$ rpki-client -vvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: mGTfTGYHg5thHl1lP5j6KjYodKLrrUAlH/KF2E+JrHk= Subject key identifier: BB:D8:40:0B:50:B2:B7:9C:4C:DC:9A:2D:70:4E:86:5D:E7:A9:D6:15 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 7DAA841B54904A0BEB642078C1DFF86117E0E831 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:23:51 +0000 Manifest this update: Sat 20 Jun 2026 03:18:51 +0000 Manifest next update: Sun 21 Jun 2026 06:27:51 +0000 Files and hashes: 1: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: VwKAnBQbIpZKmHF9TZZPlrogW/gvDG7kQW38jDEFIKo=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 3: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:aa:84:1b:54:90:4a:0b:eb:64:20:78:c1:df:f8:61:17:e0:e8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Jun 20 03:18:51 2026 GMT Not After : Jun 21 06:27:51 2026 GMT Subject: CN=BBD8400B50B2B79C4CDC9A2D704E865DE7A9D615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:9f:66:bf:d7:b1:80:00:03:ce:46:ae:84: b6:16:e0:c4:6b:1c:1d:80:6c:4a:25:3c:19:79:6f: 2a:8b:26:0a:84:0e:ad:2e:74:2d:a9:7a:fb:d8:c0: 16:f5:64:47:5d:fa:fc:32:cd:9b:e1:32:3a:7f:fc: cc:6b:7c:ef:62:f2:2a:77:c9:f3:2f:70:cc:67:57: 94:60:b1:98:d1:48:65:2a:8c:6f:04:38:45:cc:c2: 54:32:19:25:19:09:10:ff:66:1d:8f:76:d8:df:7a: 31:91:33:e0:ee:b4:6b:36:04:c3:bd:c1:38:eb:0b: f1:3e:66:db:62:d0:9d:9b:f3:4d:a1:fe:2b:a9:fd: 02:b4:0f:b3:8c:b3:53:0f:09:12:ad:1e:83:b3:30: d1:bc:f3:bd:89:8f:36:f6:11:13:24:7e:c3:d5:d6: 1a:01:d5:74:36:2e:c4:a5:39:23:a5:3a:60:d1:1d: f2:7a:05:2f:e7:45:58:d8:af:48:7e:4a:ff:40:f5: 28:cc:40:c7:b5:19:0c:2a:57:d7:bb:4a:c1:3f:1f: d9:6d:49:86:ff:0a:e6:f0:2a:e2:57:1a:f3:78:29: 1e:c4:f0:8d:17:f0:c2:07:e0:fa:76:70:86:22:66: 9a:2c:79:ae:82:76:79:68:09:4a:4b:7e:7f:e6:41: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:40:0B:50:B2:B7:9C:4C:DC:9A:2D:70:4E:86:5D:E7:A9:D6:15 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:55:87:07:04:72:58:26:e4:98:cf:44:af:4c:5f:e6:3b:b1: 4f:86:f0:1b:f3:b2:21:43:b2:ab:1e:2e:c1:f7:fd:9b:2f:85: 08:4b:5c:f7:18:7a:db:e6:77:ad:95:7a:e3:52:90:0e:db:38: c6:3b:aa:8d:4c:37:c7:94:90:59:42:1c:74:05:9d:0d:eb:d5: ec:fa:85:fc:3c:2e:b9:f5:fe:87:17:de:87:e3:6b:8a:38:21: dc:47:a0:42:37:21:47:44:c2:7e:ec:26:95:19:a4:ef:cf:5e: dd:11:00:6c:c0:49:de:25:40:25:dd:6f:3f:9d:d8:cb:1c:fa: 21:cb:f7:02:d2:25:95:a7:94:d4:a8:97:3f:3d:ea:23:36:ab: ac:68:1a:f2:4e:f0:87:0f:9c:ca:b6:42:1c:87:72:b8:ac:40: 2c:7f:72:d2:3e:00:96:a7:92:0b:1c:3b:56:e1:7f:53:f3:61: 5e:88:3b:1c:a0:81:0e:f1:a2:8e:c3:4f:82:6d:a0:08:81:37: 11:2b:97:39:2c:90:db:14:a7:91:5f:31:be:cd:bc:7e:b7:ea: c6:6c:a8:d8:dc:0b:89:c5:38:f0:e0:97:1c:28:cd:36:a6:90: 52:21:58:db:85:92:73:89:34:4a:e5:16:e1:b2:46:e4:99:21: 16:f5:ff:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaqEG1SQSgvrZCB4wd/4YRfg6DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA2MjAwMzE4NTFaFw0yNjA2MjEwNjI3NTFaMDMxMTAvBgNV BAMTKEJCRDg0MDBCNTBCMkI3OUM0Q0RDOUEyRDcwNEU4NjVERTdBOUQ2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/J9mv9exgAADzkauhLYW4MRr HB2AbEolPBl5byqLJgqEDq0udC2pevvYwBb1ZEdd+vwyzZvhMjp//MxrfO9i8ip3 yfMvcMxnV5RgsZjRSGUqjG8EOEXMwlQyGSUZCRD/Zh2PdtjfejGRM+DutGs2BMO9 wTjrC/E+Ztti0J2b802h/iup/QK0D7OMs1MPCRKtHoOzMNG8872Jjzb2ERMkfsPV 1hoB1XQ2LsSlOSOlOmDRHfJ6BS/nRVjYr0h+Sv9A9SjMQMe1GQwqV9e7SsE/H9lt SYb/CubwKuJXGvN4KR7E8I0X8MIH4Pp2cIYiZposea6CdnloCUpLfn/mQdRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9hAC1Cyt5xM3JotcE6GXeep1hUwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJVhwcEclgm5JjPRK9MX+Y7sU+G8BvzsiFD sqseLsH3/ZsvhQhLXPcYetvmd62VeuNSkA7bOMY7qo1MN8eUkFlCHHQFnQ3r1ez6 hfw8Lrn1/ocX3ofja4o4IdxHoEI3IUdEwn7sJpUZpO/PXt0RAGzASd4lQCXdbz+d 2Msc+iHL9wLSJZWnlNSolz896iM2q6xoGvJO8IcPnMq2QhyHcrisQCx/ctI+AJan kgscO1bhf1PzYV6IOxyggQ7xoo7DT4JtoAiBNxErlzkskNsUp5FfMb7NvH636sZs qNjcC4nFOPDglxwozTamkFIhWNuFknOJNErlFuGyRuSZIRb1/8c= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:05 2026 by rpki-client