$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: t9wTiksx7nsp5ZbuuwnTbzMMqmeUheBV0ndslQvLv1g= Subject key identifier: B1:67:6C:6A:B0:41:2A:AF:44:44:5C:A9:E5:8C:B3:53:17:EA:C1:12 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 401649EDAF2F8D4C6220D7711AE6ED88D92B2011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:45:58 +0000 Manifest this update: Tue 12 May 2026 19:40:58 +0000 Manifest next update: Wed 13 May 2026 23:19:58 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 2: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: 3+FpeuXP4fnqvQRtR3S1VD7v8DkBLYlPmTP7jhCIQCE=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:16:49:ed:af:2f:8d:4c:62:20:d7:71:1a:e6:ed:88:d9:2b:20:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: May 12 19:40:58 2026 GMT Not After : May 13 23:19:58 2026 GMT Subject: CN=B1676C6AB0412AAF44445CA9E58CB35317EAC112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:21:7f:a1:3f:40:11:dc:47:a2:16:04:fe:b1: 7a:00:cc:69:76:1c:86:9b:e9:aa:cb:31:f9:3e:85: c4:29:d3:66:83:f9:21:06:d4:29:8a:00:89:26:e4: e9:f3:86:11:45:49:68:3e:b2:89:bd:ac:09:95:e6: 45:3f:72:fe:84:1d:3f:37:ab:fc:4f:f5:ae:4e:9f: 0d:6b:7e:ed:28:e0:f1:74:65:ac:24:7e:aa:bf:ee: bb:39:70:28:7f:fd:3e:d4:3b:2b:de:4c:17:4d:44: 15:cc:d9:d2:ac:c9:c4:49:89:9f:63:d6:76:0e:c3: c4:4e:b3:ab:c6:c8:53:b3:77:49:11:25:f6:b4:5d: 51:90:ff:3a:51:6a:85:79:5a:c7:79:93:e3:b2:78: 3d:90:a0:8d:6d:04:77:6c:76:7a:76:dd:a8:29:31: 62:b2:ac:9a:c0:34:3c:23:38:08:9e:91:1c:84:f6: 10:97:4c:21:d6:9d:f7:4d:bf:3b:99:28:ba:a5:f4: d7:b0:53:6f:6c:63:8d:d8:e9:c8:9a:fa:85:01:26: 8f:2e:d6:d7:b4:9c:f9:c5:29:84:35:88:a1:ff:99: f9:c4:72:aa:e4:d6:05:55:8b:8e:fc:ef:61:38:bc: 1e:c5:7a:13:67:af:f8:fc:f5:70:09:a7:e9:64:4e: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:6C:6A:B0:41:2A:AF:44:44:5C:A9:E5:8C:B3:53:17:EA:C1:12 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3b:be:f3:7f:c3:1a:6a:fc:4d:a2:1f:22:c1:5a:99:e6:2b: 6f:4f:e7:55:23:3a:d3:ab:89:c7:19:4a:51:fb:c6:5a:9d:0a: 69:1f:a1:a6:10:84:94:67:05:45:38:31:05:4a:d1:2c:61:12: b4:c9:35:e1:8e:04:a4:ec:22:f2:ac:21:c2:d6:3f:4f:e1:54: 74:ea:35:76:89:fb:87:8c:04:5e:13:59:26:04:fc:b5:f0:ea: de:81:d4:93:d9:3f:2b:5e:50:df:af:42:22:33:14:f4:d6:b1: 60:3d:5c:2f:a8:37:65:12:18:1b:9e:7e:d4:03:dd:9d:5f:46: 6d:4e:f0:9a:b0:d3:6a:73:2f:f2:99:b8:6d:f1:7c:70:47:42: 8b:2f:c3:bc:68:42:cf:96:9d:ed:33:aa:a5:53:a4:23:a0:24: a0:e7:92:17:95:49:ee:f4:c3:e2:36:85:9d:72:82:ad:e9:22: 3e:7e:c8:76:dc:ec:2a:79:4b:06:f8:ae:c4:69:a1:d5:d3:61: c0:e5:18:f6:75:3a:3f:dc:28:d0:53:b3:73:6c:d4:24:61:46: de:07:3f:f4:18:dc:af:10:e8:b7:55:cb:b2:e4:b5:bb:72:9b: 1f:8a:39:9a:37:e0:37:d2:26:ea:41:6a:3a:96:14:7f:25:e0: 6b:75:52:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBZJ7a8vjUxiINdxGubtiNkrIBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA1MTIxOTQwNThaFw0yNjA1MTMyMzE5NThaMDMxMTAvBgNV BAMTKEIxNjc2QzZBQjA0MTJBQUY0NDQ0NUNBOUU1OENCMzUzMTdFQUMxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIX+hP0AR3EeiFgT+sXoAzGl2 HIab6arLMfk+hcQp02aD+SEG1CmKAIkm5OnzhhFFSWg+som9rAmV5kU/cv6EHT83 q/xP9a5Onw1rfu0o4PF0Zawkfqq/7rs5cCh//T7UOyveTBdNRBXM2dKsycRJiZ9j 1nYOw8ROs6vGyFOzd0kRJfa0XVGQ/zpRaoV5Wsd5k+OyeD2QoI1tBHdsdnp23agp MWKyrJrANDwjOAiekRyE9hCXTCHWnfdNvzuZKLql9NewU29sY43Y6cia+oUBJo8u 1te0nPnFKYQ1iKH/mfnEcqrk1gVVi47872E4vB7FehNnr/j89XAJp+lkTrhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWdsarBBKq9ERFyp5YyzUxfqwRIwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY7vvN/wxpq/E2iHyLBWpnmK29P51UjOtOr iccZSlH7xlqdCmkfoaYQhJRnBUU4MQVK0SxhErTJNeGOBKTsIvKsIcLWP0/hVHTq NXaJ+4eMBF4TWSYE/LXw6t6B1JPZPyteUN+vQiIzFPTWsWA9XC+oN2USGBueftQD 3Z1fRm1O8Jqw02pzL/KZuG3xfHBHQosvw7xoQs+Wne0zqqVTpCOgJKDnkheVSe70 w+I2hZ1ygq3pIj5+yHbc7Cp5Swb4rsRpodXTYcDlGPZ1Oj/cKNBTs3Ns1CRhRt4H P/QY3K8Q6LdVy7Lktbtymx+KOZo34DfSJupBajqWFH8l4Gt1UoE= -----END CERTIFICATE-----Generated at Wed May 13 02:48:01 2026 by rpki-client