$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: YJhBlqZfA9nG1UB6PzCGn4Oly7lRNMGxWe5Y9Vo7PYc= Subject key identifier: 34:2A:C8:35:34:C3:24:2F:B9:C9:0B:4D:32:5F:94:DA:F5:8C:98:B5 Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 170AE000B8C9BC2A48E30862E093B214BB51F16B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:46:22 +0000 Manifest this update: Tue 12 May 2026 05:41:22 +0000 Manifest next update: Wed 13 May 2026 09:45:22 +0000 Files and hashes: 1: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: admwhs7zVMYtYIE85EfIiVGJT8K52k+tx8RLM8QRsK0=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0a:e0:00:b8:c9:bc:2a:48:e3:08:62:e0:93:b2:14:bb:51:f1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: May 12 05:41:22 2026 GMT Not After : May 13 09:45:22 2026 GMT Subject: CN=342AC83534C3242FB9C90B4D325F94DAF58C98B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:17:52:3e:59:4e:8d:99:9a:f7:8c:4b:8a: 7b:86:80:ec:5a:de:90:26:ad:e0:b1:83:5c:6a:a5: 0d:c7:d8:1d:89:b7:01:39:a1:6d:ca:54:30:f6:4d: 79:69:3d:4a:07:c6:4e:c6:dd:bd:18:a4:00:23:f2: 0f:b6:6e:b2:ce:08:ae:53:c7:3a:1f:68:c6:c1:80: 66:38:62:f7:1c:62:fd:8a:1b:5b:28:1d:3f:b6:e4: 11:76:28:57:c6:bd:36:85:1a:3b:c7:bc:cd:66:49: a7:3b:9a:46:c0:c4:59:38:c7:d5:02:0d:ee:60:15: a2:04:6f:d7:4c:28:87:66:af:63:85:bc:ad:1c:e9: d4:93:15:88:e0:c8:d0:0a:cf:74:fa:b6:26:a4:f0: 60:b0:c6:30:09:fc:41:05:64:87:b1:3d:df:42:c8: 2b:82:e5:bb:36:9f:49:24:ea:60:54:c1:57:05:b7: 1d:fc:f4:3d:87:b0:a7:ed:b4:99:3c:e6:3e:b7:d8: 6b:5e:5e:33:7c:80:6e:95:38:1c:1f:35:f5:82:84: 3f:c0:55:9c:bd:b8:d9:c7:ae:f3:85:98:bd:6b:e4: df:2f:7a:17:d4:2b:a6:38:d1:e4:20:49:3e:e2:4b: e8:90:ab:b3:ef:49:63:e9:5f:7f:35:3a:9b:c5:71: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:C8:35:34:C3:24:2F:B9:C9:0B:4D:32:5F:94:DA:F5:8C:98:B5 X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4c:e9:b4:28:57:ac:13:b5:5a:6a:a6:94:65:b6:c2:b1:de: 63:8a:3a:db:31:a1:c7:fb:1d:45:86:93:5e:9a:9d:4e:aa:5d: d1:ad:f3:37:01:94:ce:a1:a3:6a:8a:33:ef:9d:9f:83:c9:9b: b0:3e:1c:bd:60:01:3e:20:b6:ac:7b:6b:d6:6d:77:a3:73:38: d8:94:49:b9:71:80:1c:93:a4:e5:54:3d:1e:35:e1:7c:a3:97: ea:21:da:10:53:48:a0:b2:a8:45:4c:74:04:b7:86:fb:ad:c0: 60:a7:13:48:c9:fa:93:2d:bb:9f:b0:80:6e:dc:7d:81:ab:92: e1:87:00:18:8d:9c:d6:55:d3:78:5d:4a:49:b7:82:21:79:94: be:f9:4f:ed:81:49:f7:72:d5:22:3a:2f:2a:6d:50:c6:f0:d2: f4:00:f6:e6:cc:96:86:15:e3:07:cc:5f:b0:98:4e:c0:c1:ff: 72:b9:eb:ac:96:d2:8b:b9:44:5a:18:50:33:94:89:86:28:c6: 32:c9:41:63:a8:be:c1:b5:16:1a:1f:64:f4:14:34:12:02:94: dc:7f:23:aa:ac:db:dd:c8:a0:a9:57:0b:27:ee:8f:61:b1:b9: 08:f2:81:53:ec:f7:54:20:b6:2c:84:34:29:bc:93:4c:70:6a: b6:da:cb:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwrgALjJvCpI4whi4JOyFLtR8WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA1MTIwNTQxMjJaFw0yNjA1MTMwOTQ1MjJaMDMxMTAvBgNV BAMTKDM0MkFDODM1MzRDMzI0MkZCOUM5MEI0RDMyNUY5NERBRjU4Qzk4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPxdSPllOjZma94xLinuGgOxa 3pAmreCxg1xqpQ3H2B2JtwE5oW3KVDD2TXlpPUoHxk7G3b0YpAAj8g+2brLOCK5T xzofaMbBgGY4YvccYv2KG1soHT+25BF2KFfGvTaFGjvHvM1mSac7mkbAxFk4x9UC De5gFaIEb9dMKIdmr2OFvK0c6dSTFYjgyNAKz3T6tiak8GCwxjAJ/EEFZIexPd9C yCuC5bs2n0kk6mBUwVcFtx389D2HsKfttJk85j632GteXjN8gG6VOBwfNfWChD/A VZy9uNnHrvOFmL1r5N8vehfUK6Y40eQgST7iS+iQq7PvSWPpX381OpvFcYRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNCrINTTDJC+5yQtNMl+U2vWMmLUwHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1M6bQoV6wTtVpqppRltsKx3mOKOtsxocf7 HUWGk16anU6qXdGt8zcBlM6ho2qKM++dn4PJm7A+HL1gAT4gtqx7a9Ztd6NzONiU SblxgByTpOVUPR414Xyjl+oh2hBTSKCyqEVMdAS3hvutwGCnE0jJ+pMtu5+wgG7c fYGrkuGHABiNnNZV03hdSkm3giF5lL75T+2BSfdy1SI6LyptUMbw0vQA9ubMloYV 4wfMX7CYTsDB/3K566yW0ou5RFoYUDOUiYYoxjLJQWOovsG1FhofZPQUNBIClNx/ I6qs293IoKlXCyfuj2GxuQjygVPs91QgtiyENCm8k0xwarbay6g= -----END CERTIFICATE-----Generated at Wed May 13 01:38:46 2026 by rpki-client