$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: FhY/Fdw/8hxF/4+0ZwGYH6Z+nlSHOo5kCKeUtfo8uFY= Subject key identifier: 17:F8:91:D8:3F:54:CF:64:48:86:22:05:EB:F9:F7:30:AE:4B:D2:90 Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 420D1BF716CB9686268EFCD4B98AC264E4140B12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 12:08:22 +0000 Manifest this update: Mon 13 Jul 2026 12:03:22 +0000 Manifest next update: Tue 14 Jul 2026 15:20:22 +0000 Files and hashes: 1: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 2: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 3: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) 4: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: WB/tTSLkNM7kASsKnxyY1pdJIp3MI1YD92HsVL+tAQE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0d:1b:f7:16:cb:96:86:26:8e:fc:d4:b9:8a:c2:64:e4:14:0b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Jul 13 12:03:22 2026 GMT Not After : Jul 14 15:20:22 2026 GMT Subject: CN=17F891D83F54CF6448862205EBF9F730AE4BD290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:47:da:70:d8:61:50:0e:15:62:97:a3:7a: 62:99:15:36:2f:57:03:32:f0:ad:1a:79:b6:02:fd: 29:a7:2c:02:a3:16:38:0c:1f:a6:40:e7:01:09:4e: d8:57:34:3d:db:eb:26:f0:a7:e8:e0:8a:b3:7a:fb: 25:f3:19:36:96:39:1d:15:8f:62:38:95:10:08:42: 19:11:2d:79:c3:8a:ac:7b:e3:ba:b9:f1:ba:c5:3b: 13:86:85:7c:56:ef:3a:7d:71:85:ef:5a:89:a9:a1: 30:c2:75:14:36:d3:e6:2a:94:8f:7a:8a:0b:be:e0: 95:de:fd:5a:60:44:d3:03:f7:44:ac:5c:59:b3:99: 02:36:fb:eb:e7:11:14:42:e8:54:b0:6d:9a:60:1a: 35:e7:1e:f0:f2:c3:9c:68:47:23:d9:c1:4d:7d:39: bf:9b:3b:d5:a8:29:b5:eb:c9:89:c4:f2:cb:b6:1f: d2:01:a7:6b:aa:b0:e8:05:d5:9d:30:ae:2c:ee:e0: 15:64:12:7b:ca:1e:42:92:91:6b:b3:46:13:f0:1d: 28:12:4c:6b:fd:34:b8:f0:6a:a3:18:98:63:c8:f4: d7:02:1a:cc:63:75:ac:3b:54:3e:a0:6c:f2:6e:41: a0:4a:6f:92:53:85:bd:db:7a:c3:f1:4d:08:7f:e8: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:91:D8:3F:54:CF:64:48:86:22:05:EB:F9:F7:30:AE:4B:D2:90 X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:17:a7:3b:7b:66:54:4f:68:ce:04:88:fe:e0:12:f0:f5:e0: 5d:79:0d:da:49:1a:21:9b:0c:ee:66:50:da:7a:89:e7:3d:87: 56:0e:00:8a:c8:9f:a3:14:54:4f:d5:f3:26:c2:e4:d0:eb:1e: e2:dd:7a:24:95:0d:c3:58:80:88:93:f5:23:fe:67:e2:a6:b7: f7:16:f7:fc:58:a5:4c:68:ac:36:41:b2:f3:09:a0:01:19:61: 23:19:80:f4:dc:d2:3d:f2:54:0a:b6:98:a9:3b:8e:03:c0:28: 06:cd:4c:97:cc:dd:cb:b8:28:53:36:30:5d:ba:f7:d5:c4:12: 23:47:15:8f:87:a2:1a:4e:8d:00:d6:0b:9b:d3:4e:ab:58:30: 2f:02:3c:bc:d6:cc:84:80:1f:a7:b6:a4:20:df:24:6b:e1:e7: 5e:32:59:54:23:ca:5c:e6:47:bf:73:de:be:d5:a8:ff:53:d0: 59:32:72:82:05:99:9a:52:b7:3f:c6:8c:1b:ee:09:f2:58:83: 8e:cc:cb:7b:f5:b7:12:c8:b2:6e:53:44:4a:fa:b8:57:fc:ef: a1:35:d9:38:ef:75:22:58:ec:41:59:34:40:8b:70:18:3f:85: 51:e6:ea:c1:8b:33:55:42:58:aa:79:38:67:3c:dd:99:4a:49: 99:d9:e3:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQg0b9xbLloYmjvzUuYrCZOQUCxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA3MTMxMjAzMjJaFw0yNjA3MTQxNTIwMjJaMDMxMTAvBgNV BAMTKDE3Rjg5MUQ4M0Y1NENGNjQ0ODg2MjIwNUVCRjlGNzMwQUU0QkQyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TUfacNhhUA4VYpejemKZFTYv VwMy8K0aebYC/SmnLAKjFjgMH6ZA5wEJTthXND3b6ybwp+jgirN6+yXzGTaWOR0V j2I4lRAIQhkRLXnDiqx747q58brFOxOGhXxW7zp9cYXvWompoTDCdRQ20+YqlI96 igu+4JXe/VpgRNMD90SsXFmzmQI2++vnERRC6FSwbZpgGjXnHvDyw5xoRyPZwU19 Ob+bO9WoKbXryYnE8su2H9IBp2uqsOgF1Z0wrizu4BVkEnvKHkKSkWuzRhPwHSgS TGv9NLjwaqMYmGPI9NcCGsxjdaw7VD6gbPJuQaBKb5JThb3besPxTQh/6B2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/iR2D9Uz2RIhiIF6/n3MK5L0pAwHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIXpzt7ZlRPaM4EiP7gEvD14F15DdpJGiGb DO5mUNp6iec9h1YOAIrIn6MUVE/V8ybC5NDrHuLdeiSVDcNYgIiT9SP+Z+Kmt/cW 9/xYpUxorDZBsvMJoAEZYSMZgPTc0j3yVAq2mKk7jgPAKAbNTJfM3cu4KFM2MF26 99XEEiNHFY+HohpOjQDWC5vTTqtYMC8CPLzWzISAH6e2pCDfJGvh514yWVQjylzm R79z3r7VqP9T0FkycoIFmZpStz/GjBvuCfJYg47My3v1txLIsm5TREr6uFf876E1 2TjvdSJY7EFZNECLcBg/hVHm6sGLM1VCWKp5OGc83ZlKSZnZ4xA= -----END CERTIFICATE-----Generated at Mon Jul 13 14:47:08 2026 by rpki-client