$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: 6DgOq5xO7Nl9abvzJq15ck5pY+3F5aeEj8Awk6f8QVA= Subject key identifier: F8:EE:80:7B:E6:85:71:77:66:83:24:AF:D1:AF:9A:05:BA:45:0A:C7 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 44347007CA7F76EC4779226BA1AC8E3D00928453 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:56:55 +0000 Manifest this update: Sat 20 Jun 2026 05:51:55 +0000 Manifest next update: Sun 21 Jun 2026 07:32:55 +0000 Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) 2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) 3: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: 3OxzKRFkMM7cI6ibP5IwRmG9sKfqp15rHlbYyj8Tseo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:70:07:ca:7f:76:ec:47:79:22:6b:a1:ac:8e:3d:00:92:84:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: Jun 20 05:51:55 2026 GMT Not After : Jun 21 07:32:55 2026 GMT Subject: CN=F8EE807BE6857177668324AFD1AF9A05BA450AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:91:7a:d4:29:66:6a:11:87:5a:86:e7:9c: 59:79:63:ae:be:da:a7:7a:2a:87:cf:48:6f:54:de: 1b:7e:f4:d1:8e:0f:6d:2d:6d:dc:37:87:63:17:65: 09:f9:e7:12:cd:84:3a:12:f8:6d:27:8b:8c:12:23: dc:6f:cb:26:9e:a1:98:5b:61:14:5d:4e:a3:d7:7a: eb:69:d0:32:bf:f9:47:48:5c:35:8f:95:82:86:fe: 1c:e6:a0:20:26:9e:1c:ca:29:00:d4:c1:8c:91:9f: 2f:84:05:69:86:e0:1b:a9:7c:41:e5:6f:f2:a4:4f: b8:2b:7b:6f:be:8b:e0:f8:91:22:17:d1:ad:e3:33: eb:15:f6:e1:0f:22:9e:af:21:20:f5:0e:44:10:76: 93:0c:e9:27:7d:09:80:1b:9c:4b:d3:3d:66:a8:44: f3:07:5b:55:73:0d:4e:44:7a:c5:06:d6:45:ee:c1: 8d:f9:a3:20:7d:c1:10:87:71:ad:77:b1:d4:fd:8b: 41:c4:b5:da:9a:a7:3f:ff:c0:da:4e:53:52:26:97: 47:bd:da:de:f7:e4:1e:fa:84:b0:d3:31:ac:ab:d5: 0f:5f:38:1b:9d:8b:9a:2b:ab:9e:b8:86:4a:f0:ed: 79:b1:15:55:c8:c1:1c:96:0f:2a:c9:95:56:d5:09: a6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:80:7B:E6:85:71:77:66:83:24:AF:D1:AF:9A:05:BA:45:0A:C7 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1f:fa:e4:84:1b:31:3d:98:56:3a:7c:95:66:2a:18:02:6e: 2b:bc:e8:f4:d1:3c:27:8b:b2:50:11:91:5b:67:5b:02:84:09: 12:86:e1:c3:c6:d8:4f:3e:94:9a:7c:34:ed:6b:83:7b:84:2a: 9c:49:c8:b1:5f:7a:98:ec:62:0c:24:12:7e:32:b7:fe:ad:6c: 1a:8e:17:79:76:37:8f:10:01:40:8b:5f:6b:46:b1:29:2c:7c: 62:b2:41:18:13:7d:00:11:09:58:78:55:86:8c:0d:7e:fa:ce: d3:4f:5e:fe:b3:b0:9c:48:4b:f3:35:1b:0a:ea:8c:3f:fd:e3: 38:fd:74:33:49:04:b5:60:a4:82:56:3f:5a:42:c7:16:26:c7: 95:b0:0f:bf:4c:e8:af:91:0c:08:33:b2:8a:0b:ea:56:02:37: 15:37:94:11:09:bc:ce:c3:58:05:e3:98:79:fc:1c:8f:d0:db: 73:a5:19:c0:ee:ee:20:9b:50:cd:af:c8:1d:97:d5:b7:58:b2: ab:c2:a4:ee:c1:ee:07:41:d4:aa:59:4a:a0:b0:e9:2b:37:2c: 8f:45:fe:c4:69:42:90:2f:93:60:4f:9e:1d:9a:23:65:b2:db: 0b:84:34:89:6a:2e:7c:44:52:a2:eb:a2:c2:dd:df:8e:30:f3: 89:3e:76:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDRwB8p/duxHeSJroayOPQCShFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjA2MjAwNTUxNTVaFw0yNjA2MjEwNzMyNTVaMDMxMTAvBgNV BAMTKEY4RUU4MDdCRTY4NTcxNzc2NjgzMjRBRkQxQUY5QTA1QkE0NTBBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAZF61ClmahGHWobnnFl5Y66+ 2qd6KofPSG9U3ht+9NGOD20tbdw3h2MXZQn55xLNhDoS+G0ni4wSI9xvyyaeoZhb YRRdTqPXeutp0DK/+UdIXDWPlYKG/hzmoCAmnhzKKQDUwYyRny+EBWmG4BupfEHl b/KkT7gre2++i+D4kSIX0a3jM+sV9uEPIp6vISD1DkQQdpMM6Sd9CYAbnEvTPWao RPMHW1VzDU5EesUG1kXuwY35oyB9wRCHca13sdT9i0HEtdqapz//wNpOU1Iml0e9 2t735B76hLDTMayr1Q9fOBudi5orq564hkrw7XmxFVXIwRyWDyrJlVbVCaY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+O6Ae+aFcXdmgySv0a+aBbpFCscwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8f+uSEGzE9mFY6fJVmKhgCbiu86PTRPCeL slARkVtnWwKECRKG4cPG2E8+lJp8NO1rg3uEKpxJyLFfepjsYgwkEn4yt/6tbBqO F3l2N48QAUCLX2tGsSksfGKyQRgTfQARCVh4VYaMDX76ztNPXv6zsJxIS/M1Gwrq jD/94zj9dDNJBLVgpIJWP1pCxxYmx5WwD79M6K+RDAgzsooL6lYCNxU3lBEJvM7D WAXjmHn8HI/Q23OlGcDu7iCbUM2vyB2X1bdYsqvCpO7B7gdB1KpZSqCw6Ss3LI9F /sRpQpAvk2BPnh2aI2Wy2wuENIlqLnxEUqLrosLd344w84k+dnY= -----END CERTIFICATE-----Generated at Sat Jun 20 20:05:44 2026 by rpki-client