$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: 7DXBn/v/NJQqNB0ny4PxoPLsqJzNjI2D+plV+BRmir4= Subject key identifier: 4B:77:5F:A2:8F:49:25:62:0F:32:18:91:87:CD:3A:A7:1A:8E:A5:B7 Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 75E88ED22B9E3A178371357BC5F9DB54B1EBC9A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:20:21 +0000 Manifest this update: Tue 02 Jun 2026 08:15:21 +0000 Manifest next update: Wed 03 Jun 2026 11:41:21 +0000 Files and hashes: 1: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: pSqH8X3FqilsZ+YzAqPO+Ec2bza/Nx9ttprUYFryF/I=) 2: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) 4: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e8:8e:d2:2b:9e:3a:17:83:71:35:7b:c5:f9:db:54:b1:eb:c9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Jun 2 08:15:21 2026 GMT Not After : Jun 3 11:41:21 2026 GMT Subject: CN=4B775FA28F4925620F32189187CD3AA71A8EA5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:e0:c6:df:ad:8a:61:e6:07:b0:d5:11:b8: 88:ef:b3:c2:cd:c5:e9:77:09:eb:6e:36:c5:23:0a: 7d:9e:e5:f1:ac:6d:46:b9:21:a3:2d:0b:95:64:af: f0:b8:93:71:3b:c8:40:df:25:9a:48:2b:1a:03:83: d0:97:f6:b9:6e:9e:b0:5c:12:b8:63:05:44:86:26: 22:83:3a:ee:90:6f:c0:74:2b:4e:af:9a:d6:13:20: e6:a2:dd:53:85:58:83:b6:d2:30:5d:d5:83:20:a1: 84:5f:a9:cc:15:76:f4:f8:4e:b0:f9:a2:8e:ea:05: db:4e:64:09:f9:9a:61:ec:d9:eb:3e:2a:41:a3:13: f4:c3:f5:e8:84:43:ca:d6:6f:46:aa:cd:99:3a:ca: 68:9c:8a:83:b9:7e:85:a8:e1:20:54:07:a1:94:8b: 1c:f0:35:3c:45:4e:10:2d:db:ad:0a:14:7e:e5:f7: 06:9e:c5:95:0c:9a:af:e7:83:c5:60:02:34:db:c9: 2f:f4:23:73:4b:f9:6a:5f:ff:c8:2d:d6:d5:f0:71: cb:70:5a:89:7e:64:94:41:a1:a0:a0:de:b8:03:6d: e1:1e:79:3f:48:36:20:62:26:35:97:32:df:08:dd: 85:e2:5e:dc:bf:39:d5:fe:d1:40:17:12:66:e4:7e: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:5F:A2:8F:49:25:62:0F:32:18:91:87:CD:3A:A7:1A:8E:A5:B7 X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:48:c6:d5:2f:21:b9:cc:b6:e0:60:a6:2b:69:db:29:0a:72: c5:9c:86:20:80:be:e0:88:57:6a:27:c9:9c:4a:cf:30:97:48: 52:29:1c:1e:27:47:e0:d9:29:ad:be:ba:fc:56:0d:0d:67:15: e8:53:d9:30:a7:80:f7:25:a5:ae:bb:2e:3a:fa:73:5d:04:1e: 6e:a4:76:65:84:b1:32:72:8c:83:4a:97:6a:4f:38:76:48:99: dc:97:f7:52:77:9f:ee:32:36:76:78:1a:7c:f2:1e:64:05:26: b1:c5:d1:0f:7b:99:8d:62:38:10:29:cb:d3:ee:25:3b:b2:08: bc:3c:ad:47:81:06:04:b8:65:33:49:16:3e:21:af:bd:1b:4a: 8e:43:9b:18:70:f5:5a:58:03:73:27:e5:55:3d:c8:1e:27:ae: 66:f6:51:1d:1f:05:bc:05:0c:bc:c8:6d:ee:7e:65:35:86:b3: 56:d6:29:f3:15:c9:39:02:de:39:2f:69:cd:34:d6:b8:51:2a: 08:9e:c6:5d:24:27:6e:a2:2c:e0:a3:9e:4b:2b:29:4e:de:3b: 3c:d3:1e:db:6e:64:0b:db:94:bd:a1:a3:4d:24:37:f7:f1:2a: de:e0:d5:25:07:fe:3c:10:50:93:c3:91:ea:54:9f:11:3e:8b: e9:d0:d2:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeiO0iueOheDcTV7xfnbVLHryaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA2MDIwODE1MjFaFw0yNjA2MDMxMTQxMjFaMDMxMTAvBgNV BAMTKDRCNzc1RkEyOEY0OTI1NjIwRjMyMTg5MTg3Q0QzQUE3MUE4RUE1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+n+DG362KYeYHsNURuIjvs8LN xel3CetuNsUjCn2e5fGsbUa5IaMtC5Vkr/C4k3E7yEDfJZpIKxoDg9CX9rlunrBc ErhjBUSGJiKDOu6Qb8B0K06vmtYTIOai3VOFWIO20jBd1YMgoYRfqcwVdvT4TrD5 oo7qBdtOZAn5mmHs2es+KkGjE/TD9eiEQ8rWb0aqzZk6ymicioO5foWo4SBUB6GU ixzwNTxFThAt260KFH7l9waexZUMmq/ng8VgAjTbyS/0I3NL+Wpf/8gt1tXwcctw Wol+ZJRBoaCg3rgDbeEeeT9INiBiJjWXMt8I3YXiXty/OdX+0UAXEmbkfjO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3dfoo9JJWIPMhiRh806pxqOpbcwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNIxtUvIbnMtuBgpitp2ykKcsWchiCAvuCI V2onyZxKzzCXSFIpHB4nR+DZKa2+uvxWDQ1nFehT2TCngPclpa67Ljr6c10EHm6k dmWEsTJyjINKl2pPOHZImdyX91J3n+4yNnZ4GnzyHmQFJrHF0Q97mY1iOBApy9Pu JTuyCLw8rUeBBgS4ZTNJFj4hr70bSo5Dmxhw9VpYA3Mn5VU9yB4nrmb2UR0fBbwF DLzIbe5+ZTWGs1bWKfMVyTkC3jkvac001rhRKgiexl0kJ26iLOCjnksrKU7eOzzT HttuZAvblL2ho00kN/fxKt7g1SUH/jwQUJPDkepUnxE+i+nQ0ic= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:55 2026 by rpki-client