$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json) Hash identifier: Y+liZ+nU16zSWICi+aoOMY8DbQ+KOsiNksnlsEuAbUU= Subject key identifier: 89:B0:C7:88:7A:54:4A:00:10:09:54:4A:95:22:CB:BB:C5:1F:75:7F Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Certificate serial: 3D944DB2E38BFA47FCED7BCBDD253E6B35E06D12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:10:11 +0000 Manifest this update: Mon 20 Jul 2026 11:05:11 +0000 Manifest next update: Tue 21 Jul 2026 14:18:11 +0000 Files and hashes: 1: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=) 2: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=) 3: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=) 4: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=) 5: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=) 6: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: ycrVLA/p26ajOWJGG4rhJlB0Mc9HvFeuy2xQI9zA1po=) 7: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=) 8: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:94:4d:b2:e3:8b:fa:47:fc:ed:7b:cb:dd:25:3e:6b:35:e0:6d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Validity Not Before: Jul 20 11:05:11 2026 GMT Not After : Jul 21 14:18:11 2026 GMT Subject: CN=89B0C7887A544A001009544A9522CBBBC51F757F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:88:eb:ed:a3:df:d1:84:c3:be:c7:78:13: f5:c5:a4:ef:57:5b:3c:63:de:5f:5f:f4:04:b2:63: ac:f1:4b:43:e0:62:e5:66:06:bd:e8:db:e2:45:f0: 50:65:ae:dc:38:b9:ac:63:0e:c5:e0:1d:78:49:2f: 20:f4:ba:90:fe:05:77:61:6e:f4:7d:bc:eb:99:59: ae:eb:54:0e:75:fc:f4:6a:fa:91:38:5d:79:e8:cd: 8d:f0:ac:c7:0a:30:30:2c:23:26:a7:1b:f1:b0:d6: 12:c3:6a:f0:88:38:cc:dc:26:50:70:aa:26:30:36: c3:d2:1a:45:e6:04:80:fe:69:23:d3:0a:19:ee:86: 2e:98:2e:76:dc:06:ca:ec:94:ec:e9:c5:2d:79:4f: e4:de:f5:63:09:bb:cd:66:dd:d8:93:bf:a5:8d:b4: df:70:8a:22:92:92:ff:97:89:be:5d:49:05:a9:57: 05:98:c4:0d:be:51:2d:5e:62:6f:64:d3:60:3b:b4: dd:01:94:84:e8:6c:4f:d7:75:fb:ee:2b:54:76:16: 6b:14:31:3f:92:47:f0:69:61:31:60:1a:f7:34:59: d8:6f:bf:69:26:3a:ab:8b:ca:cb:73:da:74:8e:fd: 45:be:51:fc:df:59:7d:c1:4e:e2:60:7c:23:18:b0: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B0:C7:88:7A:54:4A:00:10:09:54:4A:95:22:CB:BB:C5:1F:75:7F X509v3 Authority Key Identifier: keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:db:00:96:eb:86:9c:22:38:89:c7:f3:a2:f1:dd:e0:3d:c7: a1:dd:86:8b:33:2c:68:46:83:72:e3:bf:1f:c2:28:0e:33:63: 60:ca:10:f1:ab:39:bf:a4:33:c2:56:18:bd:70:e2:d7:30:97: f0:ef:b8:92:7c:6f:50:86:62:e0:be:89:79:f8:29:ee:98:d8: dd:65:14:25:3b:4e:0c:8b:36:b9:5a:90:29:62:e9:99:b3:79: 08:cb:1a:b9:6c:08:cd:8d:a4:ba:1f:e6:d1:5d:0c:86:87:98: ac:4f:95:de:bd:4b:7a:6d:79:bd:80:30:c8:cf:b9:19:50:7c: e9:99:3d:22:02:0a:f0:7b:25:46:f5:44:58:c9:ad:a6:9a:8f: 0a:ca:ce:b2:6a:05:d9:c5:a5:9d:2a:4e:61:9d:55:45:34:78: e4:64:47:c2:ab:87:b5:da:9f:da:9a:d2:21:c5:20:58:05:d1: e9:9e:d0:0f:8f:90:59:5d:07:d8:09:2a:6a:b7:29:52:3a:3c: ee:3e:a4:a9:10:36:0b:3c:6e:25:95:b9:6d:c5:24:4d:2c:d5: 19:bd:a2:b5:92:e9:94:35:80:05:d8:e8:a4:0d:b8:43:66:e2: 9b:8c:b6:38:0a:2e:f5:93:ac:af:31:5d:ae:c8:a8:98:08:5a: f3:6f:9d:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZRNsuOL+kf87XvL3SU+azXgbRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC QTA5RUI2NDAeFw0yNjA3MjAxMTA1MTFaFw0yNjA3MjExNDE4MTFaMDMxMTAvBgNV BAMTKDg5QjBDNzg4N0E1NDRBMDAxMDA5NTQ0QTk1MjJDQkJCQzUxRjc1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDIjr7aPf0YTDvsd4E/XFpO9X Wzxj3l9f9ASyY6zxS0PgYuVmBr3o2+JF8FBlrtw4uaxjDsXgHXhJLyD0upD+BXdh bvR9vOuZWa7rVA51/PRq+pE4XXnozY3wrMcKMDAsIyanG/Gw1hLDavCIOMzcJlBw qiYwNsPSGkXmBID+aSPTChnuhi6YLnbcBsrslOzpxS15T+Te9WMJu81m3diTv6WN tN9wiiKSkv+Xib5dSQWpVwWYxA2+US1eYm9k02A7tN0BlITobE/XdfvuK1R2FmsU MT+SR/BpYTFgGvc0Wdhvv2kmOquLystz2nSO/UW+UfzfWX3BTuJgfCMYsB+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUibDHiHpUSgAQCVRKlSLLu8UfdX8wHwYDVR0j BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhF QTdCQTA5RUI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnbAJbrhpwiOInH86Lx3eA9x6HdhoszLGhG g3Ljvx/CKA4zY2DKEPGrOb+kM8JWGL1w4tcwl/DvuJJ8b1CGYuC+iXn4Ke6Y2N1l FCU7TgyLNrlakCli6ZmzeQjLGrlsCM2NpLof5tFdDIaHmKxPld69S3pteb2AMMjP uRlQfOmZPSICCvB7JUb1RFjJraaajwrKzrJqBdnFpZ0qTmGdVUU0eORkR8Krh7Xa n9qa0iHFIFgF0eme0A+PkFldB9gJKmq3KVI6PO4+pKkQNgs8biWVuW3FJE0s1Rm9 orWS6ZQ1gAXY6KQNuENm4puMtjgKLvWTrK8xXa7IqJgIWvNvnUw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:23 2026 by rpki-client