$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft File: 7B9D20A52D1839E0A747B27E30961527317BE820.mft (raw, json) Hash identifier: 1DKNtxAK45MPGCyg4elUvPOFBx13USuf9xOWFR1a8e8= Subject key identifier: FE:3A:B8:68:0E:06:1B:D6:DB:9E:DB:16:19:12:70:BE:60:8B:95:89 Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820 Certificate serial: 27D062B1669A94696E33B758E4737FF90360E2F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:59:08 +0000 Manifest this update: Fri 24 Jul 2026 11:54:08 +0000 Manifest next update: Sat 25 Jul 2026 13:44:08 +0000 Files and hashes: 1: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=) 2: 7B9D20A52D1839E0A747B27E30961527317BE820.crl (hash: bKN34mvMatpDF+E0ydS7Nz5gwA8N3MRXcNXKzEjNuuk=) 3: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=) 4: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d0:62:b1:66:9a:94:69:6e:33:b7:58:e4:73:7f:f9:03:60:e2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820 Validity Not Before: Jul 24 11:54:08 2026 GMT Not After : Jul 25 13:44:08 2026 GMT Subject: CN=FE3AB8680E061BD6DB9EDB16191270BE608B9589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:b8:29:0e:9e:a3:57:c8:d2:c1:a2:52:83: 56:04:98:eb:a3:b7:11:1a:59:e5:43:de:87:ab:7b: b2:58:60:9d:ac:70:b2:a0:71:8b:26:63:5f:a1:4f: ab:56:18:58:ba:d0:a1:ad:36:d4:96:dc:36:8d:96: f6:86:b5:e7:a7:5d:b2:ad:21:7c:64:8a:db:e2:c8: 18:4d:fe:0a:50:59:37:0f:88:1c:69:f6:ee:c1:17: 35:c4:8e:e9:73:bc:8e:9b:5c:68:2d:69:d8:bf:e1: 44:76:40:00:42:36:93:48:e3:7d:df:0d:af:cb:92: 1c:4a:3b:24:fb:ae:98:98:45:4f:a2:7e:35:be:5a: ef:91:c1:71:3a:85:01:e3:c4:de:14:94:1f:73:41: 84:e4:19:16:cd:7b:b8:2f:11:34:ac:a1:f2:3c:83: 6b:29:3a:30:10:0f:c6:01:53:29:be:5b:9a:c0:a2: 59:85:f3:81:26:18:d3:ee:d3:f8:fc:c8:7a:af:7d: 11:94:a2:df:f0:51:7d:6f:24:86:4f:1b:6f:33:18: 7e:65:b5:f9:5e:04:b5:61:5b:af:46:a3:23:ef:ac: 94:c5:db:03:37:61:1e:22:ae:7d:80:4a:12:13:23: 64:f6:74:04:45:d2:0a:fc:68:ad:ca:1e:09:8c:28: e8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:B8:68:0E:06:1B:D6:DB:9E:DB:16:19:12:70:BE:60:8B:95:89 X509v3 Authority Key Identifier: keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cf:2a:10:7a:9a:fd:43:fe:d8:40:fb:b2:55:22:28:f9:18: 9a:5f:bf:96:f2:d6:35:b9:04:ac:3c:00:ec:68:53:8a:2f:5d: e3:e6:54:36:69:fb:f5:49:14:50:f2:97:2d:61:0f:9d:59:65: 03:4c:49:11:0e:e1:90:be:ef:8e:54:33:cb:8d:95:76:2f:49: 6c:35:ea:3a:b8:dc:81:a7:f1:88:69:5b:c9:eb:da:53:3d:25: 45:17:b3:2f:3d:6d:d2:a6:a3:b7:19:32:1c:a8:75:6f:e9:2f: b9:f2:f3:85:d5:d4:54:08:8d:f5:79:8c:cd:3d:20:53:78:6c: 08:e8:2d:1d:8d:a2:e5:fb:82:8e:85:32:69:26:9f:03:88:d7: fa:b6:e5:ed:7c:53:84:29:c8:4d:91:fd:a8:8e:a5:b1:06:ce: 7d:b8:ae:d9:36:27:de:a4:cf:b4:a9:09:d2:c4:f3:b2:4e:6c: 52:0b:f2:e6:f5:92:43:89:0a:56:d4:d5:b8:85:5c:e4:29:dc: 50:63:e7:72:60:77:3d:8a:26:c2:5f:00:fa:73:51:00:b4:f9: ff:bb:e3:57:11:60:7c:1d:d1:9e:7f:a4:51:50:c7:c0:0d:49: 90:ea:c7:9f:4d:95:be:a0:cd:fe:8e:91:07:79:0e:bc:e3:aa: 0d:c1:0a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9BisWaalGluM7dY5HN/+QNg4vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1Mjcz MTdCRTgyMDAeFw0yNjA3MjQxMTU0MDhaFw0yNjA3MjUxMzQ0MDhaMDMxMTAvBgNV BAMTKEZFM0FCODY4MEUwNjFCRDZEQjlFREIxNjE5MTI3MEJFNjA4Qjk1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCme7gpDp6jV8jSwaJSg1YEmOuj txEaWeVD3oere7JYYJ2scLKgcYsmY1+hT6tWGFi60KGtNtSW3DaNlvaGteenXbKt IXxkitviyBhN/gpQWTcPiBxp9u7BFzXEjulzvI6bXGgtadi/4UR2QABCNpNI433f Da/LkhxKOyT7rpiYRU+ifjW+Wu+RwXE6hQHjxN4UlB9zQYTkGRbNe7gvETSsofI8 g2spOjAQD8YBUym+W5rAolmF84EmGNPu0/j8yHqvfRGUot/wUX1vJIZPG28zGH5l tfleBLVhW69GoyPvrJTF2wM3YR4irn2AShITI2T2dARF0gr8aK3KHgmMKOiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jq4aA4GG9bbntsWGRJwvmCLlYkwHwYDVR0j BBgwFoAUe50gpS0YOeCnR7J+MJYVJzF76CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZjRkZTUtNTAzNy00OTE3LTlhOTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUy RDE4MzlFMEE3NDdCMjdFMzA5NjE1MjczMTdCRTgyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjlEMjBBNTJEMTgzOUUwQTc0N0IyN0UzMDk2MTUyNzMxN0JF ODIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZjRkZTUtNTAzNy00OTE3LTlh OTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1 MjczMTdCRTgyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbPKhB6mv1D/thA+7JVIij5GJpfv5by1jW5 BKw8AOxoU4ovXePmVDZp+/VJFFDyly1hD51ZZQNMSREO4ZC+745UM8uNlXYvSWw1 6jq43IGn8YhpW8nr2lM9JUUXsy89bdKmo7cZMhyodW/pL7ny84XV1FQIjfV5jM09 IFN4bAjoLR2NouX7go6FMmkmnwOI1/q25e18U4QpyE2R/aiOpbEGzn24rtk2J96k z7SpCdLE87JObFIL8ub1kkOJClbU1biFXOQp3FBj53Jgdz2KJsJfAPpzUQC0+f+7 41cRYHwd0Z5/pFFQx8ANSZDqx59Nlb6gzf6OkQd5Drzjqg3BClc= -----END CERTIFICATE-----Generated at Fri Jul 24 15:13:21 2026 by rpki-client