$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: ASqre7VCHNmx27Fhf71p+N/zsDyfvVGMUwboa4VPfqw= Subject key identifier: 22:43:9B:59:7D:4F:A1:EB:E5:73:50:CC:5C:A2:BE:5A:E4:57:A4:F4 Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 0D82673CC909EA18871EC1C662EFE3EB40419F47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:16:16 +0000 Manifest this update: Thu 23 Jul 2026 13:11:16 +0000 Manifest next update: Fri 24 Jul 2026 15:53:16 +0000 Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: 2VcUWaA6NCrNlD8wz7hB+DVZfgNd+jMsD8X7W1E/MlU=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:67:3c:c9:09:ea:18:87:1e:c1:c6:62:ef:e3:eb:40:41:9f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Jul 23 13:11:16 2026 GMT Not After : Jul 24 15:53:16 2026 GMT Subject: CN=22439B597D4FA1EBE57350CC5CA2BE5AE457A4F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:41:2e:1d:31:f0:90:af:cf:f5:7e:ba:df: bf:18:26:8b:be:34:29:f5:d8:21:a7:f9:b8:1b:a4: 92:ce:de:3c:5a:fe:8d:3d:45:58:7b:2e:a7:9a:cf: de:3c:15:d7:30:01:f2:42:4d:78:a2:ab:38:1f:af: 99:5d:20:a7:68:79:05:09:e3:c1:56:c5:2f:60:07: ab:b7:e1:94:84:66:d7:5b:a9:17:1e:45:98:0d:34: bc:e0:ab:6a:5d:e3:3d:24:9d:10:b5:e1:9c:6c:2f: ec:57:fb:b1:fb:fe:43:13:9e:33:59:0c:44:1d:12: 23:7b:7c:a1:05:fe:5a:91:0e:19:51:ea:ec:5e:b4: b7:39:4e:04:0f:0b:76:46:b5:4d:50:a0:59:80:5a: ae:0d:8c:02:0e:d2:4f:d3:62:a8:77:13:5e:61:2e: bd:d5:1d:08:40:cd:a5:0c:72:93:d1:87:ad:b8:8d: a7:ac:3b:a5:28:da:32:a3:67:de:82:7c:e1:68:d4: 34:49:46:f1:2d:9a:50:57:13:ab:aa:2c:d3:e7:22: df:01:87:31:29:98:2b:45:df:3e:76:a4:89:75:19: 10:b3:33:d4:e7:fd:f3:a9:d7:48:5b:08:cf:f5:fb: d4:5a:54:4b:75:fa:ed:15:ce:7a:d8:59:b2:fd:08: cf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:9B:59:7D:4F:A1:EB:E5:73:50:CC:5C:A2:BE:5A:E4:57:A4:F4 X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c5:8c:fd:bb:80:59:5c:c2:7e:b9:94:56:f8:a0:f5:c0:bc: f0:62:9e:e6:58:6a:30:07:d9:4c:5c:46:8b:14:41:6d:7f:50: 79:76:39:b6:19:31:53:ee:29:37:67:41:b0:70:fe:35:87:c5: 71:ce:5d:f3:c6:9e:4e:0f:ea:5a:44:64:91:ba:dc:38:54:18: ae:62:f7:2d:00:d4:33:44:53:6a:b4:97:7e:d0:b8:e4:0b:b7: 25:dc:5c:5d:65:9a:c5:60:a6:8d:1c:03:8d:d7:2b:a6:52:23: 3c:db:3b:05:f0:92:f8:07:19:3d:7a:5c:f0:b8:7a:36:b1:f7: 12:fe:86:f2:8c:a9:ae:4b:e2:b6:81:c2:75:ca:c8:38:7f:2d: 6b:02:3e:e2:15:0c:89:11:dc:80:6d:9f:86:8a:e0:45:87:33: 48:c1:f5:a1:61:96:0d:8a:d6:e1:28:af:5b:db:95:08:09:04: 7c:79:88:4b:d5:af:3b:ea:57:3a:c1:08:4b:62:0f:2c:c8:4a: 42:21:71:ea:2c:d6:5c:ce:5f:a1:07:61:5f:43:16:3d:b1:5e: 02:e8:2e:74:dc:c5:e5:20:6b:a5:73:48:ad:7b:23:64:27:9b: 13:e9:b5:5c:9c:76:31:5f:52:a4:51:26:16:1f:5f:b5:16:05: 7f:16:a6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYJnPMkJ6hiHHsHGYu/j60BBn0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjA3MjMxMzExMTZaFw0yNjA3MjQxNTUzMTZaMDMxMTAvBgNV BAMTKDIyNDM5QjU5N0Q0RkExRUJFNTczNTBDQzVDQTJCRTVBRTQ1N0E0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIEEuHTHwkK/P9X66378YJou+ NCn12CGn+bgbpJLO3jxa/o09RVh7Lqeaz948FdcwAfJCTXiiqzgfr5ldIKdoeQUJ 48FWxS9gB6u34ZSEZtdbqRceRZgNNLzgq2pd4z0knRC14ZxsL+xX+7H7/kMTnjNZ DEQdEiN7fKEF/lqRDhlR6uxetLc5TgQPC3ZGtU1QoFmAWq4NjAIO0k/TYqh3E15h Lr3VHQhAzaUMcpPRh624jaesO6Uo2jKjZ96CfOFo1DRJRvEtmlBXE6uqLNPnIt8B hzEpmCtF3z52pIl1GRCzM9Tn/fOp10hbCM/1+9RaVEt1+u0VznrYWbL9CM8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIkObWX1Poevlc1DMXKK+WuRXpPQwHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7FjP27gFlcwn65lFb4oPXAvPBinuZYajAH 2UxcRosUQW1/UHl2ObYZMVPuKTdnQbBw/jWHxXHOXfPGnk4P6lpEZJG63DhUGK5i 9y0A1DNEU2q0l37QuOQLtyXcXF1lmsVgpo0cA43XK6ZSIzzbOwXwkvgHGT16XPC4 ejax9xL+hvKMqa5L4raBwnXKyDh/LWsCPuIVDIkR3IBtn4aK4EWHM0jB9aFhlg2K 1uEor1vblQgJBHx5iEvVrzvqVzrBCEtiDyzISkIhceos1lzOX6EHYV9DFj2xXgLo LnTcxeUga6VzSK17I2QnmxPptVycdjFfUqRRJhYfX7UWBX8Wpp0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:31 2026 by rpki-client