$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft File: 7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json) Hash identifier: 2XMGFGr6cNIkX8SOOgIVjUQ2I9jEsNftAvuCFg+SEYo= Subject key identifier: 66:37:CD:57:3C:0C:14:47:4E:3D:D8:D7:08:4F:8B:F6:22:FD:0D:86 Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79 Certificate issuer: /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379 Certificate serial: 27947CE5ACF4507FDEEEA45E13045998F2C7B821 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:28:08 +0000 Manifest this update: Tue 02 Jun 2026 10:23:08 +0000 Manifest next update: Wed 03 Jun 2026 12:43:08 +0000 Files and hashes: 1: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: tDmgAAXZsgm9snCPt5BS6myVVjNpu9kOcdf533gqNUk=) 2: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=) 3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=) 4: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:94:7c:e5:ac:f4:50:7f:de:ee:a4:5e:13:04:59:98:f2:c7:b8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379 Validity Not Before: Jun 2 10:23:08 2026 GMT Not After : Jun 3 12:43:08 2026 GMT Subject: CN=6637CD573C0C14474E3DD8D7084F8BF622FD0D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:6f:ef:03:41:7a:99:67:fd:dd:1d:27:d0: c7:be:85:c9:1f:34:5a:70:31:34:31:61:3a:12:ad: a2:1d:13:0f:69:7e:89:80:06:25:58:8a:5b:b2:b3: f2:52:e1:71:e5:5d:9c:97:a2:46:a0:d6:54:17:bb: e3:36:8d:6b:aa:ab:5a:e9:03:2c:2a:e9:63:35:ca: 30:c1:5a:20:f0:0d:a3:0b:77:81:4a:c7:df:64:17: 6c:ab:8a:c1:42:a3:08:96:ac:28:e2:7f:e9:33:73: b9:37:0e:b2:4f:61:fc:eb:9c:05:01:23:d8:98:2d: e0:98:c4:7e:44:de:49:1d:5d:f1:11:61:14:b3:87: 27:ca:c1:a7:72:61:95:d1:f2:13:ca:c8:0e:28:46: 6a:a5:31:28:2f:1c:5a:00:ab:af:3f:3f:47:df:0f: 8c:2c:d4:e9:b5:48:7a:cb:44:1e:23:6b:68:d3:b1: 4f:17:4f:60:d5:72:0e:2c:c7:9a:53:3d:a2:76:48: ed:a4:95:8e:49:7c:c6:ba:c2:36:4c:0c:f2:5d:60: 7c:3e:82:a3:2e:7d:73:64:fa:ac:e1:fe:94:b1:12: 3a:21:ae:89:d2:db:af:92:16:0d:48:15:c8:e9:fd: 09:6d:4b:ef:80:86:e5:cb:59:e3:07:93:87:07:a5: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:CD:57:3C:0C:14:47:4E:3D:D8:D7:08:4F:8B:F6:22:FD:0D:86 X509v3 Authority Key Identifier: keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:73:4e:ab:97:fa:bb:74:c2:e8:62:26:32:04:fb:49:e3:c9: e0:cf:5d:36:1e:e4:d2:b8:65:bf:97:ed:08:de:b3:c6:d4:3d: b1:11:be:37:7b:c7:ee:9c:1c:86:23:80:93:c1:88:41:6e:e4: 92:bd:d2:4b:0a:29:7c:07:27:0b:8b:44:81:de:32:6f:1b:32: 5c:1f:56:7f:d8:9c:28:7a:90:f7:91:aa:2d:e8:f9:5f:eb:75: c3:59:99:03:4d:0f:40:2d:7d:4b:38:b0:13:b8:01:2e:0a:ca: d8:a7:03:2e:84:d3:1f:40:23:b1:81:16:28:2e:a7:d3:8f:91: a8:3c:f5:c7:69:63:b8:cb:aa:22:5e:d0:0c:73:60:a5:fc:71: cd:2d:9b:52:a2:b8:cb:69:1f:d5:a1:5e:1c:52:4c:5c:9c:67: 23:1e:5f:f8:bd:ea:49:ec:09:b2:8f:6e:85:5d:2e:c3:81:9f: cc:ef:cc:07:d4:f2:77:c6:aa:cf:71:11:9c:8f:0a:15:ca:60: b3:a5:db:1e:32:89:6a:85:8a:3c:9b:fc:32:fe:0e:cd:cb:07: b9:90:cd:7a:7d:84:25:15:e4:2c:3e:a0:53:03:67:b9:06:ae: 4b:7e:27:25:81:40:ce:6a:92:24:0d:2b:b8:77:b8:c4:4e:fd: ef:74:5e:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5R85az0UH/e7qReEwRZmPLHuCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3 NjQ4QjM3OTAeFw0yNjA2MDIxMDIzMDhaFw0yNjA2MDMxMjQzMDhaMDMxMTAvBgNV BAMTKDY2MzdDRDU3M0MwQzE0NDc0RTNERDhENzA4NEY4QkY2MjJGRDBEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFW/vA0F6mWf93R0n0Me+hckf NFpwMTQxYToSraIdEw9pfomABiVYiluys/JS4XHlXZyXokag1lQXu+M2jWuqq1rp Aywq6WM1yjDBWiDwDaMLd4FKx99kF2yrisFCowiWrCjif+kzc7k3DrJPYfzrnAUB I9iYLeCYxH5E3kkdXfERYRSzhyfKwadyYZXR8hPKyA4oRmqlMSgvHFoAq68/P0ff D4ws1Om1SHrLRB4ja2jTsU8XT2DVcg4sx5pTPaJ2SO2klY5JfMa6wjZMDPJdYHw+ gqMufXNk+qzh/pSxEjohronS26+SFg1IFcjp/QltS++AhuXLWeMHk4cHpezLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjfNVzwMFEdOPdjXCE+L9iL9DYYwHwYDVR0j BBgwFoAUeidsJdie2Dh5enz0nbLj1nZIs3kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFlMmViZGUtNjMxMS00ODhhLTgyYjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVE ODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3NjQ4QjM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTI3NkMyNUQ4OUVEODM4Nzk3QTdDRjQ5REIyRTNENjc2NDhC Mzc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUz RDY3NjQ4QjM3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZzTquX+rt0wuhiJjIE+0njyeDPXTYe5NK4 Zb+X7Qjes8bUPbERvjd7x+6cHIYjgJPBiEFu5JK90ksKKXwHJwuLRIHeMm8bMlwf Vn/YnCh6kPeRqi3o+V/rdcNZmQNND0AtfUs4sBO4AS4KytinAy6E0x9AI7GBFigu p9OPkag89cdpY7jLqiJe0AxzYKX8cc0tm1KiuMtpH9WhXhxSTFycZyMeX/i96kns CbKPboVdLsOBn8zvzAfU8nfGqs9xEZyPChXKYLOl2x4yiWqFijyb/DL+Ds3LB7mQ zXp9hCUV5Cw+oFMDZ7kGrkt+JyWBQM5qkiQNK7h3uMRO/e90XgQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:05 2026 by rpki-client