$ rpki-client -vvf rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft File: 7A5669C255B31F7829A430EF62917FD62B166DD2.mft (raw, json) Hash identifier: SMy3zcS5zCtSypZMyvfOoeaE1WLLBF4COyyhI755+pM= Subject key identifier: E2:40:76:66:2E:FA:5B:73:17:77:90:B7:35:F9:F9:31:D4:98:7C:05 Authority key identifier: 7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2 Certificate issuer: /CN=7A5669C255B31F7829A430EF62917FD62B166DD2 Certificate serial: 4145A044F4067F6C76655F566CA4BDCF46B8DA8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:27:24 +0000 Manifest this update: Tue 12 May 2026 23:22:24 +0000 Manifest next update: Thu 14 May 2026 00:47:24 +0000 Files and hashes: 1: 3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (hash: l4yczOyQxPFtzGJ+/dZhBHx9S0acVnl4y0Po1T7SNGM=) 2: 7A5669C255B31F7829A430EF62917FD62B166DD2.crl (hash: zck5UJuvWmeKIhSsq5LbaCIih/t2Wa3lKRcSocqTMAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.crl rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:a0:44:f4:06:7f:6c:76:65:5f:56:6c:a4:bd:cf:46:b8:da:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A5669C255B31F7829A430EF62917FD62B166DD2 Validity Not Before: May 12 23:22:24 2026 GMT Not After : May 14 00:47:24 2026 GMT Subject: CN=E24076662EFA5B73177790B735F9F931D4987C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:82:dd:0a:97:0f:19:72:b1:da:d4:70:34: ce:8e:55:b8:1a:b9:fb:48:fd:ec:74:59:f5:f0:02: a3:cc:34:34:e9:2b:b4:b7:7f:07:a6:6f:71:0c:26: ae:29:db:7e:c2:79:0d:f8:07:28:9d:de:37:e5:55: 77:dd:74:4d:9f:86:0d:f5:2f:46:17:2e:ee:59:e4: a9:bd:1c:44:70:5a:98:cf:c6:6b:df:19:38:84:d0: 4a:f1:78:99:9e:9f:cc:9d:c8:60:6f:05:3e:f6:3b: a3:07:47:b4:12:7b:c6:24:e2:43:e9:38:03:fb:79: 50:40:d9:0a:1a:ea:63:4c:8b:48:90:df:cd:b4:5d: 96:3d:19:45:16:ea:51:ba:d4:f6:40:ac:0f:3e:75: e4:0d:b8:00:8e:72:47:51:85:2f:d1:cf:a3:a4:e8: c5:7a:88:d8:ac:cb:90:d2:c0:90:46:56:a0:a7:45: 40:0f:8c:12:bf:24:86:ce:1b:ae:8b:47:73:28:f1: a8:21:1d:8b:45:b9:45:10:a8:81:33:83:e2:e9:2d: 3b:29:5c:61:8e:58:a4:21:20:9b:a5:a1:94:f6:e3: 0e:5c:5e:fe:f8:8e:b4:66:44:6e:6f:e4:7e:c2:3b: f4:b3:a0:e6:b8:81:24:34:11:a9:e8:f3:0e:46:49: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:76:66:2E:FA:5B:73:17:77:90:B7:35:F9:F9:31:D4:98:7C:05 X509v3 Authority Key Identifier: keyid:7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2b:a1:af:ae:32:5f:86:07:a4:df:ce:8a:75:68:38:1a:82: 71:81:73:06:83:17:57:7a:1d:6d:e6:ce:68:20:16:bb:2c:62: 3b:3b:65:12:3e:fe:15:e0:d5:44:51:56:a3:8a:6b:1e:73:ad: 63:a2:57:b0:35:38:55:ea:8b:10:f3:10:9c:1f:40:81:38:9e: 82:2d:12:5e:a1:67:c0:16:f3:19:f6:65:cd:1b:7b:e2:fc:33: a1:2c:eb:73:27:88:cd:54:ee:6e:e9:2d:3b:f2:c5:4e:26:58: 2a:53:aa:99:75:72:1e:f4:09:40:34:47:e2:d8:53:df:87:15: 2d:10:7d:7e:27:2c:71:77:d4:1f:cb:fb:90:12:bd:ce:56:11: df:4c:77:85:b0:23:48:ce:21:fc:3c:bf:40:54:d8:aa:96:07: 07:b8:9f:b2:65:bb:00:e3:48:37:c5:81:72:3b:21:83:b3:33: 8d:d4:a6:f9:ce:7d:bb:0b:c1:9d:21:02:e7:d0:2a:33:cc:4d: 6f:6f:ad:4e:c0:17:ed:1c:a0:e4:55:51:5c:ab:9d:40:bc:a5: ef:8f:8d:75:25:35:76:e1:16:d6:75:3c:ef:ce:95:fe:87:53: d5:e9:ae:ce:a7:50:82:c2:ad:e4:7e:4b:ef:d1:a1:37:04:d5: e8:4b:18:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUWgRPQGf2x2ZV9WbKS9z0a42oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1NjY5QzI1NUIzMUY3ODI5QTQzMEVGNjI5MTdGRDYy QjE2NkREMjAeFw0yNjA1MTIyMzIyMjRaFw0yNjA1MTQwMDQ3MjRaMDMxMTAvBgNV BAMTKEUyNDA3NjY2MkVGQTVCNzMxNzc3OTBCNzM1RjlGOTMxRDQ5ODdDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYILdCpcPGXKx2tRwNM6OVbga uftI/ex0WfXwAqPMNDTpK7S3fwemb3EMJq4p237CeQ34Byid3jflVXfddE2fhg31 L0YXLu5Z5Km9HERwWpjPxmvfGTiE0ErxeJmen8ydyGBvBT72O6MHR7QSe8Yk4kPp OAP7eVBA2Qoa6mNMi0iQ3820XZY9GUUW6lG61PZArA8+deQNuACOckdRhS/Rz6Ok 6MV6iNisy5DSwJBGVqCnRUAPjBK/JIbOG66LR3Mo8aghHYtFuUUQqIEzg+LpLTsp XGGOWKQhIJuloZT24w5cXv74jrRmRG5v5H7CO/SzoOa4gSQ0Eano8w5GSQrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kB2Zi76W3MXd5C3Nfn5MdSYfAUwHwYDVR0j BBgwFoAUelZpwlWzH3gppDDvYpF/1isWbdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk2MmFhOGEtMDZlNC00NjM0LWI1MDAtYTUyN2NlOGUwNDg5LzAvN0E1NjY5QzI1 NUIzMUY3ODI5QTQzMEVGNjI5MTdGRDYyQjE2NkREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTU2NjlDMjU1QjMxRjc4MjlBNDMwRUY2MjkxN0ZENjJCMTY2 REQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk2MmFhOGEtMDZlNC00NjM0LWI1 MDAtYTUyN2NlOGUwNDg5LzAvN0E1NjY5QzI1NUIzMUY3ODI5QTQzMEVGNjI5MTdG RDYyQjE2NkREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYroa+uMl+GB6Tfzop1aDgagnGBcwaDF1d6 HW3mzmggFrssYjs7ZRI+/hXg1URRVqOKax5zrWOiV7A1OFXqixDzEJwfQIE4noIt El6hZ8AW8xn2Zc0be+L8M6Es63MniM1U7m7pLTvyxU4mWCpTqpl1ch70CUA0R+LY U9+HFS0QfX4nLHF31B/L+5ASvc5WEd9Md4WwI0jOIfw8v0BU2KqWBwe4n7JluwDj SDfFgXI7IYOzM43UpvnOfbsLwZ0hAufQKjPMTW9vrU7AF+0coORVUVyrnUC8pe+P jXUlNXbhFtZ1PO/Olf6HU9Xprs6nUILCreR+S+/RoTcE1ehLGOY= -----END CERTIFICATE-----Generated at Wed May 13 04:03:24 2026 by rpki-client