$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json) Hash identifier: eG0CwCCo/mEOBLbuBJpMYNAD2LC54YdaaG+hTi2od/E= Subject key identifier: 86:D9:48:53:97:B9:E2:B8:3F:1F:58:17:DD:64:13:A9:F8:52:14:41 Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Certificate serial: 3E767D31A4B48B2DE673C6EC80637B555A37BFFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 23:41:23 +0000 Manifest this update: Wed 17 Jun 2026 23:36:23 +0000 Manifest next update: Fri 19 Jun 2026 02:49:23 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=) 3: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: bZCoI9isWRzddgVNMKqqrDO4wKCGee8u2nm1G4gZb9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:76:7d:31:a4:b4:8b:2d:e6:73:c6:ec:80:63:7b:55:5a:37:bf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Validity Not Before: Jun 17 23:36:23 2026 GMT Not After : Jun 19 02:49:23 2026 GMT Subject: CN=86D9485397B9E2B83F1F5817DD6413A9F8521441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:f8:b3:1e:e9:a6:09:db:24:23:9b:df:cc: 4c:8a:a5:34:60:6f:5b:7c:20:bc:ac:0d:0f:74:68: 58:8f:53:0e:42:68:16:1c:f1:40:14:88:c1:96:46: a0:a5:01:fc:fe:12:b3:cb:d7:b3:c0:09:5c:9c:a8: 1e:3c:1a:1d:7b:4f:01:71:01:12:df:ed:43:3e:75: ff:c0:fd:c6:2e:12:07:9f:ca:f1:ed:98:ad:f0:aa: d8:bd:51:79:6d:4c:65:fa:eb:39:6a:4b:60:26:45: 09:1a:77:54:7d:5c:85:61:b8:0a:cc:0e:15:7d:fe: 16:e5:c4:69:df:05:cc:a9:17:5e:bf:ae:35:51:22: 94:52:d7:a2:9a:2b:17:f7:8c:ee:fb:a6:c4:92:e3: 24:ed:b6:cc:1b:4f:ae:82:67:08:7c:28:23:74:d2: 70:50:28:21:dc:0c:bf:bb:5d:71:48:ff:3c:14:93: fb:ea:d3:dc:20:e0:02:e3:05:32:8f:5c:d2:0c:d2: eb:af:e5:57:af:5d:8e:21:78:b3:2b:93:32:c0:92: 98:d3:28:49:e5:57:63:0b:5c:ac:3f:ab:ec:86:b2: 7e:01:86:41:90:e1:d1:b9:aa:77:fc:31:03:d1:44: ec:60:80:14:91:b6:74:aa:a7:95:9c:ee:48:35:b2: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:48:53:97:B9:E2:B8:3F:1F:58:17:DD:64:13:A9:F8:52:14:41 X509v3 Authority Key Identifier: keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:42:28:13:2f:12:b5:a4:e4:bc:14:50:74:7e:2a:e1:e2:11: cb:03:0e:e5:9e:e8:cb:f7:a0:87:d0:be:cd:5b:40:dd:ba:55: 3e:d6:81:d8:a7:25:fe:10:eb:fa:0e:d0:59:c9:56:30:a5:96: e2:7c:3d:f1:3a:ba:e6:bc:12:65:08:0a:95:90:b2:41:35:d8: 6e:70:18:fc:90:97:1c:ff:06:8d:1a:a7:b0:66:bf:8c:1c:b0: 44:76:28:ec:f2:df:0e:26:2c:d4:eb:49:23:43:ae:1c:08:fc: 77:94:5c:8c:39:1d:74:58:47:45:36:49:00:7d:e3:1d:a1:7f: 4e:04:14:42:39:87:33:24:d3:1e:ff:46:05:54:ae:08:d1:00: f8:5a:c8:ef:df:b9:ae:ba:26:37:9a:ca:fa:d5:2f:d6:b2:d7: a6:22:87:2d:c8:a1:c8:06:3c:12:6b:ac:fb:6d:fa:fe:b9:e5: ec:28:42:2c:d4:91:3c:c8:ce:f4:10:a8:2f:c0:4f:8a:73:3b: cb:69:4b:57:a5:1b:5e:21:e1:1e:7b:1e:91:1f:fe:d6:f7:94: a8:a2:f2:ef:09:06:f0:71:7b:b1:57:4f:37:fb:91:a0:5f:16: d1:ed:e9:2f:ed:6d:06:77:21:6e:7b:04:0d:a1:af:a6:2e:ba: 26:97:ea:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnZ9MaS0iy3mc8bsgGN7VVo3v/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUy MDY2MTdFRjAeFw0yNjA2MTcyMzM2MjNaFw0yNjA2MTkwMjQ5MjNaMDMxMTAvBgNV BAMTKDg2RDk0ODUzOTdCOUUyQjgzRjFGNTgxN0RENjQxM0E5Rjg1MjE0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PPizHummCdskI5vfzEyKpTRg b1t8ILysDQ90aFiPUw5CaBYc8UAUiMGWRqClAfz+ErPL17PACVycqB48Gh17TwFx ARLf7UM+df/A/cYuEgefyvHtmK3wqti9UXltTGX66zlqS2AmRQkad1R9XIVhuArM DhV9/hblxGnfBcypF16/rjVRIpRS16KaKxf3jO77psSS4yTttswbT66CZwh8KCN0 0nBQKCHcDL+7XXFI/zwUk/vq09wg4ALjBTKPXNIM0uuv5VevXY4heLMrkzLAkpjT KEnlV2MLXKw/q+yGsn4BhkGQ4dG5qnf8MQPRROxggBSRtnSqp5Wc7kg1stKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtlIU5e54rg/H1gX3WQTqfhSFEEwHwYDVR0j BBgwFoAUe+6ykOklTnZqfYw7IW8HhSBmF+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3MmYwMTItYTQzYS00ZmNiLTg2YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBF OTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUyMDY2MTdFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83QkVFQjI5MEU5MjU0RTc2NkE3RDhDM0IyMTZGMDc4NTIwNjYx N0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3 ODUyMDY2MTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZCKBMvErWk5LwUUHR+KuHiEcsDDuWe6Mv3 oIfQvs1bQN26VT7WgdinJf4Q6/oO0FnJVjClluJ8PfE6uua8EmUICpWQskE12G5w GPyQlxz/Bo0ap7Bmv4wcsER2KOzy3w4mLNTrSSNDrhwI/HeUXIw5HXRYR0U2SQB9 4x2hf04EFEI5hzMk0x7/RgVUrgjRAPhayO/fua66JjeayvrVL9ay16Yihy3IocgG PBJrrPtt+v655ewoQizUkTzIzvQQqC/AT4pzO8tpS1elG14h4R57HpEf/tb3lKii 8u8JBvBxe7FXTzf7kaBfFtHt6S/tbQZ3IW57BA2hr6YuuiaX6uw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:09 2026 by rpki-client