$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: hAkbqKNm5lMzAQlEyOH/HnFosIGnjq7dCfbxW2BTnxo= Subject key identifier: F6:66:62:0C:05:46:D0:79:2A:8D:0E:52:CB:69:3A:98:8D:14:C7:9C Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 1EAE3DEAB03253A4AB6929171FF5E0632CD8F7BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:00:31 +0000 Manifest this update: Tue 02 Jun 2026 16:55:31 +0000 Manifest next update: Wed 03 Jun 2026 20:56:31 +0000 Files and hashes: 1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: CVstSCBClcFtzWOEnNXtP2kWNwkLp1xMaxaLq/Eci5Y=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=) 3: 3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (hash: naJE/Bidj2O+YOMcboAw9DP7KPCUYJEXAx9uQDGJprM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ae:3d:ea:b0:32:53:a4:ab:69:29:17:1f:f5:e0:63:2c:d8:f7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: Jun 2 16:55:31 2026 GMT Not After : Jun 3 20:56:31 2026 GMT Subject: CN=F666620C0546D0792A8D0E52CB693A988D14C79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:b9:73:86:ae:d4:a5:1e:31:ab:8b:dd:39: d4:98:f0:49:d8:74:ab:3c:60:a6:59:eb:1a:a7:fc: d7:8b:8d:e6:d6:62:47:7e:26:5d:2c:bd:ed:24:df: 5d:99:30:7e:f4:7e:8d:e0:27:f2:b2:e5:b3:e7:12: ac:9a:3c:6d:a0:bc:16:a8:f7:1a:3f:72:e2:3c:2a: a9:d8:88:5a:7e:9c:5e:6b:73:64:3e:08:7f:39:e5: f2:82:fa:05:0e:ec:bf:02:4d:8c:3d:98:e4:bc:57: ec:a1:20:87:84:93:78:2c:08:7e:8d:12:d1:dc:da: 18:32:12:13:8b:18:ce:b1:49:ad:0d:28:cf:bf:bf: 95:88:53:d4:a8:08:b9:db:40:23:9a:e7:c7:90:4a: b8:eb:1e:25:f6:6e:b5:a1:9a:a8:73:c3:4c:77:68: 07:9a:27:fe:7c:52:ac:b1:ce:28:1e:44:29:db:c0: e5:c1:27:2e:50:8c:3e:37:b0:c8:21:db:75:0c:60: e7:1e:c9:d2:03:a0:01:37:08:3e:30:22:61:b1:22: f7:28:72:f2:44:2b:d4:85:bc:2b:f4:ed:be:32:aa: 7b:53:64:b2:bc:2c:9d:39:0c:da:04:38:ff:c8:e7: 7e:70:b4:09:f4:7d:b9:5d:15:0c:8c:b5:76:ee:c0: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:66:62:0C:05:46:D0:79:2A:8D:0E:52:CB:69:3A:98:8D:14:C7:9C X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:72:17:3b:28:89:93:b5:e7:ef:60:9c:19:c7:00:72:28:c5: bb:2b:bf:e3:7b:7b:a7:5d:41:c9:64:0c:33:ce:65:86:96:bc: ee:0b:40:6c:56:e6:e8:5b:c0:b2:94:7e:6f:8c:5f:91:eb:be: 7f:52:85:50:93:54:6b:7a:35:fb:db:6d:f5:2a:7d:a9:41:fa: 56:b9:32:af:25:4f:97:96:b9:1a:7c:0e:9a:c4:2c:64:fb:af: 11:de:e0:2f:9a:50:55:e1:44:07:8c:f4:13:08:28:94:74:f2: fe:a5:73:22:e8:70:34:63:2a:59:76:90:e5:1c:bb:54:ec:6f: 7e:4c:f4:22:0b:3a:e3:b2:7a:56:88:93:87:57:27:9d:04:9f: fb:34:06:08:22:c7:23:e8:4c:5e:8a:3a:dd:b8:bf:73:7d:25: 00:2e:43:30:5b:dc:cd:41:5b:cf:85:f4:c1:57:92:1e:28:4d: ad:e1:57:c3:8e:5e:38:69:0f:26:39:03:72:23:1b:2a:61:4a: f2:e1:b3:a5:5c:78:3a:c1:db:92:f8:6b:fc:d1:dc:1b:66:8a: ce:5d:56:75:6f:d2:16:a5:7a:d8:e5:fd:74:b2:08:b7:8f:74: e3:68:8f:66:e4:02:95:1c:3e:de:ab:cb:04:a7:5f:b5:2f:94: 31:6b:0b:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHq496rAyU6SraSkXH/XgYyzY97owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA2MDIxNjU1MzFaFw0yNjA2MDMyMDU2MzFaMDMxMTAvBgNV BAMTKEY2NjY2MjBDMDU0NkQwNzkyQThEMEU1MkNCNjkzQTk4OEQxNEM3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyblzhq7UpR4xq4vdOdSY8EnY dKs8YKZZ6xqn/NeLjebWYkd+Jl0sve0k312ZMH70fo3gJ/Ky5bPnEqyaPG2gvBao 9xo/cuI8KqnYiFp+nF5rc2Q+CH855fKC+gUO7L8CTYw9mOS8V+yhIIeEk3gsCH6N EtHc2hgyEhOLGM6xSa0NKM+/v5WIU9SoCLnbQCOa58eQSrjrHiX2brWhmqhzw0x3 aAeaJ/58UqyxzigeRCnbwOXBJy5QjD43sMgh23UMYOceydIDoAE3CD4wImGxIvco cvJEK9SFvCv07b4yqntTZLK8LJ05DNoEOP/I535wtAn0fbldFQyMtXbuwIXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mZiDAVG0HkqjQ5Sy2k6mI0Ux5wwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNyFzsoiZO15+9gnBnHAHIoxbsrv+N7e6dd QclkDDPOZYaWvO4LQGxW5uhbwLKUfm+MX5Hrvn9ShVCTVGt6NfvbbfUqfalB+la5 Mq8lT5eWuRp8DprELGT7rxHe4C+aUFXhRAeM9BMIKJR08v6lcyLocDRjKll2kOUc u1Tsb35M9CILOuOyelaIk4dXJ50En/s0BggixyPoTF6KOt24v3N9JQAuQzBb3M1B W8+F9MFXkh4oTa3hV8OOXjhpDyY5A3IjGyphSvLhs6VceDrB25L4a/zR3Btmis5d VnVv0haletjl/XSyCLePdONoj2bkApUcPt6rywSnX7UvlDFrCw4= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:08 2026 by rpki-client