$ rpki-client -vvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: DvFbSQfVPeRaPk55/iZbdT7s3NPOOURLAPehFuqwGDc= Subject key identifier: 6F:84:64:39:FE:2B:6F:3D:4D:8A:EE:9E:DF:30:12:1F:14:BC:03:F9 Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 2DCA09ED214DA77EACA7EE237574B352E17B9A84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:46:55 +0000 Manifest this update: Sat 20 Jun 2026 01:41:55 +0000 Manifest next update: Sun 21 Jun 2026 03:54:55 +0000 Files and hashes: 1: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: vlJJdW88YRBMrY5gsvIV8VZd6F2sXC1xF/zzTMO/Sfs=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 3: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ca:09:ed:21:4d:a7:7e:ac:a7:ee:23:75:74:b3:52:e1:7b:9a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Jun 20 01:41:55 2026 GMT Not After : Jun 21 03:54:55 2026 GMT Subject: CN=6F846439FE2B6F3D4D8AEE9EDF30121F14BC03F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:8f:60:f8:48:fc:e9:0e:3b:10:66:4f:36: f9:8b:34:2d:65:95:36:21:73:ee:59:29:71:19:1a: 36:76:31:97:a2:66:4c:16:38:fe:43:1d:20:3e:99: 8f:7e:c6:6a:af:79:84:bd:96:f7:81:b6:62:20:5d: 29:53:46:0c:7d:98:08:01:71:0c:d7:ea:bb:cd:dd: 0b:60:4b:21:46:d4:0e:f9:d7:f9:3c:71:61:20:85: 25:b3:a7:2d:49:92:84:e3:aa:14:72:ac:14:8c:13: 09:73:f1:c6:bd:71:5a:2c:a8:6b:01:2a:20:bb:b0: ce:dd:ec:e7:f6:09:6b:77:00:f1:e2:68:0c:a9:9a: 9a:05:fc:11:b2:bf:27:b3:49:0d:80:82:66:b2:94: 10:53:0b:f7:f5:5a:97:e8:51:61:3e:3a:cb:27:93: 2b:16:d7:bb:48:37:b7:a2:df:ec:c5:c2:fe:c2:ef: 79:c8:14:57:3d:c7:71:4f:24:f4:55:66:ef:1e:cf: 98:23:06:a6:dc:69:48:6b:9a:8b:72:08:2e:5d:f9: 07:28:67:58:40:8a:de:f1:53:4d:a8:b8:b1:4e:05: fd:37:4d:1c:55:38:6a:40:30:7e:45:00:9f:8d:0d: 83:e6:43:b7:b2:b3:b0:f2:56:d7:24:d1:ab:7b:46: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:84:64:39:FE:2B:6F:3D:4D:8A:EE:9E:DF:30:12:1F:14:BC:03:F9 X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1f:65:04:b2:42:2a:8e:0b:78:f5:48:bc:a3:37:67:aa:db: 03:f5:b7:be:7f:5e:b2:f3:f1:b5:9b:b6:8c:ce:7d:04:57:e8: 9b:90:c0:e8:40:cc:93:2a:45:83:20:7a:bc:01:0b:48:cb:25: 17:41:74:20:ce:66:ad:bb:0d:41:7e:35:87:1e:7f:bb:cc:cc: dd:34:94:07:b1:62:24:08:d9:0e:32:da:d2:a3:ca:6e:42:86: 25:32:67:ad:48:bb:c9:d0:19:1e:07:f1:ec:12:2c:8b:3a:97: 17:b6:91:d9:78:c9:fa:af:bb:8e:91:59:61:bb:fb:cd:1b:7b: d2:84:c1:9e:79:f2:81:0b:7e:c2:a2:fc:f5:b9:9b:2e:51:51: d7:f8:67:2e:e6:ec:70:6a:35:39:3c:1a:4b:29:68:e4:6c:cc: 0b:9f:25:bd:50:e8:6a:c2:45:5c:9d:94:4d:b9:98:0c:6e:ce: 26:c9:35:71:f1:98:34:a1:e1:7f:46:ec:90:ef:54:b4:70:f8: 25:ac:d5:d7:67:8a:7d:b3:01:f5:0c:d2:96:0e:2b:6b:60:38: f9:5f:ac:57:8f:22:39:37:e9:36:27:e8:05:e7:05:ed:90:4e: 4b:59:a2:50:8a:a5:23:ed:bc:b7:bd:64:ec:26:69:63:0d:69: 90:df:d4:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcoJ7SFNp36sp+4jdXSzUuF7moQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjA2MjAwMTQxNTVaFw0yNjA2MjEwMzU0NTVaMDMxMTAvBgNV BAMTKDZGODQ2NDM5RkUyQjZGM0Q0RDhBRUU5RURGMzAxMjFGMTRCQzAzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w49g+Ej86Q47EGZPNvmLNC1l lTYhc+5ZKXEZGjZ2MZeiZkwWOP5DHSA+mY9+xmqveYS9lveBtmIgXSlTRgx9mAgB cQzX6rvN3QtgSyFG1A751/k8cWEghSWzpy1JkoTjqhRyrBSMEwlz8ca9cVosqGsB KiC7sM7d7Of2CWt3APHiaAypmpoF/BGyvyezSQ2AgmaylBBTC/f1WpfoUWE+Ossn kysW17tIN7ei3+zFwv7C73nIFFc9x3FPJPRVZu8ez5gjBqbcaUhrmotyCC5d+Qco Z1hAit7xU02ouLFOBf03TRxVOGpAMH5FAJ+NDYPmQ7eys7DyVtck0at7RnPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4RkOf4rbz1Niu6e3zASHxS8A/kwHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwfZQSyQiqOC3j1SLyjN2eq2wP1t75/XrLz 8bWbtozOfQRX6JuQwOhAzJMqRYMgerwBC0jLJRdBdCDOZq27DUF+NYcef7vMzN00 lAexYiQI2Q4y2tKjym5ChiUyZ61Iu8nQGR4H8ewSLIs6lxe2kdl4yfqvu46RWWG7 +80be9KEwZ558oELfsKi/PW5my5RUdf4Zy7m7HBqNTk8GkspaORszAufJb1Q6GrC RVydlE25mAxuzibJNXHxmDSh4X9G7JDvVLRw+CWs1ddnin2zAfUM0pYOK2tgOPlf rFePIjk36TYn6AXnBe2QTktZolCKpSPtvLe9ZOwmaWMNaZDf1K4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:46 2026 by rpki-client