$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: E0/usGHouDi0FeuTj9te/fkFAUxO/Lz9SeIffV5Vp8M= Subject key identifier: B4:9D:AD:3B:BE:B8:6B:2A:08:CB:29:CC:8C:6C:50:77:3D:D9:4D:1A Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 6CF7B47B3BD9FC8420F92E5CDF8B4F62B7E7EECD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:06:06 +0000 Manifest this update: Sun 02 Aug 2026 11:01:06 +0000 Manifest next update: Mon 03 Aug 2026 12:51:06 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) 2: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: 2FLNjyxSZ7sToanxvthNzUtK8nIxfycmdwas++7jY4Q=) 3: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f7:b4:7b:3b:d9:fc:84:20:f9:2e:5c:df:8b:4f:62:b7:e7:ee:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Aug 2 11:01:06 2026 GMT Not After : Aug 3 12:51:06 2026 GMT Subject: CN=B49DAD3BBEB86B2A08CB29CC8C6C50773DD94D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:9a:f5:73:c0:4b:6a:f4:ec:bc:cb:41:42: a7:86:08:a0:94:ca:de:fd:b3:ad:88:f8:5c:f3:ad: 7c:8e:45:51:00:d5:c6:50:28:20:94:f3:fc:df:61: 85:7e:ab:ee:f8:53:eb:6f:cf:4d:4e:9d:4f:83:92: f5:b4:ef:3a:ae:61:8c:74:bd:b5:c2:e2:e3:72:77: 7d:15:fd:d8:7d:0c:2c:99:6a:85:01:41:ff:35:ec: 62:5e:01:93:6f:0f:d1:b4:09:60:14:64:8a:94:76: 3c:31:c1:96:90:7f:f3:e7:74:7d:4a:c7:51:38:39: 0c:3b:af:1c:ae:79:ba:75:98:ea:02:04:3f:21:35: 17:7b:f3:73:cc:7a:dc:53:81:f9:f1:76:5a:b1:bf: f9:d4:e9:a5:c7:be:01:bd:cd:86:20:a2:0b:c6:f0: bd:3c:bc:35:2b:06:91:2b:e5:b7:99:94:0a:51:a4: fa:ce:80:88:ca:63:89:d4:7a:89:bc:76:2b:c0:4d: 4e:00:c3:df:5c:9d:75:70:30:9d:fa:60:45:a5:4c: 95:6b:67:a8:28:30:44:28:85:5b:3e:dc:16:80:32: b6:f7:89:aa:18:af:c7:0a:be:96:1b:44:63:a4:17: c5:3a:0d:1c:89:db:8b:dc:90:19:b1:2c:3b:83:3a: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9D:AD:3B:BE:B8:6B:2A:08:CB:29:CC:8C:6C:50:77:3D:D9:4D:1A X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:be:a7:9a:b1:86:d2:dc:6c:98:a5:b3:6c:50:ee:f1:d8: 1d:d9:49:b5:d3:35:9f:19:72:d9:ac:a7:92:61:af:bb:e1:a0: 79:2a:05:a0:d9:94:a3:29:27:7a:f2:f9:61:10:c2:5f:49:3c: 51:18:0c:aa:ba:cb:37:6b:0a:57:ff:1a:b5:20:c0:d1:87:be: 53:93:2e:34:3f:36:f7:65:f7:b2:7f:bc:5f:ec:d5:92:37:15: 54:92:d7:3b:2c:88:e9:d1:47:64:fb:0f:59:b4:5e:f3:9d:74: 54:73:7e:3f:88:4c:a9:a6:7c:5d:8b:ac:d3:80:78:d7:b7:b1: f7:b1:fb:06:92:d5:16:9f:a2:53:01:b4:db:ac:a2:19:72:22: 52:2a:c8:1e:29:27:6d:68:d7:67:00:f3:0a:ae:e9:8d:03:4c: 02:71:0f:b7:c2:49:8e:65:04:33:26:96:12:a1:2a:b3:41:27: ee:c0:da:a7:1a:e8:6a:cf:0f:70:7d:7d:ca:08:1b:a0:42:3e: 03:24:6e:f2:30:a1:bb:6a:90:55:07:e1:12:36:25:f1:9d:0b: 24:b9:23:0c:eb:1b:f5:b2:08:ce:ac:c2:58:40:62:1f:86:f2: 50:7c:fe:2a:32:16:a9:aa:6c:46:eb:75:2e:a3:8e:fb:52:20: 57:73:f8:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPe0ezvZ/IQg+S5c34tPYrfn7s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjA4MDIxMTAxMDZaFw0yNjA4MDMxMjUxMDZaMDMxMTAvBgNV BAMTKEI0OURBRDNCQkVCODZCMkEwOENCMjlDQzhDNkM1MDc3M0REOTREMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRS5r1c8BLavTsvMtBQqeGCKCU yt79s62I+FzzrXyORVEA1cZQKCCU8/zfYYV+q+74U+tvz01OnU+DkvW07zquYYx0 vbXC4uNyd30V/dh9DCyZaoUBQf817GJeAZNvD9G0CWAUZIqUdjwxwZaQf/PndH1K x1E4OQw7rxyuebp1mOoCBD8hNRd783PMetxTgfnxdlqxv/nU6aXHvgG9zYYgogvG 8L08vDUrBpEr5beZlApRpPrOgIjKY4nUeom8divATU4Aw99cnXVwMJ36YEWlTJVr Z6goMEQohVs+3BaAMrb3iaoYr8cKvpYbRGOkF8U6DRyJ24vckBmxLDuDOqtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJ2tO764ayoIyynMjGxQdz3ZTRowHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPvvqeasYbS3GyYpbNsUO7x2B3ZSbXTNZ8Z ctmsp5Jhr7vhoHkqBaDZlKMpJ3ry+WEQwl9JPFEYDKq6yzdrClf/GrUgwNGHvlOT LjQ/Nvdl97J/vF/s1ZI3FVSS1zssiOnRR2T7D1m0XvOddFRzfj+ITKmmfF2LrNOA eNe3sfex+waS1RafolMBtNusohlyIlIqyB4pJ21o12cA8wqu6Y0DTAJxD7fCSY5l BDMmlhKhKrNBJ+7A2qca6GrPD3B9fcoIG6BCPgMkbvIwobtqkFUH4RI2JfGdCyS5 IwzrG/WyCM6swlhAYh+G8lB8/ioyFqmqbEbrdS6jjvtSIFdz+BI= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client