$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: B98OEWHUeMJn7TlUjvZQKRk+XtrvA7tadmRoHgnw85o= Subject key identifier: 43:E7:66:8E:ED:F6:79:A1:68:3B:47:36:4A:6E:C6:F9:E6:04:15:D1 Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 2893EB15EFA88F802EE268725CF49263615A9370 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 10:55:19 +0000 Manifest this update: Sun 19 Jul 2026 10:50:19 +0000 Manifest next update: Mon 20 Jul 2026 13:25:19 +0000 Files and hashes: 1: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: mq0DjSnboJgiN43E2VsuIYB1QAi9S7Sj4EDffhoZPlU=) 2: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:93:eb:15:ef:a8:8f:80:2e:e2:68:72:5c:f4:92:63:61:5a:93:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Jul 19 10:50:19 2026 GMT Not After : Jul 20 13:25:19 2026 GMT Subject: CN=43E7668EEDF679A1683B47364A6EC6F9E60415D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:13:26:8a:31:fb:9a:a5:f4:20:d7:79:b8: 75:fd:40:e2:e9:2b:0a:6a:ac:07:78:f8:3c:39:9e: 8b:b0:2b:b2:c3:c9:49:8b:5e:d2:f4:de:b4:67:52: a1:39:93:8f:b5:f9:01:a5:91:69:92:15:e7:ac:ce: 59:35:ad:75:61:f0:e0:48:d1:a3:55:b4:49:57:b3: 78:55:bf:ce:3e:50:7f:73:a6:31:e4:22:2c:4a:b1: 55:4b:65:dc:ab:76:50:03:5a:e7:bd:4a:09:64:fb: 15:3d:ad:1f:db:2f:53:7c:15:a1:7b:28:a0:5f:49: ca:2a:b6:cf:c2:cf:d6:b2:c6:54:c1:95:e8:87:e7: 3a:56:51:61:a6:64:a3:c2:28:37:71:84:d1:c8:59: 34:70:0f:2c:16:b8:2a:ee:9d:aa:87:22:30:ee:85: e6:45:c0:b6:24:96:6b:81:aa:bc:19:61:68:61:78: c8:9e:82:9f:0d:30:53:7f:6b:55:f4:aa:09:6e:66: 45:0f:19:47:93:d4:a4:cc:a5:0c:17:28:c8:16:14: d8:bc:d9:9a:f6:3f:45:7d:06:87:aa:08:f1:a0:85: fc:c5:39:b0:e6:34:af:cf:9a:8a:20:b3:c9:90:33: b3:01:bf:f5:66:e8:0d:77:12:c2:59:4a:1e:5b:97: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:66:8E:ED:F6:79:A1:68:3B:47:36:4A:6E:C6:F9:E6:04:15:D1 X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:86:23:eb:a2:d6:3c:ca:2f:01:c7:d6:24:a1:0e:f3:58:cd: dd:78:d9:5d:04:41:3f:04:3e:e1:1b:f2:1b:01:d4:f2:37:95: 37:2b:74:f5:a4:82:d0:c2:8e:60:e6:25:38:c3:f5:74:4f:6f: cf:e0:64:89:74:b4:8e:25:82:20:29:41:a1:e9:2b:6d:81:b2: 8b:1b:e7:08:c9:4a:79:65:db:db:21:d8:44:d7:a3:9d:d5:c3: 66:a8:25:4f:0a:89:67:0e:61:9d:28:8c:4d:8c:3c:ef:0e:51: bd:c0:9a:fb:60:d0:bb:e6:8f:63:cd:91:63:72:7c:13:82:8c: 1a:08:1e:19:60:1f:88:5a:be:c0:23:99:5f:c3:73:ee:57:d6: bb:2b:76:d6:73:cb:9e:cd:14:94:6d:58:1a:35:d7:d6:60:c9: 2f:18:8d:09:84:15:8a:1d:5a:07:81:17:4d:fa:a4:cb:e6:b6: fe:7c:ea:68:b3:07:95:bd:76:ee:0c:60:44:a6:cb:6e:63:a8: d6:e4:02:79:21:e6:55:c2:dc:7f:9f:0a:7e:27:d0:d9:de:3d: d3:79:38:ee:9d:21:4d:d7:47:88:04:54:5a:b8:32:c9:84:34: 18:f6:89:2a:a6:15:99:60:c3:c8:f9:62:2f:85:20:ca:63:8e: 29:f2:b1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJPrFe+oj4Au4mhyXPSSY2Fak3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA3MTkxMDUwMTlaFw0yNjA3MjAxMzI1MTlaMDMxMTAvBgNV BAMTKDQzRTc2NjhFRURGNjc5QTE2ODNCNDczNjRBNkVDNkY5RTYwNDE1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPhMmijH7mqX0INd5uHX9QOLp KwpqrAd4+Dw5nouwK7LDyUmLXtL03rRnUqE5k4+1+QGlkWmSFeeszlk1rXVh8OBI 0aNVtElXs3hVv84+UH9zpjHkIixKsVVLZdyrdlADWue9Sglk+xU9rR/bL1N8FaF7 KKBfScoqts/Cz9ayxlTBleiH5zpWUWGmZKPCKDdxhNHIWTRwDywWuCrunaqHIjDu heZFwLYklmuBqrwZYWhheMiegp8NMFN/a1X0qgluZkUPGUeT1KTMpQwXKMgWFNi8 2Zr2P0V9BoeqCPGghfzFObDmNK/Pmoogs8mQM7MBv/Vm6A13EsJZSh5bl/ibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+dmju32eaFoO0c2Sm7G+eYEFdEwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaGI+ui1jzKLwHH1iShDvNYzd142V0EQT8E PuEb8hsB1PI3lTcrdPWkgtDCjmDmJTjD9XRPb8/gZIl0tI4lgiApQaHpK22Bsosb 5wjJSnll29sh2ETXo53Vw2aoJU8KiWcOYZ0ojE2MPO8OUb3Amvtg0Lvmj2PNkWNy fBOCjBoIHhlgH4havsAjmV/Dc+5X1rsrdtZzy57NFJRtWBo119ZgyS8YjQmEFYod WgeBF036pMvmtv586mizB5W9du4MYESmy25jqNbkAnkh5lXC3H+fCn4n0NnePdN5 OO6dIU3XR4gEVFq4MsmENBj2iSqmFZlgw8j5Yi+FIMpjjinysfw= -----END CERTIFICATE-----Generated at Sun Jul 19 23:07:02 2026 by rpki-client