$ rpki-client -vvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: ObdD1DFc8g3nAFbufWD6xpN9u2Bh6MpT5rvO01Qksd0= Subject key identifier: B7:7A:06:F6:5D:86:04:E0:8B:C5:FF:BF:ED:FA:14:B2:C8:1F:1E:95 Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 605FB9DC07AFDF9EC0C36BCC0C75C8493C9B982E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:50:49 +0000 Manifest this update: Mon 20 Jul 2026 19:45:49 +0000 Manifest next update: Tue 21 Jul 2026 21:37:49 +0000 Files and hashes: 1: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: gnkkA8X7RkRxjmdF0XtP2dZK0S1lUdYAYwiFu/Aw3Qk=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5f:b9:dc:07:af:df:9e:c0:c3:6b:cc:0c:75:c8:49:3c:9b:98:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Jul 20 19:45:49 2026 GMT Not After : Jul 21 21:37:49 2026 GMT Subject: CN=B77A06F65D8604E08BC5FFBFEDFA14B2C81F1E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c8:c1:22:da:1e:23:b7:63:17:ac:6d:e6:68: a5:2b:6d:62:e9:f4:fd:89:b3:90:60:79:58:86:54: 98:80:d2:70:4b:eb:7a:8c:ca:a0:05:26:a0:f9:5b: fb:ae:61:32:77:cb:f5:24:bf:3c:2c:e3:53:eb:46: 69:99:d7:5f:ed:ca:19:c0:82:ea:97:3c:ab:47:6c: 89:26:54:ad:66:e3:2f:4a:ce:d9:fc:7d:e4:78:37: 8e:59:b6:24:d3:58:27:83:ea:4d:cb:47:19:55:c5: ca:c0:ed:22:31:88:1b:53:7c:67:7b:26:6e:b3:3f: e6:59:13:b6:d7:eb:33:bc:95:57:cf:81:5e:66:64: 97:dd:cd:45:14:8f:2b:f5:d8:56:5e:a9:9e:42:51: 65:b6:30:2f:fa:6e:0c:5d:c9:7e:33:aa:ed:70:9a: 94:6f:f9:f0:15:92:14:e4:1c:dc:5f:ee:ef:38:f6: 78:c7:9e:c5:f0:42:7a:46:59:00:5d:ad:a3:5c:db: 31:db:16:59:49:0f:26:a5:fb:d0:82:6a:81:58:32: 67:57:27:5b:ad:3b:08:3e:6f:51:41:72:9c:13:b3: b6:e6:4d:74:2b:e0:9f:ea:80:ab:74:69:89:f9:0a: 97:10:95:9b:81:97:61:62:8b:f2:4c:61:3f:0e:5d: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:06:F6:5D:86:04:E0:8B:C5:FF:BF:ED:FA:14:B2:C8:1F:1E:95 X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ca:48:e1:06:36:fe:90:7d:09:37:1f:d2:fd:37:26:1e:b7: bd:6d:05:2f:3b:14:56:3b:c1:aa:a9:1f:b2:bd:67:9d:dd:08: 02:a8:da:4f:13:7c:e1:39:43:66:0b:2b:0e:fb:5d:5c:95:83: 54:52:07:6f:35:b6:15:42:c4:62:6d:a8:90:71:1b:fd:55:ee: 48:32:9d:aa:2e:92:7b:53:c1:62:30:e0:98:fb:df:96:0c:ca: 5d:17:b3:3e:f5:b7:90:73:33:cf:3a:0f:c7:60:7e:05:87:46: 9f:bc:16:8f:db:8b:88:fa:bf:23:c4:0e:59:dd:41:23:b7:77: f2:34:c9:02:33:61:5a:ff:4c:c9:a5:8a:c0:ca:0e:c6:4e:85: 33:56:60:d0:ad:f0:dc:25:43:d7:47:be:0c:40:c9:bb:55:95: 6c:19:fa:80:30:51:5d:b8:f3:dd:59:98:28:3d:a0:1c:fa:ec: e7:c7:28:3c:c1:e0:fd:ec:96:20:72:a1:ae:61:2a:e6:cc:7b: 70:e7:41:d9:f7:6a:19:0a:69:65:c0:b2:90:c3:cd:25:31:e8: 32:9b:7b:72:dd:c8:10:00:17:4c:89:95:4e:0f:1a:82:fa:f9: 1c:8d:c7:25:89:ad:f8:ff:1d:48:e4:3f:e4:a7:4e:da:2d:db: 71:82:f0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYF+53Aev357Aw2vMDHXISTybmC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA3MjAxOTQ1NDlaFw0yNjA3MjEyMTM3NDlaMDMxMTAvBgNV BAMTKEI3N0EwNkY2NUQ4NjA0RTA4QkM1RkZCRkVERkExNEIyQzgxRjFFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryMEi2h4jt2MXrG3maKUrbWLp 9P2Js5BgeViGVJiA0nBL63qMyqAFJqD5W/uuYTJ3y/Ukvzws41PrRmmZ11/tyhnA guqXPKtHbIkmVK1m4y9Kztn8feR4N45ZtiTTWCeD6k3LRxlVxcrA7SIxiBtTfGd7 Jm6zP+ZZE7bX6zO8lVfPgV5mZJfdzUUUjyv12FZeqZ5CUWW2MC/6bgxdyX4zqu1w mpRv+fAVkhTkHNxf7u849njHnsXwQnpGWQBdraNc2zHbFllJDyal+9CCaoFYMmdX J1utOwg+b1FBcpwTs7bmTXQr4J/qgKt0aYn5CpcQlZuBl2Fii/JMYT8OXQbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3oG9l2GBOCLxf+/7foUssgfHpUwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfKSOEGNv6QfQk3H9L9NyYet71tBS87FFY7 waqpH7K9Z53dCAKo2k8TfOE5Q2YLKw77XVyVg1RSB281thVCxGJtqJBxG/1V7kgy naoukntTwWIw4Jj735YMyl0Xsz71t5BzM886D8dgfgWHRp+8Fo/bi4j6vyPEDlnd QSO3d/I0yQIzYVr/TMmlisDKDsZOhTNWYNCt8NwlQ9dHvgxAybtVlWwZ+oAwUV24 891ZmCg9oBz67OfHKDzB4P3sliByoa5hKubMe3DnQdn3ahkKaWXAspDDzSUx6DKb e3LdyBAAF0yJlU4PGoL6+RyNxyWJrfj/HUjkP+SnTtot23GC8F8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:43:52 2026 by rpki-client