$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: 1LnAcuT7z4wV0Mzw1K9W/6AyqAb98U3Dv58maCaMg5w= Subject key identifier: A2:F3:1E:E4:BD:A2:C6:EB:60:4B:5F:4A:3A:54:23:55:D3:6D:4D:ED Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 1331CBAF38D9CC1F1CEF83F3F15E06D4E83A231B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:16 +0000 Manifest this update: Tue 12 May 2026 18:39:16 +0000 Manifest next update: Wed 13 May 2026 19:42:16 +0000 Files and hashes: 1: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 2: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 3: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: cwgUrhYZNqyYvT1fwLLYeziyNVee2mQ/zEiOFZ87xBs=) 4: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 5: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 6: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 7: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:31:cb:af:38:d9:cc:1f:1c:ef:83:f3:f1:5e:06:d4:e8:3a:23:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: May 12 18:39:16 2026 GMT Not After : May 13 19:42:16 2026 GMT Subject: CN=A2F31EE4BDA2C6EB604B5F4A3A542355D36D4DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:38:c2:df:75:83:44:89:cf:5c:c1:11:2d: a7:6d:86:44:84:a7:a9:fc:8e:d0:ef:9c:33:15:b7: 0a:2a:58:32:00:69:69:ef:5c:56:62:73:56:ed:4c: b2:17:3f:cf:a2:af:74:1d:a8:91:d9:3a:31:cf:ac: f8:35:f8:23:2a:b6:32:6d:19:3e:04:fe:78:f2:07: b8:9d:a6:20:7a:ed:83:9a:11:01:87:2f:96:f4:ff: 25:52:12:bf:49:ff:40:73:b4:1f:1d:83:f5:1b:99: 3d:a2:2b:90:75:98:a8:1b:73:c4:6c:30:22:37:59: 8a:8f:0e:57:73:73:4b:10:e5:fa:97:35:01:1a:73: 9d:87:7b:ba:eb:6b:e4:79:ac:a3:35:1a:a1:49:1d: 37:d6:12:1e:8e:07:5f:57:d0:69:59:f9:ee:fe:20: 10:4a:4e:a5:d4:d7:c5:3b:c9:d2:6c:22:20:ff:af: 8d:9f:b1:19:4b:4d:69:f7:2c:30:a1:10:08:a9:d8: f6:55:e6:5f:52:5d:7e:d6:21:f1:42:d1:f8:27:e2: 59:bb:08:59:7b:e3:18:8a:27:48:b7:68:07:61:8e: 3f:e3:f4:17:fb:65:bd:1e:89:4e:25:c0:b1:64:73: e2:61:66:4c:0d:9a:83:d3:4e:e4:c2:fc:67:70:e8: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F3:1E:E4:BD:A2:C6:EB:60:4B:5F:4A:3A:54:23:55:D3:6D:4D:ED X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:49:43:19:74:1e:2e:c3:9f:f7:c7:26:74:43:df:3e:4f:f2: 7c:b2:8b:66:9b:d7:1d:0a:59:26:7e:74:83:61:30:f2:4d:86: 83:45:d5:33:c4:e7:7d:ee:bb:6b:91:c6:5c:24:c6:b0:35:b7: a1:3e:0e:9a:ad:89:87:2c:7a:c1:b0:c4:9e:6e:cd:0e:d8:4e: ee:8e:4a:f2:9b:9e:57:87:80:d8:e7:ad:fe:40:ad:8c:3e:a2: 2a:30:a9:22:fd:47:9a:81:70:a2:57:33:d5:60:f1:04:4e:21: 9d:4e:71:40:20:4c:55:c2:15:0c:28:04:04:e0:bc:ac:8a:ca: 68:3a:78:9b:c5:00:b3:31:47:bb:82:79:24:e3:ed:78:64:05: b5:74:0b:f7:1e:3d:38:0d:4a:86:be:1d:04:13:93:56:7d:d4: 55:0f:ad:b9:55:34:62:60:9c:2a:53:be:91:81:eb:ae:cf:38: 6d:f9:cc:98:83:60:bf:59:41:23:47:bc:31:8a:45:7b:b1:d0: ab:b8:b3:62:f8:e5:7a:fa:ff:8c:5c:47:aa:ef:d5:09:ef:3f: 5c:4e:2c:f5:b0:54:64:08:7b:9f:5a:b3:c9:84:79:40:e2:cd: 51:22:96:f0:dd:4a:1a:c8:b8:41:5e:4d:dd:71:b1:f9:74:14: 20:01:91:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzHLrzjZzB8c74Pz8V4G1Og6IxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA1MTIxODM5MTZaFw0yNjA1MTMxOTQyMTZaMDMxMTAvBgNV BAMTKEEyRjMxRUU0QkRBMkM2RUI2MDRCNUY0QTNBNTQyMzU1RDM2RDRERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAzjC33WDRInPXMERLadthkSE p6n8jtDvnDMVtwoqWDIAaWnvXFZic1btTLIXP8+ir3QdqJHZOjHPrPg1+CMqtjJt GT4E/njyB7idpiB67YOaEQGHL5b0/yVSEr9J/0BztB8dg/UbmT2iK5B1mKgbc8Rs MCI3WYqPDldzc0sQ5fqXNQEac52He7rra+R5rKM1GqFJHTfWEh6OB19X0GlZ+e7+ IBBKTqXU18U7ydJsIiD/r42fsRlLTWn3LDChEAip2PZV5l9SXX7WIfFC0fgn4lm7 CFl74xiKJ0i3aAdhjj/j9Bf7Zb0eiU4lwLFkc+JhZkwNmoPTTuTC/Gdw6E1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovMe5L2ixutgS19KOlQjVdNtTe0wHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJJQxl0Hi7Dn/fHJnRD3z5P8nyyi2ab1x0K WSZ+dINhMPJNhoNF1TPE533uu2uRxlwkxrA1t6E+DpqtiYcsesGwxJ5uzQ7YTu6O SvKbnleHgNjnrf5ArYw+oiowqSL9R5qBcKJXM9Vg8QROIZ1OcUAgTFXCFQwoBATg vKyKymg6eJvFALMxR7uCeSTj7XhkBbV0C/cePTgNSoa+HQQTk1Z91FUPrblVNGJg nCpTvpGB667POG35zJiDYL9ZQSNHvDGKRXux0Ku4s2L45Xr6/4xcR6rv1QnvP1xO LPWwVGQIe59as8mEeUDizVEilvDdShrIuEFeTd1xsfl0FCABkS8= -----END CERTIFICATE-----Generated at Wed May 13 05:44:29 2026 by rpki-client