$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: LPoYiruqnqX8kNZOWjgoIxAVvMCX/EG50uZF2FaXQWE= Subject key identifier: CC:72:A0:46:2B:11:75:DA:FC:33:CB:5C:95:10:EB:9A:73:33:F0:9F Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 4B9D45920014C7BEB7BDD436AC475AC309FD3692 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:43:49 +0000 Manifest this update: Fri 24 Jul 2026 03:38:49 +0000 Manifest next update: Sat 25 Jul 2026 03:59:49 +0000 Files and hashes: 1: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) 2: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) 3: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 4: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: dwT+LbS6C4p+wwg53fZkYlDQKXxf8XaD9wn+PL5xVnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9d:45:92:00:14:c7:be:b7:bd:d4:36:ac:47:5a:c3:09:fd:36:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: Jul 24 03:38:49 2026 GMT Not After : Jul 25 03:59:49 2026 GMT Subject: CN=CC72A0462B1175DAFC33CB5C9510EB9A7333F09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:9b:72:5b:c6:78:ad:81:cf:56:9b:e1:8e: de:ac:16:57:2f:3d:c0:2d:bd:8e:2d:2a:76:db:f2: 9e:36:5c:28:bd:91:c4:13:4a:bd:0e:58:04:02:1b: 1b:17:25:7e:50:79:23:27:0a:81:b1:b7:2f:63:5d: a2:3d:62:e4:45:b6:09:cb:fe:9f:de:b4:3e:19:16: 80:a7:a9:93:dd:26:27:be:47:3d:7d:41:0b:0d:9a: 4e:98:9c:9d:ee:99:52:c1:e4:f5:40:d8:1f:d3:e0: c6:ce:ac:88:81:51:f0:49:1d:d2:f8:13:c6:4c:3d: 3b:3b:87:00:02:2b:07:94:de:76:42:48:53:a3:b5: 20:81:ee:f6:3b:55:a3:89:67:ca:0a:1d:87:4a:1b: 4a:54:85:57:56:bd:ac:04:94:a6:35:a3:32:98:e2: 5b:b8:8d:b8:5d:2d:81:a5:ee:b6:9d:c4:75:94:ba: e3:f9:0b:86:4b:b2:50:85:52:ba:f3:63:48:e5:c2: 8a:fa:82:0a:76:05:cb:bd:4e:f9:8d:7d:16:6c:5b: 45:ff:cb:92:3d:c2:b6:12:5b:55:3b:23:a7:1e:ff: 6b:21:a9:87:42:fa:cd:d1:65:6c:a4:af:8b:fe:ec: fa:d3:24:69:96:bc:e3:c1:e7:4f:d9:2d:ae:40:d3: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:A0:46:2B:11:75:DA:FC:33:CB:5C:95:10:EB:9A:73:33:F0:9F X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:88:c0:f8:c4:e8:68:ee:00:2f:38:bc:a4:f7:94:5c:3d:2e: 4b:8c:3c:c0:32:ea:19:51:d8:ec:db:c9:22:f2:e7:ee:35:9a: 57:3a:48:eb:2c:da:2c:6f:0c:88:a2:2c:30:b1:99:58:9e:bf: c6:89:a7:6c:c2:eb:ba:11:ef:33:9a:13:41:b7:e9:9b:e9:bb: ac:e4:a1:4d:e3:ca:b1:c6:15:c9:b6:ec:c3:49:69:25:da:46: 70:fd:84:ba:12:be:be:9a:25:76:8e:dc:cd:5d:e1:be:e3:e0: 05:3b:0f:98:04:bc:3e:f3:f8:b0:73:c2:0c:35:dc:13:65:0e: f6:58:1c:9f:f2:85:0d:d5:13:89:2c:ac:59:fc:1a:22:d6:73: c4:fe:f7:51:9a:3d:6c:a9:9f:13:4e:98:b4:47:21:e3:0a:d5: d8:e4:2e:62:52:f2:ec:02:f5:59:76:50:e5:13:9a:bd:97:e4: 2d:85:7f:e7:d7:af:d0:0e:4f:3a:18:fd:33:4c:6e:98:88:8d: 7c:54:1d:4d:a5:5f:3c:e4:ea:e0:2d:6a:15:3f:ff:16:d0:eb: 56:ff:7e:7a:78:6c:29:be:85:ee:7d:fb:99:b1:d1:1a:db:93: 90:aa:4e:27:1d:ff:8b:d6:9f:97:d2:15:04:c7:55:69:31:82: 2b:5d:03:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS51FkgAUx763vdQ2rEdawwn9NpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA3MjQwMzM4NDlaFw0yNjA3MjUwMzU5NDlaMDMxMTAvBgNV BAMTKENDNzJBMDQ2MkIxMTc1REFGQzMzQ0I1Qzk1MTBFQjlBNzMzM0YwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpJtyW8Z4rYHPVpvhjt6sFlcv PcAtvY4tKnbb8p42XCi9kcQTSr0OWAQCGxsXJX5QeSMnCoGxty9jXaI9YuRFtgnL /p/etD4ZFoCnqZPdJie+Rz19QQsNmk6YnJ3umVLB5PVA2B/T4MbOrIiBUfBJHdL4 E8ZMPTs7hwACKweU3nZCSFOjtSCB7vY7VaOJZ8oKHYdKG0pUhVdWvawElKY1ozKY 4lu4jbhdLYGl7radxHWUuuP5C4ZLslCFUrrzY0jlwor6ggp2Bcu9TvmNfRZsW0X/ y5I9wrYSW1U7I6ce/2shqYdC+s3RZWykr4v+7PrTJGmWvOPB50/ZLa5A04vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzHKgRisRddr8M8tclRDrmnMz8J8wHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWIwPjE6GjuAC84vKT3lFw9LkuMPMAy6hlR 2OzbySLy5+41mlc6SOss2ixvDIiiLDCxmViev8aJp2zC67oR7zOaE0G36Zvpu6zk oU3jyrHGFcm27MNJaSXaRnD9hLoSvr6aJXaO3M1d4b7j4AU7D5gEvD7z+LBzwgw1 3BNlDvZYHJ/yhQ3VE4ksrFn8GiLWc8T+91GaPWypnxNOmLRHIeMK1djkLmJS8uwC 9Vl2UOUTmr2X5C2Ff+fXr9AOTzoY/TNMbpiIjXxUHU2lXzzk6uAtahU//xbQ61b/ fnp4bCm+he59+5mx0Rrbk5CqTicd/4vWn5fSFQTHVWkxgitdA80= -----END CERTIFICATE-----Generated at Fri Jul 24 08:24:54 2026 by rpki-client