$ rpki-client -vvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: cTEh4y4nQegYenH7ih1TE9eueaF2vDd+dC6VPaNrV7E= Subject key identifier: 7A:AE:E2:97:9A:D3:7D:E6:D9:B3:FA:B0:96:C5:3C:90:87:2A:A5:05 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 10D355C34D686A41BEED10AEA7F79C181E5C3770 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:21 +0000 Manifest this update: Tue 12 May 2026 22:05:21 +0000 Manifest next update: Wed 13 May 2026 23:29:21 +0000 Files and hashes: 1: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 3: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: /SFSHqPGMCCpKDFDobU11NwVI3mnX/s9USWL+l2bmLo=) 4: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d3:55:c3:4d:68:6a:41:be:ed:10:ae:a7:f7:9c:18:1e:5c:37:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: May 12 22:05:21 2026 GMT Not After : May 13 23:29:21 2026 GMT Subject: CN=7AAEE2979AD37DE6D9B3FAB096C53C90872AA505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:5b:2a:2a:37:a2:29:6f:c7:49:60:ba:71: c1:80:5f:f1:eb:76:e7:db:70:ba:fa:12:ec:8b:c5: 18:2d:60:54:de:92:58:3d:b1:4d:95:f8:78:77:25: 63:79:54:4d:85:a3:7f:74:4c:09:dc:de:15:cf:4f: b8:b8:c9:d6:ca:d3:85:79:c5:90:b2:f7:5a:4b:24: 86:6d:a0:bb:ed:ee:2f:72:5d:56:d1:92:c3:ce:d6: 1b:1e:79:ba:9d:58:1e:58:ec:2f:be:71:1f:d9:00: 67:a6:b2:9e:23:69:0c:54:06:22:2a:fb:08:3e:75: fd:d9:a3:4d:e3:f5:3b:46:ac:95:e8:c1:a8:7c:58: ea:e3:d5:0b:24:0e:06:0d:d1:2a:c5:b5:c4:1e:aa: c2:9b:e8:a0:9b:af:ee:74:de:62:58:3f:9e:af:9c: 95:f4:82:6c:57:d8:9a:d8:80:d9:aa:d9:d3:08:1c: b4:4c:a0:f3:8a:73:1b:be:fe:a5:da:29:0d:cb:72: 1e:5a:0b:8b:1c:64:08:67:00:47:87:3c:56:d8:59: 5b:4c:26:58:d8:3b:80:ef:ae:1c:44:df:b0:6e:6f: 64:13:b1:de:fd:ca:57:bb:85:f9:89:88:fe:15:ed: 99:1b:60:e6:cb:81:42:69:13:a7:09:6b:50:45:a0: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:E2:97:9A:D3:7D:E6:D9:B3:FA:B0:96:C5:3C:90:87:2A:A5:05 X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6d:0d:56:e7:14:d4:ef:4f:e3:41:a2:ef:03:39:4c:ec:92: 87:5d:89:a9:10:e0:dc:0b:aa:2a:87:c9:09:e8:ff:bb:c1:5d: 6c:bb:76:54:8e:11:e0:8f:62:18:6f:23:35:87:64:8e:26:b8: 59:4c:2f:32:49:62:5b:c8:b1:d3:bf:ae:29:8e:72:36:e5:45: af:4d:55:9d:a7:62:8e:36:dc:91:5c:4a:ea:8d:7b:8c:3b:35: ba:f1:05:26:51:86:3c:37:3e:d8:7a:92:12:41:07:95:f1:42: 1a:c4:21:c3:dc:e9:6f:cb:b4:f8:85:5c:c7:8a:dd:85:8e:c5: 33:ca:e8:62:46:f2:f7:b0:9e:8b:1a:4e:c7:5c:42:d8:bb:c4: 61:44:b9:ef:95:17:b1:73:a5:12:b2:cb:e0:7c:e4:da:30:d1: b4:d1:28:2f:4f:e3:42:d4:63:d8:21:7d:9e:d5:e5:09:be:72: c1:da:b3:05:cf:d6:d7:d9:3e:a5:c7:d1:51:0f:93:a6:28:ec: be:97:3c:ff:ff:34:a7:8f:fa:a2:de:45:7d:e7:30:1d:da:69: 2b:cd:e6:75:a6:23:46:19:da:7c:d1:f0:cf:53:4e:a0:f2:a1: 5e:c2:50:52:4c:97:9f:7b:09:38:ba:d9:41:a6:6b:f3:8e:62: 8a:2d:2a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENNVw01oakG+7RCup/ecGB5cN3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA1MTIyMjA1MjFaFw0yNjA1MTMyMzI5MjFaMDMxMTAvBgNV BAMTKDdBQUVFMjk3OUFEMzdERTZEOUIzRkFCMDk2QzUzQzkwODcyQUE1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7a1sqKjeiKW/HSWC6ccGAX/Hr dufbcLr6EuyLxRgtYFTeklg9sU2V+Hh3JWN5VE2Fo390TAnc3hXPT7i4ydbK04V5 xZCy91pLJIZtoLvt7i9yXVbRksPO1hseebqdWB5Y7C++cR/ZAGemsp4jaQxUBiIq +wg+df3Zo03j9TtGrJXowah8WOrj1QskDgYN0SrFtcQeqsKb6KCbr+503mJYP56v nJX0gmxX2JrYgNmq2dMIHLRMoPOKcxu+/qXaKQ3Lch5aC4scZAhnAEeHPFbYWVtM JljYO4DvrhxE37Bub2QTsd79yle7hfmJiP4V7ZkbYObLgUJpE6cJa1BFoMijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeq7il5rTfebZs/qwlsU8kIcqpQUwHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRtDVbnFNTvT+NBou8DOUzskoddiakQ4NwL qiqHyQno/7vBXWy7dlSOEeCPYhhvIzWHZI4muFlMLzJJYlvIsdO/rimOcjblRa9N VZ2nYo423JFcSuqNe4w7NbrxBSZRhjw3Pth6khJBB5XxQhrEIcPc6W/LtPiFXMeK 3YWOxTPK6GJG8vewnosaTsdcQti7xGFEue+VF7FzpRKyy+B85Now0bTRKC9P40LU Y9ghfZ7V5Qm+csHaswXP1tfZPqXH0VEPk6Yo7L6XPP//NKeP+qLeRX3nMB3aaSvN 5nWmI0YZ2nzR8M9TTqDyoV7CUFJMl597CTi62UGma/OOYootKsE= -----END CERTIFICATE-----Generated at Wed May 13 04:08:36 2026 by rpki-client