$ rpki-client -vvf rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft File: 7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft (raw, json) Hash identifier: pW0U1u7Rd+JRyNRlF9jwtNFq451o2undjnhLlpFEpiI= Subject key identifier: 8D:0E:8D:51:76:11:54:83:10:00:57:33:93:2C:B8:3E:D6:C7:AD:A7 Authority key identifier: 7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7 Certificate issuer: /CN=7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7 Certificate serial: 663F99A182BD8DFF938F06B5F7ECC3A2467DD287 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:11:12 +0000 Manifest this update: Tue 02 Jun 2026 13:06:12 +0000 Manifest next update: Wed 03 Jun 2026 16:52:12 +0000 Files and hashes: 1: 7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.crl (hash: zkxJq2pN6qnanZqCTBlCKiCdsFbixla3LJf/3GZa4oU=) 2: 3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (hash: Rti07MaZkunppgE02yqy9SwH9qLRnGcjJld/SxZMKag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.crl rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3f:99:a1:82:bd:8d:ff:93:8f:06:b5:f7:ec:c3:a2:46:7d:d2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7 Validity Not Before: Jun 2 13:06:12 2026 GMT Not After : Jun 3 16:52:12 2026 GMT Subject: CN=8D0E8D517611548310005733932CB83ED6C7ADA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:e8:e2:3b:05:84:26:fd:b4:00:99:1f:0d: e6:19:be:5c:50:7e:ff:30:d9:44:0e:05:4f:dd:99: e1:f8:01:41:d6:a6:3c:fa:92:57:d2:fa:66:af:09: 77:70:33:21:db:9a:d2:d3:f6:52:1d:3f:c1:25:b2: ec:61:4a:ad:bf:42:f4:a4:dd:21:e0:8e:d2:dd:14: 00:c5:be:2f:2b:d4:a3:3d:61:d4:ed:63:0a:31:20: fc:9d:05:d4:e6:58:c3:81:9c:ae:b8:6b:9e:86:fc: 84:27:74:18:2f:36:de:5c:c3:f9:2d:fc:3b:03:f4: 33:8e:e1:d1:df:15:b9:0a:c2:fe:8a:07:7d:10:76: 52:e3:77:b6:94:15:a9:ef:c1:89:a7:d0:b9:16:87: 08:ce:2a:a2:9a:e3:94:34:11:3c:83:73:2d:72:3e: d7:09:d9:ad:6c:7a:f5:31:81:af:5a:a8:10:97:59: 9f:07:db:17:ca:8c:34:60:00:7c:95:cb:4f:f9:b6: 35:7d:25:61:6b:4b:18:9b:b4:06:4b:f5:2d:b8:19: c0:7e:ba:94:41:e9:61:3a:0e:f5:1a:b8:c5:45:c7: 6c:a7:28:c7:a4:27:cf:f9:24:2b:1b:f2:bb:d0:d2: d5:bd:99:c4:81:9c:ff:2d:7d:cd:14:fc:f1:70:e8: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:8D:51:76:11:54:83:10:00:57:33:93:2C:B8:3E:D6:C7:AD:A7 X509v3 Authority Key Identifier: keyid:7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:20:03:74:6f:a2:5e:93:4b:92:07:37:ec:66:ea:10:e4: 7a:8c:1c:77:79:89:de:12:4e:38:cd:6b:7c:b8:6e:77:e9:3a: f0:69:9f:91:4f:a5:6c:73:7a:10:58:ca:a2:50:92:6d:71:26: b0:84:b4:2f:e4:b9:5f:a9:84:04:05:67:c1:74:46:95:7e:bb: 6f:0a:f5:b5:22:5e:6d:25:08:03:2c:08:51:48:66:a8:2c:b1: 36:0e:9b:e9:2a:31:93:02:55:41:72:60:33:ca:b2:e0:d5:96: ce:42:30:9f:9e:ee:6d:4f:11:45:d5:2d:db:89:41:47:26:37: ae:26:27:43:41:79:8f:8d:8c:5c:2f:d2:99:35:ca:01:e9:46: 45:58:bf:04:31:b3:8c:7f:34:f0:36:f9:1d:e2:fd:49:4a:0c: 1e:fc:75:2a:7e:52:8e:59:e4:e4:0c:3b:3d:be:d2:9d:fa:a1: 21:33:b6:88:4e:c0:94:c3:11:a7:80:e8:1e:06:5f:17:f9:d2: 7c:0b:88:96:e4:8a:4d:98:69:d1:4d:ef:7d:1c:f5:4e:5f:3b: 54:f5:12:c2:fe:4f:71:59:1c:16:14:09:e6:b5:e4:31:ed:b6: fe:2c:44:c8:a1:ac:b5:b3:85:3b:96:4e:29:fd:0b:96:9f:15: 20:09:97:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZj+ZoYK9jf+Tjwa19+zDokZ90ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E3MzU2RTc3NDk3NkU0QjRFRkM4QTI0NDlFNjhFNkQ2 Q0FDRDhFNzAeFw0yNjA2MDIxMzA2MTJaFw0yNjA2MDMxNjUyMTJaMDMxMTAvBgNV BAMTKDhEMEU4RDUxNzYxMTU0ODMxMDAwNTczMzkzMkNCODNFRDZDN0FEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VejiOwWEJv20AJkfDeYZvlxQ fv8w2UQOBU/dmeH4AUHWpjz6klfS+mavCXdwMyHbmtLT9lIdP8ElsuxhSq2/QvSk 3SHgjtLdFADFvi8r1KM9YdTtYwoxIPydBdTmWMOBnK64a56G/IQndBgvNt5cw/kt /DsD9DOO4dHfFbkKwv6KB30QdlLjd7aUFanvwYmn0LkWhwjOKqKa45Q0ETyDcy1y PtcJ2a1sevUxga9aqBCXWZ8H2xfKjDRgAHyVy0/5tjV9JWFrSxibtAZL9S24GcB+ upRB6WE6DvUauMVFx2ynKMekJ8/5JCsb8rvQ0tW9mcSBnP8tfc0U/PFw6JxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQ6NUXYRVIMQAFczkyy4PtbHracwHwYDVR0j BBgwFoAUenNW53SXbktO/IokSeaObWys2OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTJlOTU0OTMtYWU3Ni00Y2VmLWEwOGMtYTIwZGZjOWQyNjE5LzAvN0E3MzU2RTc3 NDk3NkU0QjRFRkM4QTI0NDlFNjhFNkQ2Q0FDRDhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTczNTZFNzc0OTc2RTRCNEVGQzhBMjQ0OUU2OEU2RDZDQUNE OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTJlOTU0OTMtYWU3Ni00Y2VmLWEw OGMtYTIwZGZjOWQyNjE5LzAvN0E3MzU2RTc3NDk3NkU0QjRFRkM4QTI0NDlFNjhF NkQ2Q0FDRDhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO8IAN0b6Jek0uSBzfsZuoQ5HqMHHd5id4S TjjNa3y4bnfpOvBpn5FPpWxzehBYyqJQkm1xJrCEtC/kuV+phAQFZ8F0RpV+u28K 9bUiXm0lCAMsCFFIZqgssTYOm+kqMZMCVUFyYDPKsuDVls5CMJ+e7m1PEUXVLduJ QUcmN64mJ0NBeY+NjFwv0pk1ygHpRkVYvwQxs4x/NPA2+R3i/UlKDB78dSp+Uo5Z 5OQMOz2+0p36oSEztohOwJTDEaeA6B4GXxf50nwLiJbkik2YadFN730c9U5fO1T1 EsL+T3FZHBYUCea15DHttv4sRMihrLWzhTuWTin9C5afFSAJl10= -----END CERTIFICATE-----Generated at Wed Jun 3 04:41:09 2026 by rpki-client