$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: KGg6lfLOF7rqLsDEx1I0+I/+Ot7gIodrZxHBMDgYvB8= Subject key identifier: 79:B1:CD:87:C2:FE:D1:70:95:80:4B:B3:C0:29:72:0D:88:67:0E:7A Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 22E32CDD1E3592E19F6AE2156E69E639DDCD17B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:47:18 +0000 Manifest this update: Mon 20 Jul 2026 16:42:18 +0000 Manifest next update: Tue 21 Jul 2026 17:35:18 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) 2: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: WQ+SFT4lvcpdYAV++deAkCFpyr2SS552knhHPvTQRX8=) 3: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) 4: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:2c:dd:1e:35:92:e1:9f:6a:e2:15:6e:69:e6:39:dd:cd:17:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Jul 20 16:42:18 2026 GMT Not After : Jul 21 17:35:18 2026 GMT Subject: CN=79B1CD87C2FED17095804BB3C029720D88670E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:85:86:5f:27:42:c7:8f:54:4e:78:74:44: 2c:a7:64:03:af:04:c4:d1:04:c2:f5:1f:10:98:12: 19:fa:91:c1:9c:a5:03:94:a5:d0:d1:01:62:9d:64: 91:a3:39:3c:93:33:e1:73:57:93:2c:a8:26:e2:b2: 0d:c7:41:1a:0a:8b:c4:97:91:f9:ae:74:14:bb:af: 37:b5:16:12:79:5f:4a:1a:0e:b4:69:dc:7b:1a:14: 6e:b0:d9:bf:dd:9c:78:b6:e0:cb:10:41:01:1e:cc: e5:d2:94:30:7e:c3:04:cc:eb:65:e1:2b:d8:64:f7: 28:e8:35:03:66:0e:d3:96:19:8e:0f:25:ff:d3:2c: 7e:4b:1e:96:32:1f:96:7f:3b:32:14:00:49:a0:7d: e2:dd:5a:02:d7:2a:ac:fb:e8:bc:ee:57:c0:3a:2a: 7e:4f:cf:26:d4:ca:a0:25:56:50:62:a1:e8:76:d2: 3a:2e:54:09:64:83:af:57:59:19:1d:8e:6e:ab:3b: f6:1f:59:8e:fe:f7:69:91:2b:c0:60:60:f8:c3:0f: 2a:e0:19:f9:57:41:fd:40:bf:43:32:1b:5c:1e:dd: fd:46:4d:d3:8a:14:a6:a2:d8:cd:fd:56:11:96:24: 7c:57:f6:d1:cd:01:65:90:56:18:b8:98:9d:14:1b: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:CD:87:C2:FE:D1:70:95:80:4B:B3:C0:29:72:0D:88:67:0E:7A X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:35:5b:54:e1:d5:c1:f7:a4:8e:13:e0:33:87:3b:26:dd: c4:c9:d2:e9:57:5e:90:78:b1:a4:5c:d1:13:1c:5c:15:4d:3f: a3:a4:e1:d2:9e:b1:92:9a:25:0e:a3:55:86:65:9d:54:92:48: 46:d7:73:a2:68:71:28:8f:60:e5:ee:33:2c:f2:2b:ec:4b:a8: d2:e2:79:ca:e8:6e:e0:ff:e5:03:c5:c9:a6:d2:81:17:2d:75: 39:92:46:1a:fc:90:0c:57:aa:9f:e5:5a:83:6f:8d:32:a2:fe: c9:d2:e8:53:79:78:63:74:41:f6:a2:4b:a3:2a:03:ed:3f:2a: 3c:42:df:9e:90:51:15:e9:e3:5e:58:d9:76:8b:c7:09:85:06: e3:7a:fe:37:b5:24:3e:38:84:c6:2c:d3:35:33:01:0c:40:a8: 98:be:73:ae:5b:52:a1:ba:5b:29:99:4b:f3:ea:48:05:37:e1: 65:37:09:26:e4:f2:57:7d:9f:9a:5f:96:ea:50:1f:11:cb:c3: 04:bd:66:64:e9:fd:71:8d:45:11:00:b8:d6:d6:f7:f0:11:f9: 56:6b:99:69:99:08:4c:d5:21:8d:72:f3:06:47:39:19:8e:a3: 34:30:b7:60:e1:ae:4b:6b:56:0d:47:70:c4:bc:3e:11:bc:dd: 30:bd:84:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuMs3R41kuGfauIVbmnmOd3NF7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjA3MjAxNjQyMThaFw0yNjA3MjExNzM1MThaMDMxMTAvBgNV BAMTKDc5QjFDRDg3QzJGRUQxNzA5NTgwNEJCM0MwMjk3MjBEODg2NzBFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKYWGXydCx49UTnh0RCynZAOv BMTRBML1HxCYEhn6kcGcpQOUpdDRAWKdZJGjOTyTM+FzV5MsqCbisg3HQRoKi8SX kfmudBS7rze1FhJ5X0oaDrRp3HsaFG6w2b/dnHi24MsQQQEezOXSlDB+wwTM62Xh K9hk9yjoNQNmDtOWGY4PJf/TLH5LHpYyH5Z/OzIUAEmgfeLdWgLXKqz76LzuV8A6 Kn5PzybUyqAlVlBioeh20jouVAlkg69XWRkdjm6rO/YfWY7+92mRK8BgYPjDDyrg GflXQf1Av0MyG1we3f1GTdOKFKai2M39VhGWJHxX9tHNAWWQVhi4mJ0UG5gLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebHNh8L+0XCVgEuzwClyDYhnDnowHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7XNVtU4dXB96SOE+Azhzsm3cTJ0ulXXpB4 saRc0RMcXBVNP6Ok4dKesZKaJQ6jVYZlnVSSSEbXc6JocSiPYOXuMyzyK+xLqNLi ecrobuD/5QPFyabSgRctdTmSRhr8kAxXqp/lWoNvjTKi/snS6FN5eGN0QfaiS6Mq A+0/KjxC356QURXp415Y2XaLxwmFBuN6/je1JD44hMYs0zUzAQxAqJi+c65bUqG6 WymZS/PqSAU34WU3CSbk8ld9n5pflupQHxHLwwS9ZmTp/XGNRREAuNbW9/AR+VZr mWmZCEzVIY1y8wZHORmOozQwt2DhrktrVg1HcMS8PhG83TC9hMk= -----END CERTIFICATE-----Generated at Tue Jul 21 08:42:18 2026 by rpki-client