$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: jtKJ67ijBK91tDD2IxohIE+aVCGJNvXHJinShd5xE7o= Subject key identifier: 3F:E0:C3:24:43:04:F2:03:4E:B6:FD:95:4E:17:29:32:27:00:55:A0 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 4842DAF998DD5C1E1B32A89546D60CDFA823295B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:03:58 +0000 Manifest this update: Mon 20 Jul 2026 13:58:58 +0000 Manifest next update: Tue 21 Jul 2026 15:45:58 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) 3: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: eo/s+WbrQrqTg7T0nB2FdSyCoVF5Su43X2JTGvFbsvE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:42:da:f9:98:dd:5c:1e:1b:32:a8:95:46:d6:0c:df:a8:23:29:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Jul 20 13:58:58 2026 GMT Not After : Jul 21 15:45:58 2026 GMT Subject: CN=3FE0C3244304F2034EB6FD954E172932270055A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:e7:cd:8b:9b:46:a2:86:9f:2e:b5:bf:a7: 85:40:2e:bb:a2:02:a4:c3:9c:12:b6:a8:58:5f:96: b3:3b:fc:71:58:9f:09:65:f1:5e:af:a1:61:a5:f5: 8d:c9:44:b1:19:5f:aa:8d:87:71:bd:9e:2e:f2:ff: f3:7d:7a:7e:2b:c4:03:00:d2:d8:e0:49:e9:02:ed: c8:59:58:df:d3:c8:2d:fe:89:0b:4b:ba:8c:fb:06: 6b:71:fb:9c:7f:9f:bb:26:2d:8f:80:a6:f3:2b:e9: 57:9b:3a:0d:ae:0c:2a:5d:2e:40:e6:af:92:ef:75: 34:30:f2:b5:01:f9:f1:59:2a:bb:70:a1:c3:3e:ed: 92:c4:99:b4:26:8f:d3:cd:e4:f1:eb:94:94:0e:7d: ee:f7:36:84:2c:64:7b:1f:f0:d2:18:37:be:94:1b: 97:05:58:91:60:ec:3b:8f:55:fd:b7:8c:22:7c:a8: e2:e6:86:42:60:48:85:97:d4:dc:f2:71:6a:44:7c: cf:95:82:45:1c:b8:37:ac:ec:5b:ee:75:e5:d5:ce: 81:d7:ff:72:76:a2:d4:38:92:52:5c:ca:98:ec:90: 6a:2f:79:48:e9:b7:74:33:10:24:dc:ea:42:29:26: 95:cc:6b:99:33:69:69:73:ae:e8:0e:c3:1b:fe:88: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E0:C3:24:43:04:F2:03:4E:B6:FD:95:4E:17:29:32:27:00:55:A0 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a6:0a:f2:50:81:c8:2c:f6:89:5a:7b:82:1d:e3:9f:6c:21: 92:87:d4:a5:78:56:59:c8:bf:3d:d8:4c:57:ce:0c:ec:fc:31: 8d:3a:8c:28:71:a8:0b:01:22:18:de:b7:fc:f4:07:c6:9c:da: b8:9c:a1:53:d1:85:03:d6:68:0d:1a:5e:4d:d2:4b:4d:b4:34: 73:f6:93:1f:4b:95:0a:43:6f:59:0a:4f:63:e5:15:43:7f:a1: d7:68:94:d1:aa:f8:84:23:5d:da:01:1b:0e:47:75:e0:2f:bc: e9:02:f4:9d:84:cb:20:23:bf:eb:dc:cf:15:df:73:bd:6e:35: bd:95:e7:a6:74:32:9f:b3:67:58:4f:69:79:e3:48:b1:fd:44: 0d:d3:8b:a4:8e:2f:d4:d9:98:f8:ce:95:f4:5e:6b:4a:20:38: 5b:88:86:3b:f2:72:65:13:46:be:59:72:be:35:15:e9:2e:91: 21:31:13:23:ab:e7:07:ae:8c:77:01:86:fb:46:58:f0:19:b6: 52:11:74:c5:44:27:55:eb:2b:c3:19:09:29:23:61:45:cc:1e: df:4b:d0:3c:20:07:6f:27:64:cf:bc:6e:91:49:c6:e1:08:3a: ee:d5:d2:4d:76:cd:06:a4:c7:c6:91:b2:31:ad:bc:93:ff:37: 4d:ca:56:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSELa+ZjdXB4bMqiVRtYM36gjKVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA3MjAxMzU4NThaFw0yNjA3MjExNTQ1NThaMDMxMTAvBgNV BAMTKDNGRTBDMzI0NDMwNEYyMDM0RUI2RkQ5NTRFMTcyOTMyMjcwMDU1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGOfNi5tGooafLrW/p4VALrui AqTDnBK2qFhflrM7/HFYnwll8V6voWGl9Y3JRLEZX6qNh3G9ni7y//N9en4rxAMA 0tjgSekC7chZWN/TyC3+iQtLuoz7Bmtx+5x/n7smLY+ApvMr6VebOg2uDCpdLkDm r5LvdTQw8rUB+fFZKrtwocM+7ZLEmbQmj9PN5PHrlJQOfe73NoQsZHsf8NIYN76U G5cFWJFg7DuPVf23jCJ8qOLmhkJgSIWX1NzycWpEfM+VgkUcuDes7FvudeXVzoHX /3J2otQ4klJcypjskGoveUjpt3QzECTc6kIpJpXMa5kzaWlzrugOwxv+iCAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+DDJEME8gNOtv2VThcpMicAVaAwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOmCvJQgcgs9olae4Id459sIZKH1KV4VlnI vz3YTFfODOz8MY06jChxqAsBIhjet/z0B8ac2ricoVPRhQPWaA0aXk3SS020NHP2 kx9LlQpDb1kKT2PlFUN/oddolNGq+IQjXdoBGw5HdeAvvOkC9J2EyyAjv+vczxXf c71uNb2V56Z0Mp+zZ1hPaXnjSLH9RA3Ti6SOL9TZmPjOlfRea0ogOFuIhjvycmUT Rr5Zcr41FekukSExEyOr5weujHcBhvtGWPAZtlIRdMVEJ1XrK8MZCSkjYUXMHt9L 0DwgB28nZM+8bpFJxuEIOu7V0k12zQakx8aRsjGtvJP/N03KViM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:33:57 2026 by rpki-client