$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json) Hash identifier: qTzLGLdGpc3YO7sBg9kDU5fdNR/ajNJ946SV+q8iX10= Subject key identifier: 8F:B5:35:21:DF:5F:B3:CE:B1:2A:4A:62:58:A6:70:73:66:67:92:93 Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C Certificate serial: 6408B05D22ABA87AAAD547C4EF8685C04DDC97A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:37:57 +0000 Manifest this update: Tue 02 Jun 2026 14:32:57 +0000 Manifest next update: Wed 03 Jun 2026 18:31:57 +0000 Files and hashes: 1: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: muAMnQeXXO+TWU5ZZx3nYMKjMP+eE2vSSzQaWWXbBzA=) 2: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=) 3: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=) 4: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:08:b0:5d:22:ab:a8:7a:aa:d5:47:c4:ef:86:85:c0:4d:dc:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C Validity Not Before: Jun 2 14:32:57 2026 GMT Not After : Jun 3 18:31:57 2026 GMT Subject: CN=8FB53521DF5FB3CEB12A4A6258A6707366679293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:96:b5:e7:af:1f:6f:4c:bb:a4:29:62:a1: 72:30:74:cf:1f:f7:38:67:01:18:bc:cd:1c:a9:f6: 6d:56:bc:c4:ad:db:b7:fd:43:6f:33:5d:66:23:f3: 63:12:fa:8f:68:a9:ad:1d:39:11:50:f3:9f:10:97: b2:df:e3:1f:29:bb:91:69:17:6f:5c:e8:76:84:de: 06:1d:b6:dd:b3:a4:d7:77:f1:b1:35:6b:7c:85:4e: 05:79:5a:b2:83:17:c6:33:30:51:2f:83:61:28:c4: dc:2e:17:5f:ef:4d:64:65:09:97:c5:28:6a:01:6d: 43:a9:a0:4a:94:59:59:b2:83:3f:2a:73:f2:6d:c6: 8c:98:0a:12:e2:f2:c0:13:b6:46:16:6e:7c:ad:ea: b3:97:81:ad:f3:7e:c1:0f:57:c2:45:98:86:7f:a3: b5:ae:73:b1:3d:a2:c9:f7:94:60:ac:94:24:c5:5c: b3:d2:11:ee:c0:63:20:a9:c6:75:bf:1a:8d:a8:c4: ad:ce:0b:bd:1f:d3:a0:45:f8:6f:84:7d:22:77:d9: 55:7e:5a:c8:d1:33:7d:86:01:e8:0e:3d:27:6e:08: 66:2c:67:3b:11:ee:ac:a9:47:65:d2:f4:6e:e3:37: ef:f6:5e:e9:48:d7:6f:a0:96:c8:b9:63:fc:cb:ff: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:35:21:DF:5F:B3:CE:B1:2A:4A:62:58:A6:70:73:66:67:92:93 X509v3 Authority Key Identifier: keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:0f:08:fa:13:4e:8e:16:f0:35:4a:d6:3b:ab:b1:89:b5: ff:5f:9b:88:32:8d:cd:8c:ae:40:5a:c5:77:3a:d3:29:b9:ed: 36:e4:9f:7a:ae:00:d7:31:c4:5c:f5:4e:fa:e2:c3:0c:6c:47: 85:27:4f:71:6f:02:46:77:27:7c:83:e2:81:02:c3:27:14:18: 69:21:b0:c5:38:e5:b2:50:86:ec:90:ef:37:55:10:21:c0:99: 39:5d:00:ad:28:73:22:54:99:7b:13:41:ee:ea:f7:ca:a4:6f: db:f0:75:47:de:0a:f1:38:49:32:18:40:31:74:32:1c:0e:d1: d1:19:a2:ca:5d:95:f1:fe:98:b5:e1:09:b5:4c:41:b8:ae:7b: 17:a5:51:32:94:54:6a:f4:b5:3e:f0:61:13:51:84:d0:ee:44: 57:03:c2:39:2b:f3:0e:10:00:ad:33:45:0b:cc:5c:7b:1b:bf: fc:42:70:04:4b:b1:14:b8:6c:02:7b:c0:a3:e4:3b:ce:0c:78: cc:ae:82:4d:79:43:ef:17:ea:10:91:03:dc:01:99:c6:ee:d9: c8:0a:4f:ac:a5:40:f7:9c:8e:f1:a9:f3:47:41:88:df:4e:9a: 0d:b0:24:ed:66:0e:f5:b9:22:2a:75:22:95:4d:d3:cf:57:ba: 9f:cc:fc:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAiwXSKrqHqq1UfE74aFwE3cl6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0 ODkwNDU4QzAeFw0yNjA2MDIxNDMyNTdaFw0yNjA2MDMxODMxNTdaMDMxMTAvBgNV BAMTKDhGQjUzNTIxREY1RkIzQ0VCMTJBNEE2MjU4QTY3MDczNjY2NzkyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcpa1568fb0y7pClioXIwdM8f 9zhnARi8zRyp9m1WvMSt27f9Q28zXWYj82MS+o9oqa0dORFQ858Ql7Lf4x8pu5Fp F29c6HaE3gYdtt2zpNd38bE1a3yFTgV5WrKDF8YzMFEvg2EoxNwuF1/vTWRlCZfF KGoBbUOpoEqUWVmygz8qc/JtxoyYChLi8sATtkYWbnyt6rOXga3zfsEPV8JFmIZ/ o7Wuc7E9osn3lGCslCTFXLPSEe7AYyCpxnW/Go2oxK3OC70f06BF+G+EfSJ32VV+ WsjRM32GAegOPSduCGYsZzsR7qypR2XS9G7jN+/2XulI12+glsi5Y/zL//5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7U1Id9fs86xKkpiWKZwc2ZnkpMwHwYDVR0j BBgwFoAUf64Uif9TsCNlQ3BvuFpwc0iQRYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0ZTE2NjktNjhmNy00YTM5LWFjYzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlG RjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0ODkwNDU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkFFMTQ4OUZGNTNCMDIzNjU0MzcwNkZCODVBNzA3MzQ4OTA0 NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcw NzM0ODkwNDU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCrDwj6E06OFvA1StY7q7GJtf9fm4gyjc2M rkBaxXc60ym57Tbkn3quANcxxFz1TvriwwxsR4UnT3FvAkZ3J3yD4oECwycUGGkh sMU45bJQhuyQ7zdVECHAmTldAK0ocyJUmXsTQe7q98qkb9vwdUfeCvE4STIYQDF0 MhwO0dEZospdlfH+mLXhCbVMQbiuexelUTKUVGr0tT7wYRNRhNDuRFcDwjkr8w4Q AK0zRQvMXHsbv/xCcARLsRS4bAJ7wKPkO84MeMyugk15Q+8X6hCRA9wBmcbu2cgK T6ylQPecjvGp80dBiN9Omg2wJO1mDvW5Iip1IpVN089Xup/M/Fw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:36 2026 by rpki-client