$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: yB9bJivaNSz7M24nAwGR3etrNZfW0zu+LSMwMj1b9TQ= Subject key identifier: 4B:14:33:19:96:F4:15:38:2D:67:89:E8:B3:2B:26:B4:88:16:BD:20 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 43C0B459CF92058E7EA978DDC0446B64B759A25F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:55:56 +0000 Manifest this update: Tue 02 Jun 2026 12:50:56 +0000 Manifest next update: Wed 03 Jun 2026 15:57:56 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 2: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: 9Pn4opu0+UyRkIcIgFeCs0walBpQ8VH0ZBpVo6aBJL4=) 3: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 4: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c0:b4:59:cf:92:05:8e:7e:a9:78:dd:c0:44:6b:64:b7:59:a2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Jun 2 12:50:56 2026 GMT Not After : Jun 3 15:57:56 2026 GMT Subject: CN=4B14331996F415382D6789E8B32B26B48816BD20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:ce:df:ef:7d:92:f6:6b:c7:50:58:1b:1c: e6:cf:fc:f2:3e:4f:f3:af:d4:c3:c0:a5:2c:4e:55: ae:59:64:db:4d:7f:b9:87:38:a7:c8:6f:2f:00:31: 59:53:7c:ed:0b:5f:c7:fd:8e:df:3a:8f:da:08:6f: 32:2b:43:86:16:e2:ea:03:bd:2f:fc:86:08:e5:bd: 9a:9d:72:e8:c6:71:47:02:fa:e9:e5:a2:2c:c0:51: b0:2b:18:8b:d7:1e:2c:8e:95:c8:00:82:47:ea:48: 94:cd:b5:19:42:f7:f6:aa:ca:68:29:ca:f9:80:68: 3e:b6:79:4c:33:a6:3d:7a:87:96:36:ae:61:44:bb: 07:ff:6e:e2:a8:84:2e:19:82:ad:e1:65:6c:c6:b4: 12:65:1a:3a:2d:d3:6f:38:f5:e3:bc:fe:bc:48:b9: bf:1d:c5:30:74:14:d0:95:2a:da:cd:02:08:bf:d1: 4c:db:85:17:77:db:b8:3a:3a:e0:63:8e:bf:ef:c5: 72:dd:c5:86:37:9c:1f:c8:f0:c0:6e:aa:fd:4d:db: 5a:e7:1e:f8:47:e7:1e:f7:b8:3b:64:b2:04:bb:c8: f5:8a:0b:2e:73:11:22:e1:69:22:40:94:c8:10:65: 15:a0:1a:9d:19:b3:ae:fe:4c:b2:db:cc:77:fe:39: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:33:19:96:F4:15:38:2D:67:89:E8:B3:2B:26:B4:88:16:BD:20 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:73:9e:0e:6e:83:f2:af:85:54:db:35:46:09:24:f9:33:a0: ab:53:c1:97:f3:18:34:6f:50:ea:83:e3:8b:2b:b2:e4:18:d8: 60:66:82:ca:83:4c:68:84:a0:da:06:81:e7:2b:ba:c3:14:40: f8:12:a0:65:cb:d0:ce:bc:06:82:08:03:6e:6b:f6:fd:ff:0c: ee:89:33:e5:18:fa:84:dd:f9:3f:4d:4e:3e:85:8b:ab:f6:15: d2:c7:c4:91:10:d6:eb:64:e6:68:c5:ce:14:9c:2f:32:11:65: 73:7b:e1:44:1e:41:00:50:66:f7:60:f3:6a:33:83:67:78:cb: 18:cc:55:78:8f:66:aa:1b:32:74:87:e4:5c:a7:aa:ca:59:ec: 86:5e:d7:9a:7e:bb:69:5c:64:3f:8e:00:b7:86:97:bc:f4:8a: c3:bf:23:67:4b:03:9e:a3:0e:2d:80:17:5b:eb:0e:43:fc:a4: dd:f5:a0:d0:e6:88:cd:60:6f:3b:10:8a:ef:fc:f5:b9:4d:de: ec:75:d0:d6:f4:ee:7b:e8:a3:f5:b3:e3:e9:34:70:8d:bb:0a: e7:8a:02:e8:a7:0a:df:11:1f:20:c4:1c:9f:f9:58:87:e6:c7: 86:bc:df:85:fe:24:de:c8:95:29:be:8e:e2:f8:9b:db:df:d1: 10:15:45:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8C0Wc+SBY5+qXjdwERrZLdZol8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA2MDIxMjUwNTZaFw0yNjA2MDMxNTU3NTZaMDMxMTAvBgNV BAMTKDRCMTQzMzE5OTZGNDE1MzgyRDY3ODlFOEIzMkIyNkI0ODgxNkJEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pc7f732S9mvHUFgbHObP/PI+ T/Ov1MPApSxOVa5ZZNtNf7mHOKfIby8AMVlTfO0LX8f9jt86j9oIbzIrQ4YW4uoD vS/8hgjlvZqdcujGcUcC+unloizAUbArGIvXHiyOlcgAgkfqSJTNtRlC9/aqymgp yvmAaD62eUwzpj16h5Y2rmFEuwf/buKohC4Zgq3hZWzGtBJlGjot02849eO8/rxI ub8dxTB0FNCVKtrNAgi/0UzbhRd327g6OuBjjr/vxXLdxYY3nB/I8MBuqv1N21rn HvhH5x73uDtksgS7yPWKCy5zESLhaSJAlMgQZRWgGp0Zs67+TLLbzHf+OUy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxQzGZb0FTgtZ4nosysmtIgWvSAwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFzng5ug/KvhVTbNUYJJPkzoKtTwZfzGDRv UOqD44srsuQY2GBmgsqDTGiEoNoGgecrusMUQPgSoGXL0M68BoIIA25r9v3/DO6J M+UY+oTd+T9NTj6Fi6v2FdLHxJEQ1utk5mjFzhScLzIRZXN74UQeQQBQZvdg82oz g2d4yxjMVXiPZqobMnSH5FynqspZ7IZe15p+u2lcZD+OALeGl7z0isO/I2dLA56j Di2AF1vrDkP8pN31oNDmiM1gbzsQiu/89blN3ux10Nb07nvoo/Wz4+k0cI27CueK AuinCt8RHyDEHJ/5WIfmx4a834X+JN7IlSm+juL4m9vf0RAVRYE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:22 2026 by rpki-client