$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft File: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft (raw, json) Hash identifier: jqshMj+B0Qv6DAx0LjN+KiFRPeCI8lSLPym/1zXdWmc= Subject key identifier: 17:0B:95:C5:24:8C:CC:E8:93:ED:B7:AB:C7:27:B1:90:43:54:FF:A6 Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2 Certificate issuer: /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2 Certificate serial: 16EFFDA6007248B7D7ED88F69ED8211D1C1BB4FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:42:04 +0000 Manifest this update: Tue 02 Jun 2026 09:37:04 +0000 Manifest next update: Wed 03 Jun 2026 13:12:04 +0000 Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: WWLsIusOSv+8Jaml9M27MqcNs+gTxLH2Htlcij04EDM=) 2: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=) 3: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl (hash: yXMOTIBUZuwQfdiJeal4FgX9L604y0yK4JEL015mh0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ef:fd:a6:00:72:48:b7:d7:ed:88:f6:9e:d8:21:1d:1c:1b:b4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2 Validity Not Before: Jun 2 09:37:04 2026 GMT Not After : Jun 3 13:12:04 2026 GMT Subject: CN=170B95C5248CCCE893EDB7ABC727B1904354FFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:dc:2d:02:43:ca:ae:c9:a5:a0:c3:ee:51: 2a:34:06:52:6b:fe:f4:2f:5e:5f:26:9a:ae:e2:fc: 07:8e:25:82:c1:8e:b8:8e:5b:ac:a6:ce:18:cd:4a: 0b:e2:cf:ca:79:5e:c2:a2:b7:2a:9a:f5:61:c6:8b: cd:f6:3f:f0:27:9f:76:bb:2b:b9:e3:3d:eb:4e:8b: e2:fd:34:13:a7:66:94:d9:b8:49:4d:09:3c:ce:22: f4:f3:51:17:56:6e:ba:46:b2:4b:46:2b:6e:96:73: 6c:f0:e1:8e:1a:c6:b3:0b:04:85:7c:55:fb:be:09: 1b:c0:b6:64:bc:aa:04:3a:8f:aa:f0:de:c6:98:25: 6e:32:03:d9:ff:f5:e6:5d:e8:73:0a:c4:76:ea:8e: 39:a9:28:65:15:c7:5c:ea:19:67:0b:78:6d:55:ed: db:d6:c9:90:7e:95:b7:10:6c:d1:e0:f9:3d:61:81: d7:0b:8e:ab:43:8b:60:07:d9:17:c1:d2:a1:f3:ba: 78:26:70:9b:dc:c2:59:69:1e:cd:55:64:60:9f:ca: e2:83:61:d0:38:d2:1d:77:61:95:a8:5b:49:8c:af: 24:e1:b5:64:28:12:2d:53:b0:1d:d6:d1:59:5f:de: 51:95:51:d1:c7:78:64:d3:4c:7e:34:e0:85:a9:76: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:95:C5:24:8C:CC:E8:93:ED:B7:AB:C7:27:B1:90:43:54:FF:A6 X509v3 Authority Key Identifier: keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:15:a4:d3:f3:1e:bd:4e:77:f3:fd:d4:40:30:a1:bf:48:87: 11:80:1e:28:94:cb:88:93:e6:7b:89:d7:6f:fb:eb:0f:89:e0: 21:54:77:1f:ad:a1:1d:85:6e:d6:d4:cb:d6:2a:cc:92:7a:8d: f2:53:a6:94:b5:69:5e:49:3f:e8:16:2e:0f:6c:ae:1c:6a:ed: 14:07:ae:7e:cb:67:29:77:cc:83:a0:6e:50:7c:5a:ac:91:71: 71:30:dc:b4:93:4a:c9:61:16:9f:17:e5:52:79:c7:9b:57:d3: 3b:b0:78:98:dc:86:76:c7:02:7d:f5:1c:27:92:74:37:67:93: a6:fc:b2:fe:fc:fe:b2:99:79:66:73:65:08:47:f1:5d:aa:a5: e1:8a:e7:99:9b:10:ea:9a:b1:4f:ec:89:32:44:c5:2f:96:54: b7:73:41:4a:52:f5:fc:5e:91:fb:f2:1a:af:5c:b6:7c:7b:ef: b2:fc:b6:3d:bd:b9:be:ce:52:7b:39:77:da:c2:15:a2:23:9b: d1:62:34:b7:c0:07:97:c9:41:bc:d7:3a:6b:64:a1:da:c2:af: e7:8a:3a:d2:24:5c:6c:9e:57:9e:0f:db:2f:84:79:41:c4:10: 33:04:ea:6e:d4:d8:f6:39:d5:3e:73:6a:cc:13:25:14:02:94: dd:b4:31:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFu/9pgBySLfX7Yj2ntghHRwbtPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1ODA2RkYyQzYyQUYyQ0M5NjVFODg4QTQ1RUM0QkE0 RkJGMjZDMjAeFw0yNjA2MDIwOTM3MDRaFw0yNjA2MDMxMzEyMDRaMDMxMTAvBgNV BAMTKDE3MEI5NUM1MjQ4Q0NDRTg5M0VEQjdBQkM3MjdCMTkwNDM1NEZGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXNwtAkPKrsmloMPuUSo0BlJr /vQvXl8mmq7i/AeOJYLBjriOW6ymzhjNSgviz8p5XsKityqa9WHGi832P/Ann3a7 K7njPetOi+L9NBOnZpTZuElNCTzOIvTzURdWbrpGsktGK26Wc2zw4Y4axrMLBIV8 Vfu+CRvAtmS8qgQ6j6rw3saYJW4yA9n/9eZd6HMKxHbqjjmpKGUVx1zqGWcLeG1V 7dvWyZB+lbcQbNHg+T1hgdcLjqtDi2AH2RfB0qHzungmcJvcwllpHs1VZGCfyuKD YdA40h13YZWoW0mMryThtWQoEi1TsB3W0Vlf3lGVUdHHeGTTTH404IWpdrg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwuVxSSMzOiT7berxyexkENU/6YwHwYDVR0j BBgwFoAUfFgG/yxiryzJZeiIpF7Euk+/JsIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0OTljNTYtYTI0Ni00ZDE4LWJlODYtZjQ2MWQ4ZjU1OWM4LzAvN0M1ODA2RkYy QzYyQUYyQ0M5NjVFODg4QTQ1RUM0QkE0RkJGMjZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzU4MDZGRjJDNjJBRjJDQzk2NUU4ODhBNDVFQzRCQTRGQkYy NkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvN0M1ODA2RkYyQzYyQUYyQ0M5NjVFODg4QTQ1RUM0 QkE0RkJGMjZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYVpNPzHr1Od/P91EAwob9IhxGAHiiUy4iT 5nuJ12/76w+J4CFUdx+toR2FbtbUy9YqzJJ6jfJTppS1aV5JP+gWLg9srhxq7RQH rn7LZyl3zIOgblB8WqyRcXEw3LSTSslhFp8X5VJ5x5tX0zuweJjchnbHAn31HCeS dDdnk6b8sv78/rKZeWZzZQhH8V2qpeGK55mbEOqasU/siTJExS+WVLdzQUpS9fxe kfvyGq9ctnx777L8tj29ub7OUns5d9rCFaIjm9FiNLfAB5fJQbzXOmtkodrCr+eK OtIkXGyeV54P2y+EeUHEEDME6m7U2PY51T5zaswTJRQClN20MV4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:52 2026 by rpki-client