$ rpki-client -vvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: YZPluZJk/5uvA4uDqSFO1PuSK66TfPDpaEQx0WiiQ/k= Subject key identifier: 2E:9D:EC:D8:83:A0:A5:EA:C9:24:89:B5:45:0F:8F:C3:AA:54:54:F5 Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 47745E88C5D9C8C0E3A147F62F85340FE51ADE84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:00:45 +0000 Manifest this update: Thu 23 Jul 2026 20:55:45 +0000 Manifest next update: Fri 24 Jul 2026 23:32:45 +0000 Files and hashes: 1: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: /8QvpQQ0GQGY/eT/uVbyVuZiuJefEIfauUN30hATgM0=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:74:5e:88:c5:d9:c8:c0:e3:a1:47:f6:2f:85:34:0f:e5:1a:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Jul 23 20:55:45 2026 GMT Not After : Jul 24 23:32:45 2026 GMT Subject: CN=2E9DECD883A0A5EAC92489B5450F8FC3AA5454F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:01:9c:af:2a:d8:24:c3:85:b0:d2:6c:b9: 8f:07:5f:79:77:5a:24:e3:13:2c:8e:b0:0f:54:77: a2:e8:80:22:26:9f:83:a8:ec:ee:8e:bb:f9:f5:4b: 41:4c:b5:eb:ff:2b:22:9b:9a:d3:6f:89:63:d1:b8: 98:e7:a2:eb:52:07:a5:f9:c5:c1:08:29:3b:3b:2b: a5:3e:43:f4:54:03:d6:8c:89:cd:69:c8:86:3e:1c: 9e:f9:2f:64:85:d7:d8:5d:27:22:98:34:40:09:1f: 89:8d:10:c7:d6:fa:9a:ca:fa:91:41:9e:84:46:25: 76:2b:94:39:a5:94:e7:b5:1a:35:36:ff:a4:84:3e: bb:88:eb:59:c3:2d:dd:fe:79:db:64:a3:c5:b1:61: d8:8f:a1:d7:3e:01:6e:52:7a:df:02:a6:12:76:c0: 23:ac:0d:32:7e:ae:45:d3:9d:37:ee:30:e4:6a:4c: 1b:77:71:a3:cd:8f:5e:5e:85:8f:26:90:5d:b8:7c: a7:c2:20:7b:88:df:ac:d8:48:7d:4a:2b:be:78:83: 2d:26:95:d4:f8:ed:41:76:29:97:a9:98:a2:50:66: eb:ee:10:71:e2:3d:9f:6b:39:8f:c6:c8:fe:cc:0a: 59:87:9a:5f:bb:84:81:51:cd:90:dc:92:47:f4:bd: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9D:EC:D8:83:A0:A5:EA:C9:24:89:B5:45:0F:8F:C3:AA:54:54:F5 X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:96:06:2d:75:af:05:dc:23:b1:be:c7:d4:b0:7f:b2:49:e5: 10:c7:1e:db:c4:7d:e7:bf:c4:f4:0a:55:30:55:dc:e7:b7:74: f7:95:47:b5:96:be:3f:0f:64:22:40:a9:12:d9:65:57:51:68: e8:55:0f:42:f9:c3:10:f1:20:fa:f2:7b:31:e0:b8:51:a2:15: eb:16:4e:52:f4:d3:10:c5:0a:14:22:e3:cc:a1:5d:cd:2c:17: f1:b0:30:e1:08:12:f9:94:59:23:33:31:a1:49:ee:17:57:24: 44:54:ce:46:31:29:83:13:fe:41:98:fb:ed:b5:65:9e:1c:4a: d5:e4:d1:09:27:7a:20:00:de:35:1e:17:6a:ff:c2:67:ef:d8: 9c:0a:3a:15:1a:93:70:03:a0:36:79:2d:bd:3c:1b:a5:0b:d0: ad:59:aa:68:12:ab:34:8c:80:79:72:77:a4:a1:02:8d:6e:a7: 82:9c:68:78:15:a8:bc:cf:43:05:12:ea:ed:d8:6a:84:bd:23: b9:64:10:f9:4f:a0:3b:83:4c:66:00:3e:16:00:82:3a:8f:dc: 73:0b:76:41:d9:b5:d8:b3:58:f9:d4:97:4d:30:55:95:40:e3: 84:9d:f3:3e:d8:dd:2a:9a:5e:dd:11:75:ee:11:d6:7b:ab:8c: 61:f0:7d:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3ReiMXZyMDjoUf2L4U0D+Ua3oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjA3MjMyMDU1NDVaFw0yNjA3MjQyMzMyNDVaMDMxMTAvBgNV BAMTKDJFOURFQ0Q4ODNBMEE1RUFDOTI0ODlCNTQ1MEY4RkMzQUE1NDU0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1wGcryrYJMOFsNJsuY8HX3l3 WiTjEyyOsA9Ud6LogCImn4Oo7O6Ou/n1S0FMtev/KyKbmtNviWPRuJjnoutSB6X5 xcEIKTs7K6U+Q/RUA9aMic1pyIY+HJ75L2SF19hdJyKYNEAJH4mNEMfW+prK+pFB noRGJXYrlDmllOe1GjU2/6SEPruI61nDLd3+edtko8WxYdiPodc+AW5Set8CphJ2 wCOsDTJ+rkXTnTfuMORqTBt3caPNj15ehY8mkF24fKfCIHuI36zYSH1KK754gy0m ldT47UF2KZepmKJQZuvuEHHiPZ9rOY/GyP7MClmHml+7hIFRzZDckkf0vY07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULp3s2IOgperJJIm1RQ+Pw6pUVPUwHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOWBi11rwXcI7G+x9Swf7JJ5RDHHtvEfee/ xPQKVTBV3Oe3dPeVR7WWvj8PZCJAqRLZZVdRaOhVD0L5wxDxIPryezHguFGiFesW TlL00xDFChQi48yhXc0sF/GwMOEIEvmUWSMzMaFJ7hdXJERUzkYxKYMT/kGY++21 ZZ4cStXk0QkneiAA3jUeF2r/wmfv2JwKOhUak3ADoDZ5Lb08G6UL0K1ZqmgSqzSM gHlyd6ShAo1up4KcaHgVqLzPQwUS6u3YaoS9I7lkEPlPoDuDTGYAPhYAgjqP3HML dkHZtdizWPnUl00wVZVA44Sd8z7Y3SqaXt0Rde4R1nurjGHwfRY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:18 2026 by rpki-client