$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: FQLALIEGeY24S0kngFcyc1/eHIA/rZ1i12u76PRC7uQ= Subject key identifier: 17:4E:DF:2E:9F:9B:79:EB:66:17:C1:10:00:60:84:65:8F:43:E8:40 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 048F5AE3F587D84679A11EF1189879740FDFAC20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 17:54:04 +0000 Manifest this update: Sun 02 Aug 2026 17:49:04 +0000 Manifest next update: Mon 03 Aug 2026 21:28:04 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 2: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: cmG6RKFCiV8f80VgH0DEh07K+nddjA4dQDoLH9TtSIg=) 3: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 4: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8f:5a:e3:f5:87:d8:46:79:a1:1e:f1:18:98:79:74:0f:df:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Aug 2 17:49:04 2026 GMT Not After : Aug 3 21:28:04 2026 GMT Subject: CN=174EDF2E9F9B79EB6617C110006084658F43E840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:9c:a0:3b:4b:6b:01:74:aa:0a:18:c6:82: ac:d1:ca:ef:58:9b:b9:4e:b4:42:cf:a1:78:90:f7: f8:a1:e9:78:7d:bf:87:b5:1a:13:99:2d:c9:be:ab: d0:96:71:9a:97:0a:3a:9f:91:d7:6b:dd:27:f3:03: a2:c2:0c:5f:21:27:e1:25:ad:4a:dd:d0:74:50:87: 59:86:02:89:e7:1a:5a:40:0c:eb:16:8a:6f:d5:fc: 3d:e0:e6:ad:03:0a:09:44:25:22:68:79:4c:46:c2: 89:60:e3:66:d5:15:8c:9b:cd:be:75:41:1c:8b:4d: a4:a2:47:28:ed:b1:8a:64:63:3d:4d:c0:df:6d:ae: 58:be:71:64:b4:0a:d2:a2:47:0d:b1:6a:06:e5:3b: 51:57:e1:eb:bc:d5:26:0d:ef:62:e0:44:b5:16:8d: 45:6f:b8:74:79:79:a1:48:63:02:19:2a:8f:a4:ed: 87:01:70:eb:57:3e:95:1f:87:d9:f8:e3:8e:8d:b6: 85:6d:24:9d:f7:d6:78:3f:8e:81:08:b4:78:86:a6: fd:6f:e4:4c:5a:76:1d:e1:3f:34:3f:e0:ca:2f:03: 23:ec:ba:e7:75:a3:3c:58:5e:58:ff:03:21:c3:5e: 66:04:b3:d4:71:9d:77:e6:87:0d:e4:d1:a4:30:5e: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4E:DF:2E:9F:9B:79:EB:66:17:C1:10:00:60:84:65:8F:43:E8:40 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:bf:8f:22:fc:c2:53:46:0d:84:32:ab:1a:84:2e:5d:67: 40:bc:03:e1:49:be:b9:01:f8:61:9a:e0:14:ef:62:33:e4:bb: c8:2c:51:84:fa:02:6f:a2:4a:6b:e4:72:e1:1c:8c:e9:07:61: 67:ae:5a:c5:b3:1d:57:51:99:2b:28:fb:f7:55:54:30:33:03: 53:53:65:b7:65:20:2a:08:c5:5f:28:40:dd:7a:40:b6:bc:6f: ee:03:f0:4e:ca:5d:02:5c:79:c0:5c:1d:62:22:c9:ad:3e:1a: 9f:33:ac:2e:ec:39:6d:cc:54:cf:01:ea:a6:01:fb:71:e4:38: 2f:73:7c:f8:31:b5:bb:8f:7c:63:a4:43:01:89:af:66:e8:c6: 66:ba:57:b3:e5:7c:3d:8e:2c:c6:3a:7e:ed:7d:38:30:07:62: d1:d9:b4:dd:46:4d:a7:d1:27:d5:72:53:ff:fb:d0:d5:9b:d0: a6:45:32:87:38:bd:25:b8:40:14:0b:e6:6d:13:0c:da:4d:f5: 6b:1a:71:fb:b5:d9:e3:e5:ff:3e:a5:21:54:51:6e:e7:62:f2: 3b:46:43:ad:03:25:ec:8a:36:55:30:4c:7b:d5:3e:77:de:b3: ed:6b:6f:ac:79:04:9d:ac:e2:0e:44:78:6a:be:6c:b1:7b:e5: cf:40:fa:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBI9a4/WH2EZ5oR7xGJh5dA/frCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA4MDIxNzQ5MDRaFw0yNjA4MDMyMTI4MDRaMDMxMTAvBgNV BAMTKDE3NEVERjJFOUY5Qjc5RUI2NjE3QzExMDAwNjA4NDY1OEY0M0U4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILJygO0trAXSqChjGgqzRyu9Y m7lOtELPoXiQ9/ih6Xh9v4e1GhOZLcm+q9CWcZqXCjqfkddr3SfzA6LCDF8hJ+El rUrd0HRQh1mGAonnGlpADOsWim/V/D3g5q0DCglEJSJoeUxGwolg42bVFYybzb51 QRyLTaSiRyjtsYpkYz1NwN9trli+cWS0CtKiRw2xagblO1FX4eu81SYN72LgRLUW jUVvuHR5eaFIYwIZKo+k7YcBcOtXPpUfh9n4446NtoVtJJ331ng/joEItHiGpv1v 5Exadh3hPzQ/4MovAyPsuud1ozxYXlj/AyHDXmYEs9RxnXfmhw3k0aQwXujlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF07fLp+beetmF8EQAGCEZY9D6EAwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX7v48i/MJTRg2EMqsahC5dZ0C8A+FJvrkB +GGa4BTvYjPku8gsUYT6Am+iSmvkcuEcjOkHYWeuWsWzHVdRmSso+/dVVDAzA1NT ZbdlICoIxV8oQN16QLa8b+4D8E7KXQJcecBcHWIiya0+Gp8zrC7sOW3MVM8B6qYB +3HkOC9zfPgxtbuPfGOkQwGJr2boxma6V7PlfD2OLMY6fu19ODAHYtHZtN1GTafR J9VyU//70NWb0KZFMoc4vSW4QBQL5m0TDNpN9Wsacfu12ePl/z6lIVRRbudi8jtG Q60DJeyKNlUwTHvVPnfes+1rb6x5BJ2s4g5EeGq+bLF75c9A+nw= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:42 2026 by rpki-client