$ rpki-client -vvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: fjDDstSRYQ2AQ5hqMIEDmWDSScNJUgboCu5YiBgjbXc= Subject key identifier: E8:D8:32:DA:C2:28:66:86:1C:41:C8:B4:E8:B5:69:34:45:74:80:05 Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 379683EC363B79B004E2654DA6EDC608DB9F8456 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:43 +0000 Manifest this update: Tue 12 May 2026 17:42:43 +0000 Manifest next update: Wed 13 May 2026 18:31:43 +0000 Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) 2: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: b9XCoiIYrKL3sbiDuWh4a6Db1rkSToM7vGC3lVNpRz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:83:ec:36:3b:79:b0:04:e2:65:4d:a6:ed:c6:08:db:9f:84:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: May 12 17:42:43 2026 GMT Not After : May 13 18:31:43 2026 GMT Subject: CN=E8D832DAC22866861C41C8B4E8B5693445748005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:1b:77:f5:ee:f4:5a:86:8f:94:ff:35:72: 5d:28:bf:80:00:cd:b3:90:ae:b6:7b:61:e8:c6:a5: e8:94:7f:0d:07:37:25:ed:56:5e:57:50:89:e1:f1: 34:10:6c:66:6a:4e:ee:a8:d1:e2:21:51:b1:9d:33: 3b:a0:d9:f5:74:85:7b:30:91:50:10:30:86:64:f3: bc:1b:83:6b:2b:b3:5a:96:e4:93:41:1f:5a:a8:21: 58:45:d2:8b:1d:df:a4:b0:ab:0a:9c:78:12:47:c8: 02:15:26:9f:fe:99:40:25:c7:64:87:f8:d0:e8:21: 6a:0c:91:d6:65:2b:2e:0c:95:18:19:0c:5f:62:7d: df:6b:14:84:81:39:1c:3d:c4:6a:e6:19:b1:9a:28: be:6c:02:96:5f:77:83:14:05:e0:54:43:8f:5b:1e: 17:8b:b6:7b:5d:0a:27:3a:e3:67:c5:68:77:08:05: 9f:23:14:4c:28:2a:e1:f6:5c:2d:e4:7a:af:6a:c6: 8f:85:59:1f:0c:53:ca:da:0c:26:85:8e:f7:71:99: 0c:1c:03:87:5b:96:f5:3e:fe:d9:a9:94:3a:f9:f0: 4a:c0:bb:9d:89:a9:59:93:e9:63:a0:2d:dc:bd:a1: a1:cb:5c:43:31:72:46:d6:2c:b6:61:17:b8:8b:ab: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:32:DA:C2:28:66:86:1C:41:C8:B4:E8:B5:69:34:45:74:80:05 X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e9:2e:b2:22:48:b9:a6:11:e8:59:9f:bb:f7:f7:55:e8:d6: 55:3b:d6:72:90:35:4b:fe:86:bd:a2:c9:78:61:43:0e:00:9d: 23:39:4d:04:f5:45:4b:39:24:d4:09:4e:b8:6d:69:75:54:f8: f4:70:23:ef:de:f9:14:56:fc:6b:bc:ad:14:f2:e0:49:91:b6: 44:4c:8b:45:2a:05:27:b0:75:82:19:03:46:7a:40:0d:03:46: 17:ae:48:7c:07:58:1f:0a:c7:33:8e:a0:cb:8e:10:b3:52:34: 0e:c1:b7:97:fa:90:99:e7:85:bf:bf:25:d6:90:0e:8d:5c:3e: a3:c8:ab:81:b6:96:ca:e3:0b:88:97:8e:a7:ec:fb:1f:61:14: da:91:3e:4d:08:91:5c:75:00:f6:cb:90:a6:4b:3c:a7:32:19: bb:b4:9d:d1:8a:c3:26:e5:69:48:5f:57:23:29:78:6f:5a:9d: b2:02:96:94:e4:64:d8:d3:f2:b1:f3:4f:98:09:78:5e:44:e7: 2b:df:c8:53:51:e5:cb:d2:31:ac:81:4a:ad:03:28:5a:42:15: 32:a8:2a:76:01:65:68:13:ba:c1:7f:85:9c:db:0f:23:68:c2: 43:01:fd:f7:0f:b8:6e:f7:4d:dd:18:20:97:f5:30:09:4b:8d: e1:5d:dc:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5aD7DY7ebAE4mVNpu3GCNufhFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjA1MTIxNzQyNDNaFw0yNjA1MTMxODMxNDNaMDMxMTAvBgNV BAMTKEU4RDgzMkRBQzIyODY2ODYxQzQxQzhCNEU4QjU2OTM0NDU3NDgwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TBt39e70WoaPlP81cl0ov4AA zbOQrrZ7YejGpeiUfw0HNyXtVl5XUInh8TQQbGZqTu6o0eIhUbGdMzug2fV0hXsw kVAQMIZk87wbg2srs1qW5JNBH1qoIVhF0osd36SwqwqceBJHyAIVJp/+mUAlx2SH +NDoIWoMkdZlKy4MlRgZDF9ifd9rFISBORw9xGrmGbGaKL5sApZfd4MUBeBUQ49b HheLtntdCic642fFaHcIBZ8jFEwoKuH2XC3keq9qxo+FWR8MU8raDCaFjvdxmQwc A4dblvU+/tmplDr58ErAu52JqVmT6WOgLdy9oaHLXEMxckbWLLZhF7iLq5xDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Ngy2sIoZoYcQci06LVpNEV0gAUwHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzpLrIiSLmmEehZn7v391Xo1lU71nKQNUv+ hr2iyXhhQw4AnSM5TQT1RUs5JNQJTrhtaXVU+PRwI+/e+RRW/Gu8rRTy4EmRtkRM i0UqBSewdYIZA0Z6QA0DRheuSHwHWB8KxzOOoMuOELNSNA7Bt5f6kJnnhb+/JdaQ Do1cPqPIq4G2lsrjC4iXjqfs+x9hFNqRPk0IkVx1APbLkKZLPKcyGbu0ndGKwybl aUhfVyMpeG9anbIClpTkZNjT8rHzT5gJeF5E5yvfyFNR5cvSMayBSq0DKFpCFTKo KnYBZWgTusF/hZzbDyNowkMB/fcPuG73Td0YIJf1MAlLjeFd3KY= -----END CERTIFICATE-----Generated at Tue May 12 22:47:27 2026 by rpki-client