$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: +gxNWjNRAFu8Optn7hw45R2phEN/UOjSSScq/SN0sQM= Subject key identifier: B0:4A:02:D8:1D:DE:9E:AD:9A:97:24:C5:94:A0:DC:E2:0C:E6:4F:08 Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 4290780C3912D7C2842AF660509902B5D54EF121 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:34 +0000 Manifest this update: Thu 23 Jul 2026 17:26:34 +0000 Manifest next update: Fri 24 Jul 2026 19:53:34 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 3: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: w+wyN7yV0P7vM6QDpr1m2zWlOc7vud85J2Q0GwMzEBs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:90:78:0c:39:12:d7:c2:84:2a:f6:60:50:99:02:b5:d5:4e:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Jul 23 17:26:34 2026 GMT Not After : Jul 24 19:53:34 2026 GMT Subject: CN=B04A02D81DDE9EAD9A9724C594A0DCE20CE64F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:45:53:a5:07:c9:26:00:eb:c1:d3:2d:68: 91:d4:a0:2b:26:ab:e1:f3:17:ec:55:b7:bf:94:37: 69:aa:47:cb:94:04:c6:86:84:47:18:ff:b4:45:7d: e7:1f:c4:b9:0e:1c:ed:4e:3a:23:e7:f4:e0:4e:73: 52:ea:09:3e:b8:49:4a:35:29:a7:d0:1f:33:0e:7e: ef:94:29:65:80:44:4b:61:6a:51:aa:5d:46:66:36: 36:89:5c:c8:a5:f0:4c:b2:d4:7b:dd:89:7a:3f:ae: 1a:4a:5d:6b:41:39:b5:7a:86:98:3f:8f:70:94:85: 1f:c6:b0:47:6e:41:1f:19:d9:8d:67:57:69:4f:46: 02:46:d3:96:6e:37:24:38:c9:eb:6b:1d:b9:77:1a: 82:26:0a:73:6f:ee:07:a5:91:c0:4c:a6:70:28:2a: b1:d3:07:e8:91:5f:69:49:21:f4:74:df:ee:81:63: fb:4d:10:70:87:aa:0f:be:12:6e:c8:4c:b1:0c:61: d9:69:2e:e5:8e:95:37:05:f5:61:ac:3c:95:8f:8a: 87:13:01:ac:c5:87:3f:9d:9a:ba:f8:2e:49:26:e7: 22:61:9d:7c:bc:b2:04:93:03:dc:39:3e:e4:11:8e: 49:08:6e:17:2b:82:19:80:5b:e6:d3:27:ad:b1:d8: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:02:D8:1D:DE:9E:AD:9A:97:24:C5:94:A0:DC:E2:0C:E6:4F:08 X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0f:96:18:1e:67:e9:3f:cd:8b:2c:2b:e9:af:3b:47:cc:64: e6:1d:ca:21:fd:8a:f3:af:8a:f0:05:0c:b5:eb:53:2d:48:c5: da:52:99:4e:f1:ca:32:39:85:75:35:75:b9:0f:7f:4b:1d:9a: cf:a6:c2:dc:26:63:38:86:5d:b6:dd:e8:a7:c7:76:07:e4:71: 0b:86:49:7c:98:04:ad:d8:3b:ed:e7:4c:d6:83:b8:cd:bd:bb: 51:c2:f1:58:cd:c0:73:2c:cb:ff:2b:02:b0:0e:8e:d4:23:ca: 66:e1:2a:69:18:e0:90:a1:43:78:f5:a5:b5:eb:7a:e8:14:43: d3:02:b4:6b:df:95:e6:cf:af:11:bf:75:21:f1:f9:aa:dc:de: 6d:38:5f:67:2c:ca:67:39:3b:69:d6:ff:e8:b9:b2:e0:3d:02: c0:b6:7a:89:7d:97:fb:a7:34:c9:27:b9:e5:a8:78:15:63:de: 93:80:b2:c0:c6:48:fd:96:18:02:d1:46:11:4c:16:8c:7e:a5: 63:20:83:fd:04:1f:33:98:c0:1c:ca:e4:7a:91:54:61:a3:36: 7a:54:4e:ed:0d:03:4e:3a:70:bd:d0:d5:ba:0e:da:23:9c:1a: 62:d8:3b:b2:f3:e0:11:5f:d8:83:c3:92:af:60:92:45:98:84: 22:aa:2b:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpB4DDkS18KEKvZgUJkCtdVO8SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA3MjMxNzI2MzRaFw0yNjA3MjQxOTUzMzRaMDMxMTAvBgNV BAMTKEIwNEEwMkQ4MURERTlFQUQ5QTk3MjRDNTk0QTBEQ0UyMENFNjRGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e0VTpQfJJgDrwdMtaJHUoCsm q+HzF+xVt7+UN2mqR8uUBMaGhEcY/7RFfecfxLkOHO1OOiPn9OBOc1LqCT64SUo1 KafQHzMOfu+UKWWAREthalGqXUZmNjaJXMil8Eyy1HvdiXo/rhpKXWtBObV6hpg/ j3CUhR/GsEduQR8Z2Y1nV2lPRgJG05ZuNyQ4yetrHbl3GoImCnNv7gelkcBMpnAo KrHTB+iRX2lJIfR03+6BY/tNEHCHqg++Em7ITLEMYdlpLuWOlTcF9WGsPJWPiocT AazFhz+dmrr4Lkkm5yJhnXy8sgSTA9w5PuQRjkkIbhcrghmAW+bTJ62x2PkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEoC2B3enq2alyTFlKDc4gzmTwgwHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgPlhgeZ+k/zYssK+mvO0fMZOYdyiH9ivOv ivAFDLXrUy1IxdpSmU7xyjI5hXU1dbkPf0sdms+mwtwmYziGXbbd6KfHdgfkcQuG SXyYBK3YO+3nTNaDuM29u1HC8VjNwHMsy/8rArAOjtQjymbhKmkY4JChQ3j1pbXr eugUQ9MCtGvflebPrxG/dSHx+arc3m04X2csymc5O2nW/+i5suA9AsC2eol9l/un NMknueWoeBVj3pOAssDGSP2WGALRRhFMFox+pWMgg/0EHzOYwBzK5HqRVGGjNnpU Tu0NA046cL3Q1boO2iOcGmLYO7Lz4BFf2IPDkq9gkkWYhCKqK+Y= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:02 2026 by rpki-client