$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json) Hash identifier: r/HXqvvFGVyDn0VxavNbu7HfUi0iRD2MD+o3R0j6A+k= Subject key identifier: 47:B9:43:D1:AB:EF:7D:89:96:32:4A:4A:7D:F4:A5:F5:DE:A3:87:89 Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Certificate serial: 5A26FD57CC972916FEB63A28861223C78675257F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:15:17 +0000 Manifest this update: Mon 20 Jul 2026 11:10:17 +0000 Manifest next update: Tue 21 Jul 2026 14:25:17 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=) 2: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: pzMEkQn28GmrDClKn1SJZZcOKs1ZNeSyUP6sL6Oj/TE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:26:fd:57:cc:97:29:16:fe:b6:3a:28:86:12:23:c7:86:75:25:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Validity Not Before: Jul 20 11:10:17 2026 GMT Not After : Jul 21 14:25:17 2026 GMT Subject: CN=47B943D1ABEF7D8996324A4A7DF4A5F5DEA38789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:45:0b:12:5e:56:cc:c9:07:2b:3a:59:d4: f3:81:f0:11:90:21:44:a9:ee:1b:8f:fb:4c:bf:d2: 84:52:d4:17:27:c9:5b:be:f0:a5:7d:00:55:5b:54: 77:56:05:ea:21:f2:b3:2a:d7:92:fd:e2:d8:17:50: df:b9:b4:b5:73:9a:12:b1:e1:94:ad:23:ce:22:77: e5:e3:91:73:22:61:e0:ec:da:12:93:81:8b:b7:9d: b7:14:72:55:78:8f:b9:bc:e7:cd:a3:b3:65:53:05: 0e:69:5a:96:e7:9e:d0:01:1d:50:81:ef:df:2e:e7: b0:36:d5:54:86:36:eb:6d:90:7e:3b:00:62:8b:16: 19:c3:15:48:53:bd:ea:9d:99:ba:c6:db:ab:e5:31: 7a:e5:e9:83:0a:86:f3:a7:6b:f8:e5:e7:45:56:80: 42:8f:ce:2c:fb:aa:ed:74:73:aa:9a:50:ba:9d:d6: 42:d2:a3:15:50:8f:bb:78:ec:14:07:45:dc:8f:d2: 74:90:19:87:56:1f:df:39:60:5b:d9:f0:84:d7:2e: b3:08:10:ef:9b:aa:8f:cd:3b:f7:03:2a:38:86:87: 7c:5f:a8:96:71:4f:11:66:53:a6:53:2b:66:1f:fd: ab:15:a7:52:3b:95:49:9d:02:d1:07:21:bd:14:81: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:43:D1:AB:EF:7D:89:96:32:4A:4A:7D:F4:A5:F5:DE:A3:87:89 X509v3 Authority Key Identifier: keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2c:bf:fc:95:dc:c2:3b:8c:ef:8a:46:4b:35:20:60:81:80: f9:ac:33:71:c2:6a:85:84:d3:4b:cc:0f:6d:98:49:aa:02:ca: d7:4f:3c:16:46:25:33:3d:df:d3:9e:ca:14:25:5b:5d:d3:89: a3:80:38:92:97:c7:3e:df:6d:bc:4c:34:05:27:ba:19:7a:aa: 1b:34:e4:d6:28:76:ed:79:07:a6:7f:69:6d:73:ca:46:8b:15: 19:e4:7d:c9:c2:77:01:bc:64:1f:7d:af:17:75:88:33:93:7f: ff:b7:6e:e9:a5:25:50:ce:02:6f:d1:af:d0:c9:11:bb:5e:cb: af:11:33:06:e4:51:86:a1:d8:58:8e:27:c6:e1:7f:8d:4d:1a: f2:a1:01:b9:81:f9:9d:2f:d1:fe:b7:af:ee:3b:ed:16:60:50: 4f:6d:03:28:d0:e5:c6:27:d1:43:c5:39:29:c8:f3:fa:da:c5: fb:e0:36:97:91:88:37:aa:1a:30:c1:84:3f:f3:28:bd:99:39: d4:8a:da:b5:cf:55:89:f6:7d:d0:a8:04:88:30:01:a8:1c:b3: 76:92:7f:4d:3e:bf:3d:79:a5:ca:74:62:2b:5b:2f:bb:cc:fe: dd:42:9e:50:2e:39:58:61:e8:36:cb:a6:cc:12:83:78:15:ee: 9a:76:a4:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWib9V8yXKRb+tjoohhIjx4Z1JX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0 OTRDOTI5NjAeFw0yNjA3MjAxMTEwMTdaFw0yNjA3MjExNDI1MTdaMDMxMTAvBgNV BAMTKDQ3Qjk0M0QxQUJFRjdEODk5NjMyNEE0QTdERjRBNUY1REVBMzg3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCkULEl5WzMkHKzpZ1POB8BGQ IUSp7huP+0y/0oRS1BcnyVu+8KV9AFVbVHdWBeoh8rMq15L94tgXUN+5tLVzmhKx 4ZStI84id+XjkXMiYeDs2hKTgYu3nbcUclV4j7m8582js2VTBQ5pWpbnntABHVCB 798u57A21VSGNuttkH47AGKLFhnDFUhTveqdmbrG26vlMXrl6YMKhvOna/jl50VW gEKPziz7qu10c6qaULqd1kLSoxVQj7t47BQHRdyP0nSQGYdWH985YFvZ8ITXLrMI EO+bqo/NO/cDKjiGh3xfqJZxTxFmU6ZTK2Yf/asVp1I7lUmdAtEHIb0UgUXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR7lD0avvfYmWMkpKffSl9d6jh4kwHwYDVR0j BBgwFoAUevEIs+Drt59sOrvso0N0KUlMkpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNF MEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0OTRDOTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUYxMDhCM0UwRUJCNzlGNkMzQUJCRUNBMzQzNzQyOTQ5NEM5 Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0 Mjk0OTRDOTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYsv/yV3MI7jO+KRks1IGCBgPmsM3HCaoWE 00vMD22YSaoCytdPPBZGJTM939OeyhQlW13TiaOAOJKXxz7fbbxMNAUnuhl6qhs0 5NYodu15B6Z/aW1zykaLFRnkfcnCdwG8ZB99rxd1iDOTf/+3bumlJVDOAm/Rr9DJ Ebtey68RMwbkUYah2FiOJ8bhf41NGvKhAbmB+Z0v0f63r+477RZgUE9tAyjQ5cYn 0UPFOSnI8/raxfvgNpeRiDeqGjDBhD/zKL2ZOdSK2rXPVYn2fdCoBIgwAagcs3aS f00+vz15pcp0YitbL7vM/t1CnlAuOVhh6DbLpswSg3gV7pp2pKg= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:42 2026 by rpki-client