$ rpki-client -vvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: hR9IVF/BwqYdAsNVkiA2qg7qHbmmiogKRaWk9CR4AkY= Subject key identifier: 2E:9A:94:8E:D6:E7:B5:B4:3D:EB:4C:39:AF:B9:1C:C3:AA:B3:2A:F5 Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 5777620E2B524C42D8498F73B69F17218CDC3648 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 17:18:12 +0000 Manifest this update: Sun 19 Jul 2026 17:13:12 +0000 Manifest next update: Mon 20 Jul 2026 20:29:12 +0000 Files and hashes: 1: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) 2: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 3: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: /g4ifcamWfdq4g4bvRz9TfIIurIb1E1C8lSRS5Zz94M=) 4: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) 5: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 20:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:77:62:0e:2b:52:4c:42:d8:49:8f:73:b6:9f:17:21:8c:dc:36:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Jul 19 17:13:12 2026 GMT Not After : Jul 20 20:29:12 2026 GMT Subject: CN=2E9A948ED6E7B5B43DEB4C39AFB91CC3AAB32AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:d0:fe:44:db:34:84:e9:b4:6b:20:28:80: e5:eb:74:9f:a5:b8:8b:01:f4:30:82:d2:c6:9f:dd: 88:ed:8e:83:63:97:9a:8d:bc:e5:2f:4a:00:89:cf: 02:4a:57:01:ae:21:c8:07:54:b6:92:2c:a0:62:71: 38:9a:b5:ab:ad:76:27:34:82:fa:eb:c0:96:c7:a2: 65:d2:e8:72:d9:9e:92:0e:ab:8c:bf:f0:eb:df:c0: eb:e7:41:f6:ba:af:bc:95:bf:e8:f8:1a:79:44:08: 56:c6:8c:56:11:22:27:4a:7d:8a:b0:f1:16:90:d1: 5b:75:d4:c3:45:c7:4b:87:f0:54:c8:69:ea:82:ca: 8a:80:b5:72:33:9c:82:17:cf:6e:ab:da:7b:bc:00: 8b:2e:ee:30:a7:46:af:73:82:eb:bb:92:c8:09:e0: e1:41:8b:17:1e:3f:32:77:7a:f2:76:e4:64:69:b4: 20:00:6a:d4:33:8f:9d:cd:0c:6c:ab:b7:bb:ba:87: 78:13:e9:01:09:b0:79:19:5c:55:f0:9b:85:34:4a: 17:23:03:be:3b:90:cd:44:f9:6d:61:f1:4c:60:37: c9:c9:c1:66:d7:7e:40:7c:8a:31:7f:4c:32:5b:96: a1:08:75:c7:c1:b5:af:a0:4e:c4:9f:33:57:04:9f: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:94:8E:D6:E7:B5:B4:3D:EB:4C:39:AF:B9:1C:C3:AA:B3:2A:F5 X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:37:47:45:70:04:bd:56:e2:b5:58:86:29:7c:00:73:24:4b: 0d:6b:e4:5d:1a:5d:d5:3f:e5:e2:60:1b:16:06:15:47:34:50: 37:75:d4:6a:40:9e:31:67:b5:56:92:68:e4:5f:77:ff:7e:1f: 2b:44:13:fb:6e:03:67:57:69:24:c8:26:82:8d:dc:77:c3:f5: b7:d6:53:cc:4a:73:6a:02:39:d2:18:bb:45:17:d7:d1:57:3b: e9:27:f1:7b:cd:19:b1:9b:9d:79:0f:bb:04:1c:9b:b3:78:23: 66:08:78:a9:02:5d:7a:19:3d:14:53:74:68:17:19:af:b8:6c: f8:e8:2c:cd:a4:b4:42:a1:fd:3a:bf:26:a6:10:ea:84:22:94: e1:31:c6:f2:c6:f9:19:0f:60:8e:6e:7f:71:18:dd:2e:d4:ab: 82:55:55:5e:76:10:37:c0:7a:16:29:cc:92:00:36:87:e5:a1: 7f:eb:ba:d8:ed:39:7e:dc:8f:85:60:93:a6:c1:b8:7d:96:1b: 21:b2:aa:f7:fd:4b:65:07:6e:6d:98:55:8f:f4:c6:5c:ea:d2: f8:b9:09:14:a2:02:66:b4:85:5f:2b:8e:42:02:30:65:26:2e: c6:8b:92:af:ee:2d:0d:62:18:2c:98:fb:59:ad:34:d1:3e:3d: bc:cc:8e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3diDitSTELYSY9ztp8XIYzcNkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjA3MTkxNzEzMTJaFw0yNjA3MjAyMDI5MTJaMDMxMTAvBgNV BAMTKDJFOUE5NDhFRDZFN0I1QjQzREVCNEMzOUFGQjkxQ0MzQUFCMzJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yND+RNs0hOm0ayAogOXrdJ+l uIsB9DCC0saf3YjtjoNjl5qNvOUvSgCJzwJKVwGuIcgHVLaSLKBicTiatautdic0 gvrrwJbHomXS6HLZnpIOq4y/8OvfwOvnQfa6r7yVv+j4GnlECFbGjFYRIidKfYqw 8RaQ0Vt11MNFx0uH8FTIaeqCyoqAtXIznIIXz26r2nu8AIsu7jCnRq9zguu7ksgJ 4OFBixcePzJ3evJ25GRptCAAatQzj53NDGyrt7u6h3gT6QEJsHkZXFXwm4U0Shcj A747kM1E+W1h8UxgN8nJwWbXfkB8ijF/TDJblqEIdcfBta+gTsSfM1cEn/7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpqUjtbntbQ960w5r7kcw6qzKvUwHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY3R0VwBL1W4rVYhil8AHMkSw1r5F0aXdU/ 5eJgGxYGFUc0UDd11GpAnjFntVaSaORfd/9+HytEE/tuA2dXaSTIJoKN3HfD9bfW U8xKc2oCOdIYu0UX19FXO+kn8XvNGbGbnXkPuwQcm7N4I2YIeKkCXXoZPRRTdGgX Ga+4bPjoLM2ktEKh/Tq/JqYQ6oQilOExxvLG+RkPYI5uf3EY3S7Uq4JVVV52EDfA ehYpzJIANofloX/rutjtOX7cj4Vgk6bBuH2WGyGyqvf9S2UHbm2YVY/0xlzq0vi5 CRSiAma0hV8rjkICMGUmLsaLkq/uLQ1iGCyY+1mtNNE+PbzMjlw= -----END CERTIFICATE-----Generated at Mon Jul 20 04:31:31 2026 by rpki-client