$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: HVgGPB/Ot1dKln03vu1UxMTEzL3jN9ghV9ty7w9Qdb0= Subject key identifier: 67:BF:DB:8C:E0:25:ED:AB:65:FD:46:02:75:63:17:69:F3:F9:A0:41 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 6D58D3EB00372CEED511282967FDA6FB0C02941F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:03:51 +0000 Manifest this update: Mon 20 Jul 2026 17:58:51 +0000 Manifest next update: Tue 21 Jul 2026 20:53:51 +0000 Files and hashes: 1: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: q8cr/lC1yRdfa1oastjgDbzkwblo9A0zPuB5YIw3Tm0=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 3: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 4: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:58:d3:eb:00:37:2c:ee:d5:11:28:29:67:fd:a6:fb:0c:02:94:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Jul 20 17:58:51 2026 GMT Not After : Jul 21 20:53:51 2026 GMT Subject: CN=67BFDB8CE025EDAB65FD460275631769F3F9A041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:47:21:ec:7f:2a:17:bb:0c:04:45:64:83: 69:bc:83:a7:bc:dd:64:29:0d:11:c9:c7:32:03:05: 28:52:14:c0:c7:6c:50:91:4c:fa:92:7d:1c:42:bf: 69:19:33:35:99:11:83:09:59:da:c8:cb:1b:15:cb: 45:d1:cf:62:98:c4:30:e4:26:dd:4e:a2:fa:a7:ad: 5b:55:ed:7e:87:bc:c2:20:ad:3c:c1:e5:98:bc:99: a3:73:2f:4b:75:cd:97:b3:b0:fa:f4:7d:d1:7f:8a: 11:91:a2:d8:0d:e9:b1:b5:42:fd:67:5d:7a:e6:76: c9:ed:27:0b:f0:3d:28:35:c4:65:54:64:1d:17:84: 4c:40:76:70:69:35:91:fd:bd:d0:9d:c6:c0:70:57: 8b:7c:be:24:ba:41:0a:83:e7:d8:2c:77:42:13:ce: ff:84:cf:d5:0c:62:36:7d:35:61:b1:18:37:5a:96: 36:30:17:ec:75:63:52:8d:9f:d7:25:86:9e:a8:b6: 6c:06:eb:e7:ed:2a:10:5f:25:7a:18:66:26:93:57: b5:c3:d1:47:ff:5a:6f:1b:fa:d4:2e:8d:18:8d:e5: bf:7f:f7:9f:61:10:76:88:37:62:23:cf:d9:b5:d7: 9f:60:e5:9d:ec:34:4a:fc:ba:1c:b8:ce:ce:03:f1: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:DB:8C:E0:25:ED:AB:65:FD:46:02:75:63:17:69:F3:F9:A0:41 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:97:39:bc:c1:de:31:8f:78:61:cd:5e:7d:b0:64:0a:13:f6: df:18:f4:a9:6a:9b:7e:5b:7b:ea:03:c2:1a:37:ff:47:b3:cd: 0d:5f:56:3c:c9:7e:7f:65:d9:b1:6f:7b:83:a3:b0:74:3a:c7: 5b:39:04:37:22:b9:b3:86:89:3e:5e:c6:51:6a:e2:24:d9:e9: bf:d7:f8:bc:b8:cb:aa:67:c6:d6:d6:b5:a6:b9:6d:8c:62:9e: 10:43:19:d6:8a:0a:c0:ed:65:4b:7a:a8:a6:97:6c:3c:ae:15: e5:d6:9b:a4:61:14:5a:a5:1e:21:d6:7d:40:70:72:f6:cf:72: ae:15:52:53:50:5a:27:b4:7e:3f:e0:98:fd:26:a9:76:0c:45: 90:f9:07:fe:35:62:79:cc:01:1b:86:fa:59:c6:16:63:5e:97: 84:77:02:36:5d:c7:76:df:68:07:0e:c0:94:c4:0a:5d:4c:de: c3:23:3c:e4:1e:f6:18:b7:0f:5a:34:3e:48:88:86:78:bb:f4: 62:2c:7b:dd:f3:e0:7a:6e:c8:3b:18:df:36:c2:f4:ed:d4:4f: e5:4d:a8:8f:31:d8:bc:1b:4c:55:b6:3d:71:48:d4:ce:52:2a: ff:03:5f:8c:bc:51:7a:06:a1:a8:e7:68:7f:39:43:44:fa:be: 53:89:e6:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVjT6wA3LO7VESgpZ/2m+wwClB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA3MjAxNzU4NTFaFw0yNjA3MjEyMDUzNTFaMDMxMTAvBgNV BAMTKDY3QkZEQjhDRTAyNUVEQUI2NUZENDYwMjc1NjMxNzY5RjNGOUEwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqb0ch7H8qF7sMBEVkg2m8g6e8 3WQpDRHJxzIDBShSFMDHbFCRTPqSfRxCv2kZMzWZEYMJWdrIyxsVy0XRz2KYxDDk Jt1OovqnrVtV7X6HvMIgrTzB5Zi8maNzL0t1zZezsPr0fdF/ihGRotgN6bG1Qv1n XXrmdsntJwvwPSg1xGVUZB0XhExAdnBpNZH9vdCdxsBwV4t8viS6QQqD59gsd0IT zv+Ez9UMYjZ9NWGxGDdaljYwF+x1Y1KNn9clhp6otmwG6+ftKhBfJXoYZiaTV7XD 0Uf/Wm8b+tQujRiN5b9/959hEHaIN2Ijz9m1159g5Z3sNEr8uhy4zs4D8c3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7/bjOAl7atl/UYCdWMXafP5oEEwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiXObzB3jGPeGHNXn2wZAoT9t8Y9Klqm35b e+oDwho3/0ezzQ1fVjzJfn9l2bFve4OjsHQ6x1s5BDciubOGiT5exlFq4iTZ6b/X +Ly4y6pnxtbWtaa5bYxinhBDGdaKCsDtZUt6qKaXbDyuFeXWm6RhFFqlHiHWfUBw cvbPcq4VUlNQWie0fj/gmP0mqXYMRZD5B/41YnnMARuG+lnGFmNel4R3AjZdx3bf aAcOwJTECl1M3sMjPOQe9hi3D1o0PkiIhni79GIse93z4HpuyDsY3zbC9O3UT+VN qI8x2LwbTFW2PXFI1M5SKv8DX4y8UXoGoajnaH85Q0T6vlOJ5j8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:02 2026 by rpki-client