$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: CdBEycqNBF8yH0wZvK9tqD3mrSB6idXI6MVkr3r8E0c= Subject key identifier: 7A:AD:AC:2E:A2:66:0E:EC:85:2A:30:74:BA:10:34:03:5A:C4:33:0A Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 6244C4E839E7448CAB21ACAFB7ADDB244E77B073 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:57 +0000 Manifest this update: Tue 12 May 2026 21:18:57 +0000 Manifest next update: Thu 14 May 2026 00:07:57 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) 3: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: nl/jCSEmCK0yJzr900au8syFvWyjYYqWL1zYR8LSfRc=) 4: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:44:c4:e8:39:e7:44:8c:ab:21:ac:af:b7:ad:db:24:4e:77:b0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: May 12 21:18:57 2026 GMT Not After : May 14 00:07:57 2026 GMT Subject: CN=7AADAC2EA2660EEC852A3074BA1034035AC4330A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:44:15:40:9e:34:e6:db:3d:ed:e4:86:8c:5d: 48:67:30:b7:15:7e:c6:31:ae:60:95:d4:cb:d0:fc: 11:b2:75:df:2d:77:36:34:92:95:2a:59:2f:df:d6: 50:91:db:30:a6:10:c4:af:e2:57:df:a2:82:31:f0: eb:b6:e1:13:1e:4b:4a:1d:e7:d4:b0:c1:26:7a:1d: 6d:78:48:b2:b8:c1:19:2c:fd:dd:f3:b9:12:4b:a6: 6b:2e:4e:21:cf:3f:8c:c8:48:7a:f9:47:b8:87:b1: 59:08:62:d0:36:02:d7:45:2f:5a:1c:50:59:89:3b: 8d:b2:6d:d4:7d:10:a4:b6:4e:ea:be:0b:e6:ca:0d: a4:0f:48:c8:8d:e4:f1:bd:f5:bb:4e:ff:72:e5:df: 1c:80:4d:82:82:13:03:52:4c:5e:be:30:53:21:ba: a3:fc:bb:09:0e:02:03:70:db:17:b3:86:d8:82:24: 07:ce:0a:51:79:82:5b:19:95:d6:27:74:d0:d1:1b: f7:b5:99:02:d2:34:fa:82:02:a4:17:32:33:82:10: a9:c5:21:d1:21:7f:b5:c3:c9:a9:e8:4c:41:9d:f0: c4:86:06:8a:b1:fc:03:2f:29:01:2d:83:b5:bb:33: cc:03:65:d8:fd:d3:52:e4:5a:72:bd:24:76:63:93: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:AC:2E:A2:66:0E:EC:85:2A:30:74:BA:10:34:03:5A:C4:33:0A X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:ca:45:fa:3a:69:1f:cc:9d:09:77:a7:c4:3c:21:89:0a:ac: a8:3d:f5:a1:30:0b:6d:c1:7c:ee:fe:4f:60:c8:3c:a4:74:9b: 37:85:07:b7:50:96:da:d2:f1:f7:f6:a6:72:58:41:06:d5:da: de:14:f5:84:84:0c:71:30:d1:e3:8f:24:56:10:3c:f5:b3:59: 00:41:cc:09:20:3f:82:65:4f:a2:16:4f:e0:11:b7:a7:f1:13: c5:9c:57:6a:ba:76:b2:42:00:7e:cb:bc:01:1a:45:67:06:79: 0d:63:55:5f:1b:93:f9:e1:fb:fd:e0:c9:1b:c1:76:07:57:3a: 7b:09:a0:80:5f:6f:26:75:a2:65:33:25:69:c1:ef:25:74:d7: 7a:87:9f:b5:7b:19:7a:34:fb:ed:5e:8b:f0:eb:b9:f4:84:b5: 75:31:79:a3:c8:20:80:c1:df:26:c0:04:44:d8:e3:49:e4:5c: be:e8:a6:c2:42:29:cc:a1:ab:2b:bc:6a:ff:64:ed:c3:c3:d6: 1b:78:59:ef:5e:9a:60:bf:3f:5f:02:38:72:3a:5c:ef:b0:da: c6:29:6a:b8:d4:7e:e3:f7:2b:69:74:e2:0a:67:44:87:93:b7: 4d:69:49:83:8a:2c:77:8b:7e:e3:86:e8:f9:99:2b:c9:87:42: 2d:6d:65:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkTE6DnnRIyrIayvt63bJE53sHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA1MTIyMTE4NTdaFw0yNjA1MTQwMDA3NTdaMDMxMTAvBgNV BAMTKDdBQURBQzJFQTI2NjBFRUM4NTJBMzA3NEJBMTAzNDAzNUFDNDMzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRBVAnjTm2z3t5IaMXUhnMLcV fsYxrmCV1MvQ/BGydd8tdzY0kpUqWS/f1lCR2zCmEMSv4lffooIx8Ou24RMeS0od 59SwwSZ6HW14SLK4wRks/d3zuRJLpmsuTiHPP4zISHr5R7iHsVkIYtA2AtdFL1oc UFmJO42ybdR9EKS2Tuq+C+bKDaQPSMiN5PG99btO/3Ll3xyATYKCEwNSTF6+MFMh uqP8uwkOAgNw2xezhtiCJAfOClF5glsZldYndNDRG/e1mQLSNPqCAqQXMjOCEKnF IdEhf7XDyanoTEGd8MSGBoqx/AMvKQEtg7W7M8wDZdj901LkWnK9JHZjk0CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeq2sLqJmDuyFKjB0uhA0A1rEMwowHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAObKRfo6aR/MnQl3p8Q8IYkKrKg99aEwC23B fO7+T2DIPKR0mzeFB7dQltrS8ff2pnJYQQbV2t4U9YSEDHEw0eOPJFYQPPWzWQBB zAkgP4JlT6IWT+ARt6fxE8WcV2q6drJCAH7LvAEaRWcGeQ1jVV8bk/nh+/3gyRvB dgdXOnsJoIBfbyZ1omUzJWnB7yV013qHn7V7GXo0++1ei/DrufSEtXUxeaPIIIDB 3ybABETY40nkXL7opsJCKcyhqyu8av9k7cPD1ht4We9emmC/P18COHI6XO+w2sYp arjUfuP3K2l04gpnRIeTt01pSYOKLHeLfuOG6PmZK8mHQi1tZRU= -----END CERTIFICATE-----Generated at Wed May 13 00:21:33 2026 by rpki-client