$ rpki-client -vvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: IgLsoTyRPxF9mNTciFuP+aIEXzknJY+nrfWhnyrnCoY= Subject key identifier: 33:B3:5E:44:E0:1F:B6:05:F2:BF:35:73:F1:24:C2:7D:70:54:5A:56 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 4B1205F86EC24226B7E6D48A11F3C6D7DFD3A5DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:12:53 +0000 Manifest this update: Mon 20 Jul 2026 13:07:53 +0000 Manifest next update: Tue 21 Jul 2026 15:03:53 +0000 Files and hashes: 1: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: HK/N3jJS+JzZ86LurZHVJQHoGpVJnd2NzI7n/JqdXTw=) 2: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: h8+dhgJZAVYl5vhc9z1CI3Q73pMj8I+xGu7T9NSMlIk=) 3: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: mlqNWzm5MAkfi+Q/Yfoca4Icwi65M8TtWmWzflbRVj8=) 4: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=) 5: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:05:f8:6e:c2:42:26:b7:e6:d4:8a:11:f3:c6:d7:df:d3:a5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Jul 20 13:07:53 2026 GMT Not After : Jul 21 15:03:53 2026 GMT Subject: CN=33B35E44E01FB605F2BF3573F124C27D70545A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:03:50:a6:2b:f6:6e:b8:ac:28:46:f8:f6: a3:b3:fe:de:0f:65:1a:33:e0:c0:0c:53:c6:3c:27: 43:b7:9d:a5:78:7c:a9:a3:b6:f2:0b:15:f4:07:6a: 6d:02:2e:c1:cf:ba:eb:1e:64:fc:38:03:36:e9:3a: f9:2f:63:69:63:25:c2:9d:e8:28:87:ef:7b:44:28: 95:05:e9:33:bc:5e:3f:65:3f:f8:79:5c:6b:fc:75: 2b:42:f1:31:ba:7b:e7:4c:da:4b:24:93:3b:ef:34: 54:4d:4d:92:8d:27:f2:be:9f:76:56:d8:ce:f6:33: 59:2c:c4:4f:72:1a:38:4c:b0:b0:d1:71:2f:f4:6f: 74:af:f1:39:20:b6:1b:0a:18:5e:89:32:0d:ea:3b: 7e:4a:f1:f0:19:14:95:d3:df:50:10:dc:a4:3e:82: 47:e7:a0:a7:d7:95:2c:dd:99:f9:d5:34:51:6a:88: 85:22:a0:53:dc:24:9e:27:72:0f:01:95:1a:bc:3f: cc:2f:41:cd:38:c3:ec:00:f3:bb:e2:4c:3b:9e:27: ac:8a:c0:ff:26:eb:38:58:25:f3:e7:55:03:3c:5f: ef:f1:dd:b2:35:f3:53:9e:8c:d7:bd:a6:71:83:50: 2d:90:f0:c8:76:f1:3e:25:b1:5d:f1:7f:44:d4:77: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:5E:44:E0:1F:B6:05:F2:BF:35:73:F1:24:C2:7D:70:54:5A:56 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:5f:11:09:f2:3e:82:e4:10:b7:0a:49:9b:26:df:2c:be: cc:aa:d0:94:4b:0e:ad:5c:02:b4:ff:88:ae:8a:62:e6:d0:07: 9b:fc:75:dc:68:2f:bc:43:60:4f:53:72:f8:e8:3a:13:1f:c0: 65:c7:b5:10:38:b1:72:a6:ea:0e:f9:1b:48:3a:c6:8b:0e:3f: 97:bf:31:4d:bc:1b:6e:5e:fb:7d:08:5c:d6:9a:aa:9a:dd:1f: 46:6a:c7:77:2a:f9:dd:bc:78:3a:5e:de:4e:f0:02:61:7d:34: 5c:17:39:bb:34:84:5b:55:7b:01:0d:ae:bd:a9:f5:c9:80:a0: 2f:26:ae:f6:d5:4b:82:5d:03:40:e3:e2:a0:f8:77:b7:0d:3c: e0:84:99:9d:3b:5f:ea:d1:25:6f:a2:1b:65:8e:09:9a:bd:c1: 5d:82:96:e9:54:01:de:f8:39:d7:19:63:39:83:ab:27:b5:74: 5e:1e:3d:cd:ed:bd:2f:c7:68:3f:51:e4:23:a7:8a:aa:95:7b: 74:10:47:b6:68:13:7b:09:f3:a1:1a:a7:d1:21:a5:a0:98:a9: c6:17:2b:3f:f5:ba:7b:cf:3d:70:50:04:6e:f6:d1:c1:d9:74: 18:cc:52:cd:0a:b7:43:40:5f:53:39:5e:92:20:6b:05:49:54: d3:f7:25:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxIF+G7CQia35tSKEfPG19/TpdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjA3MjAxMzA3NTNaFw0yNjA3MjExNTAzNTNaMDMxMTAvBgNV BAMTKDMzQjM1RTQ0RTAxRkI2MDVGMkJGMzU3M0YxMjRDMjdENzA1NDVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jANQpiv2brisKEb49qOz/t4P ZRoz4MAMU8Y8J0O3naV4fKmjtvILFfQHam0CLsHPuuseZPw4AzbpOvkvY2ljJcKd 6CiH73tEKJUF6TO8Xj9lP/h5XGv8dStC8TG6e+dM2kskkzvvNFRNTZKNJ/K+n3ZW 2M72M1ksxE9yGjhMsLDRcS/0b3Sv8TkgthsKGF6JMg3qO35K8fAZFJXT31AQ3KQ+ gkfnoKfXlSzdmfnVNFFqiIUioFPcJJ4ncg8BlRq8P8wvQc04w+wA87viTDueJ6yK wP8m6zhYJfPnVQM8X+/x3bI181OejNe9pnGDUC2Q8Mh28T4lsV3xf0TUd5rZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7NeROAftgXyvzVz8STCfXBUWlYwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/1XxEJ8j6C5BC3CkmbJt8svsyq0JRLDq1c ArT/iK6KYubQB5v8ddxoL7xDYE9TcvjoOhMfwGXHtRA4sXKm6g75G0g6xosOP5e/ MU28G25e+30IXNaaqprdH0Zqx3cq+d28eDpe3k7wAmF9NFwXObs0hFtVewENrr2p 9cmAoC8mrvbVS4JdA0Dj4qD4d7cNPOCEmZ07X+rRJW+iG2WOCZq9wV2ClulUAd74 OdcZYzmDqye1dF4ePc3tvS/HaD9R5COniqqVe3QQR7ZoE3sJ86Eap9EhpaCYqcYX Kz/1unvPPXBQBG720cHZdBjMUs0Kt0NAX1M5XpIgawVJVNP3JbQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:28 2026 by rpki-client