$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json) Hash identifier: blaN25coethW2L0Yvm2LtzNIVe4qc4jHP+8BaG4K4Xc= Subject key identifier: 2C:1D:68:CA:B7:4E:C5:AF:24:D0:A2:D0:BF:13:19:42:E2:29:39:3A Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C Certificate serial: 43920FE66CC4F98BA3F66E9DDB2FE95041AC3CA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:30:08 +0000 Manifest this update: Tue 12 May 2026 15:25:08 +0000 Manifest next update: Wed 13 May 2026 15:32:08 +0000 Files and hashes: 1: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=) 2: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=) 3: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: xYcIchIW/ukEvdp1afyrwpnv6vbO15ROPuHIzAeOawE=) 4: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:0f:e6:6c:c4:f9:8b:a3:f6:6e:9d:db:2f:e9:50:41:ac:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C Validity Not Before: May 12 15:25:08 2026 GMT Not After : May 13 15:32:08 2026 GMT Subject: CN=2C1D68CAB74EC5AF24D0A2D0BF131942E229393A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:76:a6:6d:dc:fb:e5:7e:7b:ce:50:e1:92: f1:c2:ce:88:70:97:95:35:ee:7a:da:55:27:2c:63: cc:f0:2d:5d:cb:0b:85:d8:12:94:16:eb:2e:6c:7e: cf:81:0e:f5:c8:59:62:cc:cb:9f:1f:92:32:7d:2c: 2e:df:fc:ac:71:59:9e:53:29:c1:72:5d:88:57:f9: 2b:f0:20:98:43:7e:4f:41:86:29:31:19:78:1c:ba: 2b:50:34:c6:32:a8:35:d3:7b:2b:3d:ee:b2:14:5f: 7f:34:01:ed:15:18:d2:3b:98:c1:65:c7:b3:1d:f8: 63:f3:cf:5f:a1:b6:33:95:4e:c1:c9:ee:35:4c:91: f7:16:87:ec:e4:20:a8:30:80:c9:8b:1c:8f:50:f8: 9f:84:7e:07:e8:0a:23:1a:36:50:da:1e:2c:e2:30: 54:43:cb:07:71:24:84:27:e3:ec:05:34:39:1a:6a: af:59:cf:0e:81:f0:2b:3f:e8:e5:f9:1e:8b:f6:55: 10:f0:3b:46:c5:ab:73:2a:c9:1f:72:1d:d6:03:c9: cb:49:7c:8f:fd:bc:b9:37:13:9c:4a:7f:1d:42:a6: 44:70:43:6c:dd:0a:f8:7c:36:2c:f0:c6:64:e8:80: 85:f8:71:8a:e7:af:21:b5:cf:da:1a:10:54:e5:31: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:68:CA:B7:4E:C5:AF:24:D0:A2:D0:BF:13:19:42:E2:29:39:3A X509v3 Authority Key Identifier: keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:58:65:a1:61:fb:6c:94:cf:2f:02:34:b0:19:01:dd:fd:cb: ea:44:52:f5:c2:65:29:ac:6c:39:c7:fd:4a:28:24:07:e1:2f: a2:dd:17:66:5a:c6:cd:84:2a:9f:4b:d8:9d:13:c3:7a:01:fa: b1:1e:3d:f6:8e:68:e3:d1:a8:d2:d7:74:79:dc:c2:ce:1a:e9: 3f:1a:e5:ef:e1:84:f0:2a:c0:85:19:dc:25:11:84:0d:8c:14: e9:01:50:20:c9:30:7b:4b:02:22:a8:79:0e:9a:8d:12:41:d8: 37:5c:5a:18:11:4b:55:d8:cb:cd:17:2f:14:d7:85:f6:72:be: 13:e8:74:1e:31:32:44:a2:9e:10:71:6c:d5:f7:2c:0a:b0:52: 6b:06:3f:8f:c3:59:fa:02:5d:8f:58:9f:bf:ca:75:7d:18:a2: 3e:c7:2f:50:f8:65:33:d9:63:eb:5e:fa:c2:c7:42:81:3d:3e: 41:5c:54:22:4a:98:41:98:af:b6:94:72:f7:18:f5:b6:c8:40: 7e:5d:29:ce:b9:93:26:d0:3a:2f:bc:38:eb:dd:2a:1f:b7:20: cf:8b:d8:80:46:23:1d:5a:b1:a9:f4:37:21:7f:e8:fb:db:e8: 0b:01:bd:70:47:30:d2:61:79:fc:68:a6:e1:1a:c7:6c:03:1b: 49:07:1a:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5IP5mzE+Yuj9m6d2y/pUEGsPKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0 ODkwNDU4QzAeFw0yNjA1MTIxNTI1MDhaFw0yNjA1MTMxNTMyMDhaMDMxMTAvBgNV BAMTKDJDMUQ2OENBQjc0RUM1QUYyNEQwQTJEMEJGMTMxOTQyRTIyOTM5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bnambdz75X57zlDhkvHCzohw l5U17nraVScsY8zwLV3LC4XYEpQW6y5sfs+BDvXIWWLMy58fkjJ9LC7f/KxxWZ5T KcFyXYhX+SvwIJhDfk9BhikxGXgcuitQNMYyqDXTeys97rIUX380Ae0VGNI7mMFl x7Md+GPzz1+htjOVTsHJ7jVMkfcWh+zkIKgwgMmLHI9Q+J+EfgfoCiMaNlDaHizi MFRDywdxJIQn4+wFNDkaaq9Zzw6B8Cs/6OX5Hov2VRDwO0bFq3MqyR9yHdYDyctJ fI/9vLk3E5xKfx1CpkRwQ2zdCvh8NizwxmTogIX4cYrnryG1z9oaEFTlMUAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULB1oyrdOxa8k0KLQvxMZQuIpOTowHwYDVR0j BBgwFoAUf64Uif9TsCNlQ3BvuFpwc0iQRYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0ZTE2NjktNjhmNy00YTM5LWFjYzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlG RjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0ODkwNDU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkFFMTQ4OUZGNTNCMDIzNjU0MzcwNkZCODVBNzA3MzQ4OTA0 NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcw NzM0ODkwNDU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhYZaFh+2yUzy8CNLAZAd39y+pEUvXCZSms bDnH/UooJAfhL6LdF2Zaxs2EKp9L2J0Tw3oB+rEePfaOaOPRqNLXdHncws4a6T8a 5e/hhPAqwIUZ3CURhA2MFOkBUCDJMHtLAiKoeQ6ajRJB2DdcWhgRS1XYy80XLxTX hfZyvhPodB4xMkSinhBxbNX3LAqwUmsGP4/DWfoCXY9Yn7/KdX0Yoj7HL1D4ZTPZ Y+te+sLHQoE9PkFcVCJKmEGYr7aUcvcY9bbIQH5dKc65kybQOi+8OOvdKh+3IM+L 2IBGIx1asan0NyF/6Pvb6AsBvXBHMNJhefxopuEax2wDG0kHGgg= -----END CERTIFICATE-----Generated at Wed May 13 06:58:17 2026 by rpki-client