$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: 5sE8op+Amb6G1WUs/8Edm6f/tHoPRCLrQKQkryySrvE= Subject key identifier: 0F:45:3B:28:96:98:AA:D8:09:16:47:55:D0:C4:84:C8:CC:0F:0C:4B Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 59F29ECEA5D7AC488C7B5ECB2F1E56A73177980E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:56:36 +0000 Manifest this update: Tue 12 May 2026 16:51:36 +0000 Manifest next update: Wed 13 May 2026 20:24:36 +0000 Files and hashes: 1: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: EVkF3hkNSbXJMkBjU6WvisxJSqvR4NaKyZ6dhoPDlYs=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 3: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 5: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f2:9e:ce:a5:d7:ac:48:8c:7b:5e:cb:2f:1e:56:a7:31:77:98:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: May 12 16:51:36 2026 GMT Not After : May 13 20:24:36 2026 GMT Subject: CN=0F453B289698AAD809164755D0C484C8CC0F0C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:14:fa:65:0d:b2:cb:2d:aa:d7:9d:6c:32: e2:ad:5c:23:fa:1e:1b:77:87:81:ef:ef:af:89:49: 83:f7:65:61:bc:dd:34:14:f1:72:51:cf:d8:c2:01: 3d:34:ad:67:e1:a3:1d:bb:15:00:aa:c4:01:71:9e: f5:16:f9:a3:36:a3:a1:c8:79:e7:96:1d:87:10:c0: 4e:5a:ec:b5:b2:b4:e4:55:5b:86:07:a9:92:e9:80: 07:ba:08:e6:a3:41:f1:02:b2:f8:35:c1:96:80:6b: b3:93:26:b3:50:f6:73:72:21:f3:25:61:98:6c:05: 6f:1f:a5:15:ae:14:c7:76:21:48:59:28:23:c1:0c: 61:b0:d5:49:2b:68:ff:28:4e:b1:e8:17:57:9b:43: a3:9e:cc:41:d0:a6:b7:4c:b6:4b:0f:d7:04:49:22: c4:73:f6:32:bb:5f:47:b5:33:36:63:aa:73:9d:33: fc:e6:31:95:7f:bf:c9:01:b2:1f:7f:b2:59:64:cb: da:4e:e4:b9:47:de:f5:20:f1:a3:b5:9b:f9:d2:31: 4e:f7:f0:70:7a:fa:9c:f0:d1:0b:2c:0b:fd:84:f2: 4b:65:d7:b9:33:b5:48:fd:ad:75:a9:f8:d3:11:c8: 33:7a:dc:56:0a:ef:c8:00:9a:ff:7e:ce:4c:6b:7c: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:45:3B:28:96:98:AA:D8:09:16:47:55:D0:C4:84:C8:CC:0F:0C:4B X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:98:67:81:25:1d:a5:13:9e:e5:07:11:d9:ce:a3:ae:fb:16: 49:ed:d2:42:ff:22:34:17:5d:7a:2e:1a:ed:2e:02:6d:1d:0c: ef:06:26:63:4b:aa:ed:87:a5:60:d6:36:d6:8d:91:60:04:c8: 40:19:9c:92:3a:ee:5f:95:52:b0:4a:fd:fe:cc:73:dd:38:b0: a4:9d:19:ac:79:ea:39:f9:52:f5:f4:c6:48:c6:5d:01:25:5f: fb:0d:51:98:f2:7d:ea:19:89:37:29:19:58:3f:03:2d:8c:83: c1:93:27:da:24:9f:d0:b9:1b:bd:4f:bf:b2:9d:14:db:7d:a7: 8f:7d:3c:69:39:d0:9e:0e:1c:ff:ed:9e:37:e3:cd:a1:30:59: 7d:f1:2c:e3:16:27:00:da:43:b1:f1:8f:cc:e7:96:a3:4f:9e: 86:06:cb:8e:65:c5:0d:44:a1:21:56:56:be:cd:ea:f6:7c:02: 22:b6:ff:de:64:35:24:81:97:06:e7:cc:21:23:00:0e:be:97: 29:72:81:fd:68:bf:b1:c0:3a:df:a4:1f:96:61:e1:cb:d4:4c: b7:2d:b2:e9:60:18:54:63:87:3e:d4:b4:6d:cd:83:8d:ef:3a: a3:b3:ef:c5:b0:4e:9c:73:87:10:b1:e9:15:f2:c8:36:54:34: 9c:20:78:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfKezqXXrEiMe17LLx5WpzF3mA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA1MTIxNjUxMzZaFw0yNjA1MTMyMDI0MzZaMDMxMTAvBgNV BAMTKDBGNDUzQjI4OTY5OEFBRDgwOTE2NDc1NUQwQzQ4NEM4Q0MwRjBDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3xT6ZQ2yyy2q151sMuKtXCP6 Hht3h4Hv76+JSYP3ZWG83TQU8XJRz9jCAT00rWfhox27FQCqxAFxnvUW+aM2o6HI eeeWHYcQwE5a7LWytORVW4YHqZLpgAe6COajQfECsvg1wZaAa7OTJrNQ9nNyIfMl YZhsBW8fpRWuFMd2IUhZKCPBDGGw1UkraP8oTrHoF1ebQ6OezEHQprdMtksP1wRJ IsRz9jK7X0e1MzZjqnOdM/zmMZV/v8kBsh9/sllky9pO5LlH3vUg8aO1m/nSMU73 8HB6+pzw0QssC/2E8ktl17kztUj9rXWp+NMRyDN63FYK78gAmv9+zkxrfFnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD0U7KJaYqtgJFkdV0MSEyMwPDEswHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6YZ4ElHaUTnuUHEdnOo677Fknt0kL/IjQX XXouGu0uAm0dDO8GJmNLqu2HpWDWNtaNkWAEyEAZnJI67l+VUrBK/f7Mc904sKSd Gax56jn5UvX0xkjGXQElX/sNUZjyfeoZiTcpGVg/Ay2Mg8GTJ9okn9C5G71Pv7Kd FNt9p499PGk50J4OHP/tnjfjzaEwWX3xLOMWJwDaQ7Hxj8znlqNPnoYGy45lxQ1E oSFWVr7N6vZ8AiK2/95kNSSBlwbnzCEjAA6+lylygf1ov7HAOt+kH5Zh4cvUTLct sulgGFRjhz7UtG3Ng43vOqOz78WwTpxzhxCx6RXyyDZUNJwgeM8= -----END CERTIFICATE-----Generated at Wed May 13 02:37:30 2026 by rpki-client