$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json) Hash identifier: a0r2vz0J144F5PQghUkuWLwEw5dQzFReqUPNoh3WAws= Subject key identifier: B7:FE:F8:F1:28:24:AD:C1:FD:31:C9:77:BC:EC:7C:1C:DB:8D:4B:AF Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Certificate serial: 31EED07B3A340843F0E00F81710D9ED35770283C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:14:28 +0000 Manifest this update: Fri 24 Jul 2026 12:09:28 +0000 Manifest next update: Sat 25 Jul 2026 14:08:28 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=) 2: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: 85MjPSCQ1bf98rcQhbu3V/MAIlHlnMs8nQSU1FScyPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ee:d0:7b:3a:34:08:43:f0:e0:0f:81:71:0d:9e:d3:57:70:28:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Validity Not Before: Jul 24 12:09:28 2026 GMT Not After : Jul 25 14:08:28 2026 GMT Subject: CN=B7FEF8F12824ADC1FD31C977BCEC7C1CDB8D4BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:93:83:0a:fc:10:0b:85:da:66:1a:3f:d5: 17:c3:94:f5:ee:0e:49:8c:f1:52:65:87:3c:be:db: 0d:d8:f1:40:44:4a:e4:5f:5b:8c:76:6a:33:e0:5f: 11:f1:5d:85:2a:de:85:59:91:07:d5:6f:d2:71:bb: e8:2e:49:ab:9e:5b:bc:c2:90:93:62:0d:2f:f3:cb: fc:08:0a:92:33:4e:a6:3f:17:7b:8d:ab:d8:82:15: 84:d0:1b:87:f5:8f:ef:43:3d:ba:6b:68:a8:63:6c: fd:96:90:a1:46:cb:56:bb:e5:23:24:55:c3:d6:1e: 7a:1b:49:26:58:34:69:e6:b4:33:66:9d:0b:01:a7: 72:7e:f9:be:aa:93:07:32:d6:a8:f0:86:bd:70:69: e0:13:92:9b:a0:c9:53:55:b2:20:d8:30:6e:1c:a8: 25:10:de:5e:97:1b:19:e2:ac:f8:da:2b:9e:c2:98: 56:78:dc:8e:cc:dd:a7:52:0b:d9:b9:99:be:9f:ff: 9e:a8:87:14:88:75:1f:ca:ca:b7:6b:1b:2e:23:16: 51:6f:00:53:9b:c5:ca:b8:ad:4e:91:c9:fa:8f:af: 05:b2:81:ef:ed:7c:b7:22:1d:c4:c1:0c:a1:c1:6c: 7d:fc:10:a6:b8:09:e2:e7:df:b1:57:cb:cc:23:c9: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:F8:F1:28:24:AD:C1:FD:31:C9:77:BC:EC:7C:1C:DB:8D:4B:AF X509v3 Authority Key Identifier: keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ec:39:fc:3f:bc:01:7f:df:6d:23:c4:52:03:d0:6b:e7:c1: 90:de:7e:0f:90:6b:c9:68:2c:40:80:10:35:80:26:3e:b3:ec: 40:43:6a:f9:65:11:8d:3d:99:da:01:23:ac:67:f4:53:5c:d4: 0c:a3:c5:c6:31:b2:53:9a:75:9b:a5:7e:bc:63:12:4e:2b:04: 67:44:45:ad:34:57:14:90:e6:16:f5:18:d5:83:38:95:9f:f8: d7:7f:30:77:84:9f:c2:e8:56:be:3a:dc:83:93:32:fd:20:f4: 1c:a5:52:4d:24:b6:81:6b:c6:b3:99:7e:c6:19:10:72:d0:21: dd:44:bf:68:e1:55:74:12:e2:54:1a:6c:e7:50:1d:2d:31:43: 43:5c:3e:8a:b1:35:56:f1:73:77:39:8a:3e:96:7e:f6:61:35: 6f:c3:69:76:cf:ad:8e:10:07:df:a5:d9:eb:1d:7a:22:9e:33: f4:1e:5f:9f:db:df:d2:1a:2d:6d:15:ff:56:c5:bd:05:e9:60: a0:a0:d0:b7:71:11:c3:df:6e:b0:a7:78:e0:2b:05:e1:33:d1: 9f:0f:a5:59:d2:11:d4:d3:44:f9:5f:ec:15:8b:8a:b6:f4:49: 72:f3:e5:43:4e:68:fa:40:fa:f1:45:c5:ed:91:ce:f7:de:c0: a0:ff:e4:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMe7Qezo0CEPw4A+BcQ2e01dwKDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhB M0IyMzgxNDAeFw0yNjA3MjQxMjA5MjhaFw0yNjA3MjUxNDA4MjhaMDMxMTAvBgNV BAMTKEI3RkVGOEYxMjgyNEFEQzFGRDMxQzk3N0JDRUM3QzFDREI4RDRCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbCJODCvwQC4XaZho/1RfDlPXu DkmM8VJlhzy+2w3Y8UBESuRfW4x2ajPgXxHxXYUq3oVZkQfVb9Jxu+guSaueW7zC kJNiDS/zy/wICpIzTqY/F3uNq9iCFYTQG4f1j+9DPbpraKhjbP2WkKFGy1a75SMk VcPWHnobSSZYNGnmtDNmnQsBp3J++b6qkwcy1qjwhr1waeATkpugyVNVsiDYMG4c qCUQ3l6XGxnirPjaK57CmFZ43I7M3adSC9m5mb6f/56ohxSIdR/KyrdrGy4jFlFv AFObxcq4rU6RyfqPrwWyge/tfLciHcTBDKHBbH38EKa4CeLn37FXy8wjybkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/748SgkrcH9Mcl3vOx8HNuNS68wHwYDVR0j BBgwFoAUfQICZpvQPkGZlXtelev9yKOyOBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjllN2EyOGEtNjJmMC00ZDE0LTg3MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5 QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhBM0IyMzgxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDAyMDI2NjlCRDAzRTQxOTk5NTdCNUU5NUVCRkRDOEEzQjIz ODE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZE QzhBM0IyMzgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPsOfw/vAF/320jxFID0GvnwZDefg+Qa8lo LECAEDWAJj6z7EBDavllEY09mdoBI6xn9FNc1AyjxcYxslOadZulfrxjEk4rBGdE Ra00VxSQ5hb1GNWDOJWf+Nd/MHeEn8LoVr463IOTMv0g9BylUk0ktoFrxrOZfsYZ EHLQId1Ev2jhVXQS4lQabOdQHS0xQ0NcPoqxNVbxc3c5ij6WfvZhNW/DaXbPrY4Q B9+l2esdeiKeM/QeX5/b39IaLW0V/1bFvQXpYKCg0LdxEcPfbrCneOArBeEz0Z8P pVnSEdTTRPlf7BWLirb0SXLz5UNOaPpA+vFFxe2RzvfewKD/5HM= -----END CERTIFICATE-----Generated at Fri Jul 24 14:37:12 2026 by rpki-client