$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json) Hash identifier: Vh2spzkaMd9M2isxech8OspVsIttBOejRlnIfRTIzO8= Subject key identifier: D7:17:8B:22:0F:A4:6D:EF:EC:30:EB:FE:8E:FE:95:99:47:E1:C1:4C Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Certificate serial: 141043ABBE7A96E10C6DC6925B9F5681DA4B7872 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:50:20 +0000 Manifest this update: Tue 12 May 2026 08:45:20 +0000 Manifest next update: Wed 13 May 2026 11:23:20 +0000 Files and hashes: 1: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: c2hOKKXjiw/rNSbCt+ZYy9YaUfKOlFxa+9AvVXF2V18=) 2: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=) 3: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=) 4: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=) 5: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=) 6: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=) 7: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:10:43:ab:be:7a:96:e1:0c:6d:c6:92:5b:9f:56:81:da:4b:78:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Validity Not Before: May 12 08:45:20 2026 GMT Not After : May 13 11:23:20 2026 GMT Subject: CN=D7178B220FA46DEFEC30EBFE8EFE959947E1C14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:ed:f3:05:0a:d0:88:63:da:65:ab:25:f6: 3c:d5:4a:2c:a6:91:1b:13:c0:25:3a:95:06:e7:42: f9:34:15:34:49:54:d2:e7:0c:57:0a:e0:e3:ed:3a: 4d:ca:89:e7:e3:65:52:b7:50:0e:41:b2:f7:be:be: 49:d5:20:05:6a:9d:7a:b9:d2:a3:6e:08:fd:e5:27: e5:82:c4:11:15:bf:e6:ea:1f:e0:2c:33:a7:6d:44: cc:5e:1b:e4:42:52:63:8a:30:a4:47:58:70:69:14: 75:9c:57:bf:6b:14:1e:61:89:35:c1:3f:75:27:c1: 7a:4a:64:b9:a3:d1:b1:da:22:77:6a:09:8e:9c:bd: 2b:c0:9f:a7:4e:22:e3:0a:69:6f:f8:77:df:30:9e: 35:aa:fa:ca:8b:82:51:3c:43:f9:58:7f:b5:38:8c: fc:ee:08:fe:32:73:96:4f:bb:18:99:ee:fb:e9:c0: c9:dc:a0:50:47:af:2f:ab:e1:d2:f2:4e:55:7e:a7: 45:de:cc:6f:d2:3e:f2:28:9a:6f:62:29:dc:f4:b1: 22:f6:3d:10:c7:1a:47:6f:c7:39:13:28:27:df:8c: d6:66:c7:e7:e7:b7:cb:76:d2:a8:16:7b:70:16:49: 00:61:55:73:25:9a:9e:2e:e4:43:ec:02:ee:35:c6: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:17:8B:22:0F:A4:6D:EF:EC:30:EB:FE:8E:FE:95:99:47:E1:C1:4C X509v3 Authority Key Identifier: keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:8c:60:e6:aa:2b:3c:1a:1e:49:fa:4c:97:2f:da:7f:cd: fd:e0:90:e6:18:12:be:6a:54:2e:15:66:ae:a6:c7:f4:87:af: 03:1a:65:76:4d:16:f2:21:70:40:f0:92:a1:fd:11:f0:7b:a4: b8:2c:61:74:fe:a7:39:32:0f:79:e0:f1:36:0c:1f:3e:83:bb: 1d:65:e8:6d:75:69:73:81:cb:81:16:4c:8f:24:61:01:7d:8d: 4b:1f:b2:be:52:fb:12:d4:00:5b:a6:e2:43:bc:81:3a:26:89: be:35:8e:59:69:a1:0b:50:76:08:d6:94:4b:c4:a7:2f:78:f2: 99:2e:ea:3a:f0:67:40:67:c6:c3:67:71:7c:92:ba:c4:e9:f8: ac:1e:7b:70:f4:0e:5b:f8:1e:2d:49:1d:76:ef:57:e5:53:c8: 86:aa:38:ee:eb:e8:a7:1a:14:26:4c:58:69:44:e3:5b:9b:c1: 4f:7d:60:02:42:f3:13:87:ec:6d:2d:fd:b3:cc:ca:76:15:fe: af:c4:9c:32:64:7d:66:22:6a:6c:87:db:d8:e5:0b:a2:17:7e: fd:5a:7f:9d:f1:5b:23:91:c7:b5:a3:62:5a:09:a3:bb:32:c3: 09:c2:5c:05:d6:a4:57:a8:92:55:22:73:6c:ac:29:9b:71:59: bf:05:c6:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBBDq756luEMbcaSW59WgdpLeHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1RENB ODA2MUQwOTAeFw0yNjA1MTIwODQ1MjBaFw0yNjA1MTMxMTIzMjBaMDMxMTAvBgNV BAMTKEQ3MTc4QjIyMEZBNDZERUZFQzMwRUJGRThFRkU5NTk5NDdFMUMxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7r+3zBQrQiGPaZasl9jzVSiym kRsTwCU6lQbnQvk0FTRJVNLnDFcK4OPtOk3KiefjZVK3UA5Bsve+vknVIAVqnXq5 0qNuCP3lJ+WCxBEVv+bqH+AsM6dtRMxeG+RCUmOKMKRHWHBpFHWcV79rFB5hiTXB P3UnwXpKZLmj0bHaIndqCY6cvSvAn6dOIuMKaW/4d98wnjWq+sqLglE8Q/lYf7U4 jPzuCP4yc5ZPuxiZ7vvpwMncoFBHry+r4dLyTlV+p0XezG/SPvIomm9iKdz0sSL2 PRDHGkdvxzkTKCffjNZmx+fnt8t20qgWe3AWSQBhVXMlmp4u5EPsAu41xjEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xeLIg+kbe/sMOv+jv6VmUfhwUwwHwYDVR0j BBgwFoAUt6ysjBptVnxwIWfDv11V3KgGHQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY1ODkzNGQtMWIwMC00NDg5LTkyZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMx QTZENTY3QzcwMjE2N0MzQkY1RDU1RENBODA2MUQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0FDQUM4QzFBNkQ1NjdDNzAyMTY3QzNCRjVENTVEQ0E4MDYx RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1 RENBODA2MUQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI53jGDmqis8Gh5J+kyXL9p/zf3gkOYYEr5q VC4VZq6mx/SHrwMaZXZNFvIhcEDwkqH9EfB7pLgsYXT+pzkyD3ng8TYMHz6Dux1l 6G11aXOBy4EWTI8kYQF9jUsfsr5S+xLUAFum4kO8gTomib41jllpoQtQdgjWlEvE py948pku6jrwZ0BnxsNncXySusTp+Kwee3D0Dlv4Hi1JHXbvV+VTyIaqOO7r6Kca FCZMWGlE41ubwU99YAJC8xOH7G0t/bPMynYV/q/EnDJkfWYiamyH29jlC6IXfv1a f53xWyORx7WjYloJo7sywwnCXAXWpFeoklUic2ysKZtxWb8FxmE= -----END CERTIFICATE-----Generated at Wed May 13 04:03:19 2026 by rpki-client