$ rpki-client -vvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: wpQLzF4iBoI+wQQj9hHB6MlkM1X195qE7QBftnnRGLc= Subject key identifier: 57:66:41:BB:F6:1A:12:B1:D0:62:88:9D:5E:D1:B9:7F:CA:37:1B:81 Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 2F00F1AECFC196F0E3C5C613AF7CDB2DAAE69618 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:53:10 +0000 Manifest this update: Tue 02 Jun 2026 14:48:10 +0000 Manifest next update: Wed 03 Jun 2026 15:46:10 +0000 Files and hashes: 1: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: CvFo9DrF7vOtCZVMfj9dKaFS04pH/pN7FJ/ra9BOpFc=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:00:f1:ae:cf:c1:96:f0:e3:c5:c6:13:af:7c:db:2d:aa:e6:96:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Jun 2 14:48:10 2026 GMT Not After : Jun 3 15:46:10 2026 GMT Subject: CN=576641BBF61A12B1D062889D5ED1B97FCA371B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:60:1d:d1:00:3c:a5:cc:95:ad:54:33:e9: 70:5f:c3:cc:42:72:82:e8:1d:73:87:1e:f9:17:de: fc:a9:10:b9:47:0e:6d:0b:10:2f:1d:26:12:5f:5a: 70:74:cb:a4:0b:86:d0:dd:4a:20:c9:35:32:e0:31: 3c:ca:0b:37:4c:03:9c:34:c8:16:73:f3:ff:7c:fc: 82:47:0b:0a:21:74:4b:53:12:0b:af:61:9a:b5:e7: 0d:ee:45:1d:a3:78:23:bc:60:88:6c:36:5d:5b:54: 28:f2:0c:18:32:f5:14:1a:2a:99:da:2f:9f:4f:b8: a2:a2:fd:98:a7:9f:5b:06:86:18:8b:4e:ad:3c:04: 60:6c:2e:ce:73:c1:2b:3c:99:b0:16:1e:08:26:c3: 5b:0c:49:c8:8c:50:91:d9:64:fc:8f:5c:a0:c2:a9: 68:1d:84:90:b9:5b:a8:4c:36:f2:0b:c5:41:4d:00: 88:88:3c:39:a0:fd:a5:2b:dc:46:28:ae:19:57:13: 74:8c:86:c3:2e:53:51:f8:2d:75:22:a2:72:8f:26: 08:9e:84:35:50:d9:b1:4e:19:25:c1:7d:c3:7b:22: ed:7c:b6:58:55:be:a0:85:e9:48:b2:16:f2:3a:22: 60:ac:77:04:b4:c5:b0:2e:b5:eb:97:a3:a3:9b:ed: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:41:BB:F6:1A:12:B1:D0:62:88:9D:5E:D1:B9:7F:CA:37:1B:81 X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4a:74:7c:5d:1e:30:e0:80:8b:93:e8:4c:43:51:b6:bc:6c: 5d:92:6d:5c:19:74:7e:51:6d:a6:0a:44:4f:97:59:1f:1d:ae: 95:a5:6d:a1:95:d5:8e:06:cb:4b:99:69:fc:4c:38:64:cb:99: 61:5c:b2:03:17:c6:a0:94:c4:fc:97:cb:bf:93:32:80:eb:3a: 7c:fb:05:04:84:f0:30:fb:09:75:ca:24:e7:db:a8:92:c0:90: c8:93:ec:42:7a:06:64:06:f3:e0:ed:98:dc:9d:0b:e0:e2:2a: 80:14:34:84:bd:0b:b3:44:fd:17:e5:67:bf:6b:c8:d0:68:30: e2:61:55:7d:e3:b1:ba:a8:94:b5:0a:bc:ce:40:ea:a6:c5:70: 92:c1:95:8e:2e:ff:88:23:a0:5f:14:21:a9:cb:7f:f6:a9:7a: b4:25:44:b0:09:a0:79:3b:5d:01:50:b6:a5:e4:f2:ac:00:79: 5e:32:32:86:70:40:9a:a1:b7:2e:d9:64:8c:58:a9:05:10:06: 74:d4:25:29:af:cc:ef:ca:15:62:77:59:41:20:5b:e4:c9:b9: 72:c3:0a:24:bf:7a:96:35:19:db:e0:21:ab:26:ff:a7:6f:60: c1:34:cf:29:ae:c0:f8:6f:ff:ac:c1:32:02:d2:b7:d8:27:43: ab:60:6d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwDxrs/BlvDjxcYTr3zbLarmlhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA2MDIxNDQ4MTBaFw0yNjA2MDMxNTQ2MTBaMDMxMTAvBgNV BAMTKDU3NjY0MUJCRjYxQTEyQjFEMDYyODg5RDVFRDFCOTdGQ0EzNzFCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9GAd0QA8pcyVrVQz6XBfw8xC coLoHXOHHvkX3vypELlHDm0LEC8dJhJfWnB0y6QLhtDdSiDJNTLgMTzKCzdMA5w0 yBZz8/98/IJHCwohdEtTEguvYZq15w3uRR2jeCO8YIhsNl1bVCjyDBgy9RQaKpna L59PuKKi/Zinn1sGhhiLTq08BGBsLs5zwSs8mbAWHggmw1sMSciMUJHZZPyPXKDC qWgdhJC5W6hMNvILxUFNAIiIPDmg/aUr3EYorhlXE3SMhsMuU1H4LXUionKPJgie hDVQ2bFOGSXBfcN7Iu18tlhVvqCF6UiyFvI6ImCsdwS0xbAuteuXo6Ob7SMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2ZBu/YaErHQYoidXtG5f8o3G4EwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5KdHxdHjDggIuT6ExDUba8bF2SbVwZdH5R baYKRE+XWR8drpWlbaGV1Y4Gy0uZafxMOGTLmWFcsgMXxqCUxPyXy7+TMoDrOnz7 BQSE8DD7CXXKJOfbqJLAkMiT7EJ6BmQG8+DtmNydC+DiKoAUNIS9C7NE/RflZ79r yNBoMOJhVX3jsbqolLUKvM5A6qbFcJLBlY4u/4gjoF8UIanLf/aperQlRLAJoHk7 XQFQtqXk8qwAeV4yMoZwQJqhty7ZZIxYqQUQBnTUJSmvzO/KFWJ3WUEgW+TJuXLD CiS/epY1GdvgIasm/6dvYME0zymuwPhv/6zBMgLSt9gnQ6tgbf8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:23 2026 by rpki-client