$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: 30zKqoOsFDSGVW2tJVQEzCMHC4mSd8mJCm2ruxoPwrw= Subject key identifier: A8:CB:C5:80:62:30:0B:7A:BF:0D:25:69:AB:6A:0B:67:9D:6B:D2:3C Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 11B34AFE8A193122CDDF700983F445A3C3EAD684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:52:30 +0000 Manifest this update: Tue 12 May 2026 11:47:30 +0000 Manifest next update: Wed 13 May 2026 14:36:30 +0000 Files and hashes: 1: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 2: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 3: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: 8sH94qZJJbEmJviFfGJgX5z558f/IduP7am0m2QZCkU=) 4: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b3:4a:fe:8a:19:31:22:cd:df:70:09:83:f4:45:a3:c3:ea:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: May 12 11:47:30 2026 GMT Not After : May 13 14:36:30 2026 GMT Subject: CN=A8CBC58062300B7ABF0D2569AB6A0B679D6BD23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:58:a3:d1:ad:63:16:12:82:dd:fc:18:b9: dd:80:02:55:a0:98:3e:02:b6:08:54:f5:41:33:3f: 4b:13:34:c5:53:06:72:35:8f:d1:16:4b:cc:50:7d: 5f:74:76:35:67:9c:3c:82:7e:55:52:bd:11:7d:20: fb:ff:76:91:f8:32:39:b1:21:fd:00:86:b9:33:36: 32:63:95:4e:84:08:33:ab:7a:f5:9c:fb:24:f9:88: e7:28:55:6c:f0:c4:13:a8:b6:da:d0:da:fb:f8:4a: 13:7f:98:8f:b7:3e:14:f9:6c:9d:04:9f:5b:e0:d3: 56:5f:49:e1:7f:d6:22:0e:c8:8d:f9:4c:9c:57:e6: 6f:38:48:1c:5b:56:a1:80:94:73:f1:da:a3:95:62: 9f:f1:03:82:bf:2b:0f:5c:83:11:13:d4:2c:ca:44: f8:ca:7e:40:6d:71:35:b7:2e:7e:4d:3e:3d:c7:b4: 16:6a:0d:48:97:c6:7d:54:5f:8f:62:be:1d:4d:ee: b8:4b:c4:a1:b6:35:97:bc:3a:03:6b:87:95:a0:04: c6:15:4e:87:a0:a6:73:71:4a:ff:eb:43:e9:ae:86: dc:2a:38:7c:19:9f:cc:a7:f5:6e:d8:7c:6d:36:b0: 15:e3:cf:ed:d8:e1:a5:b0:3a:5b:ea:33:62:54:92: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:C5:80:62:30:0B:7A:BF:0D:25:69:AB:6A:0B:67:9D:6B:D2:3C X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a6:90:da:bf:23:d5:76:0b:20:a0:cc:a6:ea:aa:15:55:6e: e2:3c:ea:09:ed:78:ef:c0:ce:c1:c5:d1:4d:ee:da:5f:62:03: d4:85:4d:5e:1f:6b:0c:35:4c:68:57:47:29:45:75:08:47:27: 8e:e2:66:a7:8f:2c:94:93:6d:82:bc:89:7c:50:16:ec:ac:9f: e7:74:ac:68:f6:6e:e1:ae:81:82:1e:76:2a:b7:cd:0b:32:06: 63:55:b8:3b:7d:7b:a3:f5:bc:7d:25:49:c7:d2:10:4b:f3:65: 4c:b3:ab:75:0f:af:36:31:2e:61:07:41:5e:64:1c:97:49:2d: b9:96:0e:ea:54:58:32:7c:62:a8:fe:3b:95:d8:83:7f:07:64: 30:7f:87:81:cc:7d:71:b9:cb:ab:b5:d9:22:11:8b:a2:f3:b3: 6e:56:35:ef:b1:77:7e:97:42:87:97:2f:ce:c8:b1:6e:ce:96: 44:5a:05:c9:84:87:4a:f8:f9:a3:33:d8:4c:6a:4d:3c:ca:a9: 80:6b:dd:18:3e:36:c4:58:c5:39:be:55:c4:79:53:a1:cc:98: f3:dd:e5:7e:58:df:0a:bc:0e:95:48:a0:a8:6c:c1:02:2f:47: b5:07:51:73:ed:7b:e5:e4:25:97:67:9f:53:f6:53:16:33:54: 08:20:6e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbNK/ooZMSLN33AJg/RFo8Pq1oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA1MTIxMTQ3MzBaFw0yNjA1MTMxNDM2MzBaMDMxMTAvBgNV BAMTKEE4Q0JDNTgwNjIzMDBCN0FCRjBEMjU2OUFCNkEwQjY3OUQ2QkQyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Alij0a1jFhKC3fwYud2AAlWg mD4CtghU9UEzP0sTNMVTBnI1j9EWS8xQfV90djVnnDyCflVSvRF9IPv/dpH4Mjmx If0AhrkzNjJjlU6ECDOrevWc+yT5iOcoVWzwxBOottrQ2vv4ShN/mI+3PhT5bJ0E n1vg01ZfSeF/1iIOyI35TJxX5m84SBxbVqGAlHPx2qOVYp/xA4K/Kw9cgxET1CzK RPjKfkBtcTW3Ln5NPj3HtBZqDUiXxn1UX49ivh1N7rhLxKG2NZe8OgNrh5WgBMYV ToegpnNxSv/rQ+muhtwqOHwZn8yn9W7YfG02sBXjz+3Y4aWwOlvqM2JUkrF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqMvFgGIwC3q/DSVpq2oLZ51r0jwwHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOmkNq/I9V2CyCgzKbqqhVVbuI86gnteO/A zsHF0U3u2l9iA9SFTV4faww1TGhXRylFdQhHJ47iZqePLJSTbYK8iXxQFuysn+d0 rGj2buGugYIediq3zQsyBmNVuDt9e6P1vH0lScfSEEvzZUyzq3UPrzYxLmEHQV5k HJdJLbmWDupUWDJ8Yqj+O5XYg38HZDB/h4HMfXG5y6u12SIRi6Lzs25WNe+xd36X QoeXL87IsW7OlkRaBcmEh0r4+aMz2ExqTTzKqYBr3Rg+NsRYxTm+VcR5U6HMmPPd 5X5Y3wq8DpVIoKhswQIvR7UHUXPte+XkJZdnn1P2UxYzVAggbnA= -----END CERTIFICATE-----Generated at Wed May 13 04:26:40 2026 by rpki-client