$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: MqbIKg/2zFVW5hw4m4SaXRQXJ20bxZEEeYkJVy1kuNk= Subject key identifier: BB:04:9A:FE:42:11:42:A2:7C:73:EA:0B:6B:FC:AF:A2:0D:41:80:BC Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 7B4B22C9C617A5914181D9381C7F0B3C2F08D20C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:58:16 +0000 Manifest this update: Tue 12 May 2026 23:53:16 +0000 Manifest next update: Thu 14 May 2026 01:39:16 +0000 Files and hashes: 1: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 2: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 3: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 4: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: hNdO1pKO/T+ucvWaj4eXRVQ/WZPdcEPZ23aTMimOGZA=) 5: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 6: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 7: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 8: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 9: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4b:22:c9:c6:17:a5:91:41:81:d9:38:1c:7f:0b:3c:2f:08:d2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 12 23:53:16 2026 GMT Not After : May 14 01:39:16 2026 GMT Subject: CN=BB049AFE421142A27C73EA0B6BFCAFA20D4180BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:90:e1:38:bb:6a:1b:cc:30:47:db:3e:cf: 0d:b8:33:8a:6b:14:a8:cc:89:2b:95:33:1e:22:80: 1f:9b:60:d4:35:eb:e1:db:61:73:65:9f:9b:8c:8c: af:ba:de:6c:e3:ef:e5:4b:c4:0c:1d:6b:13:f2:9a: 72:07:5a:c0:5d:19:91:4a:5e:bb:65:6f:ce:0e:f9: f8:0f:0c:2e:a3:01:6e:b1:84:45:b0:8d:39:96:e1: 45:ec:e1:27:81:89:4c:76:a9:c9:c9:7e:00:91:e2: 3e:85:65:b9:50:1e:eb:68:5a:6e:a6:b2:6c:62:a3: d4:10:ab:d3:4b:56:24:c6:e9:75:45:5a:ba:90:c6: 29:2f:84:29:00:b7:f7:2d:5a:cd:c8:83:19:60:63: b0:cb:e4:93:4c:77:6e:0a:e8:3c:9d:a6:d6:eb:52: 99:cd:db:2e:1d:92:f5:c6:70:38:cf:cd:3d:68:76: f2:08:c6:9b:42:81:c5:17:09:ec:95:de:f7:e7:6f: 60:88:82:31:88:aa:6e:3f:c5:ee:da:44:ad:8a:f4: 8b:94:a5:fb:3d:73:6e:6e:1e:33:b8:47:81:59:f6: 19:74:1f:cd:0c:b7:44:a5:da:8b:46:36:e6:df:70: 73:81:21:7b:d9:d0:65:f9:18:38:ee:d9:09:1d:10: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:9A:FE:42:11:42:A2:7C:73:EA:0B:6B:FC:AF:A2:0D:41:80:BC X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2c:95:c5:0e:f9:35:70:5e:43:91:82:ea:85:53:c8:21:55: f8:d2:dc:4a:0f:70:0c:e4:da:77:49:91:b1:43:a7:e5:91:7d: c2:14:10:68:7c:30:95:05:e0:81:33:96:75:10:89:32:c2:bb: 32:ef:2a:f8:02:8e:66:f1:6a:64:5c:2b:7d:72:18:b2:d0:60: 52:f0:9a:a4:83:53:b8:22:3d:9c:8c:c7:0a:3a:a5:dc:54:19: 54:76:9a:c2:85:0c:01:e0:c4:72:97:66:c1:a4:cc:57:64:d0: 89:0f:41:72:e7:d4:c7:d5:2f:ba:d1:47:3e:5d:95:0a:17:b3: 0e:6a:a5:de:1e:5e:65:5f:c0:e7:a8:df:1e:74:14:3b:a0:ef: ab:21:b9:41:34:1f:a8:5b:09:82:a5:d6:5a:d1:32:5a:32:91: af:46:25:77:38:0b:74:5d:0b:1c:82:4a:8f:b9:7a:e4:b7:47: 49:66:ac:cf:67:2a:8f:25:31:52:f6:93:5c:e7:f4:0d:77:c0: 3b:ca:b1:38:32:c0:66:f9:8b:88:21:93:fa:d9:f0:8b:56:fc: 3c:70:a8:37:00:32:9c:a2:94:3b:aa:d6:30:85:d3:4f:3c:3c: ac:6d:bd:5d:dd:6b:7e:e0:5c:e4:4a:af:93:b8:3d:55:3e:6b: c2:57:46:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0siycYXpZFBgdk4HH8LPC8I0gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MTIyMzUzMTZaFw0yNjA1MTQwMTM5MTZaMDMxMTAvBgNV BAMTKEJCMDQ5QUZFNDIxMTQyQTI3QzczRUEwQjZCRkNBRkEyMEQ0MTgwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzJDhOLtqG8wwR9s+zw24M4pr FKjMiSuVMx4igB+bYNQ16+HbYXNln5uMjK+63mzj7+VLxAwdaxPymnIHWsBdGZFK Xrtlb84O+fgPDC6jAW6xhEWwjTmW4UXs4SeBiUx2qcnJfgCR4j6FZblQHutoWm6m smxio9QQq9NLViTG6XVFWrqQxikvhCkAt/ctWs3IgxlgY7DL5JNMd24K6Dydptbr UpnN2y4dkvXGcDjPzT1odvIIxptCgcUXCeyV3vfnb2CIgjGIqm4/xe7aRK2K9IuU pfs9c25uHjO4R4FZ9hl0H80Mt0Sl2otGNubfcHOBIXvZ0GX5GDju2QkdEDLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwSa/kIRQqJ8c+oLa/yvog1BgLwwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUslcUO+TVwXkORguqFU8ghVfjS3EoPcAzk 2ndJkbFDp+WRfcIUEGh8MJUF4IEzlnUQiTLCuzLvKvgCjmbxamRcK31yGLLQYFLw mqSDU7giPZyMxwo6pdxUGVR2msKFDAHgxHKXZsGkzFdk0IkPQXLn1MfVL7rRRz5d lQoXsw5qpd4eXmVfwOeo3x50FDug76shuUE0H6hbCYKl1lrRMloyka9GJXc4C3Rd CxyCSo+5euS3R0lmrM9nKo8lMVL2k1zn9A13wDvKsTgywGb5i4ghk/rZ8ItW/Dxw qDcAMpyilDuq1jCF0088PKxtvV3da37gXORKr5O4PVU+a8JXRq4= -----END CERTIFICATE-----Generated at Wed May 13 04:19:43 2026 by rpki-client