$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: MykUDC1rTFvEop6SCUTl2egOOmve2J8CKSqGqRk9rkY= Subject key identifier: B0:9F:28:CE:B8:A4:95:6B:EB:32:B8:5A:4E:D9:1C:69:AE:59:DD:61 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 0D9BB321BBCBF0D18D1AEA87E9EA6DED2E2C0728 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:18:32 +0000 Manifest this update: Thu 18 Jun 2026 09:13:32 +0000 Manifest next update: Fri 19 Jun 2026 12:37:32 +0000 Files and hashes: 1: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 3: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 4: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: Kdd5w1tIQQFP8LQPjLLZo8f/gHnyg+uB+BuP3t+lv/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9b:b3:21:bb:cb:f0:d1:8d:1a:ea:87:e9:ea:6d:ed:2e:2c:07:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Jun 18 09:13:32 2026 GMT Not After : Jun 19 12:37:32 2026 GMT Subject: CN=B09F28CEB8A4956BEB32B85A4ED91C69AE59DD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:e3:80:ed:80:2d:6c:95:28:45:8c:a4:17: c5:82:7e:9d:f9:d1:6b:6d:8a:f0:aa:75:1b:c9:43: 07:00:4e:17:51:f7:67:ec:f0:49:b5:6b:d5:ca:09: f8:aa:86:6d:48:39:46:38:16:c2:ca:75:58:b9:19: 76:68:72:18:56:ed:e4:b4:64:28:d2:75:86:43:58: 83:c0:18:78:3f:fd:fd:19:d8:32:99:67:3b:31:29: d5:f9:39:75:1e:77:ef:55:2e:d0:1d:ed:79:41:60: d4:89:0a:8d:92:14:16:a5:57:41:75:6f:8b:d4:dd: 96:d9:c2:b0:15:a4:e4:26:fe:3a:d4:30:50:b3:2f: 30:8d:18:67:39:c2:03:70:38:2e:1c:77:91:5a:79: 82:3f:99:78:93:b4:cb:b8:ea:86:2e:b2:d3:29:9a: 53:83:67:23:cf:64:eb:36:8c:70:a1:ce:88:02:a0: 8b:da:91:57:b9:af:c4:00:10:16:3b:da:10:bf:9f: f6:24:7f:db:b4:4c:50:cb:cc:7b:94:78:b5:0b:6d: 33:9d:a6:75:87:7e:01:0d:ab:07:18:25:6d:87:35: 4d:d2:6a:ef:3f:5a:cb:c2:dd:6e:6f:c5:dc:fa:c3: 36:47:66:ca:07:6a:4c:1e:33:4d:4c:d8:dd:10:dd: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:28:CE:B8:A4:95:6B:EB:32:B8:5A:4E:D9:1C:69:AE:59:DD:61 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:71:28:2c:ee:a8:66:91:1a:46:d0:08:dd:c4:7a:ed:62:69: 3b:30:0a:1e:99:fc:2e:ea:1c:5c:58:6c:48:ab:b0:fd:e6:d8: 25:52:73:58:ed:12:79:88:8b:b9:bb:10:74:0a:b3:02:88:b6: 7e:51:80:f5:6b:a7:0f:cd:7a:c7:08:56:a6:c0:04:24:87:3d: 85:57:ec:1d:d6:68:ab:68:4a:11:d5:41:ca:99:af:77:41:f6: 8a:51:1a:a4:c2:52:8b:25:9a:46:c1:76:5d:1e:e5:3d:3d:e0: ef:c5:2e:5c:c3:1e:47:65:9b:d2:83:a8:fc:20:34:5d:53:98: ef:51:53:7a:85:66:df:d4:d6:8b:08:79:45:fe:bf:da:58:ea: 73:37:cf:c0:03:99:82:5c:e6:fc:ea:b5:b5:24:5d:a2:9a:d8: 99:48:73:3d:b6:77:c0:1e:e5:f4:97:e8:01:36:50:23:c3:7f: 70:2b:cf:96:c3:04:aa:64:cf:03:2a:a0:ba:ba:f5:4a:d5:93: 11:8e:81:a4:dc:cc:7b:9f:0e:3a:e8:1f:37:b8:ee:64:fb:9a: ae:2e:d5:d5:f8:9e:c2:6f:d5:64:55:a9:28:b6:78:d0:6a:fa: ce:f5:b8:42:f5:e7:7d:70:7d:8d:94:cd:5f:96:6a:46:71:ab: 0f:83:c7:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZuzIbvL8NGNGuqH6ept7S4sBygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA2MTgwOTEzMzJaFw0yNjA2MTkxMjM3MzJaMDMxMTAvBgNV BAMTKEIwOUYyOENFQjhBNDk1NkJFQjMyQjg1QTRFRDkxQzY5QUU1OURENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGp+OA7YAtbJUoRYykF8WCfp35 0WttivCqdRvJQwcAThdR92fs8Em1a9XKCfiqhm1IOUY4FsLKdVi5GXZochhW7eS0 ZCjSdYZDWIPAGHg//f0Z2DKZZzsxKdX5OXUed+9VLtAd7XlBYNSJCo2SFBalV0F1 b4vU3ZbZwrAVpOQm/jrUMFCzLzCNGGc5wgNwOC4cd5FaeYI/mXiTtMu46oYustMp mlODZyPPZOs2jHChzogCoIvakVe5r8QAEBY72hC/n/Ykf9u0TFDLzHuUeLULbTOd pnWHfgENqwcYJW2HNU3Sau8/WsvC3W5vxdz6wzZHZsoHakweM01M2N0Q3asrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJ8ozriklWvrMrhaTtkcaa5Z3WEwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFxKCzuqGaRGkbQCN3Eeu1iaTswCh6Z/C7q HFxYbEirsP3m2CVSc1jtEnmIi7m7EHQKswKItn5RgPVrpw/NescIVqbABCSHPYVX 7B3WaKtoShHVQcqZr3dB9opRGqTCUoslmkbBdl0e5T094O/FLlzDHkdlm9KDqPwg NF1TmO9RU3qFZt/U1osIeUX+v9pY6nM3z8ADmYJc5vzqtbUkXaKa2JlIcz22d8Ae 5fSX6AE2UCPDf3Arz5bDBKpkzwMqoLq69UrVkxGOgaTczHufDjroHze47mT7mq4u 1dX4nsJv1WRVqSi2eNBq+s71uEL1531wfY2UzV+WakZxqw+Dxyk= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:36 2026 by rpki-client