$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json) Hash identifier: AUWdRKVdQLy3MkZWvTMF/hlzZS6LMhDN+fvfE8Q6zY4= Subject key identifier: B3:4B:CF:DA:DA:1C:8F:B7:64:A3:A3:60:46:EE:53:5A:49:1D:5C:33 Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Certificate serial: 36F1ACE2E9EABE77E1852FED70192A7F2B84B61C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 01:09:05 +0000 Manifest this update: Sun 02 Aug 2026 01:04:05 +0000 Manifest next update: Mon 03 Aug 2026 02:02:05 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=) 4: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: DMkG/i+FiVWY++9a6yYP92MaH6eg4Qph635n+DttrMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f1:ac:e2:e9:ea:be:77:e1:85:2f:ed:70:19:2a:7f:2b:84:b6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Validity Not Before: Aug 2 01:04:05 2026 GMT Not After : Aug 3 02:02:05 2026 GMT Subject: CN=B34BCFDADA1C8FB764A3A36046EE535A491D5C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:79:64:a2:5f:20:98:f3:f4:8b:bc:40:c7:ab: be:57:f6:38:30:e6:cc:32:fb:23:5e:27:4d:ba:cb: 13:ca:37:f0:59:07:5c:0f:fe:39:81:33:d0:e5:c9: 52:db:89:90:ad:a5:a9:14:c4:e7:76:58:3f:1e:ab: ca:30:6c:53:11:97:46:b5:d4:71:08:b1:cb:34:3c: 2d:0b:45:f2:8d:5d:8b:df:19:a2:8d:06:03:48:da: 46:9d:ea:6b:72:68:ea:81:0a:f3:cb:1f:61:54:b1: 8c:6d:64:d6:71:60:95:d8:d5:aa:73:ef:23:e5:eb: 12:c6:7d:b1:2c:88:69:8d:1a:95:64:6d:b4:61:fd: 14:2a:6b:7b:93:83:eb:c4:5c:f8:96:41:9f:99:cc: 0d:a9:de:c2:06:19:37:64:f3:4a:87:23:9a:9b:a8: c6:18:9d:d1:3c:7c:64:1b:86:ab:3f:35:df:a3:75: 1b:fb:60:d5:a9:47:48:9e:64:47:91:ce:bb:a7:2c: 05:7c:48:88:c9:f2:f5:fd:55:84:6e:e7:03:ec:a0: 14:3a:5c:9d:28:38:08:9d:dd:91:35:48:db:06:ce: b4:ca:25:5d:49:8c:c3:18:7e:e0:33:7b:97:f5:f6: d5:61:e4:51:41:62:54:88:b9:00:f6:76:50:7d:e6: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:CF:DA:DA:1C:8F:B7:64:A3:A3:60:46:EE:53:5A:49:1D:5C:33 X509v3 Authority Key Identifier: keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:93:c0:42:b6:e0:44:20:15:fb:dd:c8:b8:d2:87:26:d2:ed: a4:ff:4a:93:24:e4:86:bc:8c:77:f3:f4:d2:93:df:29:c2:60: 11:3b:3f:0c:1c:ff:79:b9:00:b2:3d:1e:62:98:d5:83:1c:01: 7f:aa:be:28:16:d6:f2:6d:ea:89:75:ae:a7:da:73:88:4f:11: d7:f9:78:32:6c:a1:1a:d6:c4:00:b1:49:d0:94:3a:11:ba:bb: 13:22:ee:ec:e8:69:95:f7:97:2d:64:ae:5c:91:00:1a:f3:9e: db:8a:8b:30:d0:00:01:14:92:62:65:09:42:dd:44:de:8b:ac: 1d:d7:af:01:a3:f6:04:a9:16:75:d3:0a:5b:57:2c:03:bb:8f: 20:a6:93:3f:08:39:7a:5c:92:f7:69:ce:bd:af:c6:c4:59:45: 78:2c:0a:da:78:86:d1:33:ce:c6:c7:3d:01:aa:9c:e4:12:a1: 7e:23:56:00:9f:fc:02:5b:97:6c:78:3b:9b:33:58:ad:5c:13: 21:b5:d1:72:9e:11:a9:1f:86:fa:b8:c4:8a:22:9b:9d:02:fc: 6d:49:84:ef:30:5e:d6:f6:b0:ae:ed:7e:a1:0b:32:ba:40:68: 8b:e7:49:93:a4:b5:e9:c2:96:9e:bc:0e:13:67:4f:54:06:20: 42:74:54:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvGs4unqvnfhhS/tcBkqfyuEthwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4 NjNFMjlGNDAeFw0yNjA4MDIwMTA0MDVaFw0yNjA4MDMwMjAyMDVaMDMxMTAvBgNV BAMTKEIzNEJDRkRBREExQzhGQjc2NEEzQTM2MDQ2RUU1MzVBNDkxRDVDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7eWSiXyCY8/SLvEDHq75X9jgw 5swy+yNeJ026yxPKN/BZB1wP/jmBM9DlyVLbiZCtpakUxOd2WD8eq8owbFMRl0a1 1HEIscs0PC0LRfKNXYvfGaKNBgNI2kad6mtyaOqBCvPLH2FUsYxtZNZxYJXY1apz 7yPl6xLGfbEsiGmNGpVkbbRh/RQqa3uTg+vEXPiWQZ+ZzA2p3sIGGTdk80qHI5qb qMYYndE8fGQbhqs/Nd+jdRv7YNWpR0ieZEeRzrunLAV8SIjJ8vX9VYRu5wPsoBQ6 XJ0oOAid3ZE1SNsGzrTKJV1JjMMYfuAze5f19tVh5FFBYlSIuQD2dlB95qz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs0vP2tocj7dko6NgRu5TWkkdXDMwHwYDVR0j BBgwFoAU7XtZRCesuAoesuTpLV5rpoY+KfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5NGQzNzUtZmM3ZC00ZGM3LWExZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQy N0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4NjNFMjlGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDdCNTk0NDI3QUNCODBBMUVCMkU0RTkyRDVFNkJBNjg2M0Uy OUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZC QTY4NjNFMjlGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmTwEK24EQgFfvdyLjShybS7aT/SpMk5Ia8 jHfz9NKT3ynCYBE7Pwwc/3m5ALI9HmKY1YMcAX+qvigW1vJt6ol1rqfac4hPEdf5 eDJsoRrWxACxSdCUOhG6uxMi7uzoaZX3ly1krlyRABrzntuKizDQAAEUkmJlCULd RN6LrB3XrwGj9gSpFnXTCltXLAO7jyCmkz8IOXpckvdpzr2vxsRZRXgsCtp4htEz zsbHPQGqnOQSoX4jVgCf/AJbl2x4O5szWK1cEyG10XKeEakfhvq4xIoim50C/G1J hO8wXtb2sK7tfqELMrpAaIvnSZOktenClp68DhNnT1QGIEJ0VIg= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:38 2026 by rpki-client