$ rpki-client -vvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: hE40aEdpxtXUo4QvcAcgrSt+XJP4ZZxI1uWF7VKDv9Y= Subject key identifier: 43:1F:B0:7C:A0:64:3C:D9:50:88:BB:75:65:DE:89:C7:C3:37:AB:A8 Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 393AF485FAAD4A3A90C2448CA1A249E5715EE1E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:32:48 +0000 Manifest this update: Sat 20 Jun 2026 02:27:48 +0000 Manifest next update: Sun 21 Jun 2026 04:42:48 +0000 Files and hashes: 1: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: cKhQHALOhJDQAmAQOVpvQqYxKpZkN0YhJxBMNqI7luQ=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3a:f4:85:fa:ad:4a:3a:90:c2:44:8c:a1:a2:49:e5:71:5e:e1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: Jun 20 02:27:48 2026 GMT Not After : Jun 21 04:42:48 2026 GMT Subject: CN=431FB07CA0643CD95088BB7565DE89C7C337ABA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:0e:03:62:ff:45:bd:a9:e1:6c:64:12:6a: ac:5d:15:7f:60:3e:df:07:8f:80:cb:db:23:3c:99: 72:2e:7c:5f:dd:59:18:bb:18:c9:ab:af:ab:5e:03: 72:78:ce:1c:b9:69:f5:4d:4a:4a:d9:1e:c2:aa:6e: 42:a0:17:11:8f:e2:d5:e1:5c:b2:91:5c:e0:20:63: 5f:28:5c:c6:9f:1c:51:df:c8:90:65:ae:c6:5a:25: 7c:f5:b1:06:55:49:0c:1c:5c:2d:25:6b:1a:63:4a: 3e:d3:6e:ab:aa:3e:3a:a6:9f:c2:82:23:ac:9f:f3: 19:b0:4b:26:59:ef:a6:e0:19:86:04:80:29:9b:48: a8:e9:09:c3:8b:d1:91:fb:93:52:58:f4:ec:db:56: c8:cd:16:e9:cc:50:55:46:fc:e9:14:13:42:7b:30: 4e:46:23:c3:25:39:e9:18:9f:ea:4f:c5:7e:e8:4b: 92:8d:de:6e:cb:57:61:d2:20:a9:9b:fc:02:11:1f: 8f:0d:77:68:31:e9:7b:e2:3f:21:df:c9:99:cb:35: 4b:99:01:70:95:32:d0:d1:40:45:1c:f0:53:11:bb: 89:2b:d1:b8:03:e5:b6:35:4d:03:c1:4e:e7:03:42: 9e:4e:96:f0:a4:c0:4a:69:1c:5f:58:14:ff:ea:53: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:B0:7C:A0:64:3C:D9:50:88:BB:75:65:DE:89:C7:C3:37:AB:A8 X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e9:57:2b:16:7c:88:e1:ac:2b:d3:83:8d:31:d1:00:80:9f: 1a:c0:71:56:d1:be:a5:30:20:90:c9:19:17:91:66:fb:11:f3: fe:7a:18:63:1c:f3:5d:8b:3e:ce:ff:9a:3a:97:91:07:5e:85: ff:00:b3:5c:ba:11:29:b3:89:52:c8:85:26:e6:9c:4e:94:cd: 45:b2:24:91:03:99:dd:62:07:57:7d:41:91:6b:d0:3c:da:81: 61:6d:ea:f4:b6:aa:1c:1a:11:f3:e9:83:39:98:90:75:74:5e: ab:f9:0e:ca:9f:67:37:7f:6f:3f:d1:20:32:e3:66:e1:0f:31: ba:e7:38:65:53:e2:63:30:c7:6e:fc:4b:27:44:58:e7:b9:17: db:ad:52:2c:f9:ea:39:d5:35:b3:9f:53:4d:0e:b2:56:82:5f: a6:84:13:10:36:10:ca:dc:ec:5f:af:ee:42:a1:45:dc:6b:20: b7:a4:d2:9f:0f:fa:36:51:9e:37:b7:a3:ac:08:d5:59:88:82: 6e:df:7d:c5:f4:ab:59:7d:d8:30:a2:5d:2e:fe:64:85:4c:2e: b5:65:3f:d8:4f:ec:89:f1:a7:0d:0e:7b:50:b9:24:1a:06:12: c9:c7:77:a6:9e:70:ba:7a:e0:b0:fd:b6:73:96:37:04:87:83: 8e:6c:1d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTr0hfqtSjqQwkSMoaJJ5XFe4eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA2MjAwMjI3NDhaFw0yNjA2MjEwNDQyNDhaMDMxMTAvBgNV BAMTKDQzMUZCMDdDQTA2NDNDRDk1MDg4QkI3NTY1REU4OUM3QzMzN0FCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdlg4DYv9FvanhbGQSaqxdFX9g Pt8Hj4DL2yM8mXIufF/dWRi7GMmrr6teA3J4zhy5afVNSkrZHsKqbkKgFxGP4tXh XLKRXOAgY18oXMafHFHfyJBlrsZaJXz1sQZVSQwcXC0laxpjSj7TbquqPjqmn8KC I6yf8xmwSyZZ76bgGYYEgCmbSKjpCcOL0ZH7k1JY9OzbVsjNFunMUFVG/OkUE0J7 ME5GI8MlOekYn+pPxX7oS5KN3m7LV2HSIKmb/AIRH48Nd2gx6XviPyHfyZnLNUuZ AXCVMtDRQEUc8FMRu4kr0bgD5bY1TQPBTucDQp5OlvCkwEppHF9YFP/qUw57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQx+wfKBkPNlQiLt1Zd6Jx8M3q6gwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDpVysWfIjhrCvTg40x0QCAnxrAcVbRvqUw IJDJGReRZvsR8/56GGMc812LPs7/mjqXkQdehf8As1y6ESmziVLIhSbmnE6UzUWy JJEDmd1iB1d9QZFr0DzagWFt6vS2qhwaEfPpgzmYkHV0Xqv5DsqfZzd/bz/RIDLj ZuEPMbrnOGVT4mMwx278SydEWOe5F9utUiz56jnVNbOfU00OslaCX6aEExA2EMrc 7F+v7kKhRdxrILek0p8P+jZRnje3o6wI1VmIgm7ffcX0q1l92DCiXS7+ZIVMLrVl P9hP7Inxpw0Oe1C5JBoGEsnHd6aecLp64LD9tnOWNwSHg45sHaE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:07 2026 by rpki-client