$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: Lw8gV/Ac8Qr9EEANzEd9uO6cZlO03CydzoxUZUhERv4= Subject key identifier: B3:CD:A6:96:1F:3F:0E:9E:D7:C5:8C:A1:7E:E9:FA:8F:22:76:37:46 Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 64451F9C5B06C305E6EEFD09F2BFE46FA0C1A29A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:54:53 +0000 Manifest this update: Fri 19 Jun 2026 23:49:53 +0000 Manifest next update: Sun 21 Jun 2026 00:57:53 +0000 Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: XKw+VJAtG06wMZQnpVqC3FPeCIJj1HxK2sP+HxeXdGw=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:45:1f:9c:5b:06:c3:05:e6:ee:fd:09:f2:bf:e4:6f:a0:c1:a2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Jun 19 23:49:53 2026 GMT Not After : Jun 21 00:57:53 2026 GMT Subject: CN=B3CDA6961F3F0E9ED7C58CA17EE9FA8F22763746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:25:55:11:80:b9:a2:c8:14:73:05:c5:55: 62:a4:d4:c6:10:9d:c2:dc:dc:7d:c1:21:70:31:dd: ac:c8:7a:a1:97:94:dc:9f:6e:e6:41:12:92:ca:2c: 3c:a7:a6:e4:c3:66:74:12:f1:c6:8f:9e:fd:de:a2: ed:8c:a9:a7:69:cd:5e:24:8b:47:86:6f:5b:97:49: f8:09:21:d8:4c:3b:3d:5f:89:15:9c:c9:24:7c:d2: 62:53:40:fd:22:21:cd:3d:5c:4a:44:64:94:2d:1b: 26:98:50:f5:84:0e:97:7e:b4:63:e1:15:63:66:5d: 4c:ee:57:4d:a5:8c:bc:d1:76:2e:b5:ce:52:1c:a5: 73:1e:a6:7f:29:55:d7:6d:88:cc:48:85:da:68:76: 98:97:3e:ef:c9:50:0e:73:45:e0:89:74:ac:61:49: 1d:9e:7f:31:26:19:df:f2:fd:22:5e:ff:ed:60:18: eb:01:d8:39:29:fb:82:cc:60:0d:8f:21:de:6b:f7: 25:f1:51:7b:c9:17:59:ff:11:7d:39:f4:0b:57:c9: 36:73:94:f7:58:08:f4:22:2c:6b:e1:23:81:83:de: 7e:61:4e:97:40:ce:03:03:0f:79:8c:cf:1b:59:e2: 3f:c0:40:a0:58:1c:9c:77:64:b1:5e:8c:26:76:68: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CD:A6:96:1F:3F:0E:9E:D7:C5:8C:A1:7E:E9:FA:8F:22:76:37:46 X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:49:d9:0a:df:b3:a6:c5:b2:f4:77:6e:3d:9b:26:15:83:90: 80:4d:01:b9:7f:ea:9e:cc:e1:90:57:d8:ba:77:60:3c:e4:b0: 29:3f:4c:93:1d:6f:d3:76:97:b5:68:1d:10:9b:e0:51:76:18: f4:05:5f:b3:98:b2:35:3e:ad:8a:09:3b:ae:bd:15:0a:f2:93: 14:08:3f:f6:1b:7d:27:0a:3e:ae:1e:6b:21:92:00:c0:c2:1e: fe:a1:28:9c:ac:e6:ea:4d:0f:9d:34:8f:44:5c:5c:00:d9:6c: 26:e5:dc:04:d9:7d:c5:89:73:92:ef:f0:46:b4:9f:f0:ed:ea: 29:e7:82:97:bd:98:71:06:b5:2c:18:54:4e:8c:6a:3c:66:9f: a3:1a:56:09:0b:41:62:2f:b7:20:32:45:10:b7:16:c3:73:8b: aa:c2:11:99:d0:33:d1:6f:bd:8e:1a:42:6f:56:d5:83:88:20: 4f:b0:6f:bc:78:a0:f7:f3:03:11:f7:4b:cc:d2:95:12:1c:b9: e6:2d:27:22:52:d8:dc:91:3f:0d:9c:14:08:ed:fc:9b:af:df: 60:c5:56:93:83:fb:59:83:40:05:11:74:af:51:08:6a:5b:1e: ec:39:2a:fb:ea:64:61:f6:28:6e:67:b3:ce:47:a6:e4:99:65: 9f:85:53:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEUfnFsGwwXm7v0J8r/kb6DBopowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjA2MTkyMzQ5NTNaFw0yNjA2MjEwMDU3NTNaMDMxMTAvBgNV BAMTKEIzQ0RBNjk2MUYzRjBFOUVEN0M1OENBMTdFRTlGQThGMjI3NjM3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTCVVEYC5osgUcwXFVWKk1MYQ ncLc3H3BIXAx3azIeqGXlNyfbuZBEpLKLDynpuTDZnQS8caPnv3eou2MqadpzV4k i0eGb1uXSfgJIdhMOz1fiRWcySR80mJTQP0iIc09XEpEZJQtGyaYUPWEDpd+tGPh FWNmXUzuV02ljLzRdi61zlIcpXMepn8pVddtiMxIhdpodpiXPu/JUA5zReCJdKxh SR2efzEmGd/y/SJe/+1gGOsB2Dkp+4LMYA2PId5r9yXxUXvJF1n/EX059AtXyTZz lPdYCPQiLGvhI4GD3n5hTpdAzgMDD3mMzxtZ4j/AQKBYHJx3ZLFejCZ2aEobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs82mlh8/Dp7XxYyhfun6jyJ2N0YwHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhJ2Qrfs6bFsvR3bj2bJhWDkIBNAbl/6p7M 4ZBX2Lp3YDzksCk/TJMdb9N2l7VoHRCb4FF2GPQFX7OYsjU+rYoJO669FQrykxQI P/YbfScKPq4eayGSAMDCHv6hKJys5upND500j0RcXADZbCbl3ATZfcWJc5Lv8Ea0 n/Dt6inngpe9mHEGtSwYVE6Majxmn6MaVgkLQWIvtyAyRRC3FsNzi6rCEZnQM9Fv vY4aQm9W1YOIIE+wb7x4oPfzAxH3S8zSlRIcueYtJyJS2NyRPw2cFAjt/Juv32DF VpOD+1mDQAURdK9RCGpbHuw5KvvqZGH2KG5ns85HpuSZZZ+FUzo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:31 2026 by rpki-client