$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json) Hash identifier: p2Hd6iNC4wjIN74YG1rm6EaCynm6GxhYeuktDh1Hr7c= Subject key identifier: 62:10:91:2A:F5:C0:92:AA:4A:0B:CB:11:7B:B4:6C:89:B8:97:D2:AD Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC Certificate serial: 7EE9BF80D0E933E99211CB8CF0ED15B75CCDF2D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:00:32 +0000 Manifest this update: Tue 12 May 2026 15:55:32 +0000 Manifest next update: Wed 13 May 2026 17:12:32 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=) 2: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=) 3: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=) 4: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: IvUPjhDuPzSGEh4WAzWCkm5XIj039dFgfJzCGkOxSXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e9:bf:80:d0:e9:33:e9:92:11:cb:8c:f0:ed:15:b7:5c:cd:f2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC Validity Not Before: May 12 15:55:32 2026 GMT Not After : May 13 17:12:32 2026 GMT Subject: CN=6210912AF5C092AA4A0BCB117BB46C89B897D2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:fc:8d:b0:72:1f:22:70:1b:d3:e2:07:df: b7:10:ee:b9:2e:19:2a:3d:94:a7:2f:21:e8:16:1d: 61:62:1b:aa:21:78:dc:12:29:ba:06:d9:a1:9a:10: fd:7f:f7:e4:e1:fb:ae:e2:99:6b:0a:95:f7:22:a9: bf:bd:57:b6:3e:6d:70:62:ad:8e:df:63:6a:05:a3: ad:b4:84:57:eb:7f:bd:f0:4a:3c:3f:e0:ff:b3:21: f2:c6:08:b7:e1:f0:34:34:de:ab:df:cf:37:05:81: 42:f2:b5:84:12:63:94:c6:16:19:3d:d7:5b:19:ae: 10:3a:1a:9a:8d:c3:4f:5c:a3:f0:b3:c9:3d:1b:67: 2b:55:74:5e:82:c0:8a:1d:95:e1:22:ba:0c:16:7c: 05:16:4a:ef:49:b4:42:d5:f2:f3:8c:2b:e4:ef:d9: f1:93:12:b4:c2:78:13:b8:f2:c9:6a:34:98:67:57: b6:48:f1:25:2f:af:6c:5e:e0:1a:e5:a6:06:0b:b2: 63:63:2a:47:fd:b8:46:b3:9f:3e:8b:cd:c5:2e:a2: 07:23:2e:c2:3f:09:ab:1b:ae:42:97:6f:81:a9:5a: 00:55:72:ba:77:39:50:b4:50:01:ce:2c:f3:dd:21: ac:61:b4:2a:14:63:85:6b:70:cd:b8:17:55:d2:16: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:10:91:2A:F5:C0:92:AA:4A:0B:CB:11:7B:B4:6C:89:B8:97:D2:AD X509v3 Authority Key Identifier: keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:25:4d:e5:22:ef:d1:56:8b:86:32:90:73:67:6f:db:f9:d3: 90:db:29:5e:6b:50:fb:79:19:c2:0d:a4:cf:22:41:21:96:b5: e6:89:a0:02:d5:17:14:e4:84:14:4c:8b:3d:85:1d:7c:c5:6f: 3b:e3:0a:04:84:a6:08:8e:e9:5c:2e:c0:bf:e1:ab:e2:7e:c0: be:50:66:93:fa:6d:68:99:b1:6a:eb:81:c1:d0:b8:e7:7b:5d: 5d:52:32:bc:cc:ff:fc:28:8e:01:04:09:7e:88:cb:97:82:3b: 58:f7:a4:da:72:2c:40:d7:74:85:5a:ab:73:ee:c7:d0:6b:35: 4a:e5:4a:df:0c:ac:62:ae:a9:6d:e4:4e:ac:d4:fd:0c:73:59: 45:89:37:16:8a:d5:35:54:69:61:e7:90:29:c2:25:c9:4c:a2: 38:1e:08:8f:16:36:24:46:88:09:13:85:f2:7e:95:a0:42:a6: f6:0a:97:69:16:c9:cf:85:d0:7b:af:12:e5:02:3e:9a:28:cc: 7c:9d:18:d5:c8:16:09:3f:bf:cf:c2:04:4c:3f:09:ba:e4:c5: b3:30:90:bf:14:e9:f8:6e:68:2e:fa:41:b4:f5:99:d1:96:fd: 4b:b8:08:03:85:61:b2:db:3c:a1:f3:02:31:51:32:04:e4:62: 67:37:83:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfum/gNDpM+mSEcuM8O0Vt1zN8tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4 RDM4NjhGQzAeFw0yNjA1MTIxNTU1MzJaFw0yNjA1MTMxNzEyMzJaMDMxMTAvBgNV BAMTKDYyMTA5MTJBRjVDMDkyQUE0QTBCQ0IxMTdCQjQ2Qzg5Qjg5N0QyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YvyNsHIfInAb0+IH37cQ7rku GSo9lKcvIegWHWFiG6oheNwSKboG2aGaEP1/9+Th+67imWsKlfciqb+9V7Y+bXBi rY7fY2oFo620hFfrf73wSjw/4P+zIfLGCLfh8DQ03qvfzzcFgULytYQSY5TGFhk9 11sZrhA6GpqNw09co/CzyT0bZytVdF6CwIodleEiugwWfAUWSu9JtELV8vOMK+Tv 2fGTErTCeBO48slqNJhnV7ZI8SUvr2xe4BrlpgYLsmNjKkf9uEaznz6LzcUuogcj LsI/CasbrkKXb4GpWgBVcrp3OVC0UAHOLPPdIaxhtCoUY4VrcM24F1XSFhdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhCRKvXAkqpKC8sRe7RsibiX0q0wHwYDVR0j BBgwFoAUp7FozkZq50RGtlDPgkYYlY04aPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMGQ3ZmEtZDZmOC00YzIyLWI0OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0 NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4RDM4NjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0IxNjhDRTQ2NkFFNzQ0NDZCNjUwQ0Y4MjQ2MTg5NThEMzg2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4 OTU4RDM4NjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQlTeUi79FWi4YykHNnb9v505DbKV5rUPt5 GcINpM8iQSGWteaJoALVFxTkhBRMiz2FHXzFbzvjCgSEpgiO6VwuwL/hq+J+wL5Q ZpP6bWiZsWrrgcHQuOd7XV1SMrzM//wojgEECX6Iy5eCO1j3pNpyLEDXdIVaq3Pu x9BrNUrlSt8MrGKuqW3kTqzU/QxzWUWJNxaK1TVUaWHnkCnCJclMojgeCI8WNiRG iAkThfJ+laBCpvYKl2kWyc+F0HuvEuUCPpoozHydGNXIFgk/v8/CBEw/CbrkxbMw kL8U6fhuaC76QbT1mdGW/Uu4CAOFYbLbPKHzAjFRMgTkYmc3g4k= -----END CERTIFICATE-----Generated at Wed May 13 01:37:46 2026 by rpki-client