$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft File: 7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json) Hash identifier: 2/0dKhldIqOERR6rs1FKQM7HVx8UEqu64enerkc7prw= Subject key identifier: EE:FD:F2:F8:66:76:C5:1D:5B:A5:71:6F:C5:BB:3F:67:05:A9:D0:FF Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79 Certificate issuer: /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379 Certificate serial: 6805092F4823C8B3332D8BF10DA56C5CF0E53365 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:26:01 +0000 Manifest this update: Fri 24 Jul 2026 01:21:01 +0000 Manifest next update: Sat 25 Jul 2026 01:30:01 +0000 Files and hashes: 1: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: bF41hghfBJ0adNft+oUQGGFvosfIG+leKWaFSUjMzGk=) 2: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=) 3: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=) 4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:05:09:2f:48:23:c8:b3:33:2d:8b:f1:0d:a5:6c:5c:f0:e5:33:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379 Validity Not Before: Jul 24 01:21:01 2026 GMT Not After : Jul 25 01:30:01 2026 GMT Subject: CN=EEFDF2F86676C51D5BA5716FC5BB3F6705A9D0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:8c:f2:7f:fd:56:6e:d4:c2:1c:e7:49:d2: 1f:6a:da:26:9a:2f:1e:f0:2a:65:12:dc:b5:05:e6: 2f:76:88:2c:c3:78:86:d5:fa:cf:3e:c4:ca:35:f3: 85:13:e4:cc:4b:15:8c:56:74:48:a1:79:9a:61:f6: b4:83:57:91:c1:68:2b:b3:8d:43:a4:83:26:4e:50: 55:8d:f7:83:d2:d4:53:32:57:3b:10:01:92:50:bd: 46:d6:4b:0c:05:a2:e6:f9:a8:37:82:1f:f2:1f:19: 1f:86:7d:f5:e2:14:a8:db:9e:2a:be:1e:21:8c:0c: 67:54:0b:6c:ab:51:b8:34:74:62:6a:44:c5:59:d6: 23:d2:c2:62:01:b8:38:3a:ae:18:08:2d:11:51:8c: 98:95:4c:09:1a:9f:ae:e3:a6:1a:8d:d0:f9:9a:3a: b2:69:d4:63:fa:98:b5:a8:4e:da:c6:f9:7d:29:ba: 6d:78:8c:b8:a4:af:37:2e:84:08:59:34:2d:64:48: c9:d2:f8:ea:5c:30:aa:4a:c7:41:69:5d:f5:15:0b: c7:d7:14:d8:fa:69:66:24:21:59:6e:0c:52:63:98: 5a:0d:5f:dd:74:d9:ca:e9:56:24:fd:6e:68:2d:e7: 70:79:d5:a2:d4:dc:43:0b:d2:00:50:46:c0:6b:4d: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FD:F2:F8:66:76:C5:1D:5B:A5:71:6F:C5:BB:3F:67:05:A9:D0:FF X509v3 Authority Key Identifier: keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:2e:71:5c:53:54:fe:a3:c6:33:cc:e9:4a:35:f3:af:b4:15: f2:93:1b:8f:90:93:6f:74:e8:bc:cd:99:0c:d7:0b:4f:be:62: b8:f6:56:ff:95:cf:6e:ca:cd:29:3f:a9:66:f8:45:70:b3:bb: 64:6a:4f:82:ab:66:6a:5c:92:6f:0d:c4:5e:48:ea:26:c4:d5: 93:4a:7f:2a:0c:59:eb:d7:63:6a:f7:36:5c:a3:73:97:46:fd: d9:54:57:6d:49:eb:c0:55:33:f9:4e:b6:e2:f9:99:4b:65:46: 21:cf:e3:43:e3:18:86:b4:43:93:2c:f3:07:52:d7:6d:08:ff: 47:74:01:dc:3b:e4:16:6f:63:a4:06:c7:8d:38:b6:bf:42:b5: 0b:f9:b5:81:0b:43:b8:f2:e5:05:9e:f4:29:01:97:cb:1f:5e: c2:3a:45:d7:87:53:5a:c6:f1:73:81:79:e9:08:8a:f3:66:c3: 31:29:6d:23:dc:b0:de:25:9a:cf:87:c7:2b:95:27:0a:0e:c0: f0:ab:6f:45:60:76:06:5c:e0:f5:d5:cd:c8:09:c0:89:bc:4f: c7:76:3c:32:87:ec:6d:26:b6:26:c6:07:67:57:8a:4a:fc:d4: a2:23:e0:ce:07:5c:f1:b4:7a:48:d6:da:32:00:d5:fe:cc:50: 68:c1:05:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAUJL0gjyLMzLYvxDaVsXPDlM2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3 NjQ4QjM3OTAeFw0yNjA3MjQwMTIxMDFaFw0yNjA3MjUwMTMwMDFaMDMxMTAvBgNV BAMTKEVFRkRGMkY4NjY3NkM1MUQ1QkE1NzE2RkM1QkIzRjY3MDVBOUQwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hozyf/1WbtTCHOdJ0h9q2iaa Lx7wKmUS3LUF5i92iCzDeIbV+s8+xMo184UT5MxLFYxWdEiheZph9rSDV5HBaCuz jUOkgyZOUFWN94PS1FMyVzsQAZJQvUbWSwwFoub5qDeCH/IfGR+GffXiFKjbniq+ HiGMDGdUC2yrUbg0dGJqRMVZ1iPSwmIBuDg6rhgILRFRjJiVTAkan67jphqN0Pma OrJp1GP6mLWoTtrG+X0pum14jLikrzcuhAhZNC1kSMnS+OpcMKpKx0FpXfUVC8fX FNj6aWYkIVluDFJjmFoNX9102crpViT9bmgt53B51aLU3EML0gBQRsBrTZvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7v3y+GZ2xR1bpXFvxbs/ZwWp0P8wHwYDVR0j BBgwFoAUeidsJdie2Dh5enz0nbLj1nZIs3kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFlMmViZGUtNjMxMS00ODhhLTgyYjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVE ODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3NjQ4QjM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTI3NkMyNUQ4OUVEODM4Nzk3QTdDRjQ5REIyRTNENjc2NDhC Mzc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUz RDY3NjQ4QjM3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8ucVxTVP6jxjPM6Uo186+0FfKTG4+Qk290 6LzNmQzXC0++Yrj2Vv+Vz27KzSk/qWb4RXCzu2RqT4KrZmpckm8NxF5I6ibE1ZNK fyoMWevXY2r3Nlyjc5dG/dlUV21J68BVM/lOtuL5mUtlRiHP40PjGIa0Q5Ms8wdS 120I/0d0Adw75BZvY6QGx404tr9CtQv5tYELQ7jy5QWe9CkBl8sfXsI6RdeHU1rG 8XOBeekIivNmwzEpbSPcsN4lms+HxyuVJwoOwPCrb0VgdgZc4PXVzcgJwIm8T8d2 PDKH7G0mtibGB2dXikr81KIj4M4HXPG0ekjW2jIA1f7MUGjBBbw= -----END CERTIFICATE-----Generated at Fri Jul 24 04:37:32 2026 by rpki-client