$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json) Hash identifier: G8NJbih1JzD26vtU6PwGxQdFdv0VB1nF4RzsN6e+ims= Subject key identifier: FA:67:4D:D8:8D:4A:BF:22:EC:1E:E9:C4:5A:89:26:F4:24:5D:47:AF Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Certificate serial: 3BB8432FD020721E78A8107F673291B7C1408A65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:33:42 +0000 Manifest this update: Tue 02 Jun 2026 19:28:42 +0000 Manifest next update: Wed 03 Jun 2026 21:30:42 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=) 2: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: A0eQqMVisKKqveE7bEimlO50cPbI6nX5SCt4a+Es9Kc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:43:2f:d0:20:72:1e:78:a8:10:7f:67:32:91:b7:c1:40:8a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Validity Not Before: Jun 2 19:28:42 2026 GMT Not After : Jun 3 21:30:42 2026 GMT Subject: CN=FA674DD88D4ABF22EC1EE9C45A8926F4245D47AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:b2:e2:42:14:8c:41:ea:f3:32:6e:85:f9: af:44:c9:12:d9:85:5c:ef:46:62:a9:d6:06:54:d5: 65:fd:d2:67:fe:77:f8:ef:1a:4f:1e:22:09:9c:85: b4:09:05:1e:75:1a:95:1b:58:a5:88:2a:20:60:15: 0e:98:51:72:99:52:b2:3f:22:fb:35:11:98:ce:36: af:c0:ac:ba:23:20:e5:71:81:d8:c7:80:b3:6a:ca: 7d:a3:03:79:d4:7c:68:38:76:7c:ae:e8:74:43:7b: 0a:8d:72:a3:e5:dd:29:f8:9a:1b:a2:92:29:50:c9: c6:88:e4:cf:d9:da:47:5e:f8:da:2d:36:52:68:8e: 79:a3:e9:49:1c:bd:3b:a2:66:3f:56:7f:f1:67:88: b0:74:6a:2a:61:c6:54:06:53:49:bc:e4:b1:65:e2: 55:95:71:e2:d9:d7:3f:c3:c9:3c:71:35:39:55:34: 2a:d1:a4:19:a2:ec:87:90:34:94:dd:6f:30:bc:12: 1c:63:71:a8:ee:c3:8b:af:2b:c7:82:dc:92:33:54: 2d:8e:50:00:e9:80:22:1c:99:ff:7c:c5:00:0a:de: ed:17:d2:0e:93:5b:8b:3e:d1:eb:ae:bc:ac:b4:d6: 2e:30:2c:f1:84:a3:4c:56:ea:9c:44:88:70:46:1c: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:67:4D:D8:8D:4A:BF:22:EC:1E:E9:C4:5A:89:26:F4:24:5D:47:AF X509v3 Authority Key Identifier: keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:73:28:4d:6c:d6:0a:b0:2b:20:40:3f:48:25:42:63:71:3a: 27:01:d7:ce:a6:24:ce:ce:29:3c:e1:30:11:29:bd:0c:25:2a: 21:e5:9a:05:99:1d:29:f7:64:8d:ac:5d:27:35:49:f4:1e:b9: 57:46:73:8b:bd:49:bd:d3:f2:b5:a9:6b:85:16:b7:80:ba:61: 28:eb:b0:f9:93:26:4d:f8:fd:ae:d3:a7:e1:a4:fc:c2:6b:15: 1c:af:a1:53:d4:1d:18:cb:7b:00:d9:db:8a:f8:12:67:6e:03: 3c:dc:57:6a:14:45:71:a8:39:fd:96:9f:d0:c5:84:83:fa:55: 87:24:49:07:8f:5b:1b:f4:cb:ea:c8:e1:c8:68:3e:cc:c1:c7: f0:98:fc:12:81:b1:9e:99:6d:92:ee:bb:58:80:e7:36:fa:44: d8:86:32:ac:d9:f9:30:1d:db:4b:38:b3:f7:e2:19:1a:dd:1c: 33:79:0b:5d:a4:44:42:44:c4:cb:98:7e:50:1f:8b:a8:e4:f9: 6f:b3:af:17:36:b6:70:6f:bc:87:bc:ff:36:a3:b1:62:64:fb: 4d:b2:87:d3:e0:7c:7e:07:9d:75:86:53:87:0f:08:5f:1e:dc: 50:63:c1:9e:36:06:ba:60:84:ee:ac:35:37:1d:8a:6d:65:39: 09:3f:9a:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7hDL9Agch54qBB/ZzKRt8FAimUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhB M0IyMzgxNDAeFw0yNjA2MDIxOTI4NDJaFw0yNjA2MDMyMTMwNDJaMDMxMTAvBgNV BAMTKEZBNjc0REQ4OEQ0QUJGMjJFQzFFRTlDNDVBODkyNkY0MjQ1RDQ3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuDbLiQhSMQerzMm6F+a9EyRLZ hVzvRmKp1gZU1WX90mf+d/jvGk8eIgmchbQJBR51GpUbWKWIKiBgFQ6YUXKZUrI/ Ivs1EZjONq/ArLojIOVxgdjHgLNqyn2jA3nUfGg4dnyu6HRDewqNcqPl3Sn4mhui kilQycaI5M/Z2kde+NotNlJojnmj6UkcvTuiZj9Wf/FniLB0aiphxlQGU0m85LFl 4lWVceLZ1z/DyTxxNTlVNCrRpBmi7IeQNJTdbzC8Ehxjcajuw4uvK8eC3JIzVC2O UADpgCIcmf98xQAK3u0X0g6TW4s+0euuvKy01i4wLPGEo0xW6pxEiHBGHLuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mdN2I1KvyLsHunEWokm9CRdR68wHwYDVR0j BBgwFoAUfQICZpvQPkGZlXtelev9yKOyOBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjllN2EyOGEtNjJmMC00ZDE0LTg3MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5 QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhBM0IyMzgxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDAyMDI2NjlCRDAzRTQxOTk5NTdCNUU5NUVCRkRDOEEzQjIz ODE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZE QzhBM0IyMzgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZzKE1s1gqwKyBAP0glQmNxOicB186mJM7O KTzhMBEpvQwlKiHlmgWZHSn3ZI2sXSc1SfQeuVdGc4u9Sb3T8rWpa4UWt4C6YSjr sPmTJk34/a7Tp+Gk/MJrFRyvoVPUHRjLewDZ24r4EmduAzzcV2oURXGoOf2Wn9DF hIP6VYckSQePWxv0y+rI4choPszBx/CY/BKBsZ6ZbZLuu1iA5zb6RNiGMqzZ+TAd 20s4s/fiGRrdHDN5C12kREJExMuYflAfi6jk+W+zrxc2tnBvvIe8/zajsWJk+02y h9PgfH4HnXWGU4cPCF8e3FBjwZ42BrpghO6sNTcdim1lOQk/miw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:28 2026 by rpki-client