$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: +c9d0UxojKMWViVWFJM2gGuw4NmopRZVsIioTVx0NkU= Subject key identifier: DF:E4:28:91:C1:F9:0C:B2:FE:04:96:23:DB:8F:33:B6:B8:82:19:AD Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 2BDF42B9DF689C53AA2E14A86A4D84243C93DCFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:30:54 +0000 Manifest this update: Tue 12 May 2026 09:25:54 +0000 Manifest next update: Wed 13 May 2026 09:42:54 +0000 Files and hashes: 1: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: l0xFsNOrojXHdW3EcEayyk/OuA/HGZoMhK0R9EKOTmc=) 2: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) 3: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:df:42:b9:df:68:9c:53:aa:2e:14:a8:6a:4d:84:24:3c:93:dc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: May 12 09:25:54 2026 GMT Not After : May 13 09:42:54 2026 GMT Subject: CN=DFE42891C1F90CB2FE049623DB8F33B6B88219AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:ac:5c:d7:65:bf:58:3f:99:7f:b3:fb:fa: cb:16:4c:5d:20:f1:70:cf:96:20:9f:97:93:b4:25: 66:d0:30:cb:e2:f7:bd:92:10:11:59:6d:de:74:93: b9:14:78:3c:ba:5a:4c:83:82:ce:84:b9:99:34:04: b9:5e:0d:06:ec:08:07:f6:1b:28:e3:a6:1c:3a:93: 48:48:58:75:26:0c:ff:56:56:db:7f:fe:ac:4d:ee: 25:63:7e:67:1b:41:c2:70:ea:da:15:77:3a:04:7c: 0c:99:b9:ba:e0:73:a0:c8:f8:cd:16:cf:de:af:72: c4:98:bc:9f:75:aa:d2:2f:26:bd:72:f8:16:ed:5f: 78:94:79:63:c4:27:1f:50:11:ac:5d:25:68:fa:38: f1:40:0d:a6:d6:b3:7f:aa:6f:db:b4:31:3e:b3:99: 05:8e:20:3c:15:c3:10:d9:fe:bb:93:37:7e:49:81: c2:ad:79:42:57:3e:86:c2:f9:38:25:57:c8:e3:bf: 28:27:8d:25:7d:57:41:e6:ef:d1:52:35:60:c3:6c: b8:07:31:98:9e:ac:f5:b8:52:bf:d9:1f:0f:ed:d2: e8:de:ff:51:eb:1b:25:5d:5c:f2:29:3e:1e:27:55: 92:8e:b2:27:f5:e5:00:80:ba:e3:b5:01:da:a3:d4: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:28:91:C1:F9:0C:B2:FE:04:96:23:DB:8F:33:B6:B8:82:19:AD X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b5:7b:6e:71:0a:09:74:c6:48:64:4a:af:f9:c1:e5:02:9f: 27:66:fd:c5:7c:5a:2a:23:80:ef:f9:0e:7a:f3:42:96:f3:dd: 1b:83:8f:a4:fd:99:6a:bb:a7:7c:b2:fa:39:e8:de:91:67:e3: 69:5c:c4:03:84:2e:72:27:01:0f:d7:ad:82:51:be:0f:94:d7: 64:b3:0d:2a:0f:5d:f8:9a:7e:00:35:31:27:27:68:4c:c5:24: 59:bb:42:db:71:4f:1f:83:b3:a2:0e:0f:1f:3b:fe:5b:aa:f6: 8c:6b:d7:1a:6a:d0:2b:25:86:48:e0:18:ff:d9:39:fe:05:60: ac:79:25:00:5d:57:7c:2c:92:29:ad:ac:9f:12:77:e1:a9:5c: 11:17:a5:cf:b8:39:9e:b8:61:81:d2:c6:de:c9:6b:4b:c1:20: 4d:07:dd:a0:c5:52:bd:0f:c8:e4:76:0d:18:9a:41:44:3c:53: 50:1d:85:ef:3b:1f:a6:3d:9e:07:9e:9f:f3:44:f0:a9:4c:bd: f7:51:06:2f:e5:d9:74:ac:ae:73:fa:c9:5e:a6:16:3c:86:38: 5b:0a:24:74:bc:17:fb:55:48:d3:18:a5:1b:ff:db:79:c9:8a: d7:15:94:4d:db:a1:e2:59:20:af:72:44:8a:a4:a1:5f:25:74: 5e:1d:e0:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK99Cud9onFOqLhSoak2EJDyT3PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjA1MTIwOTI1NTRaFw0yNjA1MTMwOTQyNTRaMDMxMTAvBgNV BAMTKERGRTQyODkxQzFGOTBDQjJGRTA0OTYyM0RCOEYzM0I2Qjg4MjE5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdqxc12W/WD+Zf7P7+ssWTF0g 8XDPliCfl5O0JWbQMMvi972SEBFZbd50k7kUeDy6WkyDgs6EuZk0BLleDQbsCAf2 Gyjjphw6k0hIWHUmDP9WVtt//qxN7iVjfmcbQcJw6toVdzoEfAyZubrgc6DI+M0W z96vcsSYvJ91qtIvJr1y+BbtX3iUeWPEJx9QEaxdJWj6OPFADabWs3+qb9u0MT6z mQWOIDwVwxDZ/ruTN35JgcKteUJXPobC+TglV8jjvygnjSV9V0Hm79FSNWDDbLgH MZierPW4Ur/ZHw/t0uje/1HrGyVdXPIpPh4nVZKOsif15QCAuuO1Adqj1H3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+QokcH5DLL+BJYj248ztriCGa0wHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG1e25xCgl0xkhkSq/5weUCnydm/cV8Wioj gO/5DnrzQpbz3RuDj6T9mWq7p3yy+jno3pFn42lcxAOELnInAQ/XrYJRvg+U12Sz DSoPXfiafgA1MScnaEzFJFm7QttxTx+Ds6IODx87/luq9oxr1xpq0CslhkjgGP/Z Of4FYKx5JQBdV3wskimtrJ8Sd+GpXBEXpc+4OZ64YYHSxt7Ja0vBIE0H3aDFUr0P yOR2DRiaQUQ8U1Adhe87H6Y9ngeen/NE8KlMvfdRBi/l2XSsrnP6yV6mFjyGOFsK JHS8F/tVSNMYpRv/23nJitcVlE3boeJZIK9yRIqkoV8ldF4d4FY= -----END CERTIFICATE-----Generated at Tue May 12 22:20:00 2026 by rpki-client