$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: HxHRW6jUYlmOKoEusCUjPwK3K2Ecait0rU87C5uNEjY= Subject key identifier: 95:A6:62:89:51:F4:BB:E7:A7:F8:87:85:52:1F:9F:0E:5D:A9:DA:B8 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 2B2C0DDD9E5C390C38AA57765DD80EBB5C94DCD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:32:22 +0000 Manifest this update: Tue 02 Jun 2026 18:27:22 +0000 Manifest next update: Wed 03 Jun 2026 21:32:22 +0000 Files and hashes: 1: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: Btv9IcSO8KPAhgOkUm6HxxF2UKUsOX50S1Ln4lmC4Kw=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2c:0d:dd:9e:5c:39:0c:38:aa:57:76:5d:d8:0e:bb:5c:94:dc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Jun 2 18:27:22 2026 GMT Not After : Jun 3 21:32:22 2026 GMT Subject: CN=95A6628951F4BBE7A7F88785521F9F0E5DA9DAB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:8b:5c:77:71:aa:df:5c:43:c0:6b:b3:f7: e2:dc:27:d1:1f:e0:ee:3c:77:e2:8e:1b:3e:9e:db: d9:c1:6f:d0:96:df:dd:13:f7:38:e2:bd:50:2b:a7: 2a:86:af:b3:bc:17:8d:a3:56:14:b4:f4:2b:7a:3a: 39:6a:86:7d:1f:75:50:f6:76:e2:28:ba:39:8f:c1: 8f:55:1b:c0:88:17:81:0d:4d:52:68:cf:be:fa:06: 4c:fc:20:db:fd:f6:33:cf:70:9d:74:b0:58:3a:ae: 2e:69:0c:06:dc:d0:84:1d:1a:05:34:46:d6:e9:6b: 3a:52:63:f0:9e:08:94:d1:d0:2a:2d:6c:5a:7a:ce: 8e:7f:b5:83:21:c9:47:04:cc:e8:36:e3:9c:2b:28: f7:b7:c9:7c:67:6d:ba:e4:49:b4:fb:06:42:e6:3d: d8:d2:2d:98:1c:77:77:30:11:be:98:f0:81:b9:af: 01:4e:40:26:21:40:b4:ba:ab:7a:7e:12:16:13:2c: 27:19:58:c4:01:33:42:99:20:ce:48:39:fb:af:d4: ad:ec:98:49:70:46:20:07:d9:ba:45:d9:96:d7:0f: e0:60:24:c4:70:04:22:cb:73:05:a7:ae:09:62:ab: 97:97:e2:1f:fd:ed:90:9a:16:dd:3b:01:c9:94:a6: 5f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A6:62:89:51:F4:BB:E7:A7:F8:87:85:52:1F:9F:0E:5D:A9:DA:B8 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:87:f0:f9:07:81:bd:9d:db:b6:ff:b5:88:97:81:45:50:7e: bf:7f:c3:23:95:2c:08:f0:74:74:b4:6a:c4:42:8c:25:01:9f: af:af:58:dd:72:ca:14:d7:6a:b8:66:0f:15:d8:76:d5:a2:a2: 3e:87:3f:65:45:08:41:99:3c:6d:75:e8:61:bf:c1:99:3e:29: 4b:4a:d9:79:88:43:9b:2e:1b:61:b1:3e:eb:3f:1b:09:e5:d8: 34:f7:96:dc:a6:f3:e1:46:54:78:65:74:e6:0f:40:12:db:32: c4:85:be:65:3c:fa:42:c7:eb:fc:95:11:1e:1e:aa:a2:c9:89: 84:06:a5:60:1e:d0:34:76:3b:f5:19:37:88:20:42:ff:87:a8: a0:19:2e:16:69:e9:17:65:9b:56:6d:1a:eb:fb:76:1f:6e:17: 63:d5:e7:21:c5:8f:26:12:d0:ad:81:ad:3c:0e:47:09:22:03: 4d:51:83:72:1b:bb:de:8f:73:c6:b1:25:a6:cd:bb:f5:b8:de: 78:42:17:7b:6d:ff:ef:86:ab:a2:3e:97:c7:2b:91:47:1f:39: a3:21:96:40:3e:e6:b4:6d:f2:86:45:47:9e:83:f7:15:3c:72: f0:d2:7f:cd:8a:f1:9b:5f:60:06:13:d7:42:39:11:98:fd:ce: 7d:b0:5e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKywN3Z5cOQw4qld2XdgOu1yU3NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA2MDIxODI3MjJaFw0yNjA2MDMyMTMyMjJaMDMxMTAvBgNV BAMTKDk1QTY2Mjg5NTFGNEJCRTdBN0Y4ODc4NTUyMUY5RjBFNURBOURBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtotcd3Gq31xDwGuz9+LcJ9Ef 4O48d+KOGz6e29nBb9CW390T9zjivVArpyqGr7O8F42jVhS09Ct6Ojlqhn0fdVD2 duIoujmPwY9VG8CIF4ENTVJoz776Bkz8INv99jPPcJ10sFg6ri5pDAbc0IQdGgU0 RtbpazpSY/CeCJTR0CotbFp6zo5/tYMhyUcEzOg245wrKPe3yXxnbbrkSbT7BkLm PdjSLZgcd3cwEb6Y8IG5rwFOQCYhQLS6q3p+EhYTLCcZWMQBM0KZIM5IOfuv1K3s mElwRiAH2bpF2ZbXD+BgJMRwBCLLcwWnrgliq5eX4h/97ZCaFt07AcmUpl+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaZiiVH0u+en+IeFUh+fDl2p2rgwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqH8PkHgb2d27b/tYiXgUVQfr9/wyOVLAjw dHS0asRCjCUBn6+vWN1yyhTXarhmDxXYdtWioj6HP2VFCEGZPG116GG/wZk+KUtK 2XmIQ5suG2GxPus/Gwnl2DT3ltym8+FGVHhldOYPQBLbMsSFvmU8+kLH6/yVER4e qqLJiYQGpWAe0DR2O/UZN4ggQv+HqKAZLhZp6Rdlm1ZtGuv7dh9uF2PV5yHFjyYS 0K2BrTwORwkiA01Rg3Ibu96Pc8axJabNu/W43nhCF3tt/++Gq6I+l8crkUcfOaMh lkA+5rRt8oZFR56D9xU8cvDSf82K8ZtfYAYT10I5EZj9zn2wXgY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:38 2026 by rpki-client