$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: JPQrT6Je8zt0Zb0p/3+EAo4VrQbXoUWlWd3mgsnzBWw= Subject key identifier: 72:04:25:61:3D:61:4A:C2:8E:9E:3F:56:5F:BD:A3:F3:6C:48:4A:A3 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 21F0450A28769F736CD130D73AC739B3A9BF0BA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:57:01 +0000 Manifest this update: Thu 23 Jul 2026 17:52:01 +0000 Manifest next update: Fri 24 Jul 2026 18:19:01 +0000 Files and hashes: 1: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: JrJRrti5BbrHME7NkaouoRbkIHPYixq7EzVi2PSduaA=) 2: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:45:0a:28:76:9f:73:6c:d1:30:d7:3a:c7:39:b3:a9:bf:0b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Jul 23 17:52:01 2026 GMT Not After : Jul 24 18:19:01 2026 GMT Subject: CN=720425613D614AC28E9E3F565FBDA3F36C484AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:b4:7b:99:e4:66:a6:3a:0b:74:0c:c4:e1: 03:f6:51:84:63:8b:9e:af:bd:2e:97:24:3a:50:aa: 33:88:c9:94:34:dd:80:93:e5:d9:aa:bc:09:1b:15: dd:6d:01:59:c5:4a:07:90:5f:c9:90:3f:e4:f2:b3: 2f:82:fb:73:2c:c7:f4:67:1a:70:7b:c2:9e:8c:a2: 62:40:09:a7:2e:8b:ad:4f:6e:fd:ff:5c:59:65:cf: 4f:91:fa:3b:bb:96:43:66:34:3d:d4:57:14:23:c8: 90:80:d0:c6:08:74:a5:87:d4:0a:a9:77:90:6f:7f: f2:f5:ab:54:71:35:bf:1f:14:4a:3f:4e:e9:41:e2: 4a:3e:1d:c6:77:1d:aa:76:6d:47:bb:35:a9:d0:3b: 96:82:59:f2:34:ac:5c:50:c6:4e:00:48:1d:88:69: 8a:b1:c0:4d:b1:2b:da:e6:0a:b8:ba:46:aa:83:3f: 11:e1:91:3b:9e:b8:dc:a4:87:6b:0d:bb:26:7c:29: 9f:3a:61:11:4a:60:8f:72:4a:29:af:d5:06:f0:71: cb:8a:85:86:ad:fe:64:75:77:d9:d7:59:47:d3:8b: 98:64:b5:03:8c:8a:ca:53:2d:e5:3c:1c:5f:84:29: 21:c1:e1:6c:cd:2c:72:6b:36:e2:b7:d8:f8:f2:47: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:25:61:3D:61:4A:C2:8E:9E:3F:56:5F:BD:A3:F3:6C:48:4A:A3 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4d:87:ed:91:25:04:ba:5f:86:52:9e:f7:38:33:ca:27:d7: 82:00:61:a6:3f:4b:7d:a4:7f:81:af:8b:64:19:2c:68:9d:04: 4f:16:ac:0f:c8:08:8f:d3:7e:0c:49:78:63:54:8a:04:6f:18: 26:b1:db:54:35:ea:6c:63:16:25:78:01:50:06:2d:55:75:18: 8f:87:b5:c0:e5:af:48:b7:7f:9f:bb:9b:bf:f1:50:1e:fa:a8: ff:8c:e5:93:ee:92:6d:fd:11:9b:30:72:ed:44:9a:8d:f9:27: 40:59:3a:70:7c:d3:14:1d:56:d2:71:3a:73:a6:79:6a:18:8b: 2c:b9:0a:3a:c6:53:00:a4:7c:79:6c:95:a7:c0:15:66:c9:d8: df:ba:5b:c3:4f:2f:c6:a9:1b:ab:56:4e:d4:7d:0d:69:9b:a2: 13:b0:17:61:0b:f9:26:16:cc:af:26:2f:5d:ac:eb:88:d1:9f: 69:0b:a3:51:64:cc:b6:8c:70:7a:58:43:bd:a6:67:7a:d5:1e: a9:d8:54:23:f3:54:58:f0:83:bc:db:05:7d:aa:e6:5d:58:bc: 8f:17:da:f3:46:a8:69:bd:9a:a6:fb:6d:f5:87:93:8a:d7:6e: 1c:60:af:6c:8b:97:d1:80:e1:70:dc:e1:fb:27:59:bb:87:ac: 8e:b2:fb:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfBFCih2n3Ns0TDXOsc5s6m/C6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA3MjMxNzUyMDFaFw0yNjA3MjQxODE5MDFaMDMxMTAvBgNV BAMTKDcyMDQyNTYxM0Q2MTRBQzI4RTlFM0Y1NjVGQkRBM0YzNkM0ODRBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+orR7meRmpjoLdAzE4QP2UYRj i56vvS6XJDpQqjOIyZQ03YCT5dmqvAkbFd1tAVnFSgeQX8mQP+Tysy+C+3Msx/Rn GnB7wp6MomJACacui61Pbv3/XFllz0+R+ju7lkNmND3UVxQjyJCA0MYIdKWH1Aqp d5Bvf/L1q1RxNb8fFEo/TulB4ko+HcZ3Hap2bUe7NanQO5aCWfI0rFxQxk4ASB2I aYqxwE2xK9rmCri6RqqDPxHhkTueuNykh2sNuyZ8KZ86YRFKYI9ySimv1QbwccuK hYat/mR1d9nXWUfTi5hktQOMispTLeU8HF+EKSHB4WzNLHJrNuK32PjyR3h5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcgQlYT1hSsKOnj9WX72j82xISqMwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5Nh+2RJQS6X4ZSnvc4M8on14IAYaY/S32k f4Gvi2QZLGidBE8WrA/ICI/TfgxJeGNUigRvGCax21Q16mxjFiV4AVAGLVV1GI+H tcDlr0i3f5+7m7/xUB76qP+M5ZPukm39EZswcu1Emo35J0BZOnB80xQdVtJxOnOm eWoYiyy5CjrGUwCkfHlslafAFWbJ2N+6W8NPL8apG6tWTtR9DWmbohOwF2EL+SYW zK8mL12s64jRn2kLo1FkzLaMcHpYQ72mZ3rVHqnYVCPzVFjwg7zbBX2q5l1YvI8X 2vNGqGm9mqb7bfWHk4rXbhxgr2yLl9GA4XDc4fsnWbuHrI6y+3Q= -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:54 2026 by rpki-client