d8:04:88:ec:dd:39:64:09:97: 60:93:49:91:ea:84:a9:86:07:6a:c2:60:14:6a:c2: 70:6d:66:4c:77:9f:0e:12:cf:93:16:8a:75:79:f3: 79:86:c1:6a:06:59:99:94:aa:b9:96:b7:95:e2:ee: 78:2b:91:06:ff:87:46:5f:77:df:b1:5f:75:68:1c: 3b:d4:30:18:20:c8:47:59:36:a8:d9:91:bf:b1:4a: 31:24:0d:b4:2c:7b:41:7a:e0:28:a3:9d:8d:14:15: 72:80:81:2b:6b:b5:93:b3:d1:bd:81:ef:34:ea:c0: d7:fa:2e:b9:4e:41:7a:67:90:93:e0:86:b7:e6:5d: a9:10:96:af:d4:70:ea:d5:3d:22:ec:87:cb:21:b1: 0a:f6:95:f8:e7:f6:85:fd:06:7f:58:c3:a9:42:14: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:BE:E8:EB:5B:E2:C6:D4:43:70:26:03:56:A8:3E:64:3D:8D:A1 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:41:72:8b:41:71:b1:25:79:16:a3:31:0e:b7:a4:21:f9:79: be:52:ef:01:5b:e5:0a:69:ff:29:45:86:57:07:98:76:0c:a7: b2:85:fb:e8:23:10:ee:53:19:c4:65:ff:aa:cd:bd:1c:43:9a: 54:02:95:54:42:d0:1e:c3:31:52:53:a8:b0:96:4a:6c:6c:f6: 0a:97:31:63:57:49:7a:d6:8e:f3:ab:83:36:b0:13:7c:b4:db: 91:bf:d4:8f:b6:67:93:02:fd:af:95:aa:0e:da:13:d8:42:46: cb:ef:f0:19:65:7d:6b:16:4a:d6:dd:8f:4f:56:4b:9a:30:32: df:db:d9:80:2a:24:99:32:bd:9e:c9:24:9e:0e:1a:82:66:5e: 70:59:75:7f:41:f2:06:9a:4b:63:8b:47:46:8b:59:5b:5f:43: 60:d9:ec:ff:4f:af:02:c8:0a:44:6f:c9:e2:ef:ae:32:fd:89: f9:db:03:d7:9b:6c:fb:ee:5f:d4:8b:fa:45:59:2d:38:8c:b2: 4d:8b:e5:d1:35:cf:b7:5b:ba:b9:d9:1f:68:1f:34:a0:46:a9: ad:9c:fe:ed:cd:6b:f2:21:a6:c6:3d:e5:95:89:21:70:4f:88: b3:c6:d9:a3:e0:14:ba:58:fb:00:dd:48:57:94:4b:3a:0f:d6: d4:e0:d2:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTh1ISub9nhNwuSWeG+CFEw6T98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA3MjAxNDM5NDdaFw0yNjA3MjExNzQ0NDdaMDMxMTAvBgNV BAMTKDY0RjNCRUU4RUI1QkUyQzZENDQzNzAyNjAzNTZBODNFNjQzRDhEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Tq96r5Ij/eM6NRZBLGNSPTYr Y92Rzy79qUx+hv7PedFPS1rNmAb36fFMEDAILUZb/+uySuHnVZKkgILqNdQWJEnR afSd0FkcWHIHTl0OjyhtNUgTScRfhKtbdP35E9gEiOzdOWQJl2CTSZHqhKmGB2rC YBRqwnBtZkx3nw4Sz5MWinV583mGwWoGWZmUqrmWt5Xi7ngrkQb/h0Zfd9+xX3Vo HDvUMBggyEdZNqjZkb+xSjEkDbQse0F64CijnY0UFXKAgStrtZOz0b2B7zTqwNf6 LrlOQXpnkJPghrfmXakQlq/UcOrVPSLsh8shsQr2lfjn9oX9Bn9Yw6lCFGCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZPO+6Otb4sbUQ3AmA1aoPmQ9jaEwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJBcotBcbEleRajMQ63pCH5eb5S7wFb5Qpp /ylFhlcHmHYMp7KF++gjEO5TGcRl/6rNvRxDmlQClVRC0B7DMVJTqLCWSmxs9gqX MWNXSXrWjvOrgzawE3y025G/1I+2Z5MC/a+Vqg7aE9hCRsvv8BllfWsWStbdj09W S5owMt/b2YAqJJkyvZ7JJJ4OGoJmXnBZdX9B8gaaS2OLR0aLWVtfQ2DZ7P9PrwLI CkRvyeLvrjL9ifnbA9ebbPvuX9SL+kVZLTiMsk2L5dE1z7dburnZH2gfNKBGqa2c /u3Na/IhpsY95ZWJIXBPiLPG2aPgFLpY+wDdSFeUSzoP1tTg0jE= -----END CERTIFICATE-----Generated at Tue Jul 21 07:46:50 2026 by rpki-client