$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: Pnr+ZnfJNWS61zwOH+elAfUFNvWh+9JKTogx/wU6ADI= Subject key identifier: 55:07:67:EC:95:69:54:B0:B8:58:EC:0F:E6:FA:BB:0E:AA:9B:5D:01 Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 367ECEF101C49E67899840B73BA4BD27EA320953 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:51:57 +0000 Manifest this update: Thu 23 Jul 2026 17:46:57 +0000 Manifest next update: Fri 24 Jul 2026 18:56:57 +0000 Files and hashes: 1: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: UWtDsF+gZFxd4qSxmz0jYic8SliuIujMN9ebUAxTaqc=) 2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) 3: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7e:ce:f1:01:c4:9e:67:89:98:40:b7:3b:a4:bd:27:ea:32:09:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Jul 23 17:46:57 2026 GMT Not After : Jul 24 18:56:57 2026 GMT Subject: CN=550767EC956954B0B858EC0FE6FABB0EAA9B5D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:56:52:82:12:51:ee:5e:8c:d3:93:06:ab: cc:a3:d7:f3:cc:8d:cf:ee:92:10:34:d8:ac:b6:6b: da:5a:0f:a3:7a:6c:fe:49:b7:d7:da:6d:9f:da:8b: 21:c1:e7:79:d8:2d:c0:13:7f:6b:b1:61:bf:64:d0: a8:36:22:7b:a9:d4:5d:11:ce:39:fd:f3:fd:41:81: 1e:21:83:32:d3:06:16:77:ae:c8:2c:b8:6a:9b:96: d1:3d:62:1d:b6:f8:d2:4f:31:ea:88:9d:8f:1a:15: b0:53:67:f0:97:ce:5a:c5:ad:70:c7:b2:ac:20:76: 68:e0:24:f9:a6:43:89:51:ad:cb:1e:dd:f4:39:e2: 8b:d3:53:f3:56:77:b8:58:cf:2a:c2:e2:74:ff:0d: 0e:21:af:fc:21:a0:78:71:c3:47:d9:77:27:c1:80: d5:fb:90:26:e9:c3:23:31:91:10:25:ac:54:ea:21: 22:85:39:f3:3e:cd:8c:60:30:23:81:65:dc:2a:89: c8:81:1f:d5:e6:50:34:1a:3d:70:d8:91:e3:b7:9b: 8c:12:6a:4b:8e:45:c1:df:ee:9a:2c:91:12:44:df: c8:15:5f:37:62:8f:8e:5e:8f:46:20:3e:59:e7:9d: 3e:f8:d0:6b:13:0f:a9:55:e2:97:83:46:17:e0:dd: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:07:67:EC:95:69:54:B0:B8:58:EC:0F:E6:FA:BB:0E:AA:9B:5D:01 X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:26:b9:52:b7:29:58:35:da:07:ce:ba:58:02:f9:be:05:57: 73:4d:95:03:6b:73:4b:32:b1:1d:f1:42:51:c0:26:cb:e1:e5: 19:de:0f:89:de:86:48:67:1c:81:19:4b:04:da:c6:b4:e7:49: f2:ac:26:7d:74:85:15:3d:d1:6b:e7:68:bc:94:4e:e7:3f:1e: b5:a2:79:6c:32:f8:a1:75:f4:1b:16:0a:cc:0e:3d:4d:54:80: 85:81:8f:77:c6:9c:1d:31:8f:38:44:74:b3:02:2a:86:c9:5b: c3:80:e7:62:3a:52:09:44:0a:46:23:3c:bd:64:a7:0e:70:d1: a2:9f:0d:3a:ce:c5:19:0b:2d:8b:50:7b:bd:a2:9b:64:a3:f0: 5e:b9:49:77:f2:62:60:75:29:7c:61:9e:6a:0b:85:71:6c:7f: 9c:37:ac:09:59:b4:8f:b5:f5:08:b4:de:3f:8b:b4:d5:eb:06: 8e:3a:fd:73:67:4d:21:a3:47:6b:d4:62:88:94:e9:3e:2f:73: 48:00:2c:71:90:23:29:56:7b:6f:4d:de:f4:72:4a:0f:08:f6: c8:0d:88:c1:a4:15:e5:cc:06:61:c3:57:35:9e:0d:1d:5a:84: d7:a2:d9:7f:3e:47:06:ea:09:cb:5f:ea:bd:7c:3d:c9:52:67: 6c:ba:34:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNn7O8QHEnmeJmEC3O6S9J+oyCVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjA3MjMxNzQ2NTdaFw0yNjA3MjQxODU2NTdaMDMxMTAvBgNV BAMTKDU1MDc2N0VDOTU2OTU0QjBCODU4RUMwRkU2RkFCQjBFQUE5QjVEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCislZSghJR7l6M05MGq8yj1/PM jc/ukhA02Ky2a9paD6N6bP5Jt9fabZ/aiyHB53nYLcATf2uxYb9k0Kg2Inup1F0R zjn98/1BgR4hgzLTBhZ3rsgsuGqbltE9Yh22+NJPMeqInY8aFbBTZ/CXzlrFrXDH sqwgdmjgJPmmQ4lRrcse3fQ54ovTU/NWd7hYzyrC4nT/DQ4hr/whoHhxw0fZdyfB gNX7kCbpwyMxkRAlrFTqISKFOfM+zYxgMCOBZdwqiciBH9XmUDQaPXDYkeO3m4wS akuORcHf7poskRJE38gVXzdij45ej0YgPlnnnT740GsTD6lV4peDRhfg3Ui3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQdn7JVpVLC4WOwP5vq7DqqbXQEwHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgmuVK3KVg12gfOulgC+b4FV3NNlQNrc0sy sR3xQlHAJsvh5RneD4nehkhnHIEZSwTaxrTnSfKsJn10hRU90WvnaLyUTuc/HrWi eWwy+KF19BsWCswOPU1UgIWBj3fGnB0xjzhEdLMCKobJW8OA52I6UglECkYjPL1k pw5w0aKfDTrOxRkLLYtQe72im2Sj8F65SXfyYmB1KXxhnmoLhXFsf5w3rAlZtI+1 9Qi03j+LtNXrBo46/XNnTSGjR2vUYoiU6T4vc0gALHGQIylWe29N3vRySg8I9sgN iMGkFeXMBmHDVzWeDR1ahNei2X8+RwbqCctf6r18PclSZ2y6NL4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:39 2026 by rpki-client