$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: 5WQXletXNUHVChTzob/xq/WEbM3AV029TnNUAH4tBiA= Subject key identifier: 48:88:C3:07:AF:22:E7:99:20:E9:0B:BA:3B:A4:B0:5E:16:C7:2F:B1 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 11ABC18EFF5F2123EEC1E4BFC6DBD69864283E87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:39:23 +0000 Manifest this update: Tue 12 May 2026 14:34:23 +0000 Manifest next update: Wed 13 May 2026 17:32:23 +0000 Files and hashes: 1: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 3: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: 9NJJ4ZXp+WDa8oRn57MgE6StLUtwJGShOJK6DFB1M1I=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ab:c1:8e:ff:5f:21:23:ee:c1:e4:bf:c6:db:d6:98:64:28:3e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: May 12 14:34:23 2026 GMT Not After : May 13 17:32:23 2026 GMT Subject: CN=4888C307AF22E79920E90BBA3BA4B05E16C72FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:3f:aa:d4:ae:78:82:03:8b:46:4f:fb:be: 49:44:0f:7f:85:14:79:ba:1d:be:61:b6:97:b4:2c: 1e:c1:48:0f:db:0a:37:2d:75:d7:b3:e9:c2:1b:67: 6a:0f:45:e9:8a:56:6b:8e:6c:57:3e:10:6e:5d:c2: 04:45:8d:7d:78:33:45:ae:4a:69:9d:fd:95:8a:60: 21:fc:86:ad:df:6a:93:b8:b2:db:c2:c6:e2:e9:8a: f8:35:8a:39:a2:ec:97:67:5d:e2:c8:23:72:03:ec: fb:1c:1e:fd:2a:9d:56:52:18:8a:0a:5a:9f:87:8f: 80:7c:14:5b:af:c1:6a:6d:2d:f6:15:9b:9d:ba:50: 0e:90:b2:d0:9c:3a:fe:5e:2d:99:fb:49:98:00:8d: 9c:48:f6:e8:24:4d:7a:32:b1:f9:ec:44:23:2c:f3: 64:5a:d9:9e:7e:a7:7d:01:ea:63:7c:25:5b:c7:f9: ac:d0:ab:63:3b:91:67:d9:83:20:bf:58:f0:1e:14: 7f:19:ae:7e:7a:08:ad:5c:e7:1e:66:34:a1:e1:80: 61:81:89:37:40:70:31:56:76:7c:d5:ce:31:9e:af: d0:1f:2c:d0:59:f9:dd:71:ee:f9:46:8a:19:b2:7e: 16:94:30:30:e1:81:b4:9f:38:9a:0d:fe:fb:b7:2d: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:88:C3:07:AF:22:E7:99:20:E9:0B:BA:3B:A4:B0:5E:16:C7:2F:B1 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:ec:6e:ab:2a:c9:87:6a:c9:5b:f5:10:57:27:30:12:9a: cc:3f:4a:7c:f2:84:f4:59:82:19:6a:af:42:57:0c:a9:cc:41: e6:c7:08:d6:ae:1b:1d:43:28:c7:c1:87:62:d9:31:f3:fd:09: 73:2d:c6:14:a5:5f:91:e0:79:6a:33:e7:bb:5b:10:1b:f2:d8: e7:64:38:c3:c8:40:4b:e7:e7:06:2e:b1:e7:12:e5:eb:21:a8: e3:81:05:85:fb:2c:d7:2a:f4:63:6d:a4:a4:b5:c3:df:3e:cf: 03:a1:b5:1f:6a:96:a6:b7:3d:83:fc:4b:89:e4:6b:1d:87:cb: be:4b:9b:9e:49:2f:36:d4:49:5c:c1:07:5f:85:e7:ee:a3:5b: 95:90:d7:02:24:97:be:c1:d4:8c:94:04:86:f7:1a:f2:d9:bb: 5d:9f:c2:97:bf:ed:60:24:7b:ef:a2:3c:50:ee:7a:e6:59:08: 2a:27:89:cb:04:cd:2f:95:84:74:a5:ab:03:d4:30:07:3a:a9: 5c:6f:87:a2:95:97:c5:24:c0:a3:fa:4e:2b:46:58:11:c4:70: 93:98:2e:4c:53:06:f8:da:ca:5c:ae:6d:8c:bf:13:04:43:1a: f2:78:09:29:a3:7a:6d:41:d9:75:d9:9a:c0:b9:21:e6:29:13: 3e:65:ed:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEavBjv9fISPuweS/xtvWmGQoPocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA1MTIxNDM0MjNaFw0yNjA1MTMxNzMyMjNaMDMxMTAvBgNV BAMTKDQ4ODhDMzA3QUYyMkU3OTkyMEU5MEJCQTNCQTRCMDVFMTZDNzJGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwz+q1K54ggOLRk/7vklED3+F FHm6Hb5htpe0LB7BSA/bCjctddez6cIbZ2oPRemKVmuObFc+EG5dwgRFjX14M0Wu Smmd/ZWKYCH8hq3fapO4stvCxuLpivg1ijmi7JdnXeLII3ID7PscHv0qnVZSGIoK Wp+Hj4B8FFuvwWptLfYVm526UA6QstCcOv5eLZn7SZgAjZxI9ugkTXoysfnsRCMs 82Ra2Z5+p30B6mN8JVvH+azQq2M7kWfZgyC/WPAeFH8Zrn56CK1c5x5mNKHhgGGB iTdAcDFWdnzVzjGer9AfLNBZ+d1x7vlGihmyfhaUMDDhgbSfOJoN/vu3LSa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSIjDB68i55kg6Qu6O6SwXhbHL7EwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFst7G6rKsmHaslb9RBXJzASmsw/SnzyhPRZ ghlqr0JXDKnMQebHCNauGx1DKMfBh2LZMfP9CXMtxhSlX5HgeWoz57tbEBvy2Odk OMPIQEvn5wYusecS5eshqOOBBYX7LNcq9GNtpKS1w98+zwOhtR9qlqa3PYP8S4nk ax2Hy75Lm55JLzbUSVzBB1+F5+6jW5WQ1wIkl77B1IyUBIb3GvLZu12fwpe/7WAk e++iPFDueuZZCConicsEzS+VhHSlqwPUMAc6qVxvh6KVl8UkwKP6TitGWBHEcJOY LkxTBvjaylyubYy/EwRDGvJ4CSmjem1B2XXZmsC5IeYpEz5l7Qg= -----END CERTIFICATE-----Generated at Tue May 12 22:52:18 2026 by rpki-client