$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: SuYa78ciMlU91xyu8Pr60DS4OxLZcBStVIZ1VdCih9g= Subject key identifier: AF:62:9D:80:7C:8E:7A:2F:1E:B4:23:26:A2:1C:8C:15:39:B8:B8:7B Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 21A5C57ED3E63231826E3667C011844F9E60DCC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 17:13:14 +0000 Manifest this update: Sun 02 Aug 2026 17:08:14 +0000 Manifest next update: Mon 03 Aug 2026 18:26:14 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) 2: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: 1D2b0I5fjya7HI9JC3UyDXTjtt3cr4bk8p84Dkiyzgo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a5:c5:7e:d3:e6:32:31:82:6e:36:67:c0:11:84:4f:9e:60:dc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Aug 2 17:08:14 2026 GMT Not After : Aug 3 18:26:14 2026 GMT Subject: CN=AF629D807C8E7A2F1EB42326A21C8C1539B8B87B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:fd:9b:8f:6e:ce:d2:2a:03:3f:0d:8c:3e: 34:d1:66:3d:ae:74:93:d2:70:97:f6:58:00:21:4f: 45:e5:d5:5f:4f:62:03:e3:1e:45:4b:aa:df:2f:d4: 8f:3b:e5:42:68:c2:4a:fd:50:fc:e1:b7:cb:fa:96: 51:fd:7f:77:2c:7b:08:87:d5:ea:ee:9d:a0:89:41: 62:fd:56:5e:0e:4f:69:f7:b8:f2:d2:4c:9b:2b:7c: dd:0b:c7:a8:28:f8:42:f9:79:1e:ae:a9:dd:36:2d: d6:29:fb:50:fc:f8:20:b0:76:6e:09:ab:46:72:b9: 5f:56:59:bd:b5:7e:db:e0:a8:32:8f:42:c9:ac:3b: 9a:e0:33:2b:3c:2f:ce:64:c6:f7:ad:3e:2d:f7:56: ef:9e:79:a3:ca:de:07:2f:18:e5:6b:eb:1e:2b:d7: 02:a2:8a:4d:42:18:1c:75:a7:ec:56:08:3d:d9:81: 83:6c:c4:77:c5:cc:55:7a:82:5a:a6:da:cd:b7:ac: ad:c8:b2:7b:5f:e0:c5:e0:86:fb:2e:81:e1:14:7c: 9a:b5:de:9d:f4:e5:68:ec:75:91:26:00:07:1a:fe: f5:96:42:b9:13:bb:99:34:12:e4:5c:c8:8c:f0:2a: 01:86:85:47:e4:84:2a:de:b3:76:d4:bf:3d:86:cc: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:62:9D:80:7C:8E:7A:2F:1E:B4:23:26:A2:1C:8C:15:39:B8:B8:7B X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:26:c6:38:9b:4e:a2:fe:98:58:a1:7b:0c:17:04:eb:bf:6d: 2d:a6:dc:7e:cc:52:71:d4:59:ba:5e:7c:2c:21:b1:96:cb:65: 1f:95:7b:03:8a:58:0d:9d:b5:61:c2:c6:f2:b5:c8:ca:e1:78: fd:af:4e:72:7c:41:0e:92:0b:2c:ec:7e:cd:d2:1b:82:85:e8: 74:94:08:3e:f8:8e:63:3e:9d:58:a2:9a:eb:01:d3:0d:87:ee: 5f:72:f9:00:c9:79:30:7c:44:16:76:94:ec:a7:a5:0f:f7:0e: a5:58:6e:11:9d:31:3f:7e:f5:30:bf:2a:f3:07:42:f3:a9:dc: f6:f0:55:5d:a7:e2:02:d1:34:18:2b:4e:53:12:b1:21:bd:56: 80:03:87:96:18:05:f7:10:4d:f6:79:0d:a1:0c:10:49:ce:3d: 33:2d:de:0b:df:a7:08:37:5b:d7:11:2d:ef:19:0b:64:14:bd: 57:af:e0:69:42:19:4f:d6:16:ad:d8:93:34:6e:a5:53:19:0f: 47:23:c9:bb:cf:68:1a:95:62:d6:47:2d:3b:e2:54:f0:5f:bf: 16:bc:5d:d1:ce:58:d3:01:94:a9:42:d8:c9:d0:9a:0b:da:ea: 44:c5:47:ed:51:b7:51:9a:8c:15:c1:79:b1:69:9f:0a:dd:3b: 0d:02:5b:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaXFftPmMjGCbjZnwBGET55g3MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA4MDIxNzA4MTRaFw0yNjA4MDMxODI2MTRaMDMxMTAvBgNV BAMTKEFGNjI5RDgwN0M4RTdBMkYxRUI0MjMyNkEyMUM4QzE1MzlCOEI4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGN/2bj27O0ioDPw2MPjTRZj2u dJPScJf2WAAhT0Xl1V9PYgPjHkVLqt8v1I875UJowkr9UPzht8v6llH9f3csewiH 1erunaCJQWL9Vl4OT2n3uPLSTJsrfN0Lx6go+EL5eR6uqd02LdYp+1D8+CCwdm4J q0ZyuV9WWb21ftvgqDKPQsmsO5rgMys8L85kxvetPi33Vu+eeaPK3gcvGOVr6x4r 1wKiik1CGBx1p+xWCD3ZgYNsxHfFzFV6glqm2s23rK3Isntf4MXghvsugeEUfJq1 3p305WjsdZEmAAca/vWWQrkTu5k0EuRcyIzwKgGGhUfkhCres3bUvz2GzEy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2KdgHyOei8etCMmohyMFTm4uHswHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwmxjibTqL+mFihewwXBOu/bS2m3H7MUnHU WbpefCwhsZbLZR+VewOKWA2dtWHCxvK1yMrheP2vTnJ8QQ6SCyzsfs3SG4KF6HSU CD74jmM+nViimusB0w2H7l9y+QDJeTB8RBZ2lOynpQ/3DqVYbhGdMT9+9TC/KvMH QvOp3PbwVV2n4gLRNBgrTlMSsSG9VoADh5YYBfcQTfZ5DaEMEEnOPTMt3gvfpwg3 W9cRLe8ZC2QUvVev4GlCGU/WFq3YkzRupVMZD0cjybvPaBqVYtZHLTviVPBfvxa8 XdHOWNMBlKlC2MnQmgva6kTFR+1Rt1GajBXBebFpnwrdOw0CW1I= -----END CERTIFICATE-----Generated at Mon Aug 3 01:43:59 2026 by rpki-client