$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json) Hash identifier: FGcCypw+h8VE0nthV4C6dRbpZVsHqWsGlrwDdo4Fn08= Subject key identifier: 49:B3:EA:1C:00:E2:08:F8:F7:80:18:09:F1:BB:FC:02:9A:CF:18:A6 Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF Certificate issuer: /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Certificate serial: 4B98D6E11355E652EA18D61B2FEE8E8A0739328A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:38:01 +0000 Manifest this update: Tue 12 May 2026 03:33:01 +0000 Manifest next update: Wed 13 May 2026 05:00:01 +0000 Files and hashes: 1: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: 3/symqN+cHxMJMd/CiV9qGJQin8b30slmLIBiP/14Ts=) 2: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=) 3: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=) 4: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=) 5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=) 6: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=) 7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=) 8: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=) 9: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=) 10: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=) 11: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:98:d6:e1:13:55:e6:52:ea:18:d6:1b:2f:ee:8e:8a:07:39:32:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Validity Not Before: May 12 03:33:01 2026 GMT Not After : May 13 05:00:01 2026 GMT Subject: CN=49B3EA1C00E208F8F7801809F1BBFC029ACF18A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:ed:90:3a:c7:10:73:fe:9d:c8:16:9d:90: 81:af:c7:54:f6:86:8d:3c:f7:82:f4:7a:83:8f:77: bb:7a:c6:21:e9:63:98:28:e6:6e:9b:25:e2:c8:d9: 46:6b:da:05:24:55:ff:df:6e:e2:35:e3:1e:96:b5: 4e:e8:22:0a:e3:81:79:68:01:b8:df:22:51:2a:e7: b7:40:12:eb:dd:23:ac:fa:4e:b7:50:65:4d:25:f7: 28:de:7c:c5:c7:23:fb:b6:bc:f1:d7:e9:9a:8d:9b: aa:0e:f1:29:ae:88:d0:f7:dd:55:a8:f9:1b:6c:d1: 31:0c:27:8d:d3:c3:a4:13:00:6d:05:71:f2:61:4a: e6:d2:a6:70:84:50:2d:3f:bc:52:b9:e7:f6:bf:93: 0f:01:90:b2:16:8f:e2:92:19:33:8a:d5:55:3e:84: 32:9e:48:ce:af:c8:d4:e2:37:2e:7a:1f:10:00:cc: 4b:91:28:01:77:70:75:64:d4:20:c4:13:50:83:ca: 02:23:6c:de:cb:b0:10:8f:99:2e:a3:2b:35:c1:71: 38:60:44:78:91:6e:fa:21:44:ca:26:ad:b8:93:cc: 9c:2b:ed:8e:0c:67:58:c7:b9:49:50:0a:7a:99:b6: d8:01:d0:74:ad:e2:dd:8a:68:d0:ce:7d:29:1a:ac: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:EA:1C:00:E2:08:F8:F7:80:18:09:F1:BB:FC:02:9A:CF:18:A6 X509v3 Authority Key Identifier: keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b4:fe:68:a5:79:35:e2:2d:06:ce:af:31:6d:59:d9:7e:f7: de:fb:41:0d:dc:7a:21:f1:6e:75:af:29:23:e7:79:43:52:fb: f7:13:39:e0:b9:15:4f:20:c3:3d:16:be:74:c0:19:d4:18:58: 2b:d9:b6:a7:8a:d0:1e:12:41:c1:0f:d5:aa:a1:a7:c0:9a:2f: a4:dd:1d:2b:c0:a8:cc:57:41:98:bb:5e:90:b3:53:b7:5d:0f: c7:cd:ff:5a:30:01:16:90:c7:c8:31:d2:3c:45:fc:c4:a1:f4: 60:5e:e4:86:89:ce:61:68:91:cf:df:2f:cf:e2:6e:ee:ab:24: 13:48:bf:30:3c:3c:97:f8:c8:41:85:2a:3d:72:87:0e:2a:cb: 99:08:a7:08:d1:99:1a:7d:15:43:e4:55:dc:53:7e:1d:6e:6f: 3d:ef:0c:40:b8:d5:2f:ee:26:8b:07:dc:89:7d:d3:40:7d:0f: 09:97:20:fb:91:5a:78:85:e3:27:66:2b:fe:17:17:60:93:40: fb:73:e8:2c:f5:db:35:bc:42:2e:e2:e4:b6:32:07:19:e0:b0: ec:d6:e2:f8:05:2d:99:7c:f3:cc:3b:96:c9:2a:b9:84:62:fb: 61:a2:d9:72:01:21:d8:3a:9b:c1:f4:c9:27:68:0a:21:82:de: 9e:85:0a:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5jW4RNV5lLqGNYbL+6Oigc5MoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0 MTZBRDFERjAeFw0yNjA1MTIwMzMzMDFaFw0yNjA1MTMwNTAwMDFaMDMxMTAvBgNV BAMTKDQ5QjNFQTFDMDBFMjA4RjhGNzgwMTgwOUYxQkJGQzAyOUFDRjE4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mO2QOscQc/6dyBadkIGvx1T2 ho0894L0eoOPd7t6xiHpY5go5m6bJeLI2UZr2gUkVf/fbuI14x6WtU7oIgrjgXlo AbjfIlEq57dAEuvdI6z6TrdQZU0l9yjefMXHI/u2vPHX6ZqNm6oO8SmuiND33VWo +Rts0TEMJ43Tw6QTAG0FcfJhSubSpnCEUC0/vFK55/a/kw8BkLIWj+KSGTOK1VU+ hDKeSM6vyNTiNy56HxAAzEuRKAF3cHVk1CDEE1CDygIjbN7LsBCPmS6jKzXBcThg RHiRbvohRMomrbiTzJwr7Y4MZ1jHuUlQCnqZttgB0HSt4t2KaNDOfSkarDe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbPqHADiCPj3gBgJ8bv8AprPGKYwHwYDVR0j BBgwFoAUeo1CM5IocqiU4w5U1odL60Fq0d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJmNzFjOTEtMTYyNC00ZmMwLThjNjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5 MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0MTZBRDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QThENDIzMzkyMjg3MkE4OTRFMzBFNTRENjg3NEJFQjQxNkFE MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRC RUI0MTZBRDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu0/mileTXiLQbOrzFtWdl+9977QQ3ceiHx bnWvKSPneUNS+/cTOeC5FU8gwz0WvnTAGdQYWCvZtqeK0B4SQcEP1aqhp8CaL6Td HSvAqMxXQZi7XpCzU7ddD8fN/1owARaQx8gx0jxF/MSh9GBe5IaJzmFokc/fL8/i bu6rJBNIvzA8PJf4yEGFKj1yhw4qy5kIpwjRmRp9FUPkVdxTfh1ubz3vDEC41S/u JosH3Il900B9DwmXIPuRWniF4ydmK/4XF2CTQPtz6Cz12zW8Qi7i5LYyBxngsOzW 4vgFLZl888w7lskquYRi+2Gi2XIBIdg6m8H0ySdoCiGC3p6FCio= -----END CERTIFICATE-----Generated at Tue May 12 22:19:34 2026 by rpki-client