$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: ZiU2gEJC3SixtQsvOvFioAry/j9TOkYoKP7DXFysMGg= Subject key identifier: A7:25:30:60:F8:7E:6B:55:C0:94:8D:35:09:62:59:CD:FE:71:40:B2 Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 5D0A6E0CED915EC18DC6A43D0884B0051F9AE171 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:04:22 +0000 Manifest this update: Fri 24 Jul 2026 03:59:22 +0000 Manifest next update: Sat 25 Jul 2026 08:01:22 +0000 Files and hashes: 1: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) 3: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: p/bj6+XbJxYcPN4HJiWuaqKznRLtHa3KIRS+9BlHnSk=) 4: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0a:6e:0c:ed:91:5e:c1:8d:c6:a4:3d:08:84:b0:05:1f:9a:e1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Jul 24 03:59:22 2026 GMT Not After : Jul 25 08:01:22 2026 GMT Subject: CN=A7253060F87E6B55C0948D35096259CDFE7140B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:cc:e8:0b:15:62:46:7c:4c:1e:1a:8a:fd: 2a:f5:79:7f:a6:f8:9f:9d:87:4f:95:50:12:27:ee: 32:30:b8:70:ed:26:87:f1:b5:2e:17:4c:50:07:f4: c8:e8:4d:ac:8d:2b:04:52:e9:8f:ff:c7:a9:fc:94: 33:16:5b:81:04:59:73:60:22:93:5b:83:15:08:0f: b7:73:22:d0:d4:c8:a3:7f:d1:d0:ac:69:ad:6e:56: 36:00:59:4c:7f:33:25:75:07:d1:db:74:87:72:a7: 2a:a5:f3:46:56:1e:88:db:79:07:35:bc:ca:38:54: 22:53:23:36:63:ba:4b:57:3f:bf:fc:d7:0c:89:dd: ae:b7:7f:c3:ce:80:09:37:89:84:0c:a7:6d:9d:28: 0d:38:0b:7c:e2:bf:f5:d7:26:1e:2c:e1:a6:64:10: 7c:16:0a:8c:6a:37:be:de:77:95:bb:28:57:c3:03: 6c:2d:d2:b1:6e:42:66:7b:01:af:8c:4b:37:f3:7a: 8e:0e:a2:59:7c:1e:ad:09:66:06:f5:6d:84:97:bd: 57:90:cb:08:a3:b4:c8:7d:4e:45:dd:b2:e2:94:8c: d2:11:a1:51:bc:ec:ed:0a:8d:86:fd:e1:03:25:c8: 27:e9:6c:3b:d3:44:db:69:18:97:1c:eb:63:71:28: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:25:30:60:F8:7E:6B:55:C0:94:8D:35:09:62:59:CD:FE:71:40:B2 X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d0:8a:a5:f5:76:d6:d8:39:fe:6e:b8:6c:e6:09:54:3b:6b: b8:1e:e3:00:f4:9e:24:dc:f7:4a:1d:23:1b:3d:68:9f:ab:9a: 03:ea:e4:92:3d:01:da:c1:e0:ba:b0:02:44:fc:05:ce:24:38: e0:b4:8d:df:b9:a8:5c:db:f5:96:f7:73:31:eb:86:5f:c0:01: 32:5b:9a:b8:42:93:81:c6:27:6a:f4:7d:15:cc:7a:f4:8c:11: 6f:04:31:67:5f:e7:09:50:2a:1f:e6:85:1c:69:d3:32:0d:7a: e5:c9:84:09:2c:cf:4e:ab:6c:69:5c:29:7a:31:0b:f6:36:c0: b2:da:f5:a5:87:bd:3f:6b:e0:57:02:14:ba:56:bb:11:e3:63: 3d:0e:56:aa:b0:ca:c5:b3:9f:02:c3:26:32:e4:d3:d0:29:28: 53:42:54:14:e6:a7:1f:26:d4:72:e5:0e:91:58:fc:4b:89:cb: 31:17:8e:30:b3:90:1b:db:e7:aa:c5:18:e6:9d:03:1b:79:85: 7f:06:1e:e5:35:f0:6e:a8:4d:82:9e:88:5c:a2:0a:8a:3e:92: 3f:a3:f0:94:d4:34:98:8c:bf:93:cd:68:9f:d6:d5:8c:34:e8: e8:4a:df:40:c0:78:4a:db:c5:f1:71:b8:27:c5:de:e8:0a:39: 6d:0d:03:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQpuDO2RXsGNxqQ9CISwBR+a4XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA3MjQwMzU5MjJaFw0yNjA3MjUwODAxMjJaMDMxMTAvBgNV BAMTKEE3MjUzMDYwRjg3RTZCNTVDMDk0OEQzNTA5NjI1OUNERkU3MTQwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZczoCxViRnxMHhqK/Sr1eX+m +J+dh0+VUBIn7jIwuHDtJofxtS4XTFAH9MjoTayNKwRS6Y//x6n8lDMWW4EEWXNg IpNbgxUID7dzItDUyKN/0dCsaa1uVjYAWUx/MyV1B9HbdIdypyql80ZWHojbeQc1 vMo4VCJTIzZjuktXP7/81wyJ3a63f8POgAk3iYQMp22dKA04C3ziv/XXJh4s4aZk EHwWCoxqN77ed5W7KFfDA2wt0rFuQmZ7Aa+MSzfzeo4Ooll8Hq0JZgb1bYSXvVeQ ywijtMh9TkXdsuKUjNIRoVG87O0KjYb94QMlyCfpbDvTRNtpGJcc62NxKNMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpyUwYPh+a1XAlI01CWJZzf5xQLIwHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbQiqX1dtbYOf5uuGzmCVQ7a7ge4wD0niTc 90odIxs9aJ+rmgPq5JI9AdrB4LqwAkT8Bc4kOOC0jd+5qFzb9Zb3czHrhl/AATJb mrhCk4HGJ2r0fRXMevSMEW8EMWdf5wlQKh/mhRxp0zINeuXJhAksz06rbGlcKXox C/Y2wLLa9aWHvT9r4FcCFLpWuxHjYz0OVqqwysWznwLDJjLk09ApKFNCVBTmpx8m 1HLlDpFY/EuJyzEXjjCzkBvb56rFGOadAxt5hX8GHuU18G6oTYKeiFyiCoo+kj+j 8JTUNJiMv5PNaJ/W1Yw06OhK30DAeErbxfFxuCfF3ugKOW0NA8U= -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:08 2026 by rpki-client