$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: Dj86lvucjhT8ijlEMN2+EvcwlGd8DCbX/QzqPWmpgck= Subject key identifier: A1:D6:73:83:1D:75:88:40:91:E1:E6:9B:7E:E5:5F:F5:19:E2:69:8C Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 3E74F7CE8247D5FCADD5AF8FEE4EE9518116161F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:32:41 +0000 Manifest this update: Thu 23 Jul 2026 14:27:41 +0000 Manifest next update: Fri 24 Jul 2026 17:30:41 +0000 Files and hashes: 1: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: jZeOr6ryhr2xpXuBgnucIALeevD2nEIMH4GpU2AFrfw=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:f7:ce:82:47:d5:fc:ad:d5:af:8f:ee:4e:e9:51:81:16:16:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Jul 23 14:27:41 2026 GMT Not After : Jul 24 17:30:41 2026 GMT Subject: CN=A1D673831D75884091E1E69B7EE55FF519E2698C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:83:6d:cb:8e:71:38:b5:0c:bc:01:b9:3d: f3:ea:9e:8b:8a:ff:ae:ac:04:22:9d:13:6b:67:74: 5a:fe:c1:95:bc:4e:37:99:5f:87:54:12:58:77:81: ff:07:7f:18:b7:c0:b2:7b:f9:f7:73:13:6e:55:43: b1:ae:9d:54:26:6d:d5:63:55:d0:62:7d:4a:1b:c9: 5d:93:bd:13:85:78:91:d3:2d:56:db:6e:ea:b8:fd: e7:e1:ab:69:6e:15:0c:49:0d:4b:26:70:ba:c9:a8: dd:6f:de:82:6e:5f:d9:cc:c7:05:0e:a5:92:1b:b9: eb:3a:c6:3d:6e:96:37:d6:a8:10:a9:70:f0:b4:00: 3b:d0:fa:11:93:61:54:f3:2f:28:6d:b7:4c:57:bc: 50:4a:47:03:dc:b3:cc:3e:ee:81:23:17:1e:30:b7: 75:4b:f9:18:b3:df:35:82:8d:f7:f5:40:77:d9:df: 6e:1e:72:ad:55:bb:d0:e0:73:79:04:6e:3f:f8:3b: 13:66:93:22:46:2e:df:da:e6:9d:45:68:1e:08:83: 49:59:c8:7f:6c:4c:35:9c:14:6d:61:6c:47:82:b6: 58:80:58:68:3e:dc:02:aa:1b:4f:07:fd:31:d7:12: 7a:0c:8e:bd:2b:dc:3f:5d:e1:51:5b:fe:3f:6a:84: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:73:83:1D:75:88:40:91:E1:E6:9B:7E:E5:5F:F5:19:E2:69:8C X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a5:5b:84:50:e8:20:cc:fe:bd:e2:aa:66:12:96:f0:de:48: 33:f8:e2:19:4f:f3:8a:18:33:9a:a7:bd:a7:d2:7a:95:a4:a6: 9c:15:d3:5b:a1:12:02:7a:d8:12:e4:ff:1d:f6:40:15:c9:62: 63:d1:71:eb:c7:75:53:0d:d5:8b:47:e1:b4:34:85:d4:64:49: a9:c5:b0:54:02:9c:28:96:9d:18:7f:98:cc:76:49:7f:57:71: 45:50:a7:03:81:9d:e2:14:7c:04:0c:58:38:3b:c1:8a:93:92: 65:4d:32:1a:6a:d6:4d:b4:10:2d:d5:36:8a:e8:dc:84:e6:15: 0b:fe:fe:2f:61:cd:68:bd:7d:eb:b5:97:03:f3:79:d5:b9:e3: f7:ae:74:c7:4d:f5:23:c8:30:ee:bf:9d:4f:53:9e:a5:72:4c: 8d:de:93:79:2c:05:14:d0:43:bb:e5:45:ec:56:43:f5:99:38: e0:ae:a1:0e:e5:ac:e0:5c:de:af:77:6f:db:17:42:23:cc:35: 25:93:78:1f:3e:d3:c7:a4:8d:3f:d3:5e:59:f5:ee:9d:e0:7e: fb:8f:61:73:de:d8:9c:fb:81:9d:f6:3a:be:8f:23:7f:fc:c8: 25:f1:5d:f4:43:bd:8d:e7:c4:94:4c:96:30:80:c1:67:c7:e8: 57:c0:40:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnT3zoJH1fyt1a+P7k7pUYEWFh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA3MjMxNDI3NDFaFw0yNjA3MjQxNzMwNDFaMDMxMTAvBgNV BAMTKEExRDY3MzgzMUQ3NTg4NDA5MUUxRTY5QjdFRTU1RkY1MTlFMjY5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVoNty45xOLUMvAG5PfPqnouK /66sBCKdE2tndFr+wZW8TjeZX4dUElh3gf8Hfxi3wLJ7+fdzE25VQ7GunVQmbdVj VdBifUobyV2TvROFeJHTLVbbbuq4/efhq2luFQxJDUsmcLrJqN1v3oJuX9nMxwUO pZIbues6xj1uljfWqBCpcPC0ADvQ+hGTYVTzLyhtt0xXvFBKRwPcs8w+7oEjFx4w t3VL+Riz3zWCjff1QHfZ324ecq1Vu9Dgc3kEbj/4OxNmkyJGLt/a5p1FaB4Ig0lZ yH9sTDWcFG1hbEeCtliAWGg+3AKqG08H/THXEnoMjr0r3D9d4VFb/j9qhE4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodZzgx11iECR4eabfuVf9RniaYwwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGlW4RQ6CDM/r3iqmYSlvDeSDP44hlP84oY M5qnvafSepWkppwV01uhEgJ62BLk/x32QBXJYmPRcevHdVMN1YtH4bQ0hdRkSanF sFQCnCiWnRh/mMx2SX9XcUVQpwOBneIUfAQMWDg7wYqTkmVNMhpq1k20EC3VNoro 3ITmFQv+/i9hzWi9feu1lwPzedW54/eudMdN9SPIMO6/nU9TnqVyTI3ek3ksBRTQ Q7vlRexWQ/WZOOCuoQ7lrOBc3q93b9sXQiPMNSWTeB8+08ekjT/TXln17p3gfvuP YXPe2Jz7gZ32Or6PI3/8yCXxXfRDvY3nxJRMljCAwWfH6FfAQEU= -----END CERTIFICATE-----Generated at Fri Jul 24 08:20:37 2026 by rpki-client