$ rpki-client -vvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft File: 7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft (raw, json) Hash identifier: Kk9AFUYE7zpHRksfsXBJADzrRPxeBeLpn4qO3GvzGks= Subject key identifier: C8:53:48:F5:49:15:E5:DD:5F:D0:6A:04:D8:2F:4D:92:95:09:39:2D Authority key identifier: 7F:AD:EA:BD:30:29:D4:5E:CF:33:71:F9:E7:F5:72:A2:F4:AD:ED:12 Certificate issuer: /CN=7FADEABD3029D45ECF3371F9E7F572A2F4ADED12 Certificate serial: 752BFB1E8CF05D2C04846C3022F0DF4283B06AEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:11:19 +0000 Manifest this update: Tue 12 May 2026 10:06:19 +0000 Manifest next update: Wed 13 May 2026 11:07:19 +0000 Files and hashes: 1: 7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.crl (hash: zZcDCw81KdYMMnLkwoWAqMfQrC2+Ok90Lr/hp4Q+s9Q=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: v9F+m9o4w5EDPx6otpMuwqQXhxZrSfTA2rfvCPM+gBI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.crl rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2b:fb:1e:8c:f0:5d:2c:04:84:6c:30:22:f0:df:42:83:b0:6a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FADEABD3029D45ECF3371F9E7F572A2F4ADED12 Validity Not Before: May 12 10:06:19 2026 GMT Not After : May 13 11:07:19 2026 GMT Subject: CN=C85348F54915E5DD5FD06A04D82F4D929509392D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:4c:b3:eb:cd:29:8e:98:01:c1:90:af:82: 89:b3:3c:bd:c2:45:08:9d:10:1a:52:d8:e2:3f:17: 0f:a7:1d:3e:28:ef:52:45:42:63:08:63:be:f0:6c: 77:ff:ba:f9:de:03:30:bf:8d:73:a4:ef:58:a4:75: fa:96:bb:32:d7:e9:0b:c1:c2:fc:48:dd:df:32:5a: 8c:74:57:01:8d:7c:cb:77:8e:ee:0b:0c:0b:ae:b9: 75:b7:d2:8a:6f:78:94:18:e7:3b:53:5d:b9:a3:32: df:bc:4f:07:98:b0:98:41:b3:cb:09:f4:30:1f:33: b7:4e:61:71:b8:aa:16:52:36:cb:ed:9e:74:89:89: 4b:af:d1:6a:cb:4e:60:35:04:98:a0:00:cd:3e:f7: f5:5f:f8:43:30:8f:96:11:48:e9:22:0c:1c:c6:91: 97:ac:0c:fb:3d:e4:c6:08:d5:cb:16:ff:d0:bc:3a: 4f:d4:11:38:cd:39:54:6f:d9:56:ca:55:a5:f7:99: 7c:77:8f:da:61:28:cc:f7:4e:4f:12:fe:1f:5f:6f: 7a:86:81:63:a6:52:07:02:84:60:53:5a:49:08:da: 9a:e3:93:21:e7:2d:04:1d:bb:73:e7:61:78:9f:48: 87:54:4f:6c:fe:f7:8c:e7:d6:fc:04:45:5b:25:64: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:53:48:F5:49:15:E5:DD:5F:D0:6A:04:D8:2F:4D:92:95:09:39:2D X509v3 Authority Key Identifier: keyid:7F:AD:EA:BD:30:29:D4:5E:CF:33:71:F9:E7:F5:72:A2:F4:AD:ED:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d8:6b:22:20:80:0b:9f:4d:50:cb:9b:b0:a8:96:0d:d4:4f: 2e:0b:26:e4:8b:c6:9d:7d:6b:0a:70:0e:eb:77:34:02:2f:68: be:62:89:4d:6b:29:52:63:1c:23:63:18:cd:1d:62:49:5b:70: 89:9a:cb:9b:4b:96:69:91:ca:81:e4:e5:c7:0c:b9:e6:e8:eb: ba:45:30:5a:84:53:82:5a:79:95:72:9d:9e:14:fb:61:c6:3d: 0a:37:5e:7c:a9:be:1f:73:be:3b:fc:19:e7:dd:f7:18:f6:3b: 83:6a:e3:b2:88:40:57:33:f0:e6:28:93:8e:73:a4:df:ff:29: 33:fc:c8:01:4e:fd:9b:90:70:15:6b:d2:4b:da:ac:1c:5a:94: 2d:83:41:8a:ac:8e:74:54:a0:07:48:2e:0a:b6:80:36:d7:94: fb:aa:8f:9e:b9:e2:12:39:00:32:d2:00:97:cb:48:c7:48:4c: 32:4d:13:07:d0:93:c8:71:7e:8e:d3:5b:5d:30:33:f8:ca:3b: d1:a0:e0:1d:a2:00:74:6f:24:2c:16:df:07:57:9e:89:4b:01: 9c:53:7d:07:9c:b3:0d:6d:84:e0:f5:b5:e5:2b:6a:e4:e7:7e: af:fa:56:c8:83:04:92:c1:bc:1b:31:28:35:e3:ee:df:6b:54: 17:43:e3:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSv7HozwXSwEhGwwIvDfQoOwau8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBREVBQkQzMDI5RDQ1RUNGMzM3MUY5RTdGNTcyQTJG NEFERUQxMjAeFw0yNjA1MTIxMDA2MTlaFw0yNjA1MTMxMTA3MTlaMDMxMTAvBgNV BAMTKEM4NTM0OEY1NDkxNUU1REQ1RkQwNkEwNEQ4MkY0RDkyOTUwOTM5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEkyz680pjpgBwZCvgomzPL3C RQidEBpS2OI/Fw+nHT4o71JFQmMIY77wbHf/uvneAzC/jXOk71ikdfqWuzLX6QvB wvxI3d8yWox0VwGNfMt3ju4LDAuuuXW30opveJQY5ztTXbmjMt+8TweYsJhBs8sJ 9DAfM7dOYXG4qhZSNsvtnnSJiUuv0WrLTmA1BJigAM0+9/Vf+EMwj5YRSOkiDBzG kZesDPs95MYI1csW/9C8Ok/UETjNOVRv2VbKVaX3mXx3j9phKMz3Tk8S/h9fb3qG gWOmUgcChGBTWkkI2prjkyHnLQQdu3PnYXifSIdUT2z+94zn1vwERVslZKjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFNI9UkV5d1f0GoE2C9NkpUJOS0wHwYDVR0j BBgwFoAUf63qvTAp1F7PM3H55/VyovSt7RIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTViYWUzMGMtYjM2My00MDdiLWEwYWItMzE1NGViMzA5YWU5LzEvN0ZBREVBQkQz MDI5RDQ1RUNGMzM3MUY5RTdGNTcyQTJGNEFERUQxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkFERUFCRDMwMjlENDVFQ0YzMzcxRjlFN0Y1NzJBMkY0QURF RDEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvN0ZBREVBQkQzMDI5RDQ1RUNGMzM3MUY5RTdGNTcy QTJGNEFERUQxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7YayIggAufTVDLm7Colg3UTy4LJuSLxp19 awpwDut3NAIvaL5iiU1rKVJjHCNjGM0dYklbcImay5tLlmmRyoHk5ccMuebo67pF MFqEU4JaeZVynZ4U+2HGPQo3Xnypvh9zvjv8Gefd9xj2O4Nq47KIQFcz8OYok45z pN//KTP8yAFO/ZuQcBVr0kvarBxalC2DQYqsjnRUoAdILgq2gDbXlPuqj5654hI5 ADLSAJfLSMdITDJNEwfQk8hxfo7TW10wM/jKO9Gg4B2iAHRvJCwW3wdXnolLAZxT fQecsw1thOD1teUrauTnfq/6VsiDBJLBvBsxKDXj7t9rVBdD4zg= -----END CERTIFICATE-----Generated at Tue May 12 22:45:41 2026 by rpki-client