$ rpki-client -vvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json) Hash identifier: 45MsKt5OQWFJPKCA7r8bZq+XjVJ5hRugFctc/arASeU= Subject key identifier: 8F:E0:45:17:22:07:FD:FE:70:59:E8:55:8B:84:1D:F9:E4:A9:B3:00 Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Certificate serial: 505451332F83EF5F77F45646D729A8BB2B981BFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:55:32 +0000 Manifest this update: Fri 24 Jul 2026 04:50:32 +0000 Manifest next update: Sat 25 Jul 2026 05:14:32 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=) 3: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: hgAdpPX3oXbVlfiuUAhgJ61iOG27ZWhvQo2JJfpkW7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:54:51:33:2f:83:ef:5f:77:f4:56:46:d7:29:a8:bb:2b:98:1b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Validity Not Before: Jul 24 04:50:32 2026 GMT Not After : Jul 25 05:14:32 2026 GMT Subject: CN=8FE045172207FDFE7059E8558B841DF9E4A9B300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:71:0f:e8:3e:2b:f1:b2:60:9f:de:1d:d2: cd:48:55:02:ef:87:e7:3b:f1:cd:69:6f:b5:d2:0d: 28:37:5a:98:89:79:28:5e:93:d1:5f:f7:27:e5:79: 6f:bb:f9:85:16:e9:47:32:f8:e1:fe:54:a7:82:b1: a0:cf:19:37:55:60:a4:af:66:5c:25:05:01:29:d3: a1:be:eb:38:3e:82:bd:48:a2:71:2d:73:ee:0c:6e: df:d7:39:77:52:5f:a2:e7:d4:6a:8e:af:5f:14:5a: f3:ae:a2:06:fc:ec:04:c2:7b:47:ab:64:74:03:ff: b4:3b:97:1b:8f:04:06:14:20:e1:6b:03:be:c0:6f: c0:3f:81:07:7e:17:c9:3e:b8:e5:26:d8:7f:00:1b: cc:a8:63:4d:04:96:02:0a:79:66:fa:90:14:e8:21: 9d:a1:2f:08:e4:16:e0:b5:28:51:24:b4:04:03:90: 5a:c8:1e:69:e7:f4:07:3e:82:c9:82:1b:90:10:b6: 6b:08:96:4e:31:fb:9a:8a:d6:4e:87:99:e1:cb:24: 66:5d:a1:ab:d9:4d:82:72:f2:98:f8:dd:8c:ff:c2: 5e:8b:3d:ae:a0:42:6a:09:79:c9:db:65:66:53:50: ce:37:2c:2a:4e:32:fc:ba:9c:64:01:3b:7f:20:6c: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E0:45:17:22:07:FD:FE:70:59:E8:55:8B:84:1D:F9:E4:A9:B3:00 X509v3 Authority Key Identifier: keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8c:9a:84:39:ec:3d:ff:25:af:cf:ad:18:e5:4c:a8:47:5d: 86:4b:c1:1b:9f:5d:bf:45:c2:da:30:1d:01:e3:af:e5:36:64: 02:68:4e:8b:67:ab:95:43:b6:13:4c:7f:11:9a:12:9d:80:8b: 36:02:45:91:76:7c:ba:d1:6e:1b:44:7e:56:bc:e0:4e:ec:eb: 0c:01:00:92:6c:72:26:cb:3a:c4:90:2b:79:0d:a8:d6:8c:88: e8:a3:37:1d:a8:b6:00:01:5e:ba:d0:06:6c:9d:91:fd:60:4e: 08:a5:aa:c7:f2:8c:9d:c5:39:85:1b:30:ed:df:53:97:78:ef: 56:4c:39:84:12:ea:61:d2:53:88:3a:30:c4:b2:20:c2:73:64: 69:2b:2c:08:8d:a5:af:4a:39:26:69:6d:00:e2:8a:ac:6e:09: 66:37:36:16:65:e3:47:85:8c:ab:e2:a6:cf:a7:02:ad:27:67: 15:63:84:66:11:27:e2:50:c1:52:33:9a:43:7b:87:a2:9f:a1: 88:3d:bc:ed:1e:87:55:e3:ae:15:83:cb:fe:e3:04:45:31:dc: 15:43:85:cd:c9:61:49:d1:18:ba:7a:bc:5e:cf:9a:d9:bf:77: 15:f5:15:d6:cc:e2:4f:c5:aa:ff:fa:cf:4c:2d:84:6f:af:c6: 55:e7:41:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFRRMy+D71939FZG1ymouyuYG/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZDNDRB N0U4RDk0MTAeFw0yNjA3MjQwNDUwMzJaFw0yNjA3MjUwNTE0MzJaMDMxMTAvBgNV BAMTKDhGRTA0NTE3MjIwN0ZERkU3MDU5RTg1NThCODQxREY5RTRBOUIzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cHEP6D4r8bJgn94d0s1IVQLv h+c78c1pb7XSDSg3WpiJeShek9Ff9yfleW+7+YUW6Ucy+OH+VKeCsaDPGTdVYKSv ZlwlBQEp06G+6zg+gr1IonEtc+4Mbt/XOXdSX6Ln1GqOr18UWvOuogb87ATCe0er ZHQD/7Q7lxuPBAYUIOFrA77Ab8A/gQd+F8k+uOUm2H8AG8yoY00ElgIKeWb6kBTo IZ2hLwjkFuC1KFEktAQDkFrIHmnn9Ac+gsmCG5AQtmsIlk4x+5qK1k6HmeHLJGZd oavZTYJy8pj43Yz/wl6LPa6gQmoJecnbZWZTUM43LCpOMvy6nGQBO38gbD/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+BFFyIH/f5wWehVi4Qd+eSpswAwHwYDVR0j BBgwFoAUeulJHeER2vsJushsl3f8RKfo2UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjcyOGM3N2ItMjEwMC00ZjJhLTkwZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURF MTExREFGQjA5QkFDODZDOTc3N0ZDNDRBN0U4RDk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUU5NDkxREUxMTFEQUZCMDlCQUM4NkM5Nzc3RkM0NEE3RThE OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZD NDRBN0U4RDk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2MmoQ57D3/Ja/PrRjlTKhHXYZLwRufXb9F wtowHQHjr+U2ZAJoTotnq5VDthNMfxGaEp2AizYCRZF2fLrRbhtEfla84E7s6wwB AJJscibLOsSQK3kNqNaMiOijNx2otgABXrrQBmydkf1gTgilqsfyjJ3FOYUbMO3f U5d471ZMOYQS6mHSU4g6MMSyIMJzZGkrLAiNpa9KOSZpbQDiiqxuCWY3NhZl40eF jKvips+nAq0nZxVjhGYRJ+JQwVIzmkN7h6KfoYg9vO0eh1XjrhWDy/7jBEUx3BVD hc3JYUnRGLp6vF7Pmtm/dxX1FdbM4k/Fqv/6z0wthG+vxlXnQZg= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:27 2026 by rpki-client