$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: I9Hdx7q2M6toddNJUWbli6gugLM9xFHo7XePwVfZQHY= Subject key identifier: 9B:56:14:DC:01:64:0D:41:91:B5:59:5A:54:9C:07:E4:60:0D:93:B8 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 5E6830415C4457414B54BD89DCB8919CB693A3B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:37:30 +0000 Manifest this update: Tue 02 Jun 2026 18:32:30 +0000 Manifest next update: Wed 03 Jun 2026 21:23:30 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 3: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: y6lVba5FNybryFaJTKETVcyP5MY19FX6Xzx2bt5OkR4=) 4: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:30:41:5c:44:57:41:4b:54:bd:89:dc:b8:91:9c:b6:93:a3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: Jun 2 18:32:30 2026 GMT Not After : Jun 3 21:23:30 2026 GMT Subject: CN=9B5614DC01640D4191B5595A549C07E4600D93B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:fd:fc:71:14:7d:9a:39:c1:97:7c:2b:06: 2b:23:96:34:1c:27:3a:5f:84:ad:f6:a0:c7:a6:6b: d3:89:a9:3b:7b:09:e9:e9:d3:49:3e:18:87:b7:61: 88:c8:ee:82:86:d0:f9:58:ec:44:ca:f1:6d:39:ff: dc:25:14:d9:0b:e6:68:d4:55:00:23:e0:5f:25:77: be:c1:6a:8d:cf:68:7f:bd:5b:ca:37:b7:5a:8f:41: 11:d1:1c:e0:9e:28:49:62:73:90:00:38:5b:5e:c0: d4:24:c6:de:93:29:29:c4:67:da:5e:e9:a9:45:74: 20:25:70:f8:c2:59:b4:4e:d1:c3:50:aa:29:b2:6c: 90:76:8e:1f:ba:ea:29:9d:2d:2d:6a:cf:46:15:41: 3c:e4:3d:a8:4a:02:0e:e1:0c:ca:25:b8:6a:77:e5: ed:34:be:a5:75:dd:21:8a:06:a7:90:25:7e:ab:a4: 92:30:08:87:d9:46:ab:a3:3f:d7:67:97:99:4f:31: 24:b6:6b:45:a6:b4:7f:b9:53:ef:03:f9:93:d7:70: ad:94:0b:ff:16:d5:5d:03:e4:17:de:a9:2e:ca:29: 3b:8e:f4:e2:d8:dd:80:99:bb:70:7e:d3:dd:25:f3: 30:7e:eb:20:fb:47:9e:9f:04:b3:fa:5a:78:81:a9: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:56:14:DC:01:64:0D:41:91:B5:59:5A:54:9C:07:E4:60:0D:93:B8 X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:07:5a:45:bc:b8:48:80:be:ae:fe:a0:c8:ed:47:41:2e: 14:79:4e:ac:74:90:66:69:64:4b:c1:d2:fe:8c:03:01:54:03: a5:28:62:21:fa:5f:12:be:cb:2d:ed:0d:a9:25:26:00:ec:92: 45:71:d1:aa:4b:33:f8:df:03:91:0e:8b:61:dc:f1:8d:21:00: 57:44:6b:7b:24:32:a6:91:e9:40:83:6a:8b:a2:04:63:f2:05: e7:27:c2:54:6b:7d:7c:a0:e6:1e:81:0a:f2:52:81:20:e2:0d: c9:41:31:93:70:61:d9:e5:0f:01:04:10:b9:73:93:1b:52:5f: 42:d1:c3:73:32:2e:34:33:fb:33:49:9c:d3:c6:da:dc:90:50: 2b:ba:89:e7:e0:16:7b:0c:8b:77:6c:2e:3d:89:b6:e8:10:9a: 84:a5:7c:d1:63:ea:4c:e4:ad:14:a6:b7:34:f4:39:59:53:e1: de:7d:25:03:dd:23:c9:79:3e:aa:29:d4:ba:aa:4e:b1:b3:36: 12:e4:0f:61:67:1f:5d:b6:c5:0d:95:00:5a:cc:26:7f:43:a1: 84:a8:d1:63:89:4c:7a:ab:22:ac:ac:61:13:ef:3e:96:23:5c: 6a:bd:8b:e5:e2:9a:8e:78:7b:11:f5:93:bc:ae:d1:a2:24:dd: dd:2b:a6:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmgwQVxEV0FLVL2J3LiRnLaTo7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA2MDIxODMyMzBaFw0yNjA2MDMyMTIzMzBaMDMxMTAvBgNV BAMTKDlCNTYxNERDMDE2NDBENDE5MUI1NTk1QTU0OUMwN0U0NjAwRDkzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsP38cRR9mjnBl3wrBisjljQc JzpfhK32oMema9OJqTt7Cenp00k+GIe3YYjI7oKG0PlY7ETK8W05/9wlFNkL5mjU VQAj4F8ld77Bao3PaH+9W8o3t1qPQRHRHOCeKElic5AAOFtewNQkxt6TKSnEZ9pe 6alFdCAlcPjCWbRO0cNQqimybJB2jh+66imdLS1qz0YVQTzkPahKAg7hDMoluGp3 5e00vqV13SGKBqeQJX6rpJIwCIfZRqujP9dnl5lPMSS2a0WmtH+5U+8D+ZPXcK2U C/8W1V0D5BfeqS7KKTuO9OLY3YCZu3B+090l8zB+6yD7R56fBLP6WniBqYqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1YU3AFkDUGRtVlaVJwH5GANk7gwHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsKB1pFvLhIgL6u/qDI7UdBLhR5Tqx0kGZp ZEvB0v6MAwFUA6UoYiH6XxK+yy3tDaklJgDskkVx0apLM/jfA5EOi2Hc8Y0hAFdE a3skMqaR6UCDaouiBGPyBecnwlRrfXyg5h6BCvJSgSDiDclBMZNwYdnlDwEEELlz kxtSX0LRw3MyLjQz+zNJnNPG2tyQUCu6iefgFnsMi3dsLj2JtugQmoSlfNFj6kzk rRSmtzT0OVlT4d59JQPdI8l5Pqop1LqqTrGzNhLkD2FnH122xQ2VAFrMJn9DoYSo 0WOJTHqrIqysYRPvPpYjXGq9i+Ximo54exH1k7yu0aIk3d0rplc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:44 2026 by rpki-client