$ rpki-client -vvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft File: A7FB244B07B590E887183B90A5F474AF8A740E0D.mft (raw, json) Hash identifier: UvvNUZJL5V/oMVKeVgxfwhzii+6WTLOfchsJRlRW2oc= Subject key identifier: FA:B3:D4:E0:3F:65:57:1E:E5:EE:C9:04:39:73:58:4B:39:8E:DD:17 Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Certificate serial: 0D9DDE3E2E4CD58652586D9B62E539ABB39D0AA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:20 +0000 Manifest this update: Tue 12 May 2026 18:08:20 +0000 Manifest next update: Wed 13 May 2026 20:27:20 +0000 Files and hashes: 1: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=) 3: A7FB244B07B590E887183B90A5F474AF8A740E0D.crl (hash: DXpUk2440zZrfqDbNQGeDd/N5TpLks4kVW5ahNDI/sA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9d:de:3e:2e:4c:d5:86:52:58:6d:9b:62:e5:39:ab:b3:9d:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Validity Not Before: May 12 18:08:20 2026 GMT Not After : May 13 20:27:20 2026 GMT Subject: CN=FAB3D4E03F65571EE5EEC9043973584B398EDD17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:36:cd:0c:d6:9c:d8:c4:64:f7:85:b9:28: 59:b1:fc:28:f5:33:74:ba:c9:33:a8:55:78:c9:2b: dd:49:68:dd:3b:b2:54:64:9f:26:76:7b:54:d0:47: d2:e6:54:ed:1c:c2:f8:cd:31:bf:ba:8d:a2:42:ae: 46:ac:bc:98:3a:d8:5f:df:b3:70:03:59:3a:dd:c9: 8a:16:d8:a8:c2:98:52:53:33:ee:76:56:70:65:51: fa:75:b0:ef:68:25:c5:fd:80:cf:33:d9:4e:34:3f: 5c:a0:2c:16:c3:25:ed:4b:29:d9:ea:84:bf:8d:3e: a9:9a:3e:f2:8e:47:36:2e:bd:b9:5e:b9:c6:55:7d: 98:e3:6e:0c:ff:cf:ed:19:19:82:a8:9e:ac:dc:cb: e2:5b:c2:a0:e0:0b:2d:a4:c7:1e:bb:58:33:1e:5a: 6b:e1:8f:07:17:c2:92:d7:25:b1:69:a9:53:da:22: 12:ba:5c:9b:23:40:96:24:81:3e:e6:bd:f3:6d:d6: a3:c9:63:78:9e:6b:c4:78:89:09:87:01:01:f2:0a: e0:0b:a2:dd:ef:ca:88:35:a8:69:e8:33:66:42:23: c9:fa:54:5d:06:08:06:ee:f0:bd:64:01:d1:2b:7a: aa:25:82:dc:c5:5f:71:c0:92:8c:92:ae:c8:06:b5: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:D4:E0:3F:65:57:1E:E5:EE:C9:04:39:73:58:4B:39:8E:DD:17 X509v3 Authority Key Identifier: keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:12:2b:05:b8:30:ee:dd:c1:53:0c:40:e7:7b:bc:21:57:84: b3:ad:9c:e7:f6:9c:54:90:01:95:9f:06:74:53:d8:e4:44:a2: 41:6e:b0:3f:94:7c:e8:e2:46:a6:6f:b4:93:4d:fe:8b:b0:e8: f5:7a:a0:5d:12:83:44:b7:af:8a:72:54:1e:b0:25:52:75:10: 1f:40:3f:b9:49:b8:0a:a4:e1:23:2b:1a:c4:61:e2:d6:aa:16: b2:0e:7e:6d:b2:c5:78:64:da:6d:41:95:2c:3d:cb:88:36:ff: 8f:5e:50:43:de:ce:49:af:21:7a:2b:63:fd:df:6d:30:3c:5c: 27:9e:3f:f3:c1:9f:1f:40:da:15:c3:09:3e:81:02:d0:72:f9: 76:9e:63:36:b9:78:1c:71:db:ff:76:7a:06:5a:9a:b9:8d:ac: 56:83:24:b5:a8:bd:c5:9f:ac:4a:1f:d1:1b:1e:33:ff:9e:8c: 35:75:ed:c3:dc:c4:c7:50:ef:6c:99:69:46:83:d6:23:c8:0b: 70:ab:c9:02:30:22:44:2b:bf:8d:11:60:77:07:fb:41:c4:b9: c7:23:b6:41:6b:ad:22:be:65:b4:df:5d:11:a9:5b:ca:69:2e: 14:0c:58:fb:ac:73:ed:1f:75:55:10:77:a3:b8:4d:32:3d:66: e3:52:f0:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZ3ePi5M1YZSWG2bYuU5q7OdCqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4 QTc0MEUwRDAeFw0yNjA1MTIxODA4MjBaFw0yNjA1MTMyMDI3MjBaMDMxMTAvBgNV BAMTKEZBQjNENEUwM0Y2NTU3MUVFNUVFQzkwNDM5NzM1ODRCMzk4RUREMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7DbNDNac2MRk94W5KFmx/Cj1 M3S6yTOoVXjJK91JaN07slRknyZ2e1TQR9LmVO0cwvjNMb+6jaJCrkasvJg62F/f s3ADWTrdyYoW2KjCmFJTM+52VnBlUfp1sO9oJcX9gM8z2U40P1ygLBbDJe1LKdnq hL+NPqmaPvKORzYuvbleucZVfZjjbgz/z+0ZGYKonqzcy+JbwqDgCy2kxx67WDMe WmvhjwcXwpLXJbFpqVPaIhK6XJsjQJYkgT7mvfNt1qPJY3iea8R4iQmHAQHyCuAL ot3vyog1qGnoM2ZCI8n6VF0GCAbu8L1kAdEreqolgtzFX3HAkoySrsgGtWmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rPU4D9lVx7l7skEOXNYSzmO3RcwHwYDVR0j BBgwFoAUp/skSwe1kOiHGDuQpfR0r4p0Dg0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgyYTliZDktMTY2Zi00NTNlLWIzYzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIw N0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4QTc0MEUwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BN0ZCMjQ0QjA3QjU5MEU4ODcxODNCOTBBNUY0NzRBRjhBNzQw RTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0 QUY4QTc0MEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoSKwW4MO7dwVMMQOd7vCFXhLOtnOf2nFSQ AZWfBnRT2OREokFusD+UfOjiRqZvtJNN/ouw6PV6oF0Sg0S3r4pyVB6wJVJ1EB9A P7lJuAqk4SMrGsRh4taqFrIOfm2yxXhk2m1BlSw9y4g2/49eUEPezkmvIXorY/3f bTA8XCeeP/PBnx9A2hXDCT6BAtBy+XaeYza5eBxx2/92egZamrmNrFaDJLWovcWf rEof0RseM/+ejDV17cPcxMdQ72yZaUaD1iPIC3CryQIwIkQrv40RYHcH+0HEuccj tkFrrSK+ZbTfXRGpW8ppLhQMWPusc+0fdVUQd6O4TTI9ZuNS8Ek= -----END CERTIFICATE-----Generated at Wed May 13 02:37:20 2026 by rpki-client