$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: O3Ptv9XNakLQf9OdaSiP9m2xI7pY6t0NOM4/Ad76ao8= Subject key identifier: 34:D2:BC:3F:BA:5E:BD:AC:60:6F:B2:29:4A:16:68:7A:BD:9E:05:2F Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 7ED46EF6A527731F663F715C26DFB2EF2290D930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:17 +0000 Manifest this update: Tue 12 May 2026 18:39:17 +0000 Manifest next update: Wed 13 May 2026 18:54:17 +0000 Files and hashes: 1: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: hevDlLwKDsqUU7X58uUIofsk31qDi5FziVI3oeRyEX4=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d4:6e:f6:a5:27:73:1f:66:3f:71:5c:26:df:b2:ef:22:90:d9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: May 12 18:39:17 2026 GMT Not After : May 13 18:54:17 2026 GMT Subject: CN=34D2BC3FBA5EBDAC606FB2294A16687ABD9E052F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:04:c9:a7:6e:9e:8f:7f:f5:e5:ea:4a:5a: 28:6d:00:40:d4:13:e3:5c:f3:c8:ba:81:2d:37:a7: 12:0a:1d:32:ec:dc:43:7b:3f:c4:42:ee:b0:5b:b2: 1c:fc:56:01:bd:c5:ce:73:77:e7:d2:ba:bd:03:e7: 6c:2e:96:be:43:98:b3:c4:9f:25:09:63:1c:23:81: f0:7e:54:55:4c:23:7b:93:a0:7f:b3:67:d3:42:7c: 2f:e1:09:34:70:46:c8:6f:26:3d:98:03:40:b8:5d: 22:3c:39:3d:b6:1f:fe:8d:82:3f:b9:6e:ac:85:be: 3b:c2:eb:a1:77:78:ec:b6:e6:da:bb:31:ae:0a:94: f1:40:c2:0c:20:6e:ef:42:62:c3:5c:d4:60:18:6d: 12:52:18:3d:0e:ba:65:93:1b:c7:2d:44:ca:c1:b8: 5c:60:10:8c:69:1a:6f:4d:39:58:d2:8e:c8:f9:4a: da:3e:0e:fc:11:a2:43:25:7b:fd:51:1c:31:b6:e9: e1:77:5b:0d:9b:e3:44:c7:5d:f7:d2:e4:ef:b5:99: 5d:6f:77:ea:08:5c:58:64:d5:79:f6:0e:69:05:4f: 1f:a5:2a:67:fb:c6:6c:d9:de:6f:3b:fd:d0:74:e2: 0f:97:5a:15:96:10:60:cb:44:e9:94:42:fc:8c:59: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:BC:3F:BA:5E:BD:AC:60:6F:B2:29:4A:16:68:7A:BD:9E:05:2F X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:99:96:eb:8e:2c:51:9f:8a:6a:9d:bb:c7:09:fb:eb:c2:50: b4:3f:f6:92:d6:0f:ab:85:3b:0a:c5:0e:a2:db:aa:6e:d2:31: 55:42:ee:ec:0d:b4:08:fe:d0:70:4d:89:e4:5e:8b:26:8e:d9: 85:59:8d:98:a2:a2:33:d6:0d:82:4e:fa:56:e4:dd:24:b9:7d: 2d:c0:49:1d:29:59:3d:70:3b:5c:d4:df:35:51:28:e4:ee:16: df:fc:db:41:f3:4e:55:e4:d1:82:28:f9:62:79:0f:fe:fa:41: 95:89:a2:77:33:fd:d4:e0:0f:e8:a2:28:c7:59:ac:c8:c7:bf: 61:dd:72:fc:79:41:25:aa:65:b1:a7:bf:35:6e:e4:8e:23:a4: 05:75:75:f3:c0:ad:de:9f:53:db:f9:e5:79:6c:72:85:0e:0c: c4:9f:ed:be:5b:a4:c0:8b:02:51:b5:38:84:89:9d:db:e7:d2: a6:36:74:48:36:64:d4:e3:d8:9f:fb:29:76:2d:91:33:1f:3d: e8:96:69:2f:77:a3:78:12:11:fb:53:d9:25:7f:c2:2b:84:c1: b0:49:75:65:4f:58:31:60:24:b9:a0:c8:85:c9:86:07:e9:a7: d6:c5:09:9f:24:dc:69:21:10:8a:15:0a:f8:ab:62:e6:11:39: cf:d1:e0:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftRu9qUncx9mP3FcJt+y7yKQ2TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjA1MTIxODM5MTdaFw0yNjA1MTMxODU0MTdaMDMxMTAvBgNV BAMTKDM0RDJCQzNGQkE1RUJEQUM2MDZGQjIyOTRBMTY2ODdBQkQ5RTA1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNATJp26ej3/15epKWihtAEDU E+Nc88i6gS03pxIKHTLs3EN7P8RC7rBbshz8VgG9xc5zd+fSur0D52wulr5DmLPE nyUJYxwjgfB+VFVMI3uToH+zZ9NCfC/hCTRwRshvJj2YA0C4XSI8OT22H/6Ngj+5 bqyFvjvC66F3eOy25tq7Ma4KlPFAwgwgbu9CYsNc1GAYbRJSGD0OumWTG8ctRMrB uFxgEIxpGm9NOVjSjsj5Sto+DvwRokMle/1RHDG26eF3Ww2b40THXffS5O+1mV1v d+oIXFhk1Xn2DmkFTx+lKmf7xmzZ3m87/dB04g+XWhWWEGDLROmUQvyMWb7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNK8P7pevaxgb7IpShZoer2eBS8wHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWZluuOLFGfimqdu8cJ++vCULQ/9pLWD6uF OwrFDqLbqm7SMVVC7uwNtAj+0HBNieReiyaO2YVZjZiiojPWDYJO+lbk3SS5fS3A SR0pWT1wO1zU3zVRKOTuFt/820HzTlXk0YIo+WJ5D/76QZWJoncz/dTgD+iiKMdZ rMjHv2Hdcvx5QSWqZbGnvzVu5I4jpAV1dfPArd6fU9v55XlscoUODMSf7b5bpMCL AlG1OISJndvn0qY2dEg2ZNTj2J/7KXYtkTMfPeiWaS93o3gSEftT2SV/wiuEwbBJ dWVPWDFgJLmgyIXJhgfpp9bFCZ8k3GkhEIoVCvirYuYROc/R4Bc= -----END CERTIFICATE-----Generated at Wed May 13 09:57:56 2026 by rpki-client