$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: WR1eHU3xZPFdMo86Xpidzyp6ARgpj6GWn6ZSGjJPQVs= Subject key identifier: F0:60:82:33:68:85:7E:62:29:08:5C:3D:D0:B0:6B:52:D8:0A:7B:14 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 3071DE9C59293B0D5EBEB22FF90DC5F0F0F60FC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:30 +0000 Manifest this update: Tue 12 May 2026 18:13:30 +0000 Manifest next update: Wed 13 May 2026 19:13:30 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 2: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 3: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: sQmGAKVzYeqhraQCcJnLavf67yaadKRb2BaDWTo3OZM=) 4: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 5: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:71:de:9c:59:29:3b:0d:5e:be:b2:2f:f9:0d:c5:f0:f0:f6:0f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: May 12 18:13:30 2026 GMT Not After : May 13 19:13:30 2026 GMT Subject: CN=F060823368857E6229085C3DD0B06B52D80A7B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:ee:c6:ef:e0:80:3e:87:6d:fe:d9:ed:4f: 00:2b:96:93:92:64:14:23:50:77:79:f2:68:e8:35: 38:c5:a8:4a:93:31:c0:cd:0b:3b:8c:dc:53:2e:94: d7:25:d0:41:28:a0:da:b5:f9:92:8e:ff:96:94:05: f0:42:7c:23:bb:5d:e6:8b:1d:98:9a:cd:88:c5:5a: e5:09:b9:aa:6e:f5:30:23:2d:38:01:9f:8f:c1:a7: 93:5d:43:c3:a2:f8:50:85:44:03:31:6d:1c:14:88: 79:4b:4a:34:48:ac:12:3f:09:57:6e:bb:5e:58:fd: 92:be:d6:88:3b:cb:40:6e:53:9f:1f:28:00:e3:be: 3e:d0:03:a2:31:c9:fc:7b:35:94:ae:c7:a4:89:da: 39:e2:50:43:03:48:43:37:34:1f:4e:14:02:e7:38: dd:6a:5a:ba:07:e1:2b:84:aa:0e:4f:4a:e7:bf:e9: 14:fa:5b:58:ef:9d:3e:51:57:4d:a6:f2:15:9e:02: bb:e8:4a:c3:e0:db:a5:d5:fb:97:74:0e:56:e6:58: fc:7f:05:c5:67:d6:01:05:fc:f6:b6:d8:e1:0a:63: 82:7a:cb:f1:da:44:c7:c5:1d:fa:7c:e7:81:3d:fa: 48:a5:5b:72:20:1f:66:8e:5d:87:01:76:1d:0d:5e: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:82:33:68:85:7E:62:29:08:5C:3D:D0:B0:6B:52:D8:0A:7B:14 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3a:f4:20:f9:c6:e9:55:92:e2:0f:5a:9f:28:fa:46:4b:be: d9:64:45:17:e2:ee:44:70:ee:b1:93:27:c9:71:3e:ca:3d:0c: 2e:ed:35:d4:8a:71:af:41:ae:6d:05:28:9e:25:af:eb:7c:31: 05:b1:a1:7d:b8:19:0f:a4:34:e1:fb:68:00:7f:84:a4:d9:3a: eb:98:f9:6e:39:a2:a8:0e:c9:96:54:5b:4c:b1:de:6a:9a:bf: 80:3d:55:97:a2:b2:63:81:6b:26:91:2f:c0:60:ee:99:6d:16: de:31:70:ae:af:67:44:94:b2:b5:05:79:72:30:66:67:38:cf: 85:39:ec:31:b8:14:53:52:a0:eb:9b:68:5c:fd:97:42:e1:b3: 42:a1:6e:cb:1c:62:d5:72:f8:58:af:30:de:e5:8e:c8:96:d8: 98:11:76:c3:66:77:26:7b:f3:52:0b:d0:59:72:94:3d:0d:9a: 64:a4:27:41:33:b6:2e:66:8f:41:b4:68:d8:0c:65:e2:be:8d: 66:c2:81:27:83:e8:28:44:58:e5:50:78:b5:6b:25:77:d6:58: 61:21:4a:4a:35:e2:bf:67:2b:72:7e:52:54:2f:69:e3:4a:9d: b4:ac:46:1d:a2:85:32:1f:be:88:c6:bb:cf:80:3f:d1:8e:0b: f8:63:99:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHHenFkpOw1evrIv+Q3F8PD2D8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA1MTIxODEzMzBaFw0yNjA1MTMxOTEzMzBaMDMxMTAvBgNV BAMTKEYwNjA4MjMzNjg4NTdFNjIyOTA4NUMzREQwQjA2QjUyRDgwQTdCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6u7G7+CAPodt/tntTwArlpOS ZBQjUHd58mjoNTjFqEqTMcDNCzuM3FMulNcl0EEooNq1+ZKO/5aUBfBCfCO7XeaL HZiazYjFWuUJuapu9TAjLTgBn4/Bp5NdQ8Oi+FCFRAMxbRwUiHlLSjRIrBI/CVdu u15Y/ZK+1og7y0BuU58fKADjvj7QA6Ixyfx7NZSux6SJ2jniUEMDSEM3NB9OFALn ON1qWroH4SuEqg5PSue/6RT6W1jvnT5RV02m8hWeArvoSsPg26XV+5d0DlbmWPx/ BcVn1gEF/Pa22OEKY4J6y/HaRMfFHfp854E9+kilW3IgH2aOXYcBdh0NXiCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GCCM2iFfmIpCFw90LBrUtgKexQwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo69CD5xulVkuIPWp8o+kZLvtlkRRfi7kRw 7rGTJ8lxPso9DC7tNdSKca9Brm0FKJ4lr+t8MQWxoX24GQ+kNOH7aAB/hKTZOuuY +W45oqgOyZZUW0yx3mqav4A9VZeismOBayaRL8Bg7pltFt4xcK6vZ0SUsrUFeXIw Zmc4z4U57DG4FFNSoOubaFz9l0Lhs0KhbsscYtVy+FivMN7ljsiW2JgRdsNmdyZ7 81IL0FlylD0NmmSkJ0Ezti5mj0G0aNgMZeK+jWbCgSeD6ChEWOVQeLVrJXfWWGEh Sko14r9nK3J+UlQvaeNKnbSsRh2ihTIfvojGu8+AP9GOC/hjmak= -----END CERTIFICATE-----Generated at Wed May 13 00:20:45 2026 by rpki-client