$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json) Hash identifier: E5c17oDLDfpLjB1qJtNbw3AONppdOfIXcKjFhOYc054= Subject key identifier: BB:6C:92:6D:79:95:89:E5:31:0A:FE:F4:5C:C7:E8:42:4B:71:64:9B Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Certificate serial: 203F8AC66E460654B42135F04B17473B3A3D3410 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:28 +0000 Manifest this update: Tue 12 May 2026 17:32:28 +0000 Manifest next update: Wed 13 May 2026 18:24:28 +0000 Files and hashes: 1: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: agmPau+p+HKx3Cs+MBQydog0bayeo//j21g2nLdHga8=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:8a:c6:6e:46:06:54:b4:21:35:f0:4b:17:47:3b:3a:3d:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Validity Not Before: May 12 17:32:28 2026 GMT Not After : May 13 18:24:28 2026 GMT Subject: CN=BB6C926D799589E5310AFEF45CC7E8424B71649B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:85:3d:8e:5e:1b:62:05:e9:8a:68:6e:85: ac:39:d7:e5:42:2a:69:d4:46:cd:72:de:99:1d:cd: ef:67:75:3f:5e:c2:e4:d2:2e:84:21:f3:cf:7f:f1: f3:e3:78:c8:5a:0b:44:f0:22:66:c9:8f:71:93:0b: 0f:ca:6e:71:ae:c3:15:64:d0:36:b1:56:02:5f:d7: f2:14:e8:28:c4:25:91:0e:29:d9:71:34:c9:c5:84: c5:d0:76:3e:b0:8a:e9:ef:90:99:02:30:2b:50:d7: 59:1a:3d:b2:3c:d7:14:9d:e0:e6:2b:2a:f8:b4:3c: 4c:0d:66:97:cc:92:74:16:6f:fb:58:69:f1:b8:14: a9:1c:12:b3:73:9a:f7:58:ee:0c:78:1b:42:40:f4: 84:af:56:86:38:62:3a:5f:15:3e:b3:9f:81:fa:52: c6:42:64:c9:ab:75:c8:85:fe:13:0d:0c:d1:52:16: 1d:ea:25:93:f4:5b:fa:3d:2f:98:0e:64:f3:de:3a: 1f:32:85:25:b6:fb:8a:ff:b2:0a:b1:ed:d5:65:aa: db:77:f9:e5:f7:e7:18:37:b3:c3:3a:1e:ea:58:1e: c9:7b:ad:87:4a:58:d3:3e:29:f7:73:b3:fd:15:eb: 7d:f3:9a:87:78:0d:1d:9d:90:44:aa:5f:b3:c9:05: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:92:6D:79:95:89:E5:31:0A:FE:F4:5C:C7:E8:42:4B:71:64:9B X509v3 Authority Key Identifier: keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f6:48:ff:b1:12:33:be:b3:84:82:d5:78:23:10:dd:23:1e: 76:08:1e:35:a0:66:7c:70:62:73:89:b6:df:9d:fe:fc:45:4c: 3f:3f:28:df:aa:4b:1d:76:d6:83:6b:49:d7:8f:cb:1a:d3:9b: 31:25:0b:08:f7:8a:01:0e:e1:99:b8:f5:4e:f9:75:45:e7:cf: c9:77:2c:ea:6e:64:09:e5:e2:4d:36:ec:c8:4d:0b:a0:08:43: 16:f1:d5:03:fe:d9:48:85:d4:c8:1b:e3:d7:e0:98:8b:76:5b: e0:14:1e:ca:47:ac:9d:84:94:56:df:ef:b2:a4:80:44:e6:d6: 4b:79:77:c0:6b:03:a9:51:a1:b5:7f:77:d3:b5:3d:ab:bf:4d: cf:8c:0f:9b:e0:4a:98:68:d6:4b:13:eb:48:8b:86:1d:ec:d9: be:80:0d:e3:03:0c:56:2d:61:fb:92:d4:8e:b9:0a:ae:8f:5b: 4b:d0:83:a2:e4:0e:0e:45:85:59:13:28:23:6d:9a:1a:3e:98: da:c8:76:69:c1:cd:ca:d3:e3:7d:73:00:c2:7c:07:f3:a3:5a: 1e:b6:37:df:49:2b:02:ea:70:e5:ef:c2:30:09:39:c5:41:f6: fa:82:55:e0:e9:6d:2a:d1:8b:ea:00:62:c1:96:64:47:c8:d8: 2a:bf:0e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUID+Kxm5GBlS0ITXwSxdHOzo9NBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMw NzI5RUI3QzAeFw0yNjA1MTIxNzMyMjhaFw0yNjA1MTMxODI0MjhaMDMxMTAvBgNV BAMTKEJCNkM5MjZENzk5NTg5RTUzMTBBRkVGNDVDQzdFODQyNEI3MTY0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDitoU9jl4bYgXpimhuhaw51+VC KmnURs1y3pkdze9ndT9ewuTSLoQh889/8fPjeMhaC0TwImbJj3GTCw/KbnGuwxVk 0DaxVgJf1/IU6CjEJZEOKdlxNMnFhMXQdj6wiunvkJkCMCtQ11kaPbI81xSd4OYr Kvi0PEwNZpfMknQWb/tYafG4FKkcErNzmvdY7gx4G0JA9ISvVoY4YjpfFT6zn4H6 UsZCZMmrdciF/hMNDNFSFh3qJZP0W/o9L5gOZPPeOh8yhSW2+4r/sgqx7dVlqtt3 +eX35xg3s8M6HupYHsl7rYdKWNM+Kfdzs/0V633zmod4DR2dkESqX7PJBatzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2ySbXmVieUxCv70XMfoQktxZJswHwYDVR0j BBgwFoAUfGlC2eOdLgcIhUKCy2o3Iwcp63wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiZDU1MzgtNDI3MC00MTJkLTlkNjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlF MzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMwNzI5RUI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzY5NDJEOUUzOUQyRTA3MDg4NTQyODJDQjZBMzcyMzA3MjlF QjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3 MjMwNzI5RUI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX2SP+xEjO+s4SC1XgjEN0jHnYIHjWgZnxw YnOJtt+d/vxFTD8/KN+qSx121oNrSdePyxrTmzElCwj3igEO4Zm49U75dUXnz8l3 LOpuZAnl4k027MhNC6AIQxbx1QP+2UiF1Mgb49fgmIt2W+AUHspHrJ2ElFbf77Kk gETm1kt5d8BrA6lRobV/d9O1Pau/Tc+MD5vgSpho1ksT60iLhh3s2b6ADeMDDFYt YfuS1I65Cq6PW0vQg6LkDg5FhVkTKCNtmho+mNrIdmnBzcrT431zAMJ8B/OjWh62 N99JKwLqcOXvwjAJOcVB9vqCVeDpbSrRi+oAYsGWZEfI2Cq/DrU= -----END CERTIFICATE-----Generated at Wed May 13 03:53:09 2026 by rpki-client