$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: pbvEMj0JW1AEgiqouN5QaxlxF/wVp5Lbztcgvvt+mTo= Subject key identifier: 5A:26:55:89:73:85:25:DE:B6:D7:19:A9:72:32:95:95:E7:F2:2F:8C Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 5AACF6772919BD90BE0840F03FA6A8529087CA17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: 60 Signing time: Mon 13 Jul 2026 12:59:33 +0000 Manifest this update: Mon 13 Jul 2026 12:54:33 +0000 Manifest next update: Tue 14 Jul 2026 14:42:33 +0000 Files and hashes: 1: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 2: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 3: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 4: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) 5: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 6: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 7: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: 8PxvGi0RMi+UXFuAwPntyvlNTxDgVOFGEgwpS6O+kH4=) 8: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 9: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ac:f6:77:29:19:bd:90:be:08:40:f0:3f:a6:a8:52:90:87:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Jul 13 12:54:33 2026 GMT Not After : Jul 14 14:42:33 2026 GMT Subject: CN=5A265589738525DEB6D719A972329595E7F22F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:98:23:c1:79:e2:14:6c:34:d1:87:2d:ff: 02:ad:68:ff:59:2a:65:8e:6f:39:e2:a7:fb:8f:40: 43:f4:76:4a:8b:ba:f4:2d:73:7a:07:32:6b:02:3b: 92:7d:48:cf:1c:19:30:8d:84:ef:96:e5:1c:21:3b: 32:30:30:c8:42:14:1c:98:a8:64:06:8b:4e:83:6d: f4:35:a9:8f:4c:18:83:9a:d9:84:c8:a4:32:4e:1f: a2:a5:b2:33:f9:1f:d5:47:55:00:49:e5:c4:fd:8f: b8:15:e3:63:e4:d0:ac:2e:26:33:c0:bc:dc:26:db: e1:48:02:11:76:65:48:bd:65:07:43:95:6b:84:37: ff:48:a9:d8:7c:eb:ff:68:60:b9:38:8b:0e:7f:35: 41:5e:2d:60:06:8c:c5:1b:13:4f:f6:23:23:7c:61: 8b:69:9c:4f:67:6a:30:28:43:af:5f:fe:1a:c3:5d: d9:2a:79:d9:9f:44:50:61:a1:27:ae:85:9e:a3:d7: 5b:c2:3a:db:e6:11:70:0a:19:43:9e:bd:88:a9:79: 43:71:f7:4a:6f:a0:1b:97:55:6e:13:ec:fb:f7:70: 35:ff:9c:e9:75:d6:37:7e:1e:d9:38:06:9e:ad:24: 19:8a:c4:a1:3f:8e:df:bf:70:52:ca:d9:be:44:e9: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:55:89:73:85:25:DE:B6:D7:19:A9:72:32:95:95:E7:F2:2F:8C X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:40:79:13:64:20:82:5b:61:ce:2b:fe:4d:c5:ba:c1:0b: a8:d8:58:ca:b8:e5:54:c9:76:8d:70:0b:43:81:3f:10:e8:df: 80:50:d0:7f:7b:2a:d6:62:5a:0a:d1:ad:65:00:6a:13:61:79: 89:59:13:4b:33:9d:29:5d:9c:e7:60:f9:9e:02:15:0f:47:8c: 23:8e:da:73:56:d0:e4:f9:94:ff:e7:4e:d2:6e:05:bb:89:15: 12:e5:a4:cd:2b:ad:fa:ca:20:2d:5d:29:38:a6:2e:a2:7f:38: c9:9f:95:85:ef:d3:e0:8f:0c:5f:24:13:28:a2:79:11:6d:f8: 57:46:94:32:a3:ec:c9:ba:35:6c:66:a1:51:8e:43:da:92:e8: d8:a6:1e:05:9a:00:93:b1:61:a1:7c:d1:32:9c:3e:55:5f:8e: d5:1f:c3:a0:e2:5d:8a:c6:7b:1e:79:04:7e:d1:6c:c8:39:d4: 33:9b:8e:83:3c:e0:a2:dc:a8:9e:2b:87:48:d3:79:fc:87:ae: 10:bc:6d:a7:6c:35:59:38:74:6b:4d:ac:fb:1d:72:2a:34:42: 81:d6:44:d1:f7:12:e7:f5:f4:05:e5:8e:e6:0e:c5:6e:30:a4: 5d:21:a7:41:c1:fe:45:c0:d5:80:33:98:67:cc:c5:3c:41:fd: e4:7a:e4:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqz2dykZvZC+CEDwP6aoUpCHyhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA3MTMxMjU0MzNaFw0yNjA3MTQxNDQyMzNaMDMxMTAvBgNV BAMTKDVBMjY1NTg5NzM4NTI1REVCNkQ3MTlBOTcyMzI5NTk1RTdGMjJGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxpgjwXniFGw00Yct/wKtaP9Z KmWObznip/uPQEP0dkqLuvQtc3oHMmsCO5J9SM8cGTCNhO+W5RwhOzIwMMhCFByY qGQGi06DbfQ1qY9MGIOa2YTIpDJOH6KlsjP5H9VHVQBJ5cT9j7gV42Pk0KwuJjPA vNwm2+FIAhF2ZUi9ZQdDlWuEN/9Iqdh86/9oYLk4iw5/NUFeLWAGjMUbE0/2IyN8 YYtpnE9najAoQ69f/hrDXdkqedmfRFBhoSeuhZ6j11vCOtvmEXAKGUOevYipeUNx 90pvoBuXVW4T7Pv3cDX/nOl11jd+Htk4Bp6tJBmKxKE/jt+/cFLK2b5E6ZT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiZViXOFJd621xmpcjKVlefyL4wwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdXQHkTZCCCW2HOK/5NxbrBC6jYWMq45VTJ do1wC0OBPxDo34BQ0H97KtZiWgrRrWUAahNheYlZE0sznSldnOdg+Z4CFQ9HjCOO 2nNW0OT5lP/nTtJuBbuJFRLlpM0rrfrKIC1dKTimLqJ/OMmflYXv0+CPDF8kEyii eRFt+FdGlDKj7Mm6NWxmoVGOQ9qS6NimHgWaAJOxYaF80TKcPlVfjtUfw6DiXYrG ex55BH7RbMg51DObjoM84KLcqJ4rh0jTefyHrhC8badsNVk4dGtNrPsdcio0QoHW RNH3Euf19AXljuYOxW4wpF0hp0HB/kXA1YAzmGfMxTxB/eR65Ak= -----END CERTIFICATE-----Generated at Mon Jul 13 21:58:32 2026 by rpki-client