$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json) Hash identifier: MxSq7YpoPfz/w5PKTnXcaNGLV9u61K4OpfktiGO3Tl8= Subject key identifier: 05:2A:CA:C2:1E:F3:FA:E6:CD:21:79:6A:66:16:B4:26:C7:0C:4C:48 Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC Certificate serial: 6F99BFB348E3A03540CFDC489D2BB19AC21F7A28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:59:54 +0000 Manifest this update: Tue 02 Jun 2026 11:54:54 +0000 Manifest next update: Wed 03 Jun 2026 12:42:54 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=) 2: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: fDay3GhlHkh2pD8fQJvqffrV2YxCXw1MYqNi8FqZ3gY=) 3: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=) 4: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:bf:b3:48:e3:a0:35:40:cf:dc:48:9d:2b:b1:9a:c2:1f:7a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC Validity Not Before: Jun 2 11:54:54 2026 GMT Not After : Jun 3 12:42:54 2026 GMT Subject: CN=052ACAC21EF3FAE6CD21796A6616B426C70C4C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:84:d4:21:b1:6a:89:40:59:9a:18:d9:2e: 54:32:02:70:a0:c5:ff:3d:16:3e:13:df:af:11:9a: ac:87:20:e3:eb:67:b0:0a:27:6f:03:a4:38:6a:84: 80:f6:17:c6:0f:e1:08:d1:c0:66:f1:20:1e:51:02: 31:8f:62:43:b7:8f:e3:69:cf:55:bc:a3:3a:58:92: a2:e1:69:06:bc:45:38:f8:54:4e:08:71:6a:b1:7c: a0:1d:82:3c:bf:44:1a:b8:13:ba:0b:9d:ca:d5:ec: b6:df:62:3c:69:ce:49:ee:93:b8:39:b8:99:f5:97: 30:06:b6:73:23:a4:7a:d4:0c:eb:1e:70:6b:e8:64: f5:47:fd:50:29:98:ad:95:d5:b2:20:55:cd:a7:ba: 00:7d:0f:b8:04:8b:ef:b6:50:d1:0b:81:27:fb:9f: 1a:31:f0:66:5a:4b:6d:f9:b9:21:a9:a4:c3:bb:a4: a4:8f:04:36:8f:8e:0b:16:02:88:a3:70:b6:48:8d: be:cd:36:21:78:e3:31:ef:b6:86:47:9f:60:fb:9e: 7f:3c:be:b7:e9:c4:99:c8:c1:c6:a1:26:70:be:2e: b1:e0:a8:0a:5a:2b:cc:20:c9:c9:39:9b:f3:37:df: 39:12:85:0c:35:05:11:e7:8f:d7:2d:dc:12:c0:63: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2A:CA:C2:1E:F3:FA:E6:CD:21:79:6A:66:16:B4:26:C7:0C:4C:48 X509v3 Authority Key Identifier: keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:28:c1:16:b4:e1:db:89:d6:57:86:0d:45:96:45:2d:ea:5b: 02:ec:d2:dd:9d:0f:27:75:3b:93:d2:ed:3a:88:3b:00:14:d7: 9c:ce:40:a3:21:e0:6b:28:6a:86:8e:b2:07:a4:8b:9e:44:c5: e1:4f:c8:d5:15:60:b3:28:7e:f1:08:7f:99:c9:36:0b:70:71: 6e:f1:17:b2:86:ba:e5:ac:55:e3:a9:e7:84:9b:a9:e9:10:cd: be:b8:20:61:d4:32:ca:96:e4:08:15:55:4f:dd:60:d8:8e:9c: dd:19:90:91:2e:fc:3c:5c:18:e5:ac:60:d2:4f:be:d6:35:be: d3:df:c2:03:d0:53:68:41:65:e2:fe:56:12:5c:14:d4:29:f6: 20:37:25:31:09:f5:00:e8:75:d9:9b:eb:22:78:dd:0a:b7:6b: 08:62:4a:d8:39:8b:95:95:6f:f1:28:9e:33:ba:5a:6a:8f:b5: 0b:b5:31:5f:30:54:10:a0:8b:10:9d:27:b3:c9:8c:38:24:9e: 4c:b8:9c:b8:a1:16:cf:ac:dd:b9:76:20:90:aa:a7:7e:2d:b8: 3d:fa:b4:ff:66:97:4a:b7:3c:51:82:3e:7d:4a:c4:1d:cf:ad: 2b:1e:49:87:51:d0:37:f5:2a:09:6d:20:36:96:72:06:b8:06: e7:9a:00:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5m/s0jjoDVAz9xInSuxmsIfeigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4 RDM4NjhGQzAeFw0yNjA2MDIxMTU0NTRaFw0yNjA2MDMxMjQyNTRaMDMxMTAvBgNV BAMTKDA1MkFDQUMyMUVGM0ZBRTZDRDIxNzk2QTY2MTZCNDI2QzcwQzRDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/oTUIbFqiUBZmhjZLlQyAnCg xf89Fj4T368RmqyHIOPrZ7AKJ28DpDhqhID2F8YP4QjRwGbxIB5RAjGPYkO3j+Np z1W8ozpYkqLhaQa8RTj4VE4IcWqxfKAdgjy/RBq4E7oLncrV7LbfYjxpzknuk7g5 uJn1lzAGtnMjpHrUDOsecGvoZPVH/VApmK2V1bIgVc2nugB9D7gEi++2UNELgSf7 nxox8GZaS235uSGppMO7pKSPBDaPjgsWAoijcLZIjb7NNiF44zHvtoZHn2D7nn88 vrfpxJnIwcahJnC+LrHgqApaK8wgyck5m/M33zkShQw1BRHnj9ct3BLAY+e3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBSrKwh7z+ubNIXlqZha0JscMTEgwHwYDVR0j BBgwFoAUp7FozkZq50RGtlDPgkYYlY04aPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMGQ3ZmEtZDZmOC00YzIyLWI0OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0 NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4RDM4NjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0IxNjhDRTQ2NkFFNzQ0NDZCNjUwQ0Y4MjQ2MTg5NThEMzg2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4 OTU4RDM4NjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAowRa04duJ1leGDUWWRS3qWwLs0t2dDyd1 O5PS7TqIOwAU15zOQKMh4GsoaoaOsgeki55ExeFPyNUVYLMofvEIf5nJNgtwcW7x F7KGuuWsVeOp54SbqekQzb64IGHUMsqW5AgVVU/dYNiOnN0ZkJEu/DxcGOWsYNJP vtY1vtPfwgPQU2hBZeL+VhJcFNQp9iA3JTEJ9QDoddmb6yJ43Qq3awhiStg5i5WV b/EonjO6WmqPtQu1MV8wVBCgixCdJ7PJjDgknky4nLihFs+s3bl2IJCqp34tuD36 tP9ml0q3PFGCPn1KxB3PrSseSYdR0Df1KgltIDaWcga4BueaAFo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:27 2026 by rpki-client