$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: NDz9BtpKPBU2yk0NlLA1tfQjIURiCaHfSenCxyYCMac= Subject key identifier: 6E:40:CF:0B:D0:78:BA:B1:13:D1:CF:0B:C1:A6:13:98:96:DF:BF:60 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 3AF35793483A63FBE40695ED06E3C01C43B0A231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:31:35 +0000 Manifest this update: Thu 23 Jul 2026 13:26:35 +0000 Manifest next update: Fri 24 Jul 2026 15:28:35 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 3: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 4: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: ctS04qlSFmuwDcjlxs41uhWfML3y71joFRJo3de65Gk=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f3:57:93:48:3a:63:fb:e4:06:95:ed:06:e3:c0:1c:43:b0:a2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Jul 23 13:26:35 2026 GMT Not After : Jul 24 15:28:35 2026 GMT Subject: CN=6E40CF0BD078BAB113D1CF0BC1A6139896DFBF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:b5:77:e0:c9:bc:f6:6d:37:2d:3c:ae:bc: 9e:d4:4a:ca:4d:11:d5:cd:82:82:31:9f:25:1c:7b: a1:34:cb:4e:83:7c:14:6d:6a:42:ce:91:69:2e:c9: b2:19:3f:66:91:88:3e:d6:ac:fa:46:b9:df:43:45: 5e:8f:47:14:a8:bb:97:c2:10:99:5c:b6:b1:e4:bc: 03:52:ef:6c:51:13:f6:48:fe:4e:e8:a4:1b:67:bc: a6:2c:e2:9f:2d:24:86:f5:b1:4f:f5:35:2a:b5:9d: d9:e0:52:5a:f7:ee:85:77:c7:99:85:35:77:d5:04: 23:0b:90:a7:2e:cb:82:35:e0:00:4b:29:e7:d2:f3: c7:df:33:9a:cc:6c:00:bb:43:44:f7:f7:c3:38:3e: cf:ad:53:6f:0f:bf:0d:9d:b6:6d:cd:45:c8:3e:c9: f5:06:b3:83:44:10:79:83:ec:a1:bb:c8:ff:a8:4c: 1a:f6:84:73:25:30:85:48:63:6e:fa:3a:89:29:83: 29:e8:84:46:8e:20:56:29:7b:8f:c9:6b:90:68:6b: 78:e8:a9:3e:8f:b1:90:6c:6d:20:92:c9:89:29:38: ae:c9:8a:18:98:3c:28:fc:9b:6e:a8:d5:e1:59:10: df:9b:3e:fd:7d:77:a7:0a:cb:87:34:55:03:da:ab: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:40:CF:0B:D0:78:BA:B1:13:D1:CF:0B:C1:A6:13:98:96:DF:BF:60 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ff:06:9d:74:ae:79:2a:ff:9a:24:57:e6:bb:16:05:67:11: 5f:4d:cd:cd:cd:03:32:b2:68:ab:d2:b3:a9:98:a4:61:c3:5b: 1c:bc:2b:de:73:96:90:a5:0b:83:b9:ba:37:49:1d:80:94:d2: ba:08:8e:2b:0f:00:98:9d:7f:ce:79:41:95:12:04:36:a7:27: 55:09:7d:45:c2:72:b7:ce:2b:1e:d1:2e:16:4d:3a:38:55:26: 84:55:85:6a:92:8b:93:8c:0c:69:71:cb:dc:b1:2b:4b:2f:09: 3a:3c:cb:6a:66:83:cd:89:0e:8b:ae:f5:40:46:68:2d:33:f3: 81:f4:62:39:48:42:51:43:0e:d9:82:7c:1f:69:93:45:93:b1: e3:55:99:ba:05:9a:db:16:ca:f2:6f:4a:ed:28:ff:8f:30:de: 37:b0:2e:54:f8:fe:b8:a3:69:7f:78:c7:52:52:a0:47:10:01: d2:01:63:2d:36:f3:2d:86:4f:f9:75:cb:24:1d:a9:20:e1:4e: 1a:ae:22:c9:02:40:56:f3:df:58:a4:2e:1c:42:ee:8a:bb:0a: 43:db:66:41:ca:7c:56:0b:6b:43:cd:11:33:4a:5d:3c:71:94: 0b:47:77:c3:3d:8f:19:dc:07:41:41:9a:33:b4:3e:58:63:5d: f0:fa:86:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvNXk0g6Y/vkBpXtBuPAHEOwojEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA3MjMxMzI2MzVaFw0yNjA3MjQxNTI4MzVaMDMxMTAvBgNV BAMTKDZFNDBDRjBCRDA3OEJBQjExM0QxQ0YwQkMxQTYxMzk4OTZERkJGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/LV34Mm89m03LTyuvJ7USspN EdXNgoIxnyUce6E0y06DfBRtakLOkWkuybIZP2aRiD7WrPpGud9DRV6PRxSou5fC EJlctrHkvANS72xRE/ZI/k7opBtnvKYs4p8tJIb1sU/1NSq1ndngUlr37oV3x5mF NXfVBCMLkKcuy4I14ABLKefS88ffM5rMbAC7Q0T398M4Ps+tU28Pvw2dtm3NRcg+ yfUGs4NEEHmD7KG7yP+oTBr2hHMlMIVIY276OokpgynohEaOIFYpe4/Ja5Boa3jo qT6PsZBsbSCSyYkpOK7JihiYPCj8m26o1eFZEN+bPv19d6cKy4c0VQPaq0gPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkDPC9B4urET0c8LwaYTmJbfv2AwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL/Bp10rnkq/5okV+a7FgVnEV9Nzc3NAzKy aKvSs6mYpGHDWxy8K95zlpClC4O5ujdJHYCU0roIjisPAJidf855QZUSBDanJ1UJ fUXCcrfOKx7RLhZNOjhVJoRVhWqSi5OMDGlxy9yxK0svCTo8y2pmg82JDouu9UBG aC0z84H0YjlIQlFDDtmCfB9pk0WTseNVmboFmtsWyvJvSu0o/48w3jewLlT4/rij aX94x1JSoEcQAdIBYy028y2GT/l1yyQdqSDhThquIskCQFbz31ikLhxC7oq7CkPb ZkHKfFYLa0PNETNKXTxxlAtHd8M9jxncB0FBmjO0PlhjXfD6hrc= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:36 2026 by rpki-client