$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: 1FW7V4BwuOBvhqBFwnuC2H8oof80gNnMwVaHdpHEwDM= Subject key identifier: ED:FD:85:2B:23:45:0B:90:70:BC:57:39:2E:FA:F5:E3:4A:D3:65:10 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 56F6FECA7A7D76A32E42F055FB8919A56ACAA75D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:22:59 +0000 Manifest this update: Mon 20 Jul 2026 13:17:59 +0000 Manifest next update: Tue 21 Jul 2026 15:48:59 +0000 Files and hashes: 1: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: CsH8xKyrV8Vi1YIqS/redkdSpUSv9FJ1B400Lvp7PsA=) 2: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) 3: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) 4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f6:fe:ca:7a:7d:76:a3:2e:42:f0:55:fb:89:19:a5:6a:ca:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Jul 20 13:17:59 2026 GMT Not After : Jul 21 15:48:59 2026 GMT Subject: CN=EDFD852B23450B9070BC57392EFAF5E34AD36510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:48:4c:7f:dd:dc:27:cc:a3:11:a3:7f:cb: b8:fe:e9:95:51:e5:4a:ca:38:54:47:75:93:4c:ee: 1b:6e:35:6e:df:3f:f5:f1:45:35:e2:d0:0f:11:b0: 07:a5:1f:96:de:dd:41:47:51:59:22:44:96:44:83: d0:a8:a5:3a:29:e4:54:f2:f1:71:9c:fc:a2:f0:6a: 68:8a:1c:34:d8:ef:02:f0:01:0e:5b:7f:f0:52:45: 58:64:ed:e7:6b:24:9a:fa:60:61:6f:b8:1d:a9:8e: 8d:72:73:cb:f3:b2:b2:cc:1d:f6:3f:27:64:bc:a2: 38:ba:a3:88:1b:90:66:35:72:98:6f:07:af:f0:0a: d5:92:4a:4c:c6:56:26:63:f3:a9:77:67:41:82:aa: b6:09:e4:48:62:36:52:89:98:b2:ed:a6:2d:78:17: ab:3c:39:8d:69:61:64:ee:77:8d:a8:c7:ef:98:6f: 0a:30:f6:a0:b2:7e:07:d3:a4:db:64:b3:3c:cf:09: 62:0d:4d:15:e3:e6:67:ba:fe:92:05:fd:67:85:85: ab:ca:f6:16:43:1b:64:cc:89:e0:46:a5:cb:5a:9e: 30:b8:61:6f:11:9d:59:c6:bc:a9:02:ae:59:9d:33: a5:82:5b:1e:3b:8c:88:22:a8:ac:10:81:d2:cc:71: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FD:85:2B:23:45:0B:90:70:BC:57:39:2E:FA:F5:E3:4A:D3:65:10 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d0:17:40:e2:e0:44:00:f5:92:f5:d6:8f:20:1a:4e:b3:88: 45:1d:4f:7f:47:4b:06:be:2d:72:09:ee:b6:16:60:8f:1c:d3: d5:62:d7:9a:44:9d:4f:41:ff:44:19:c7:e6:8e:bc:33:06:73: 6b:be:39:5e:d1:8e:e4:c0:3f:b1:a3:5b:de:4e:cc:6e:4d:41: ab:59:33:aa:43:2a:0f:46:99:73:c6:07:7f:11:a3:06:f3:b7: 02:38:c0:3f:b2:1f:7f:f1:82:1f:11:e6:b9:cf:75:01:1a:c5: 98:07:16:24:dc:eb:8a:08:70:21:ec:7f:09:0f:86:4e:aa:23: fb:aa:d5:98:31:11:28:1e:fd:18:9c:12:52:01:5e:2e:de:2f: 25:4d:05:c7:75:f9:ae:28:e1:63:69:a1:d1:5f:75:4a:67:ed: 94:26:a2:71:f7:13:10:6e:b7:19:77:29:e5:00:08:72:a6:6a: 0b:01:38:b1:74:2e:b2:cb:1b:c0:13:6c:0d:19:25:a6:2a:86: 36:9d:88:d2:1d:35:67:ed:b1:17:0d:62:11:7b:1f:41:0a:ce: e4:67:45:ee:49:2d:40:b9:4d:4c:66:ea:e7:ef:a1:31:6e:70: 53:1b:92:ac:e2:e3:6c:22:0a:6c:aa:91:e5:f9:63:ca:6a:cd: 5a:70:4a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvb+ynp9dqMuQvBV+4kZpWrKp10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA3MjAxMzE3NTlaFw0yNjA3MjExNTQ4NTlaMDMxMTAvBgNV BAMTKEVERkQ4NTJCMjM0NTBCOTA3MEJDNTczOTJFRkFGNUUzNEFEMzY1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU00hMf93cJ8yjEaN/y7j+6ZVR 5UrKOFRHdZNM7htuNW7fP/XxRTXi0A8RsAelH5be3UFHUVkiRJZEg9CopTop5FTy 8XGc/KLwamiKHDTY7wLwAQ5bf/BSRVhk7edrJJr6YGFvuB2pjo1yc8vzsrLMHfY/ J2S8oji6o4gbkGY1cphvB6/wCtWSSkzGViZj86l3Z0GCqrYJ5EhiNlKJmLLtpi14 F6s8OY1pYWTud42ox++Ybwow9qCyfgfTpNtkszzPCWINTRXj5me6/pIF/WeFhavK 9hZDG2TMieBGpctanjC4YW8RnVnGvKkCrlmdM6WCWx47jIgiqKwQgdLMccpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7f2FKyNFC5BwvFc5Lvr140rTZRAwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjQF0Di4EQA9ZL11o8gGk6ziEUdT39HSwa+ LXIJ7rYWYI8c09Vi15pEnU9B/0QZx+aOvDMGc2u+OV7RjuTAP7GjW95OzG5NQatZ M6pDKg9GmXPGB38RowbztwI4wD+yH3/xgh8R5rnPdQEaxZgHFiTc64oIcCHsfwkP hk6qI/uq1ZgxESge/RicElIBXi7eLyVNBcd1+a4o4WNpodFfdUpn7ZQmonH3ExBu txl3KeUACHKmagsBOLF0LrLLG8ATbA0ZJaYqhjadiNIdNWftsRcNYhF7H0EKzuRn Re5JLUC5TUxm6ufvoTFucFMbkqzi42wiCmyqkeX5Y8pqzVpwSiM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:35 2026 by rpki-client