$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: tZD370h3GGrkOdgon+DeHYvOkUGo9lvVODtfWOpVMmM= Subject key identifier: D0:C8:EE:C1:28:75:EA:72:B9:38:9B:63:01:F8:CB:1A:19:F4:2D:B7 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 3FFBFE751954B88622CEAE7CA3605A5A5BC83EEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:46:35 +0000 Manifest this update: Thu 23 Jul 2026 21:41:35 +0000 Manifest next update: Sat 25 Jul 2026 00:42:35 +0000 Files and hashes: 1: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: jXtQp6H6+17iBwEUk6mOSdvZulz5TvJQlJo7Qnca5/c=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 3: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 4: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fb:fe:75:19:54:b8:86:22:ce:ae:7c:a3:60:5a:5a:5b:c8:3e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Jul 23 21:41:35 2026 GMT Not After : Jul 25 00:42:35 2026 GMT Subject: CN=D0C8EEC12875EA72B9389B6301F8CB1A19F42DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:e6:82:b1:53:65:c2:a9:36:25:bf:2b:c6: be:8a:a4:9c:74:2b:04:21:78:66:44:74:ef:62:2a: ca:fd:bb:6b:2c:d7:7f:62:09:01:ac:3f:a1:ad:37: 5b:4e:34:5a:a4:57:e4:25:4e:0e:4f:3a:95:32:5f: 53:40:60:0e:28:06:95:cf:08:ea:31:40:31:fe:ed: 5c:7c:8a:0b:09:60:90:24:32:d7:7b:8d:a8:d5:7f: 9c:dd:97:f6:0e:43:f8:5b:0e:31:1b:7b:fb:39:9f: 8a:27:63:e0:a0:50:fc:b2:2d:03:86:13:71:aa:aa: 76:48:87:15:44:86:a1:78:07:ee:aa:f0:c2:26:d1: e4:c8:6c:be:82:bc:4c:01:61:47:82:96:e4:43:02: 19:e3:eb:07:6a:c1:55:41:4e:66:44:5c:44:89:d8: 8a:4d:1d:93:e9:10:2d:2b:13:56:e6:e0:d8:7b:17: fc:f1:66:95:56:b9:2d:6a:f8:e2:9c:61:45:9f:9b: 14:97:35:57:58:2d:ca:62:b3:cd:36:7e:d4:6a:8d: 57:18:bb:f7:d9:f1:f4:dc:b9:dc:85:d8:3f:5d:7d: 73:4e:d7:12:01:e7:b9:02:56:42:fc:59:ee:21:ab: 86:e6:d9:9d:cd:3b:05:46:db:b6:fd:00:c7:1c:8a: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:EE:C1:28:75:EA:72:B9:38:9B:63:01:F8:CB:1A:19:F4:2D:B7 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ad:f1:a1:bb:0d:2b:9e:c6:c9:4b:d4:d6:09:02:0a:a7:b6: 73:2a:6e:2d:2e:12:f7:d5:86:9f:dc:f0:04:f1:33:89:f5:d6: ba:bb:cb:fc:7a:0c:41:38:7c:a0:19:32:18:c1:85:1d:59:bb: 3c:6c:61:51:50:70:b5:4b:e8:23:23:63:34:8b:5d:48:79:2f: 68:cd:0c:4c:62:43:9f:08:58:de:de:32:c0:1a:63:69:ad:02: d6:04:28:df:7f:22:38:5d:78:79:1a:89:28:25:64:68:0b:67: 16:bb:03:cf:5d:5b:98:31:fc:96:15:ad:64:bb:cd:97:45:8d: 8f:9d:9c:d4:c0:b4:61:6a:cf:d6:f2:8e:05:93:79:9a:85:70: 7c:19:57:74:bb:4b:0d:e4:38:40:f6:8f:6d:37:86:a1:4d:bd: b4:ed:22:a5:7d:60:3a:2d:9a:f0:fa:0f:4a:c1:b2:22:8f:c3: 39:04:43:7c:80:ec:26:dc:b1:70:64:ec:0b:f0:2b:35:82:f0: 45:05:e9:20:b7:96:e8:26:69:76:26:39:d5:82:c8:5f:4d:54: e0:62:56:6f:37:0c:be:5a:98:33:f5:0a:af:95:68:43:8e:74: 29:66:45:57:c0:4e:eb:fc:11:29:b5:67:ed:e4:f4:fa:78:22: aa:83:b9:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/v+dRlUuIYizq58o2BaWlvIPu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA3MjMyMTQxMzVaFw0yNjA3MjUwMDQyMzVaMDMxMTAvBgNV BAMTKEQwQzhFRUMxMjg3NUVBNzJCOTM4OUI2MzAxRjhDQjFBMTlGNDJEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uuaCsVNlwqk2Jb8rxr6KpJx0 KwQheGZEdO9iKsr9u2ss139iCQGsP6GtN1tONFqkV+QlTg5POpUyX1NAYA4oBpXP COoxQDH+7Vx8igsJYJAkMtd7jajVf5zdl/YOQ/hbDjEbe/s5n4onY+CgUPyyLQOG E3GqqnZIhxVEhqF4B+6q8MIm0eTIbL6CvEwBYUeCluRDAhnj6wdqwVVBTmZEXESJ 2IpNHZPpEC0rE1bm4Nh7F/zxZpVWuS1q+OKcYUWfmxSXNVdYLcpis802ftRqjVcY u/fZ8fTcudyF2D9dfXNO1xIB57kCVkL8We4hq4bm2Z3NOwVG27b9AMccigfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MjuwSh16nK5OJtjAfjLGhn0LbcwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFit8aG7DSuexslL1NYJAgqntnMqbi0uEvfV hp/c8ATxM4n11rq7y/x6DEE4fKAZMhjBhR1ZuzxsYVFQcLVL6CMjYzSLXUh5L2jN DExiQ58IWN7eMsAaY2mtAtYEKN9/IjhdeHkaiSglZGgLZxa7A89dW5gx/JYVrWS7 zZdFjY+dnNTAtGFqz9byjgWTeZqFcHwZV3S7Sw3kOED2j203hqFNvbTtIqV9YDot mvD6D0rBsiKPwzkEQ3yA7CbcsXBk7AvwKzWC8EUF6SC3lugmaXYmOdWCyF9NVOBi Vm83DL5amDP1Cq+VaEOOdClmRVfATuv8ESm1Z+3k9Pp4IqqDubA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:36 2026 by rpki-client