$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json) Hash identifier: m1JV4VpKj1o6oOOsljT8JxXCfTDmjPQAkuMepfXJjo4= Subject key identifier: 20:8B:66:08:81:22:3C:FA:DE:C5:40:0B:0E:01:60:C3:2E:47:BF:F2 Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Certificate serial: 76C906070F11FF1DCDC63C8403516B2102D784DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:10:01 +0000 Manifest this update: Thu 23 Jul 2026 12:05:01 +0000 Manifest next update: Fri 24 Jul 2026 14:58:01 +0000 Files and hashes: 1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: aOw5qywEi3PiSiVxTQGqbJ6zM8+03rKmm3hfkkEjlLg=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c9:06:07:0f:11:ff:1d:cd:c6:3c:84:03:51:6b:21:02:d7:84:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Validity Not Before: Jul 23 12:05:01 2026 GMT Not After : Jul 24 14:58:01 2026 GMT Subject: CN=208B660881223CFADEC5400B0E0160C32E47BFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:67:4d:b2:02:8b:a8:df:15:fc:37:2b:73: 42:99:d4:ba:d0:ec:ab:4f:3c:df:49:02:92:94:19: 14:a1:92:f1:87:8d:db:4e:7a:11:88:24:9a:19:1b: 98:d6:ca:d3:07:2e:76:22:ec:f9:78:c8:c7:1a:fa: df:e8:dd:01:e7:55:11:50:a3:b5:34:35:93:4c:20: d7:eb:b8:21:a0:ad:a0:68:3a:d7:16:9d:3b:22:fb: 1d:5f:7a:de:54:a8:8c:77:17:d2:44:e9:e7:e6:55: 61:af:20:1f:3d:fd:e1:fa:a5:e4:12:b6:e5:68:aa: 1d:95:09:9c:7d:04:94:41:29:0b:52:11:5c:01:18: e4:54:43:29:13:be:a2:42:82:cd:3a:42:b7:ff:97: 2d:de:c3:57:58:e3:43:2d:0e:6a:13:2f:1e:16:94: ee:a5:74:55:58:3f:d7:91:bd:df:35:65:52:08:db: 88:3e:6f:2f:18:0e:65:66:0e:c5:29:90:70:05:5d: 60:9b:44:92:4f:32:6e:ca:4e:17:3d:d8:e9:6c:d7: d1:c0:62:c6:fd:1c:a2:25:e5:13:3d:a8:93:a5:39: d1:bc:fd:e0:02:58:17:01:a2:3f:fa:db:cd:6e:fb: 37:bd:91:7a:d3:cb:2d:56:4c:e4:06:0e:8e:55:ed: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:66:08:81:22:3C:FA:DE:C5:40:0B:0E:01:60:C3:2E:47:BF:F2 X509v3 Authority Key Identifier: keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:45:dc:be:96:55:a6:ea:13:a7:f6:45:6a:a1:23:a2:52: 2e:ba:53:34:e1:83:2a:b5:42:44:29:0b:8d:d0:24:c0:e1:0b: 2a:95:13:f0:11:32:9a:6a:f0:8e:20:f0:a1:d2:90:f4:bc:e2: 77:43:ec:67:bc:6e:ab:f5:41:8c:ad:b6:77:59:bc:ec:8a:f8: 88:b2:4c:0e:5a:93:f8:51:5c:9e:f1:40:9f:e3:68:f3:ef:94: f2:e2:0d:48:da:a1:f2:e4:62:3e:53:8f:5e:14:8a:be:6d:b8: 70:c3:cd:63:15:9f:bf:6f:49:a9:10:d1:68:90:f8:51:ca:f2: 91:d8:f6:0f:f1:2b:55:fb:26:7f:2f:79:d9:ab:30:f7:d3:11: 65:6f:3b:91:6b:2c:ad:cc:33:fa:af:0c:df:16:1c:74:86:86: ba:a6:84:62:9d:b7:00:ad:c4:f9:26:2e:84:c2:49:73:96:d7: 84:be:68:5c:38:e6:58:9d:3b:31:58:56:78:ea:09:09:e6:8b: 28:86:85:1f:4e:7e:ee:37:44:db:32:d8:8f:5d:a4:60:80:f4: f9:de:40:66:ec:31:3a:33:08:b0:27:3a:53:91:ea:41:e7:0a: 30:69:c8:8f:ba:b3:a1:24:29:a1:e9:38:38:1b:5a:bf:14:82: b3:e9:c3:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdskGBw8R/x3NxjyEA1FrIQLXhN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0 OTRDOTI5NjAeFw0yNjA3MjMxMjA1MDFaFw0yNjA3MjQxNDU4MDFaMDMxMTAvBgNV BAMTKDIwOEI2NjA4ODEyMjNDRkFERUM1NDAwQjBFMDE2MEMzMkU0N0JGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cWdNsgKLqN8V/Dcrc0KZ1LrQ 7KtPPN9JApKUGRShkvGHjdtOehGIJJoZG5jWytMHLnYi7Pl4yMca+t/o3QHnVRFQ o7U0NZNMINfruCGgraBoOtcWnTsi+x1fet5UqIx3F9JE6efmVWGvIB89/eH6peQS tuVoqh2VCZx9BJRBKQtSEVwBGORUQykTvqJCgs06Qrf/ly3ew1dY40MtDmoTLx4W lO6ldFVYP9eRvd81ZVII24g+by8YDmVmDsUpkHAFXWCbRJJPMm7KThc92Ols19HA Ysb9HKIl5RM9qJOlOdG8/eACWBcBoj/6281u+ze9kXrTyy1WTOQGDo5V7bZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIItmCIEiPPrexUALDgFgwy5Hv/IwHwYDVR0j BBgwFoAUevEIs+Drt59sOrvso0N0KUlMkpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNF MEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0OTRDOTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUYxMDhCM0UwRUJCNzlGNkMzQUJCRUNBMzQzNzQyOTQ5NEM5 Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0 Mjk0OTRDOTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8sRdy+llWm6hOn9kVqoSOiUi66UzThgyq1 QkQpC43QJMDhCyqVE/ARMppq8I4g8KHSkPS84ndD7Ge8bqv1QYyttndZvOyK+Iiy TA5ak/hRXJ7xQJ/jaPPvlPLiDUjaofLkYj5Tj14Uir5tuHDDzWMVn79vSakQ0WiQ +FHK8pHY9g/xK1X7Jn8vedmrMPfTEWVvO5FrLK3MM/qvDN8WHHSGhrqmhGKdtwCt xPkmLoTCSXOW14S+aFw45lidOzFYVnjqCQnmiyiGhR9Ofu43RNsy2I9dpGCA9Pne QGbsMTozCLAnOlOR6kHnCjBpyI+6s6EkKaHpODgbWr8UgrPpw88= -----END CERTIFICATE-----Generated at Fri Jul 24 04:25:27 2026 by rpki-client