$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: U74CaEy2GbNcHJJCimxlrJaAcWy07lHBktX6mtK5trI= Subject key identifier: D9:8E:E9:20:DC:78:3C:38:10:90:AF:3D:56:B6:78:EC:E7:08:AB:D7 Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 0BF014F89F4158FDF1C25977222446C8CE95F2F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:40:45 +0000 Manifest this update: Tue 02 Jun 2026 08:35:45 +0000 Manifest next update: Wed 03 Jun 2026 11:49:45 +0000 Files and hashes: 1: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: noenkmyGwpWAb8AtSDmEfzc44IRm2OwX48kiQ1C1xgI=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f0:14:f8:9f:41:58:fd:f1:c2:59:77:22:24:46:c8:ce:95:f2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Jun 2 08:35:45 2026 GMT Not After : Jun 3 11:49:45 2026 GMT Subject: CN=D98EE920DC783C381090AF3D56B678ECE708ABD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:57:cf:00:56:ec:41:0e:f0:f2:5e:09:1d: d7:68:97:49:f5:02:16:18:31:e4:90:6c:c3:f4:c2: b0:60:17:6d:b2:00:48:47:12:e8:8d:c8:06:aa:e5: fb:7c:80:1c:3d:84:60:a8:37:f5:89:81:5d:ff:0d: 8f:05:6b:59:bf:92:54:52:26:ea:6e:47:43:26:a0: 91:f6:ee:09:3d:b9:47:97:88:49:0e:f1:de:ba:85: ed:70:a7:72:0b:35:51:1b:d6:91:35:6d:fa:20:a6: 3b:de:f4:16:52:79:1d:23:d6:98:f0:c6:9c:d1:6d: 85:34:30:95:84:18:57:45:0b:96:4a:0c:8d:73:c2: bb:1e:2d:a6:72:2c:88:a6:c5:2c:07:48:2f:c3:93: db:fa:11:d0:22:91:96:34:91:4c:95:60:0c:50:fc: 4e:e2:cc:fe:ad:9e:f3:17:36:06:50:af:b9:81:18: cf:7c:53:b4:81:3f:c2:42:21:5f:42:89:1f:31:2f: 8d:f1:7f:25:dd:9a:b3:b6:ed:ff:1d:82:74:be:ef: 47:59:a4:af:ba:f4:2b:29:e5:84:ed:96:96:1e:1e: 00:ea:22:23:cc:15:2f:51:10:a6:dd:d2:8e:4c:ff: 2f:5e:33:e4:7d:3d:1b:15:1f:f8:e5:aa:b9:ec:f7: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:E9:20:DC:78:3C:38:10:90:AF:3D:56:B6:78:EC:E7:08:AB:D7 X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:66:e2:8b:c4:41:40:b9:e7:47:aa:dd:52:b1:fa:b6:ee:1c: c7:fa:9e:6d:e1:de:c0:06:11:cd:f6:35:f2:83:b2:c1:00:1b: 42:06:1c:df:2e:b7:a9:c3:1f:52:12:61:67:73:83:31:fd:de: 90:1e:11:48:0b:86:f6:83:2f:3f:32:54:e4:db:59:5c:c9:5f: 0c:a0:1a:c4:71:e2:0f:66:df:ff:6d:25:4c:53:48:25:84:b2: 8c:e0:3f:02:3a:bd:8d:a6:0d:09:3f:8d:98:b0:46:7f:5d:62: 0d:1f:17:5c:5c:84:7c:f3:03:4b:8b:1c:4d:a3:a8:8c:2a:28: 91:67:72:c9:25:ad:03:9d:6c:62:39:ed:86:4d:f2:27:f2:b8: 17:2e:04:bd:f4:2f:39:89:f0:af:fc:28:5b:85:95:82:97:0c: 1e:a5:cf:55:06:87:f0:3d:54:cb:25:07:cb:71:9d:98:a0:b3: d5:c5:50:c2:34:fc:04:1b:8f:e1:93:18:88:92:0e:9b:a0:5c: 9a:7d:69:02:1d:11:bd:20:78:78:ca:99:31:bd:7d:42:d0:6f: c4:7a:4d:25:ae:f5:52:da:cd:30:49:c5:31:2a:fe:a8:e9:d1: 60:06:22:da:88:a1:ee:48:69:d6:2e:c4:c2:0d:c1:f8:34:e3: 25:05:77:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/AU+J9BWP3xwll3IiRGyM6V8vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA2MDIwODM1NDVaFw0yNjA2MDMxMTQ5NDVaMDMxMTAvBgNV BAMTKEQ5OEVFOTIwREM3ODNDMzgxMDkwQUYzRDU2QjY3OEVDRTcwOEFCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVFfPAFbsQQ7w8l4JHddol0n1 AhYYMeSQbMP0wrBgF22yAEhHEuiNyAaq5ft8gBw9hGCoN/WJgV3/DY8Fa1m/klRS JupuR0MmoJH27gk9uUeXiEkO8d66he1wp3ILNVEb1pE1bfogpjve9BZSeR0j1pjw xpzRbYU0MJWEGFdFC5ZKDI1zwrseLaZyLIimxSwHSC/Dk9v6EdAikZY0kUyVYAxQ /E7izP6tnvMXNgZQr7mBGM98U7SBP8JCIV9CiR8xL43xfyXdmrO27f8dgnS+70dZ pK+69Csp5YTtlpYeHgDqIiPMFS9REKbd0o5M/y9eM+R9PRsVH/jlqrns9yZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Y7pINx4PDgQkK89VrZ47OcIq9cwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlm4ovEQUC550eq3VKx+rbuHMf6nm3h3sAG Ec32NfKDssEAG0IGHN8ut6nDH1ISYWdzgzH93pAeEUgLhvaDLz8yVOTbWVzJXwyg GsRx4g9m3/9tJUxTSCWEsozgPwI6vY2mDQk/jZiwRn9dYg0fF1xchHzzA0uLHE2j qIwqKJFncsklrQOdbGI57YZN8ifyuBcuBL30LzmJ8K/8KFuFlYKXDB6lz1UGh/A9 VMslB8txnZigs9XFUMI0/AQbj+GTGIiSDpugXJp9aQIdEb0geHjKmTG9fULQb8R6 TSWu9VLazTBJxTEq/qjp0WAGItqIoe5IadYuxMINwfg04yUFd+M= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:52 2026 by rpki-client