$ rpki-client -vvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json) Hash identifier: qatrhvZs3kFjslOjOnW5bHuoy9+9+vtwTs/CY+X1Bao= Subject key identifier: 73:7E:39:C2:58:4C:4D:D3:AC:55:8C:34:F3:41:E6:34:37:67:AC:EC Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Certificate serial: 40AAEA2298A50D0E4621A74A39F083D316525560 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:55:01 +0000 Manifest this update: Tue 12 May 2026 21:50:01 +0000 Manifest next update: Wed 13 May 2026 22:17:01 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=) 3: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: 7mwSzHI5j/0w3dzO89fACMuRnY5jWOunoQCZ0rmCC8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:ea:22:98:a5:0d:0e:46:21:a7:4a:39:f0:83:d3:16:52:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Validity Not Before: May 12 21:50:01 2026 GMT Not After : May 13 22:17:01 2026 GMT Subject: CN=737E39C2584C4DD3AC558C34F341E6343767ACEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:ab:dd:0f:3d:05:1e:a6:10:93:c5:4a:4d: 3f:c4:56:fe:b6:a2:7e:6a:e7:71:ee:a8:e5:12:e5: 14:84:bc:8e:c8:d5:72:bd:34:77:c5:03:3c:51:cf: 48:ba:3f:3a:2d:6c:24:de:78:1f:b0:0e:14:ce:64: ac:de:ae:76:40:9a:e8:14:6c:59:ea:ca:af:63:11: ac:da:83:03:28:67:37:9a:1d:07:fd:1a:90:6f:4f: 7e:06:cb:05:1d:d1:98:fe:f2:f8:6b:07:bf:b0:f8: cd:db:6f:27:29:f2:de:ba:72:73:8b:0e:0f:95:94: b5:75:35:e1:97:b0:2f:c5:81:b8:38:55:60:49:c1: 3d:9c:c3:3b:93:53:20:8c:b1:23:7f:d3:44:06:e3: 47:b2:63:9e:95:ca:ea:44:1e:2e:df:db:94:40:60: c2:de:2c:d1:db:2e:2b:68:8f:97:72:f4:d5:2a:51: 4d:9a:8c:c7:6f:de:de:ee:8a:64:f8:46:47:c8:c5: c6:db:08:ec:49:11:93:f3:11:cc:bc:a0:38:17:df: e3:ef:d1:03:82:68:42:d5:69:60:b3:aa:6d:ef:af: 97:51:e3:4f:a7:f1:98:16:09:5f:fa:fc:90:ac:1f: 62:5e:63:da:5a:31:42:95:29:fd:31:1d:ae:d8:e7: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:39:C2:58:4C:4D:D3:AC:55:8C:34:F3:41:E6:34:37:67:AC:EC X509v3 Authority Key Identifier: keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:96:e4:ea:51:64:79:fd:f1:76:59:05:19:84:62:4a:59:7a: 1d:97:01:b0:03:00:4b:09:25:ee:a8:1a:ba:3b:23:82:e2:ed: c0:2c:fc:3a:eb:8e:06:b8:d1:4a:8f:ee:44:75:dc:12:dc:bc: 28:28:a2:4f:cb:d8:8e:3d:b4:16:fe:62:b9:a6:ec:92:aa:3f: 7a:20:03:0f:4d:3a:ca:ff:1b:04:10:6c:18:16:fd:16:8b:3a: 8e:55:af:ba:05:87:22:01:01:66:a0:7d:bd:88:96:b7:77:20: eb:6f:97:67:fa:df:74:08:59:23:6d:c8:ae:00:31:fe:7f:29: 3f:c0:55:6e:77:99:80:af:7a:75:16:10:13:fb:a3:23:1a:f1: 3f:ba:17:a6:21:69:cd:b0:19:9c:f7:15:bb:1e:43:f7:1c:a1: 43:32:d4:37:cf:3b:f5:a0:2c:d6:83:42:25:ff:19:31:2d:53: f0:50:cb:ea:32:f3:b5:0c:66:59:04:0c:ff:5e:87:62:b8:e4: fe:4f:11:64:fd:79:76:9e:1f:07:93:75:4c:9d:a3:8c:c2:2d: a4:f0:0f:3e:28:f0:e9:d2:3a:03:9e:11:ba:fe:98:ed:ac:29: f2:eb:4f:83:9b:e4:55:9f:98:dd:60:18:07:28:22:63:47:94: 86:22:26:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKrqIpilDQ5GIadKOfCD0xZSVWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZDNDRB N0U4RDk0MTAeFw0yNjA1MTIyMTUwMDFaFw0yNjA1MTMyMjE3MDFaMDMxMTAvBgNV BAMTKDczN0UzOUMyNTg0QzRERDNBQzU1OEMzNEYzNDFFNjM0Mzc2N0FDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyavdDz0FHqYQk8VKTT/EVv62 on5q53HuqOUS5RSEvI7I1XK9NHfFAzxRz0i6PzotbCTeeB+wDhTOZKzernZAmugU bFnqyq9jEazagwMoZzeaHQf9GpBvT34GywUd0Zj+8vhrB7+w+M3bbycp8t66cnOL Dg+VlLV1NeGXsC/Fgbg4VWBJwT2cwzuTUyCMsSN/00QG40eyY56VyupEHi7f25RA YMLeLNHbLitoj5dy9NUqUU2ajMdv3t7uimT4RkfIxcbbCOxJEZPzEcy8oDgX3+Pv 0QOCaELVaWCzqm3vr5dR40+n8ZgWCV/6/JCsH2JeY9paMUKVKf0xHa7Y51BxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc345wlhMTdOsVYw080HmNDdnrOwwHwYDVR0j BBgwFoAUeulJHeER2vsJushsl3f8RKfo2UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjcyOGM3N2ItMjEwMC00ZjJhLTkwZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURF MTExREFGQjA5QkFDODZDOTc3N0ZDNDRBN0U4RDk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUU5NDkxREUxMTFEQUZCMDlCQUM4NkM5Nzc3RkM0NEE3RThE OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZD NDRBN0U4RDk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2W5OpRZHn98XZZBRmEYkpZeh2XAbADAEsJ Je6oGro7I4Li7cAs/Drrjga40UqP7kR13BLcvCgook/L2I49tBb+Yrmm7JKqP3og Aw9NOsr/GwQQbBgW/RaLOo5Vr7oFhyIBAWagfb2Ilrd3IOtvl2f633QIWSNtyK4A Mf5/KT/AVW53mYCvenUWEBP7oyMa8T+6F6Yhac2wGZz3FbseQ/ccoUMy1DfPO/Wg LNaDQiX/GTEtU/BQy+oy87UMZlkEDP9eh2K45P5PEWT9eXaeHweTdUydo4zCLaTw Dz4o8OnSOgOeEbr+mO2sKfLrT4Ob5FWfmN1gGAcoImNHlIYiJiw= -----END CERTIFICATE-----Generated at Wed May 13 02:13:13 2026 by rpki-client