$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: /cAio7sjiDRKbV01UrWMI53n8zS7wnNdgwsloWuQHkA= Subject key identifier: C5:C4:22:F8:71:E9:64:4E:9B:8B:9F:A4:C4:6F:9A:A8:85:06:F0:88 Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 664B3119866E565F9C8CF1F95FC3B367D17D0D52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 07:54:33 +0000 Manifest this update: Thu 23 Jul 2026 07:49:33 +0000 Manifest next update: Fri 24 Jul 2026 11:01:33 +0000 Files and hashes: 1: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 2: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 3: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 4: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: t/D3kuyqQnSK7fCxn7BvzjAj846uWhqbTMSMKSOJ2zQ=) 5: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 6: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 7: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4b:31:19:86:6e:56:5f:9c:8c:f1:f9:5f:c3:b3:67:d1:7d:0d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Jul 23 07:49:33 2026 GMT Not After : Jul 24 11:01:33 2026 GMT Subject: CN=C5C422F871E9644E9B8B9FA4C46F9AA88506F088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:da:ce:47:56:c2:f2:5e:b6:8f:3b:6f:29: 5e:14:5f:e8:14:65:a1:db:66:cf:e2:ad:cf:0b:4f: a0:7e:a3:eb:e5:20:1a:9d:82:cc:98:c7:5a:54:73: 7d:0b:9b:bc:8c:3b:8e:1c:41:73:cd:c8:1c:37:e0: 83:a4:f4:65:0b:84:9a:bb:ee:69:37:c4:bc:bd:30: 88:d3:dd:25:b6:26:cf:c7:d3:f0:7b:c6:e7:46:b1: c6:b0:a8:fe:1d:f0:5a:b2:87:6e:48:04:1d:3a:12: 51:41:0e:a2:04:b0:29:3f:0d:1b:77:56:4d:8c:cc: 6e:36:69:98:6b:68:54:36:72:eb:62:39:93:fe:17: e6:d8:12:c5:61:8a:54:2f:dd:32:62:fa:2c:63:36: a1:6f:47:07:76:ca:90:1b:92:40:36:2a:72:48:bb: a3:97:89:0b:12:84:64:78:ce:4d:d9:06:95:10:d6: 79:8b:8b:a7:a5:0e:04:f3:97:3c:0b:5f:dc:6d:65: f7:c9:ff:89:65:f4:19:dc:3e:15:07:6b:7c:05:78: 59:79:6a:2f:10:e7:d9:aa:b3:f1:90:2c:c0:c2:5c: f2:2e:4b:58:fc:46:9f:56:15:36:48:59:d0:4e:5e: 32:95:f5:63:df:2a:ef:6d:3c:d9:32:a8:dc:39:15: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:22:F8:71:E9:64:4E:9B:8B:9F:A4:C4:6F:9A:A8:85:06:F0:88 X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6d:47:50:d9:9e:66:de:25:ea:30:f3:4d:80:b9:17:ee:87: aa:1f:6c:80:af:e8:4c:8d:d6:84:b2:d4:c0:59:37:f7:b3:0e: c7:28:06:98:dc:28:bd:1b:9f:52:33:5d:de:80:55:88:93:c3: b8:10:46:5a:13:fb:16:8a:b4:32:f4:85:c6:03:e1:cd:1d:d7: bd:b1:b1:a9:1a:5e:6f:26:43:05:fe:57:aa:1a:3b:f8:65:e1: 1c:34:af:0a:33:2a:90:00:35:bd:63:49:5e:6f:70:0b:d2:08: 18:85:df:7f:a0:90:a9:62:cc:a6:c1:99:a0:c4:d5:b8:c4:a2: 17:90:db:28:7d:bb:d0:9e:bc:31:41:44:de:71:f4:89:1a:4a: 5c:d2:a6:8d:4a:b8:fa:de:3a:c6:80:32:41:ab:5d:05:dc:66: 0c:9a:8b:9b:cf:2c:84:5a:74:92:1a:7b:06:db:dc:63:3b:e2: 37:70:2e:d3:aa:53:ac:41:b7:f6:b2:25:fd:94:0c:92:11:f1: 45:9c:82:11:14:8d:79:16:7a:cc:c9:61:17:16:1b:fd:64:49: b0:e8:b2:c5:ae:d8:21:06:e5:5f:34:36:8a:fe:43:51:66:f1: a6:39:ff:68:77:13:42:79:09:61:87:dc:dc:92:88:3f:b0:df: b0:ab:85:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZksxGYZuVl+cjPH5X8OzZ9F9DVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA3MjMwNzQ5MzNaFw0yNjA3MjQxMTAxMzNaMDMxMTAvBgNV BAMTKEM1QzQyMkY4NzFFOTY0NEU5QjhCOUZBNEM0NkY5QUE4ODUwNkYwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcntrOR1bC8l62jztvKV4UX+gU ZaHbZs/irc8LT6B+o+vlIBqdgsyYx1pUc30Lm7yMO44cQXPNyBw34IOk9GULhJq7 7mk3xLy9MIjT3SW2Js/H0/B7xudGscawqP4d8Fqyh25IBB06ElFBDqIEsCk/DRt3 Vk2MzG42aZhraFQ2cutiOZP+F+bYEsVhilQv3TJi+ixjNqFvRwd2ypAbkkA2KnJI u6OXiQsShGR4zk3ZBpUQ1nmLi6elDgTzlzwLX9xtZffJ/4ll9BncPhUHa3wFeFl5 ai8Q59mqs/GQLMDCXPIuS1j8Rp9WFTZIWdBOXjKV9WPfKu9tPNkyqNw5FewbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcQi+HHpZE6bi5+kxG+aqIUG8IgwHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxtR1DZnmbeJeow802AuRfuh6ofbICv6EyN 1oSy1MBZN/ezDscoBpjcKL0bn1IzXd6AVYiTw7gQRloT+xaKtDL0hcYD4c0d172x sakaXm8mQwX+V6oaO/hl4Rw0rwozKpAANb1jSV5vcAvSCBiF33+gkKlizKbBmaDE 1bjEoheQ2yh9u9CevDFBRN5x9IkaSlzSpo1KuPreOsaAMkGrXQXcZgyai5vPLIRa dJIaewbb3GM74jdwLtOqU6xBt/ayJf2UDJIR8UWcghEUjXkWeszJYRcWG/1kSbDo ssWu2CEG5V80Nor+Q1Fm8aY5/2h3E0J5CWGH3NySiD+w37CrhVQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:20:18 2026 by rpki-client