$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: s+3qWxKT6iZa0TlTa5mxoL4QMeguJL9QAJnbjiWD2Ro= Subject key identifier: 49:CD:30:29:74:C1:54:A6:F8:8F:ED:89:D4:38:56:B7:07:BA:E7:33 Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 547B4C781E84C722D1BE304E009E294D7C18FDA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:03:24 +0000 Manifest this update: Thu 23 Jul 2026 18:58:24 +0000 Manifest next update: Fri 24 Jul 2026 22:08:24 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) 2: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: q1KHUGBgr/s/VFL8cokKMTCXERmBDv07Nu6g1aHjBUg=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) 4: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7b:4c:78:1e:84:c7:22:d1:be:30:4e:00:9e:29:4d:7c:18:fd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Jul 23 18:58:24 2026 GMT Not After : Jul 24 22:08:24 2026 GMT Subject: CN=49CD302974C154A6F88FED89D43856B707BAE733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:24:d8:95:47:9e:44:8c:7b:ca:5e:8d:a0: e8:72:23:ff:b7:08:e3:3f:5a:c9:8b:4f:7b:83:80: 2e:4f:d5:35:11:75:33:f5:e5:60:16:37:af:4c:95: 51:27:f6:8c:9a:bf:61:16:da:78:f4:fe:15:46:ab: eb:3e:4b:19:2f:c9:d9:67:ac:5b:c0:3e:4b:81:2a: a3:52:84:9c:68:11:8d:3a:c9:3c:6b:78:c9:b4:a8: fc:a1:ea:56:d1:9c:48:1d:67:c7:e5:5a:6f:0f:93: 16:b2:c4:de:fc:b5:35:d6:81:7b:3d:3b:7f:81:49: 0e:5e:8d:eb:1c:89:4a:cc:54:27:2d:39:ac:f3:e6: 48:c9:ec:c6:45:44:8e:97:fa:7c:6e:79:30:1a:72: a1:1a:45:0a:f0:ff:85:ec:ae:64:6d:56:f9:8e:09: cc:6e:44:e4:ab:5d:3d:4b:cd:3d:fa:23:1f:50:1c: e0:ec:67:a9:7a:9f:5f:02:58:2f:9c:2c:c0:3e:26: 8c:4e:42:8c:20:2a:f0:74:18:4d:14:63:7e:7e:e3: e4:0e:0f:1c:e2:6a:ef:60:de:71:4b:57:2c:14:47: 13:1e:ca:d6:8d:23:d0:d4:97:09:56:6c:33:ce:30: 52:fc:18:4f:54:a8:24:9f:fd:eb:44:c9:26:f9:af: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:30:29:74:C1:54:A6:F8:8F:ED:89:D4:38:56:B7:07:BA:E7:33 X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a9:38:cd:c7:22:4b:ad:a9:99:35:f3:e1:29:77:83:a4:37: 00:58:1c:12:6e:5f:71:ae:75:f3:bf:54:67:89:c1:62:05:65: 60:28:d0:a6:63:b2:86:92:56:9c:0a:c9:7b:84:09:f1:09:2c: 54:12:d3:d8:80:f8:e3:56:93:3a:82:6d:0f:0e:a9:0d:75:ca: 07:a5:15:32:8c:a1:67:bd:e0:7b:5f:ca:cb:fc:ae:d7:4c:d8: 4e:44:67:b8:47:03:20:aa:42:22:b9:e3:44:9a:63:05:b1:d9: c9:0b:fb:af:df:87:e2:36:24:40:cd:4c:37:30:a9:b1:fc:af: 1a:7c:42:16:4b:7c:71:9a:a9:e2:41:cf:41:1e:20:7c:ee:da: ad:0a:f0:81:53:f6:ff:2d:10:b4:2a:d5:ad:c5:22:4e:35:e3: 5b:88:fe:8d:c5:da:b4:2c:de:f8:87:c7:30:53:ae:b9:70:09: 62:30:87:f7:f2:f5:71:c2:73:78:62:11:d8:00:fd:d8:30:1a: ca:57:27:6d:dc:51:57:54:a5:dd:7f:46:30:3f:3b:71:78:21: 2e:c2:21:5b:ff:d4:8c:c8:bc:1b:64:a0:04:dd:b1:f5:ac:c0: 47:48:3c:19:0d:06:09:7f:b2:f9:a9:b2:75:3c:8a:52:d8:d3: f3:43:98:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHtMeB6ExyLRvjBOAJ4pTXwY/aQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjA3MjMxODU4MjRaFw0yNjA3MjQyMjA4MjRaMDMxMTAvBgNV BAMTKDQ5Q0QzMDI5NzRDMTU0QTZGODhGRUQ4OUQ0Mzg1NkI3MDdCQUU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmSTYlUeeRIx7yl6NoOhyI/+3 COM/WsmLT3uDgC5P1TURdTP15WAWN69MlVEn9oyav2EW2nj0/hVGq+s+Sxkvydln rFvAPkuBKqNShJxoEY06yTxreMm0qPyh6lbRnEgdZ8flWm8PkxayxN78tTXWgXs9 O3+BSQ5ejesciUrMVCctOazz5kjJ7MZFRI6X+nxueTAacqEaRQrw/4XsrmRtVvmO CcxuROSrXT1LzT36Ix9QHODsZ6l6n18CWC+cLMA+JoxOQowgKvB0GE0UY35+4+QO Dxziau9g3nFLVywURxMeytaNI9DUlwlWbDPOMFL8GE9UqCSf/etEySb5r1dHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSc0wKXTBVKb4j+2J1DhWtwe65zMwHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqpOM3HIkutqZk18+Epd4OkNwBYHBJuX3Gu dfO/VGeJwWIFZWAo0KZjsoaSVpwKyXuECfEJLFQS09iA+ONWkzqCbQ8OqQ11ygel FTKMoWe94Htfysv8rtdM2E5EZ7hHAyCqQiK540SaYwWx2ckL+6/fh+I2JEDNTDcw qbH8rxp8QhZLfHGaqeJBz0EeIHzu2q0K8IFT9v8tELQq1a3FIk4141uI/o3F2rQs 3viHxzBTrrlwCWIwh/fy9XHCc3hiEdgA/dgwGspXJ23cUVdUpd1/RjA/O3F4IS7C IVv/1IzIvBtkoATdsfWswEdIPBkNBgl/svmpsnU8ilLY0/NDmIQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:58:13 2026 by rpki-client