$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: 4qO43Tq9eEmyky0x2rDLXWh+pOR1k+/+f0ss6lvbK7g= Subject key identifier: 51:72:B0:0C:0D:09:84:A3:F8:9B:1C:EA:51:3B:F7:C2:FD:E8:26:21 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 1FBC08C36182D33460E2146571C5C98F487787D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:58:11 +0000 Manifest this update: Tue 12 May 2026 12:53:11 +0000 Manifest next update: Wed 13 May 2026 13:37:11 +0000 Files and hashes: 1: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: bfsfzv3rt2VY8d46GVt2VavFitBeblPPc7brugIdOCs=) 2: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 3: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:08:c3:61:82:d3:34:60:e2:14:65:71:c5:c9:8f:48:77:87:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: May 12 12:53:11 2026 GMT Not After : May 13 13:37:11 2026 GMT Subject: CN=5172B00C0D0984A3F89B1CEA513BF7C2FDE82621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:4a:61:03:ee:88:b9:b6:5c:4b:06:03:15: 36:25:44:a6:25:74:25:99:e5:d9:07:b3:43:ee:45: 08:bd:61:c1:44:3b:86:14:07:c4:8f:fa:01:5b:a0: 69:d3:be:9b:ed:fd:c3:23:56:c4:a4:6f:cd:42:25: b3:dd:69:d5:d7:f4:5f:ed:0d:35:0a:be:05:0a:43: 13:bc:77:ed:e3:e2:c2:80:f5:cd:7c:f2:3e:bf:18: c9:03:00:78:83:65:33:3b:82:ef:c1:fc:43:5a:58: c6:51:1b:c3:25:6f:ab:a0:6d:e8:77:2f:90:c6:ef: b9:78:93:35:c3:02:d1:ad:39:c5:c3:28:fa:ee:a0: 4f:52:5f:77:9c:fb:a3:0d:fe:8e:0a:22:8f:10:74: 8c:a1:13:64:28:27:e7:70:26:b7:4d:09:44:db:43: 82:e4:13:5c:52:89:d5:d3:a9:ca:60:3c:d6:e5:af: 31:d1:a9:0d:68:8a:ba:32:05:0a:7d:20:16:8f:7f: 65:9a:0c:81:8c:04:59:de:3f:8e:f1:15:ad:19:6c: 05:1b:30:c2:d7:cd:a0:2f:84:13:2c:dd:a6:e4:c6: ac:a8:40:0d:a0:c1:da:49:55:28:7b:4a:73:d8:ab: 77:70:af:85:c1:9d:cc:c9:10:b7:c2:a0:93:67:fc: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:B0:0C:0D:09:84:A3:F8:9B:1C:EA:51:3B:F7:C2:FD:E8:26:21 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e6:b1:41:3c:36:72:39:04:c9:f0:76:46:57:85:26:84:6e: 7c:8d:1e:34:11:1d:d5:b7:18:5f:c2:36:cb:59:b0:0d:dc:75: 3b:1b:9c:52:bb:59:70:be:0a:92:6a:a7:bd:9a:2e:e3:6f:a5: 48:7b:d3:cc:04:9b:38:74:8e:b5:16:f2:47:43:f9:4e:a5:af: a3:f5:f0:55:bc:ea:cf:0a:68:3d:6e:d1:0d:c9:a5:f7:6a:8d: 6c:c4:21:88:2c:72:9f:fe:84:ed:18:f9:59:3d:58:fc:9b:3c: 9b:4d:5d:37:27:3f:08:cb:d8:db:c3:34:e1:0e:8a:7d:c7:1f: 27:f3:1c:48:61:ea:be:23:aa:b7:ca:e9:a3:c0:7e:73:c4:bd: d7:12:e7:e4:79:01:7d:5d:fc:e1:9b:76:52:fa:b5:3b:a7:4d: 67:8e:fb:93:66:d4:f0:11:e7:5d:c7:25:a4:6e:19:e9:f2:52: 38:f1:4f:4f:7a:38:f1:87:a3:f4:fd:5c:e0:f3:f4:84:ad:3b: 46:5f:64:f8:4c:9d:c0:86:6d:59:99:d9:20:4e:44:8c:7b:8f: 82:31:c2:a4:11:44:f5:33:a6:c5:da:96:95:41:18:ce:4f:32: 12:fe:c0:10:e6:af:fc:3d:30:a5:ba:e4:79:6e:e2:12:97:d4: 27:3b:06:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7wIw2GC0zRg4hRlccXJj0h3h9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA1MTIxMjUzMTFaFw0yNjA1MTMxMzM3MTFaMDMxMTAvBgNV BAMTKDUxNzJCMDBDMEQwOTg0QTNGODlCMUNFQTUxM0JGN0MyRkRFODI2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy50phA+6IubZcSwYDFTYlRKYl dCWZ5dkHs0PuRQi9YcFEO4YUB8SP+gFboGnTvpvt/cMjVsSkb81CJbPdadXX9F/t DTUKvgUKQxO8d+3j4sKA9c188j6/GMkDAHiDZTM7gu/B/ENaWMZRG8Mlb6ugbeh3 L5DG77l4kzXDAtGtOcXDKPruoE9SX3ec+6MN/o4KIo8QdIyhE2QoJ+dwJrdNCUTb Q4LkE1xSidXTqcpgPNblrzHRqQ1oiroyBQp9IBaPf2WaDIGMBFneP47xFa0ZbAUb MMLXzaAvhBMs3abkxqyoQA2gwdpJVSh7SnPYq3dwr4XBnczJELfCoJNn/PS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXKwDA0JhKP4mxzqUTv3wv3oJiEwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnmsUE8NnI5BMnwdkZXhSaEbnyNHjQRHdW3 GF/CNstZsA3cdTsbnFK7WXC+CpJqp72aLuNvpUh708wEmzh0jrUW8kdD+U6lr6P1 8FW86s8KaD1u0Q3JpfdqjWzEIYgscp/+hO0Y+Vk9WPybPJtNXTcnPwjL2NvDNOEO in3HHyfzHEhh6r4jqrfK6aPAfnPEvdcS5+R5AX1d/OGbdlL6tTunTWeO+5Nm1PAR 513HJaRuGenyUjjxT096OPGHo/T9XODz9IStO0ZfZPhMncCGbVmZ2SBORIx7j4Ix wqQRRPUzpsXalpVBGM5PMhL+wBDmr/w9MKW65Hlu4hKX1Cc7BlI= -----END CERTIFICATE-----Generated at Wed May 13 06:26:27 2026 by rpki-client