$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: g9ur3R70E7HJZN5XdtBt4/wc36CcGrixTNzV9+BqmNY= Subject key identifier: 27:A4:AA:BF:63:0A:3A:0F:D0:5F:B0:97:7D:AB:82:3E:A8:91:61:5D Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 40A13F9FFBF6BFD030523E70D69E040C00FE3033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:28:05 +0000 Manifest this update: Mon 20 Jul 2026 17:23:05 +0000 Manifest next update: Tue 21 Jul 2026 21:05:05 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 2: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) 3: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 5: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: sb/JbjrFIkfNpX3vOzHD94duXv18XYE/9KlPTEJtdIc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a1:3f:9f:fb:f6:bf:d0:30:52:3e:70:d6:9e:04:0c:00:fe:30:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Jul 20 17:23:05 2026 GMT Not After : Jul 21 21:05:05 2026 GMT Subject: CN=27A4AABF630A3A0FD05FB0977DAB823EA891615D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:43:6a:48:9a:dc:33:eb:0f:79:4f:8c:77: 26:11:21:ff:d7:66:39:bd:30:76:5f:ea:c1:b1:7c: 71:3f:d1:f9:ca:d2:a2:f9:33:89:47:b3:69:69:49: de:09:20:f7:3c:23:46:a3:97:e1:10:2f:ea:fc:5e: c2:cc:41:33:3b:0f:69:7c:3d:31:92:14:a5:88:01: 8c:de:e4:67:df:4c:7d:fc:ea:ad:1b:4f:0f:dd:c5: 41:b1:8c:c9:9f:37:9b:02:c8:d2:4a:f7:e7:79:f0: 7a:31:c5:07:92:77:d8:68:51:5d:e9:2d:3f:17:37: 0b:06:29:a6:3c:18:d6:5f:21:f7:b5:1f:ee:93:1e: 62:43:58:fe:db:4c:3c:da:8a:4d:48:7e:2e:1f:ad: 3d:b3:a2:2a:48:18:c6:22:eb:3a:94:9e:4a:01:d7: 83:48:d0:62:d1:58:e2:ee:a5:71:1b:df:31:e5:be: fa:0c:37:8a:0a:aa:e9:c8:91:0e:0b:4c:e1:04:cc: 22:0f:00:ac:7f:35:f6:66:94:4d:1c:97:c2:74:8e: 94:56:44:7c:1d:28:ab:3b:54:cd:9e:86:ac:5c:71: a5:33:93:23:eb:82:19:9f:03:c1:25:24:a9:dc:2c: 28:7e:3b:9d:c8:8c:f2:32:4e:67:87:70:b6:73:a7: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:AA:BF:63:0A:3A:0F:D0:5F:B0:97:7D:AB:82:3E:A8:91:61:5D X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:85:cc:1e:8e:bf:7f:26:5d:76:37:76:49:8e:51:68:10:34: 81:62:96:4a:56:4a:2f:e3:0b:6e:04:fb:a9:0a:6f:cb:8e:48: 1b:36:af:3e:e7:6c:7a:1c:89:8b:84:05:2a:02:a5:2f:8d:2a: 7c:e2:9f:ba:53:ba:48:4e:17:52:61:2f:e9:04:67:7c:0a:23: 5e:14:b6:eb:a3:c9:c7:5f:7d:0d:6c:e6:9c:86:46:01:78:ba: 70:ca:97:43:00:eb:5c:19:cd:db:4e:a2:61:b9:cc:07:aa:49: 5a:29:25:2d:f0:43:54:ff:a6:95:de:ce:c8:98:ea:f0:63:8f: f1:8c:06:e3:92:4c:4f:47:49:1b:01:97:f0:82:f4:df:fc:86: 75:42:11:16:09:a2:39:22:c4:a2:7f:90:2d:50:9a:7d:d7:f8: 02:14:6e:dd:51:13:77:32:d2:c4:cc:e5:87:40:08:00:28:b4: 1b:f0:7c:5b:2b:94:28:1f:fe:b9:00:ca:dc:84:72:bc:7b:1e: 89:a2:7f:8f:1b:4b:99:6c:3d:77:b9:bb:4e:77:62:6c:51:f9: be:3b:33:9f:d0:02:f2:4f:dc:5b:17:be:64:b0:ab:5b:29:24: 14:68:bc:99:8f:19:8d:4f:28:99:c5:3d:28:47:3d:fe:ea:d0: 79:9a:59:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKE/n/v2v9AwUj5w1p4EDAD+MDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA3MjAxNzIzMDVaFw0yNjA3MjEyMTA1MDVaMDMxMTAvBgNV BAMTKDI3QTRBQUJGNjMwQTNBMEZEMDVGQjA5NzdEQUI4MjNFQTg5MTYxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZENqSJrcM+sPeU+MdyYRIf/X Zjm9MHZf6sGxfHE/0fnK0qL5M4lHs2lpSd4JIPc8I0ajl+EQL+r8XsLMQTM7D2l8 PTGSFKWIAYze5GffTH386q0bTw/dxUGxjMmfN5sCyNJK9+d58HoxxQeSd9hoUV3p LT8XNwsGKaY8GNZfIfe1H+6THmJDWP7bTDzaik1Ifi4frT2zoipIGMYi6zqUnkoB 14NI0GLRWOLupXEb3zHlvvoMN4oKqunIkQ4LTOEEzCIPAKx/NfZmlE0cl8J0jpRW RHwdKKs7VM2ehqxccaUzkyPrghmfA8ElJKncLCh+O53IjPIyTmeHcLZzpxFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ6Sqv2MKOg/QX7CXfauCPqiRYV0wHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCFzB6Ov38mXXY3dkmOUWgQNIFilkpWSi/j C24E+6kKb8uOSBs2rz7nbHociYuEBSoCpS+NKnzin7pTukhOF1JhL+kEZ3wKI14U tuujycdffQ1s5pyGRgF4unDKl0MA61wZzdtOomG5zAeqSVopJS3wQ1T/ppXezsiY 6vBjj/GMBuOSTE9HSRsBl/CC9N/8hnVCERYJojkixKJ/kC1Qmn3X+AIUbt1RE3cy 0sTM5YdACAAotBvwfFsrlCgf/rkAytyEcrx7Homif48bS5lsPXe5u053YmxR+b47 M5/QAvJP3FsXvmSwq1spJBRovJmPGY1PKJnFPShHPf7q0HmaWTM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:53:25 2026 by rpki-client