$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: 5s1XTRNV34GkpqJ28fotIqT1JcqWnlNP3eI+1bGmJgY= Subject key identifier: BD:B7:91:EF:CD:33:FE:C0:D6:E1:D7:0F:A4:FD:55:D4:68:B7:C4:0E Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 74D4D7B8EDC146E59A56B8316380DF23E6C65028 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:42:58 +0000 Manifest this update: Tue 12 May 2026 12:37:58 +0000 Manifest next update: Wed 13 May 2026 16:20:58 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) 2: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: 1Un2OYTC2VKGbEWURJ3ToFYM/9deb8MuW1/C56LSK84=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:d7:b8:ed:c1:46:e5:9a:56:b8:31:63:80:df:23:e6:c6:50:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: May 12 12:37:58 2026 GMT Not After : May 13 16:20:58 2026 GMT Subject: CN=BDB791EFCD33FEC0D6E1D70FA4FD55D468B7C40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:42:11:6c:40:0f:e7:38:2d:75:88:e5:09: 6b:3a:19:dd:8d:11:1e:a7:2f:ac:a0:50:ee:75:c5: e3:bf:37:1a:ac:ab:ff:55:4d:74:f1:4d:b3:5a:35: 9c:ec:8c:bc:c4:c8:cd:fe:c0:25:82:82:73:2e:51: f9:6b:1f:c4:26:1a:d1:07:b2:64:99:2a:9f:dd:ae: 02:4f:fe:f0:2b:2c:d6:41:7f:b7:74:4f:7b:11:6d: a6:4c:b0:4a:f9:6c:e1:2b:bb:4c:6e:8e:74:54:e4: 47:7f:01:61:36:44:ea:d3:81:34:8a:3f:bc:41:7d: 84:32:88:61:4d:72:2b:c6:ab:f8:47:49:6c:58:95: 01:2b:55:61:d9:b1:6a:96:5e:98:65:69:83:c2:f2: f1:8d:7a:ac:bc:b5:6d:6a:c2:45:bd:dd:9e:f1:93: 2c:e9:af:99:31:f9:62:44:4e:b5:51:d6:67:ac:86: 60:f5:c5:7c:09:13:f7:ec:d7:d6:2f:82:9b:d8:1f: e1:d1:66:40:9a:be:94:58:b0:be:01:68:07:45:ef: 50:81:66:aa:e1:bf:fb:9b:50:f1:89:b2:80:2b:ca: f4:f8:cd:5b:5f:20:66:9c:25:9b:f0:eb:ed:1a:a3: da:38:e5:4a:79:b3:ba:00:45:87:78:6d:2f:c7:3d: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:91:EF:CD:33:FE:C0:D6:E1:D7:0F:A4:FD:55:D4:68:B7:C4:0E X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:42:ec:32:8a:e3:52:cd:82:81:26:21:6c:05:ad:d7:8b:47: 0a:f5:07:12:e5:bb:da:81:93:79:b6:0e:c8:02:8e:a8:fe:0f: e1:be:b8:91:97:63:6a:5c:b3:fd:6d:48:93:f5:3c:c4:9b:50: bc:bb:64:bb:cb:dc:e7:be:c6:d9:f9:5f:8e:b8:e5:de:89:ae: df:26:93:37:ba:61:93:3a:09:b3:bc:42:cf:6b:4f:e0:54:97: a5:15:67:63:4d:29:d8:af:8f:0c:44:00:b3:84:26:f3:4d:25: e7:20:b9:22:eb:bc:cc:46:03:97:d0:d2:d4:b9:70:99:c5:7c: 92:17:25:b9:2c:cc:70:16:dd:a0:97:d8:e9:84:34:92:15:ca: 19:5a:1d:38:d9:be:07:c9:0f:f3:cf:bd:77:5d:25:e9:3b:7c: 23:c3:e8:d3:50:d8:b9:19:9a:28:a8:16:d0:fe:d0:33:df:fc: 0e:97:b8:2b:de:5c:1d:43:65:4b:65:71:fb:fe:88:f7:76:df: b2:53:79:ca:2a:f9:0b:90:54:1b:e0:a2:3f:df:9a:a7:f8:e1: 03:6d:55:a6:20:52:f3:32:4e:37:88:c9:67:9c:a2:c8:de:1d: a7:4f:7c:e1:b9:6d:45:d0:0a:23:8d:64:b8:78:89:73:89:72: d4:33:72:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNTXuO3BRuWaVrgxY4DfI+bGUCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA1MTIxMjM3NThaFw0yNjA1MTMxNjIwNThaMDMxMTAvBgNV BAMTKEJEQjc5MUVGQ0QzM0ZFQzBENkUxRDcwRkE0RkQ1NUQ0NjhCN0M0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHUIRbEAP5zgtdYjlCWs6Gd2N ER6nL6ygUO51xeO/Nxqsq/9VTXTxTbNaNZzsjLzEyM3+wCWCgnMuUflrH8QmGtEH smSZKp/drgJP/vArLNZBf7d0T3sRbaZMsEr5bOEru0xujnRU5Ed/AWE2ROrTgTSK P7xBfYQyiGFNcivGq/hHSWxYlQErVWHZsWqWXphlaYPC8vGNeqy8tW1qwkW93Z7x kyzpr5kx+WJETrVR1meshmD1xXwJE/fs19YvgpvYH+HRZkCavpRYsL4BaAdF71CB Zqrhv/ubUPGJsoAryvT4zVtfIGacJZvw6+0ao9o45Up5s7oARYd4bS/HPbkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbeR780z/sDW4dcPpP1V1Gi3xA4wHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNC7DKK41LNgoEmIWwFrdeLRwr1BxLlu9qB k3m2DsgCjqj+D+G+uJGXY2pcs/1tSJP1PMSbULy7ZLvL3Oe+xtn5X4645d6Jrt8m kze6YZM6CbO8Qs9rT+BUl6UVZ2NNKdivjwxEALOEJvNNJecguSLrvMxGA5fQ0tS5 cJnFfJIXJbkszHAW3aCX2OmENJIVyhlaHTjZvgfJD/PPvXddJek7fCPD6NNQ2LkZ miioFtD+0DPf/A6XuCveXB1DZUtlcfv+iPd237JTecoq+QuQVBvgoj/fmqf44QNt VaYgUvMyTjeIyWecosjeHadPfOG5bUXQCiONZLh4iXOJctQzcis= -----END CERTIFICATE-----Generated at Tue May 12 21:45:20 2026 by rpki-client