$ rpki-client -vvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: 5hy04ngVFhMIuojJqZ0j/l6Bd+m1cCBOmikZcdpaILc= Subject key identifier: 35:0D:D7:E5:02:79:10:BC:4D:B3:2F:34:16:C4:C4:13:0F:E7:21:EA Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 4E1C864ADA79FEE30F6F2E9788D7D1A0F340FE79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:23:49 +0000 Manifest this update: Thu 23 Jul 2026 15:18:49 +0000 Manifest next update: Fri 24 Jul 2026 18:08:49 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) 2: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: nzS7W13pD+W7y4yuPL+bLsC74rJMeyl0M4IXjDW8Zro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1c:86:4a:da:79:fe:e3:0f:6f:2e:97:88:d7:d1:a0:f3:40:fe:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Jul 23 15:18:49 2026 GMT Not After : Jul 24 18:08:49 2026 GMT Subject: CN=350DD7E5027910BC4DB32F3416C4C4130FE721EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:63:11:a5:2f:19:e6:8e:b8:aa:87:77:d9: 88:08:fd:0f:88:79:42:f5:46:e9:4a:51:ed:f7:05: ca:53:75:f7:a3:26:ee:b2:b7:e9:04:5b:e9:d8:5e: 6a:a6:99:b3:52:68:d5:34:9a:7b:f2:ce:8a:2f:91: 33:3b:e1:61:34:70:b6:af:d3:cc:78:d0:5f:f3:a1: c2:fe:2f:fb:05:cf:3f:91:09:be:fa:70:0a:cc:61: 77:45:af:c6:98:56:12:e0:aa:be:6f:16:11:7d:85: f9:09:b6:69:92:1f:99:3b:96:04:46:ae:3b:9c:49: cb:62:03:e4:39:63:ae:39:90:09:e3:d2:f3:c1:82: 0b:72:a8:ca:ef:f0:49:d5:78:83:bf:3d:fe:fa:78: 1f:1b:ec:33:8d:db:b0:67:63:06:1d:46:78:d7:83: a6:e1:e4:a9:1e:f0:5f:77:c2:92:6c:64:cf:7f:e1: 9c:6a:42:fb:1c:05:2b:46:b8:0f:77:03:83:52:b9: 93:23:7d:f0:87:c8:1b:c7:d8:c4:4e:95:1e:a2:2b: e5:d6:e4:27:60:bc:92:f6:f3:e6:66:58:2f:31:6d: 1e:7e:3d:26:fb:e4:38:f9:ab:e6:2a:27:d2:e0:2a: 84:12:e1:08:cf:74:02:36:ec:86:52:bf:c8:55:17: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:D7:E5:02:79:10:BC:4D:B3:2F:34:16:C4:C4:13:0F:E7:21:EA X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:ae:46:b8:52:1a:bc:41:05:4b:3d:f2:9e:cd:4d:71:8f: b3:61:db:f8:1d:58:87:42:f6:03:0a:77:c2:87:57:72:e6:11: da:a8:0f:26:17:86:00:a0:2a:c9:16:c6:b2:15:0c:e6:18:cf: 7b:32:d9:d2:58:d9:f6:20:3b:99:72:c7:04:2f:a7:f7:4b:3c: fd:38:c7:e0:c4:5b:93:1b:34:00:e1:2a:12:89:30:b5:b8:e4: 14:0b:de:ae:84:ea:29:78:7b:9b:de:22:b5:e5:61:c9:c0:af: c0:6a:7c:bc:4d:ad:ff:d8:0b:81:0e:1a:18:5a:ac:66:bf:6f: 84:e6:83:2d:61:9b:4a:86:4e:56:d2:0e:f8:dc:17:2a:0a:84: e6:f7:fb:6d:0e:3a:fc:b9:cd:94:c7:64:62:9b:4f:9f:ba:8a: 5e:25:64:38:94:e4:1d:0d:13:a2:c7:24:85:25:be:ca:31:72: aa:f8:79:6b:12:2f:50:56:e0:e6:38:cf:f9:ab:dd:f1:bf:cd: dc:86:69:34:cd:e5:9f:31:9e:86:14:4b:ce:e3:69:58:97:97: 34:49:36:74:c2:c4:d8:d6:d9:82:fb:f2:98:fd:3d:6a:77:ec: ac:ec:1c:c7:64:cd:f5:4e:fa:d3:7f:ab:85:39:6e:7c:10:de: 8a:eb:26:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThyGStp5/uMPby6XiNfRoPNA/nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA3MjMxNTE4NDlaFw0yNjA3MjQxODA4NDlaMDMxMTAvBgNV BAMTKDM1MEREN0U1MDI3OTEwQkM0REIzMkYzNDE2QzRDNDEzMEZFNzIxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDk2MRpS8Z5o64qod32YgI/Q+I eUL1RulKUe33BcpTdfejJu6yt+kEW+nYXmqmmbNSaNU0mnvyzoovkTM74WE0cLav 08x40F/zocL+L/sFzz+RCb76cArMYXdFr8aYVhLgqr5vFhF9hfkJtmmSH5k7lgRG rjucSctiA+Q5Y645kAnj0vPBggtyqMrv8EnVeIO/Pf76eB8b7DON27BnYwYdRnjX g6bh5Kke8F93wpJsZM9/4ZxqQvscBStGuA93A4NSuZMjffCHyBvH2MROlR6iK+XW 5CdgvJL28+ZmWC8xbR5+PSb75Dj5q+YqJ9LgKoQS4QjPdAI27IZSv8hVF7DRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQ3X5QJ5ELxNsy80FsTEEw/nIeowHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjwrka4Uhq8QQVLPfKezU1xj7Nh2/gdWIdC 9gMKd8KHV3LmEdqoDyYXhgCgKskWxrIVDOYYz3sy2dJY2fYgO5lyxwQvp/dLPP04 x+DEW5MbNADhKhKJMLW45BQL3q6E6il4e5veIrXlYcnAr8BqfLxNrf/YC4EOGhha rGa/b4Tmgy1hm0qGTlbSDvjcFyoKhOb3+20OOvy5zZTHZGKbT5+6il4lZDiU5B0N E6LHJIUlvsoxcqr4eWsSL1BW4OY4z/mr3fG/zdyGaTTN5Z8xnoYUS87jaViXlzRJ NnTCxNjW2YL78pj9PWp37KzsHMdkzfVO+tN/q4U5bnwQ3orrJgU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:01 2026 by rpki-client