$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json) Hash identifier: sl7Aylef9oVpJX/0H5BVkW9C8QL+m0v+60fWm4X1MgA= Subject key identifier: D3:AF:0E:F6:B0:5D:A7:56:A2:A9:67:B6:13:80:90:46:B9:3F:F8:CC Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Certificate serial: 2CDE01955FEB67A67FA81A18585176C2E868E521 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:04:24 +0000 Manifest this update: Tue 02 Jun 2026 15:59:24 +0000 Manifest next update: Wed 03 Jun 2026 16:04:24 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=) 2: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: xAvBuAVEC1M2oVlFMoZ5CXFNSa8DK6e8bCt73ixbjXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:de:01:95:5f:eb:67:a6:7f:a8:1a:18:58:51:76:c2:e8:68:e5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Validity Not Before: Jun 2 15:59:24 2026 GMT Not After : Jun 3 16:04:24 2026 GMT Subject: CN=D3AF0EF6B05DA756A2A967B613809046B93FF8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:4a:f3:14:0c:26:93:91:64:d5:08:7a:04: bf:70:07:03:92:33:e3:98:9b:a3:65:f4:54:0b:62: 69:ab:8f:2b:7e:4b:77:38:ce:ea:58:4d:be:e2:53: 99:3d:41:ad:33:05:dd:23:fc:86:00:3a:a3:a5:16: 61:7b:1a:c6:4a:26:09:d6:15:de:53:20:eb:fa:47: e2:ad:3f:14:2a:4b:f2:d3:e4:56:fd:89:5b:71:47: dc:51:6f:1f:a2:7a:a5:9b:eb:e3:a8:63:43:65:fc: 2d:3d:fb:aa:5d:70:0a:5a:dd:ab:11:a2:e7:2e:04: 28:7b:ca:54:b1:94:0b:69:3b:2f:e8:cb:12:16:b6: 17:b8:55:ef:39:17:fa:09:cf:91:10:5a:b1:11:ca: 51:d9:67:23:05:d2:99:26:4b:9c:87:65:ab:27:8e: f5:a0:8a:25:7e:68:95:b1:84:8e:fa:6a:e3:82:13: 12:56:23:5b:04:a1:f5:8b:f1:de:e0:24:02:b0:c3: 2d:b2:7a:b2:7b:cd:76:22:14:d9:3f:d9:cf:fb:3f: 42:a6:a0:1b:01:92:c1:67:c3:33:a8:9b:b2:f0:bc: 18:1b:d7:fc:f3:d6:27:c7:a0:81:d8:6e:20:8d:f6: 5c:4f:b8:eb:70:0c:75:5e:44:43:e5:3d:71:aa:c8: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AF:0E:F6:B0:5D:A7:56:A2:A9:67:B6:13:80:90:46:B9:3F:F8:CC X509v3 Authority Key Identifier: keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:7c:85:e3:d8:17:38:e0:c7:d4:1f:a8:7b:25:e1:14:c7:8d: 48:de:d9:a9:26:bf:6d:b3:1a:64:82:90:5c:03:01:87:78:00: c6:28:0f:d4:8d:03:1e:19:0c:24:4c:87:61:70:c0:55:81:7b: 64:d0:e2:3b:30:c4:51:53:b1:b4:71:7c:d5:f1:09:2e:12:a1: 74:d2:d4:19:ff:7d:3e:85:39:d7:fb:85:af:5e:ce:f8:46:60: da:d4:04:6a:eb:d8:03:bb:43:a8:ac:50:86:4d:17:fd:96:ae: 10:71:1e:ea:3d:31:4a:03:8a:b3:3a:fe:b0:c6:fc:f4:75:3b: e4:2c:71:de:a6:a4:6c:b1:87:6f:ad:11:8e:01:83:ab:98:05: 0d:23:ed:35:e6:df:f7:7f:c5:69:4b:71:52:c4:66:fe:5a:78: 1c:56:55:25:0f:a1:9a:50:0d:ac:96:79:f2:82:e0:81:38:e2: cb:ac:28:9d:72:6d:d5:bf:3f:85:ec:1c:89:f7:ba:f7:da:e4: ce:61:c4:44:93:2e:d5:37:ab:08:45:a6:b0:a8:b4:7e:42:69: 99:32:eb:15:2f:b4:a3:b6:c9:1e:ec:fc:aa:72:c0:03:96:df: 5c:94:4b:be:0f:b8:cf:ad:f0:12:bf:05:66:2a:aa:e4:f2:34: 26:e0:6c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULN4BlV/rZ6Z/qBoYWFF2wuho5SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0 OTRDOTI5NjAeFw0yNjA2MDIxNTU5MjRaFw0yNjA2MDMxNjA0MjRaMDMxMTAvBgNV BAMTKEQzQUYwRUY2QjA1REE3NTZBMkE5NjdCNjEzODA5MDQ2QjkzRkY4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIUrzFAwmk5Fk1Qh6BL9wBwOS M+OYm6Nl9FQLYmmrjyt+S3c4zupYTb7iU5k9Qa0zBd0j/IYAOqOlFmF7GsZKJgnW Fd5TIOv6R+KtPxQqS/LT5Fb9iVtxR9xRbx+ieqWb6+OoY0Nl/C09+6pdcApa3asR oucuBCh7ylSxlAtpOy/oyxIWthe4Ve85F/oJz5EQWrERylHZZyMF0pkmS5yHZasn jvWgiiV+aJWxhI76auOCExJWI1sEofWL8d7gJAKwwy2yerJ7zXYiFNk/2c/7P0Km oBsBksFnwzOom7LwvBgb1/zz1ifHoIHYbiCN9lxPuOtwDHVeREPlPXGqyDrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU068O9rBdp1aiqWe2E4CQRrk/+MwwHwYDVR0j BBgwFoAUevEIs+Drt59sOrvso0N0KUlMkpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNF MEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0OTRDOTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUYxMDhCM0UwRUJCNzlGNkMzQUJCRUNBMzQzNzQyOTQ5NEM5 Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0 Mjk0OTRDOTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZ8hePYFzjgx9QfqHsl4RTHjUje2akmv22z GmSCkFwDAYd4AMYoD9SNAx4ZDCRMh2FwwFWBe2TQ4jswxFFTsbRxfNXxCS4SoXTS 1Bn/fT6FOdf7ha9ezvhGYNrUBGrr2AO7Q6isUIZNF/2WrhBxHuo9MUoDirM6/rDG /PR1O+Qscd6mpGyxh2+tEY4Bg6uYBQ0j7TXm3/d/xWlLcVLEZv5aeBxWVSUPoZpQ DayWefKC4IE44susKJ1ybdW/P4XsHIn3uvfa5M5hxESTLtU3qwhFprCotH5CaZky 6xUvtKO2yR7s/KpywAOW31yUS74PuM+t8BK/BWYqquTyNCbgbDU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:10 2026 by rpki-client