$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft File: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft (raw, json) Hash identifier: 2fFGVh/FC6K7xx2BjPgKX979aMz/rN7KjgqOr0kEr9I= Subject key identifier: A5:8E:E1:E3:54:D5:FE:66:B4:85:40:24:E3:55:E6:0F:FE:DE:25:E9 Authority key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 Certificate issuer: /CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Certificate serial: 697295683E7744EA9F06A45FEBA19EC098DF785D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:48:03 +0000 Manifest this update: Thu 23 Jul 2026 14:43:03 +0000 Manifest next update: Fri 24 Jul 2026 15:27:03 +0000 Files and hashes: 1: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl (hash: 5+j3mrdg5qgU7M2ZcZC/xivz48dm1YAn3ktCJs+nqSE=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: iNJDLui3MvH+G4nBQHtpKPOOwaP9++CI/XGWFFMM0oA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:72:95:68:3e:77:44:ea:9f:06:a4:5f:eb:a1:9e:c0:98:df:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Validity Not Before: Jul 23 14:43:03 2026 GMT Not After : Jul 24 15:27:03 2026 GMT Subject: CN=A58EE1E354D5FE66B4854024E355E60FFEDE25E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:0e:a0:86:b4:0c:c5:34:cc:3f:4e:b5:c0: f0:fd:5a:43:7c:84:27:32:ed:fa:f7:bc:4a:85:d2: 94:eb:e8:55:af:7a:4e:f2:da:b6:b3:41:e5:ce:34: 5f:97:4d:43:44:3c:26:52:9d:7c:52:72:de:2d:30: a5:6a:a7:9b:4f:2a:13:84:65:80:5e:16:84:e2:79: 91:8c:8d:12:cf:7c:80:7e:fa:45:ba:56:0a:f6:14: ca:05:8f:27:69:34:7b:a3:33:4a:51:5a:0b:68:94: 3b:e0:71:4f:a9:cb:8a:82:74:55:74:d3:ff:52:85: 67:16:6d:81:99:3c:7c:ff:4e:bf:2f:28:25:ea:8e: 49:40:2e:78:c1:28:87:73:c6:9e:f5:12:f3:21:90: 5c:81:bb:db:b2:92:95:20:5f:f3:3b:2f:33:c1:6c: ac:7f:f0:73:89:34:20:74:8b:b5:66:29:47:ec:85: 90:bf:d3:b6:4c:01:c7:5e:75:ce:56:d7:ad:76:e7: fe:77:b6:1c:a9:f0:b2:cc:59:7b:a7:a2:4b:07:06: b7:54:35:36:a1:29:53:6c:d0:46:aa:06:3f:6f:60: ab:f9:a7:8f:ba:8c:30:b3:d8:2a:f1:16:97:91:10: 9f:af:46:dd:b8:29:3e:82:34:33:d5:67:47:57:1a: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8E:E1:E3:54:D5:FE:66:B4:85:40:24:E3:55:E6:0F:FE:DE:25:E9 X509v3 Authority Key Identifier: keyid:7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:57:34:c9:8a:ce:65:74:67:a8:fe:69:ce:1a:0a:1b:50:b6: 71:11:7b:49:53:05:43:df:f1:f3:80:d0:f9:ba:6b:e1:8d:61: 54:a8:84:89:ec:7e:84:5a:c9:fd:f9:aa:24:00:20:5e:9e:47: 42:ba:0e:77:8a:01:3e:4d:38:2e:77:f9:10:60:b0:ff:b3:75: 98:4c:0c:41:12:9b:f5:bf:48:c0:64:f6:5e:70:f6:8e:10:8b: be:81:bb:39:e4:6e:79:09:e1:bd:a9:8c:2d:20:31:7a:c6:1a: 08:63:56:51:64:64:58:c8:bd:47:93:d1:98:ef:1f:b5:d4:fa: 1a:ff:84:e7:64:cb:78:13:c6:a5:0b:f0:d7:1a:fa:e4:5b:ee: 3d:81:87:d3:f5:10:81:5b:67:90:66:8e:16:c3:85:49:7f:ed: bc:e9:2c:2a:5e:aa:b5:85:2a:66:36:d3:d8:df:c1:aa:23:36: 63:74:19:0f:9b:cb:e9:f1:64:28:97:49:61:a2:c0:fc:6a:a0: 48:48:e0:47:ef:60:d9:00:6c:b4:c1:83:03:a3:20:38:ac:73: 42:34:ea:f6:6b:0f:d1:37:87:bf:84:a2:4f:30:f9:bf:fb:a6: fb:20:58:b7:02:c9:97:7b:9d:60:44:46:c7:be:c4:70:98:55: 54:3a:c5:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXKVaD53ROqfBqRf66GewJjfeF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlE NEZGRkEwMTAeFw0yNjA3MjMxNDQzMDNaFw0yNjA3MjQxNTI3MDNaMDMxMTAvBgNV BAMTKEE1OEVFMUUzNTRENUZFNjZCNDg1NDAyNEUzNTVFNjBGRkVERTI1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHg6ghrQMxTTMP061wPD9WkN8 hCcy7fr3vEqF0pTr6FWvek7y2razQeXONF+XTUNEPCZSnXxSct4tMKVqp5tPKhOE ZYBeFoTieZGMjRLPfIB++kW6Vgr2FMoFjydpNHujM0pRWgtolDvgcU+py4qCdFV0 0/9ShWcWbYGZPHz/Tr8vKCXqjklALnjBKIdzxp71EvMhkFyBu9uykpUgX/M7LzPB bKx/8HOJNCB0i7VmKUfshZC/07ZMAcdedc5W16125/53thyp8LLMWXunoksHBrdU NTahKVNs0EaqBj9vYKv5p4+6jDCz2CrxFpeREJ+vRt24KT6CNDPVZ0dXGtvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpY7h41TV/ma0hUAk41XmD/7eJekwHwYDVR0j BBgwFoAUf1o35C4PK319RF5k1Y0T+dT/+gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWNjYzVmNjQtZWQ2Mi00ODQ4LThjMzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQy RTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlENEZGRkEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjVBMzdFNDJFMEYyQjdEN0Q0NDVFNjRENThEMTNGOUQ0RkZG QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEz RjlENEZGRkEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNXNMmKzmV0Z6j+ac4aChtQtnERe0lTBUPf 8fOA0Pm6a+GNYVSohInsfoRayf35qiQAIF6eR0K6DneKAT5NOC53+RBgsP+zdZhM DEESm/W/SMBk9l5w9o4Qi76BuznkbnkJ4b2pjC0gMXrGGghjVlFkZFjIvUeT0Zjv H7XU+hr/hOdky3gTxqUL8Nca+uRb7j2Bh9P1EIFbZ5BmjhbDhUl/7bzpLCpeqrWF KmY209jfwaojNmN0GQ+by+nxZCiXSWGiwPxqoEhI4EfvYNkAbLTBgwOjIDisc0I0 6vZrD9E3h7+Eok8w+b/7pvsgWLcCyZd7nWBERse+xHCYVVQ6xdU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:16 2026 by rpki-client