$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: yj4l/6cEzX5/pJSrihZ4nRxVkow3yMsfY5e500BzReE= Subject key identifier: 15:83:D7:F1:27:FC:A4:89:FC:29:BF:92:D4:02:15:7D:49:52:F4:D4 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 78A386AA2975CB77285D96540BF8DF0A1E777CED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:24:07 +0000 Manifest this update: Tue 02 Jun 2026 23:19:07 +0000 Manifest next update: Thu 04 Jun 2026 00:44:07 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 3: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 5: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: A6U1AtbTL4R7o9mZr1VsIa1VySZfe34Y69M+GS/q2qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a3:86:aa:29:75:cb:77:28:5d:96:54:0b:f8:df:0a:1e:77:7c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Jun 2 23:19:07 2026 GMT Not After : Jun 4 00:44:07 2026 GMT Subject: CN=1583D7F127FCA489FC29BF92D402157D4952F4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:41:5f:f5:a0:79:16:8b:37:59:a9:f0:27: 8b:41:2e:dc:27:6c:37:34:87:f2:d0:2f:b6:95:fc: 79:9b:48:b1:58:c0:4b:95:04:9c:14:09:00:74:f5: cc:b9:15:32:c3:71:60:6f:5c:d1:34:3c:0c:59:7b: 95:c9:f6:c0:47:bc:29:cf:55:ef:34:5d:01:fb:17: a6:06:dd:60:a7:74:ec:c0:c5:df:76:d5:a6:46:0d: 22:bc:7a:e8:b4:ea:8e:20:a7:7b:03:cc:31:74:91: 2f:d1:64:5c:16:66:81:b2:e1:a9:51:7d:a4:31:0e: d5:69:09:54:d8:00:c9:4f:46:a2:fd:39:1d:c6:54: 28:f5:35:cf:6d:f8:db:87:ec:de:e4:56:53:f1:89: c2:a0:28:d3:02:11:54:21:12:90:15:b7:f3:80:d1: d4:a6:6e:80:78:ce:b8:91:c9:57:2e:56:7e:ee:9a: 76:17:9c:c8:fa:3c:3e:61:ed:e8:8f:17:2f:3d:3e: 2e:cf:ed:60:e7:ae:fa:b1:7a:0c:f3:d5:56:0e:af: 18:ec:7a:8d:97:d8:84:62:bb:5f:c7:20:c4:cc:61: 7a:21:e1:8b:b2:e2:bd:09:ed:27:37:ed:45:45:63: ad:6a:06:88:53:ab:99:e3:ca:42:da:f9:95:dd:1b: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:83:D7:F1:27:FC:A4:89:FC:29:BF:92:D4:02:15:7D:49:52:F4:D4 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6b:e3:cd:db:22:73:dd:60:63:d8:09:6e:4f:3b:58:72:da: 9b:73:35:69:96:b9:64:c6:80:ca:3e:94:23:8d:5d:48:85:90: ae:d2:57:3a:80:56:f9:35:8f:41:1a:f8:9f:64:8c:c5:9a:f1: 6d:60:37:ae:1f:32:b7:a6:6f:68:fb:92:b8:5f:cd:32:01:73: c1:f7:99:55:35:3e:40:e3:1d:ad:7c:e8:81:32:d1:3b:ed:c7: b6:76:cd:d2:ad:09:e9:9e:44:36:ed:98:87:48:fa:47:09:16: 1f:48:24:0d:b9:26:51:db:e8:f4:65:27:6e:e7:34:35:d1:ee: f2:19:c9:76:de:44:99:f9:b7:0e:17:43:97:07:47:18:90:1c: cb:1b:19:ba:25:85:b7:15:21:dd:5a:54:87:df:b3:4e:a4:3b: bf:4b:6c:4c:b3:d5:f5:63:f5:c0:a9:da:29:d8:ba:d6:15:4a: b1:02:69:58:60:fe:75:bb:c4:12:2d:f6:d0:42:7f:15:9a:80: a2:87:81:ff:b4:ef:c4:35:7d:aa:59:0f:5b:fa:29:ce:08:c6: 14:e9:55:0b:d6:af:c3:fa:32:f1:17:44:06:67:b7:1f:e0:66: 32:91:ca:33:fc:87:89:f4:cb:30:53:f1:47:d2:58:ee:ff:9a: 3f:34:a0:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKOGqil1y3coXZZUC/jfCh53fO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA2MDIyMzE5MDdaFw0yNjA2MDQwMDQ0MDdaMDMxMTAvBgNV BAMTKDE1ODNEN0YxMjdGQ0E0ODlGQzI5QkY5MkQ0MDIxNTdENDk1MkY0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLUFf9aB5Fos3WanwJ4tBLtwn bDc0h/LQL7aV/HmbSLFYwEuVBJwUCQB09cy5FTLDcWBvXNE0PAxZe5XJ9sBHvCnP Ve80XQH7F6YG3WCndOzAxd921aZGDSK8eui06o4gp3sDzDF0kS/RZFwWZoGy4alR faQxDtVpCVTYAMlPRqL9OR3GVCj1Nc9t+NuH7N7kVlPxicKgKNMCEVQhEpAVt/OA 0dSmboB4zriRyVcuVn7umnYXnMj6PD5h7eiPFy89Pi7P7WDnrvqxegzz1VYOrxjs eo2X2IRiu1/HIMTMYXoh4Yuy4r0J7Sc37UVFY61qBohTq5njykLa+ZXdG1LRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFYPX8Sf8pIn8Kb+S1AIVfUlS9NQwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpr483bInPdYGPYCW5PO1hy2ptzNWmWuWTG gMo+lCONXUiFkK7SVzqAVvk1j0Ea+J9kjMWa8W1gN64fMremb2j7krhfzTIBc8H3 mVU1PkDjHa186IEy0Tvtx7Z2zdKtCemeRDbtmIdI+kcJFh9IJA25JlHb6PRlJ27n NDXR7vIZyXbeRJn5tw4XQ5cHRxiQHMsbGbolhbcVId1aVIffs06kO79LbEyz1fVj 9cCp2inYutYVSrECaVhg/nW7xBIt9tBCfxWagKKHgf+078Q1fapZD1v6Kc4IxhTp VQvWr8P6MvEXRAZntx/gZjKRyjP8h4n0yzBT8UfSWO7/mj80oE0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:47 2026 by rpki-client