$ rpki-client -vvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: eWF7PCGGQaw0BJcv8easvqdzStFmpTEhEO07eY+bcmw= Subject key identifier: BC:7A:B4:8B:CE:41:B2:4A:C7:62:2D:A1:11:E9:BD:34:B5:BC:AE:5C Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 0A8703A6E61530419F5157DA99FE42D1DDE5FCDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:35 +0000 Manifest this update: Tue 12 May 2026 22:51:35 +0000 Manifest next update: Thu 14 May 2026 01:54:35 +0000 Files and hashes: 1: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: XNu+ghryiqns8Zx1azCHs6hu8UDhF5zkjGPMTI+dxjw=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:87:03:a6:e6:15:30:41:9f:51:57:da:99:fe:42:d1:dd:e5:fc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: May 12 22:51:35 2026 GMT Not After : May 14 01:54:35 2026 GMT Subject: CN=BC7AB48BCE41B24AC7622DA111E9BD34B5BCAE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:98:db:9b:34:dd:b7:02:6c:45:f8:20:ad: 60:a8:e9:15:c4:db:de:1d:a3:60:32:fd:5e:bd:8b: 8b:89:24:fb:a9:f6:81:24:c7:97:67:9e:fd:ce:6e: 3c:95:c1:d0:b5:a2:ae:b1:80:d1:d4:02:b8:f3:82: ab:b0:d5:0d:1c:1b:b1:d7:8b:b1:b1:34:dc:81:b2: 4a:4c:e6:b5:d1:03:e0:61:5f:a5:6b:c4:11:38:f6: b2:26:f2:7f:79:08:f7:64:6e:f2:7b:89:31:aa:0c: f6:fe:be:4b:90:c9:73:7e:01:d1:a5:08:1f:b8:55: 56:ee:3c:a3:86:8a:f6:ff:2a:64:62:74:1d:98:e8: 9f:5a:3f:3b:ac:27:bb:11:d6:16:1b:6c:cf:b0:01: 6e:75:00:b9:21:7b:20:a3:39:69:2b:df:a7:e0:2a: ea:01:01:9f:50:89:25:c3:c4:f4:dc:ed:3e:d3:e9: 3c:59:f7:1b:ba:8b:f4:7d:7d:d3:90:69:1c:e5:d3: c1:fa:b1:ce:45:62:79:7d:87:6c:83:dc:cf:95:1a: c3:86:90:28:86:ca:75:31:49:99:3a:46:06:a2:db: f5:2b:8e:53:09:d2:e8:f3:37:eb:7c:fe:49:a8:6b: 2f:3e:e4:c1:d9:db:2a:f6:86:bb:b5:df:f0:04:75: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:B4:8B:CE:41:B2:4A:C7:62:2D:A1:11:E9:BD:34:B5:BC:AE:5C X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:72:06:37:be:3e:37:85:9a:56:92:8e:4d:39:3a:99:06: a0:47:b1:ee:e9:ec:70:7c:6a:d2:cb:fb:a6:f5:53:24:42:90: 4b:04:43:6e:d0:41:90:2a:c8:14:99:ef:6d:f7:a7:b8:ed:1f: 1f:5d:bf:35:f6:9b:ed:9a:41:a8:dd:1c:e7:33:85:5a:e9:38: 55:b9:4c:7d:c5:54:d4:e8:ea:aa:a4:e0:7f:78:93:00:90:ea: 76:22:d9:57:11:bd:67:9f:c0:41:f3:41:f8:19:66:5b:66:83: 10:61:e0:fa:b3:87:c8:bf:2a:73:57:95:d0:eb:24:b5:01:30: 3d:0b:65:85:a7:5a:6d:7a:ec:31:3e:bd:8d:b9:17:4c:79:35: a3:2d:ab:64:d5:21:21:d0:5e:bc:90:18:8c:f5:0a:cc:33:f1: 18:da:49:6f:37:a4:47:cb:e2:ce:d3:94:a5:4a:37:24:a7:9c: fe:a9:4f:f0:82:5e:81:de:1f:05:fb:9c:5a:d0:ff:66:66:a3: 84:0c:72:1b:a7:e7:b6:21:51:82:97:3b:18:1b:da:eb:63:0c: 44:e3:27:0f:f5:f1:64:52:78:75:e0:be:fc:2c:d5:32:2a:b3: 8d:bd:e3:a3:7c:4e:d6:13:1e:d3:2d:4f:92:d6:83:e6:0d:89: 75:e6:9e:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCocDpuYVMEGfUVfamf5C0d3l/NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA1MTIyMjUxMzVaFw0yNjA1MTQwMTU0MzVaMDMxMTAvBgNV BAMTKEJDN0FCNDhCQ0U0MUIyNEFDNzYyMkRBMTExRTlCRDM0QjVCQ0FFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxZjbmzTdtwJsRfggrWCo6RXE 294do2Ay/V69i4uJJPup9oEkx5dnnv3ObjyVwdC1oq6xgNHUArjzgquw1Q0cG7HX i7GxNNyBskpM5rXRA+BhX6VrxBE49rIm8n95CPdkbvJ7iTGqDPb+vkuQyXN+AdGl CB+4VVbuPKOGivb/KmRidB2Y6J9aPzusJ7sR1hYbbM+wAW51ALkheyCjOWkr36fg KuoBAZ9QiSXDxPTc7T7T6TxZ9xu6i/R9fdOQaRzl08H6sc5FYnl9h2yD3M+VGsOG kCiGynUxSZk6Rgai2/UrjlMJ0ujzN+t8/kmoay8+5MHZ2yr2hru13/AEdXNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHq0i85BskrHYi2hEem9NLW8rlwwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+ucgY3vj43hZpWko5NOTqZBqBHse7p7HB8 atLL+6b1UyRCkEsEQ27QQZAqyBSZ7233p7jtHx9dvzX2m+2aQajdHOczhVrpOFW5 TH3FVNTo6qqk4H94kwCQ6nYi2VcRvWefwEHzQfgZZltmgxBh4Pqzh8i/KnNXldDr JLUBMD0LZYWnWm167DE+vY25F0x5NaMtq2TVISHQXryQGIz1Cswz8RjaSW83pEfL 4s7TlKVKNySnnP6pT/CCXoHeHwX7nFrQ/2Zmo4QMchun57YhUYKXOxgb2utjDETj Jw/18WRSeHXgvvws1TIqs42946N8TtYTHtMtT5LWg+YNiXXmnrA= -----END CERTIFICATE-----Generated at Wed May 13 01:35:30 2026 by rpki-client