$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: 0Y5QQJP856aZFTPZAV7g61yNP99vzt6sp0MhHyBBIBc= Subject key identifier: 34:33:EC:81:25:49:47:4E:6A:48:14:B0:DE:95:2E:19:13:D8:1E:FE Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 274F70671F231BA808ED526E7888B6AE9FAAF327 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:21:20 +0000 Manifest this update: Tue 21 Jul 2026 00:16:20 +0000 Manifest next update: Wed 22 Jul 2026 02:54:20 +0000 Files and hashes: 1: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: 0G3m/m0mN8YPihjQwFvrDmdDpHZIKBFydYVKWpfzE2w=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4f:70:67:1f:23:1b:a8:08:ed:52:6e:78:88:b6:ae:9f:aa:f3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: Jul 21 00:16:20 2026 GMT Not After : Jul 22 02:54:20 2026 GMT Subject: CN=3433EC812549474E6A4814B0DE952E1913D81EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:80:c3:67:67:29:1b:82:12:11:bb:49:57: ea:ed:8c:60:dd:43:a4:15:34:82:3d:31:ee:46:c4: f6:ce:ea:c5:9e:4c:8b:c8:03:1b:81:ff:61:c8:d1: d2:1a:0f:a3:cc:8c:ba:b4:87:0e:08:41:6e:c3:96: 84:20:96:15:f9:0a:b2:d7:1d:db:55:57:e2:91:4c: 0a:36:54:d9:f7:b2:98:48:fe:a6:44:fb:05:ed:8e: 25:21:16:44:07:59:a6:64:1e:28:c4:a5:19:6c:1d: 2f:f9:0a:5a:1c:0e:78:a3:90:15:2a:e8:da:49:8d: 22:60:03:0f:61:5e:63:b7:02:c3:79:13:bf:63:47: d3:77:25:f0:34:e2:1c:e7:85:91:8b:ba:bc:c6:63: 37:ac:ba:ff:7d:3f:41:36:b1:60:5e:2e:c1:70:5a: 25:5a:5a:b4:ed:c2:3e:69:c4:cc:b1:59:d3:bc:51: 14:6f:c5:af:c7:c2:f8:26:fa:f3:c7:75:45:77:fe: 4c:99:38:ce:bd:06:43:34:0e:49:3d:71:94:7a:38: e1:0f:3e:d8:49:4f:fc:a1:5f:64:78:f7:cd:67:ac: b2:37:d3:99:6e:2c:62:4b:1f:b2:40:ea:8e:19:af: 28:79:bf:0c:16:35:9c:22:07:10:5c:5f:c4:ea:cd: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:EC:81:25:49:47:4E:6A:48:14:B0:DE:95:2E:19:13:D8:1E:FE X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:30:0f:58:a9:76:17:ab:83:cb:5d:87:13:83:2f:28:7c:bd: ad:be:ed:17:5a:85:c0:0f:11:8c:33:cb:3c:4e:e7:64:2d:c8: 3d:57:53:2c:18:e4:0c:d5:1a:9d:9e:21:74:b2:06:2a:7f:64: f3:e3:e3:81:a2:57:3e:9d:46:f0:60:32:54:34:94:ec:9e:92: f7:3e:57:20:92:08:62:36:e9:44:20:b9:c0:8a:48:06:c0:37: 52:61:35:b0:fa:9a:1c:e7:4b:72:23:3e:13:1f:bd:88:f3:06: 96:2c:00:17:56:a1:0c:97:6a:bf:d8:e5:20:a8:75:5c:86:70: 74:9a:ed:1e:2b:8c:08:63:2f:dd:02:84:cb:ad:34:02:45:b1: 19:34:94:e6:df:2a:dd:b1:cc:d4:fe:5a:5f:cf:ef:d7:a8:d2: ae:71:b6:50:63:95:56:4a:4f:06:24:6c:76:25:bb:6f:4a:be: 2d:f0:71:57:14:fd:da:62:7c:ce:d3:38:31:e5:de:cc:00:3f: ef:88:df:44:47:2b:82:b0:66:63:27:38:d6:4e:c5:89:c5:20: e9:4f:96:0d:e6:b7:dc:34:d2:d6:d8:ed:aa:72:93:d6:40:4c: 5c:97:80:21:4f:7f:7d:cf:8d:91:57:ac:81:24:c7:6a:a1:dc: 1c:b6:1a:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ09wZx8jG6gI7VJueIi2rp+q8ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA3MjEwMDE2MjBaFw0yNjA3MjIwMjU0MjBaMDMxMTAvBgNV BAMTKDM0MzNFQzgxMjU0OTQ3NEU2QTQ4MTRCMERFOTUyRTE5MTNEODFFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK54DDZ2cpG4ISEbtJV+rtjGDd Q6QVNII9Me5GxPbO6sWeTIvIAxuB/2HI0dIaD6PMjLq0hw4IQW7DloQglhX5CrLX HdtVV+KRTAo2VNn3sphI/qZE+wXtjiUhFkQHWaZkHijEpRlsHS/5ClocDnijkBUq 6NpJjSJgAw9hXmO3AsN5E79jR9N3JfA04hznhZGLurzGYzesuv99P0E2sWBeLsFw WiVaWrTtwj5pxMyxWdO8URRvxa/Hwvgm+vPHdUV3/kyZOM69BkM0Dkk9cZR6OOEP PthJT/yhX2R4981nrLI305luLGJLH7JA6o4Zryh5vwwWNZwiBxBcX8TqzY4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDPsgSVJR05qSBSw3pUuGRPYHv4wHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMwD1ipdherg8tdhxODLyh8va2+7RdahcAP EYwzyzxO52QtyD1XUywY5AzVGp2eIXSyBip/ZPPj44GiVz6dRvBgMlQ0lOyekvc+ VyCSCGI26UQgucCKSAbAN1JhNbD6mhznS3IjPhMfvYjzBpYsABdWoQyXar/Y5SCo dVyGcHSa7R4rjAhjL90ChMutNAJFsRk0lObfKt2xzNT+Wl/P79eo0q5xtlBjlVZK TwYkbHYlu29Kvi3wcVcU/dpifM7TODHl3swAP++I30RHK4KwZmMnONZOxYnFIOlP lg3mt9w00tbY7apyk9ZATFyXgCFPf33PjZFXrIEkx2qh3By2GvM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:56:31 2026 by rpki-client