$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: P/4J2yYtDey/EZGCoUa5ezVZ2jxZ2ePUB/qrzUk/uv4= Subject key identifier: 7E:B4:80:F5:EE:33:87:82:09:B8:9F:8B:1A:D7:F4:33:73:2A:C4:6D Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 69C828AAC49C25E0E6C5B7E62F4657F8E151E699 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:37:45 +0000 Manifest this update: Tue 21 Jul 2026 05:32:45 +0000 Manifest next update: Wed 22 Jul 2026 07:03:45 +0000 Files and hashes: 1: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: vqfV70N+cLB614ZegEUUgcL+9ei6yQ1ZnobmW5emJJ4=) 2: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 3: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:28:aa:c4:9c:25:e0:e6:c5:b7:e6:2f:46:57:f8:e1:51:e6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Jul 21 05:32:45 2026 GMT Not After : Jul 22 07:03:45 2026 GMT Subject: CN=7EB480F5EE33878209B89F8B1AD7F433732AC46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2a:c9:51:2f:9c:53:8c:19:58:e9:ee:25:9c: 73:77:b3:41:57:c8:6e:ae:49:0b:e2:8b:ae:90:52: 77:a3:81:09:2d:fd:ab:e8:94:ed:a7:b2:eb:90:43: 55:c6:35:80:42:02:e2:46:2e:4b:b6:6d:ad:ab:61: ab:e3:32:50:43:ca:30:5d:c4:9f:39:00:e6:ec:02: 86:09:e1:6c:fd:e6:fd:0f:5e:9b:41:8e:3e:12:2e: 89:86:bb:80:06:9c:ed:2f:1a:e1:92:48:81:b0:ec: 68:76:a0:c1:cf:e7:a6:9a:05:93:1d:20:cc:70:32: f0:c6:83:86:64:ad:6d:24:37:d4:57:b4:64:a6:4d: 8c:d5:2e:3a:6c:ec:96:f6:81:aa:d9:f9:2f:cc:6e: 00:bd:ad:6d:38:bb:cf:ee:6c:11:dd:c8:c2:42:6a: 7b:73:17:6a:a7:0f:50:23:60:78:b5:13:af:3f:56: 24:e3:e6:26:c8:ce:84:d0:2e:f9:67:80:61:75:34: ee:e9:59:77:4b:3b:f7:b9:a4:3a:d5:8a:07:89:3f: b2:3f:cf:3e:7d:c9:25:67:39:fd:8b:c1:5f:ec:ec: f0:bf:b4:d8:05:36:00:a5:69:24:df:ac:e6:d3:a2: 36:4f:19:6d:91:af:28:c3:57:db:c8:f3:20:20:14: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B4:80:F5:EE:33:87:82:09:B8:9F:8B:1A:D7:F4:33:73:2A:C4:6D X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:58:e3:91:f2:17:f5:eb:ec:35:bf:1a:25:3f:9f:a8:a0:3b: fa:7b:3b:0a:32:07:d9:ad:b2:f2:df:ee:da:9a:b5:1b:af:0f: d8:fa:77:c1:da:b3:92:e8:cc:67:00:54:94:a9:86:20:e3:b8: 6b:fe:df:9b:f5:fb:58:8f:e8:7f:1f:30:9c:2d:f3:bd:0d:ee: 31:07:b7:1d:ad:54:cf:35:aa:6e:35:49:48:e3:6a:94:fc:74: 5c:45:ce:22:3d:20:da:1f:36:13:5a:e3:c6:b2:34:ed:0c:57: 77:e8:7a:f4:57:bd:66:ea:06:aa:cd:76:31:60:65:36:44:c1: 7d:36:11:14:36:13:38:43:4c:22:a7:d8:d2:35:11:4f:16:2f: 08:ad:c5:d6:67:cb:2d:0e:47:71:54:51:df:ea:6a:11:ef:e8: 97:39:c1:4a:04:be:57:bd:57:dc:52:17:2e:67:69:0a:50:9c: 4b:7c:77:97:ae:8a:75:ac:d9:df:9c:cb:69:72:e1:4a:7a:1d: c7:04:40:67:2d:61:a6:7c:88:7b:a2:6a:79:48:3e:3f:cf:fc: 61:bd:0a:59:31:d4:cc:54:97:0a:4d:74:93:60:75:ab:80:2a: 06:95:e8:30:f7:e7:f3:59:e7:81:84:8b:11:2b:2a:6b:2d:25: eb:1d:a3:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacgoqsScJeDmxbfmL0ZX+OFR5pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA3MjEwNTMyNDVaFw0yNjA3MjIwNzAzNDVaMDMxMTAvBgNV BAMTKDdFQjQ4MEY1RUUzMzg3ODIwOUI4OUY4QjFBRDdGNDMzNzMyQUM0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKslRL5xTjBlY6e4lnHN3s0FX yG6uSQvii66QUnejgQkt/avolO2nsuuQQ1XGNYBCAuJGLku2ba2rYavjMlBDyjBd xJ85AObsAoYJ4Wz95v0PXptBjj4SLomGu4AGnO0vGuGSSIGw7Gh2oMHP56aaBZMd IMxwMvDGg4ZkrW0kN9RXtGSmTYzVLjps7Jb2garZ+S/MbgC9rW04u8/ubBHdyMJC antzF2qnD1AjYHi1E68/ViTj5ibIzoTQLvlngGF1NO7pWXdLO/e5pDrVigeJP7I/ zz59ySVnOf2LwV/s7PC/tNgFNgClaSTfrObTojZPGW2RryjDV9vI8yAgFFgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfrSA9e4zh4IJuJ+LGtf0M3MqxG0wHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBY45HyF/Xr7DW/GiU/n6igO/p7OwoyB9mt svLf7tqatRuvD9j6d8Has5LozGcAVJSphiDjuGv+35v1+1iP6H8fMJwt870N7jEH tx2tVM81qm41SUjjapT8dFxFziI9INofNhNa48ayNO0MV3foevRXvWbqBqrNdjFg ZTZEwX02ERQ2EzhDTCKn2NI1EU8WLwitxdZnyy0OR3FUUd/qahHv6Jc5wUoEvle9 V9xSFy5naQpQnEt8d5euinWs2d+cy2ly4Up6HccEQGctYaZ8iHuianlIPj/P/GG9 Clkx1MxUlwpNdJNgdauAKgaV6DD35/NZ54GEixErKmstJesdo5k= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:27 2026 by rpki-client