$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft File: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft (raw, json) Hash identifier: Rs+bmrtb8m8cB8yciWSomywnJapsI8211Td7m3hqtwY= Subject key identifier: 12:BE:71:E1:94:05:91:5C:C2:98:F6:59:BA:EB:F2:C2:F6:FE:27:23 Authority key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 Certificate issuer: /CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Certificate serial: 1898A283AEF8681D094A5D9B966606F7AFAB70A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:25 +0000 Manifest this update: Tue 12 May 2026 19:20:25 +0000 Manifest next update: Wed 13 May 2026 20:13:25 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: iNJDLui3MvH+G4nBQHtpKPOOwaP9++CI/XGWFFMM0oA=) 2: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl (hash: v6TXh6LyXgN5/zyC8K9cF+r9CNe7xFPV9eeUFsZDGFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:98:a2:83:ae:f8:68:1d:09:4a:5d:9b:96:66:06:f7:af:ab:70:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Validity Not Before: May 12 19:20:25 2026 GMT Not After : May 13 20:13:25 2026 GMT Subject: CN=12BE71E19405915CC298F659BAEBF2C2F6FE2723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:81:76:be:e5:1a:2c:ab:48:28:48:71:37: 37:48:40:08:ee:de:47:30:83:0f:3c:fb:99:7b:f3: 02:74:29:3e:b3:08:e0:2f:73:21:5e:5e:99:0f:d5: 9a:53:0c:40:49:31:f6:58:4f:56:25:81:c0:4c:ea: 83:8a:d2:f5:c9:79:9c:e8:63:81:aa:f3:0f:dc:7d: b3:82:a5:e3:81:99:34:42:b1:cc:6f:e1:0d:f0:6a: c7:30:76:7c:b5:67:1e:e6:a9:b1:5f:b0:dc:51:6d: d9:a4:90:d8:da:97:4f:c9:57:4e:8c:1d:e6:b4:37: cf:db:c9:cb:b0:3e:25:16:17:81:7b:6e:59:e9:4a: 52:45:70:30:1d:ef:72:7f:de:f9:2a:22:8c:8b:ef: a1:8d:3f:f4:b9:9e:ee:de:f6:13:76:6d:92:a1:04: ad:99:02:16:de:f1:08:48:f9:5a:75:63:2d:8e:65: f6:27:7a:4e:8b:59:fd:a1:9b:45:5e:eb:f9:c7:16: ad:13:9c:ac:0a:da:b2:14:ef:ed:60:23:46:7e:61: e5:b9:3e:6c:8c:65:44:8d:06:05:67:5f:fb:b4:8f: 08:12:73:f3:9c:85:b4:a0:38:3b:07:46:2c:02:ff: 9f:be:e5:a8:ab:0e:54:74:e2:97:11:6b:bb:12:44: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BE:71:E1:94:05:91:5C:C2:98:F6:59:BA:EB:F2:C2:F6:FE:27:23 X509v3 Authority Key Identifier: keyid:7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:03:cd:19:fa:7e:ff:9f:45:3b:93:2e:ff:3b:a1:0d:f5:10: e3:af:b6:6b:59:05:dd:f4:3a:40:e4:23:00:70:d1:33:e2:90: 31:96:f2:61:34:41:f6:64:a5:0a:66:c6:89:28:1f:52:ac:1e: 39:6a:5f:41:f3:c8:68:e6:ed:8d:c8:e8:7b:48:61:90:34:56: 14:97:f7:29:b0:2a:36:a6:4b:2c:75:9d:d7:3f:cd:c1:87:13: ed:7b:26:e6:97:d8:e0:4e:e5:83:65:6a:d5:f2:03:57:1b:56: 57:51:28:5a:28:68:3f:76:cc:35:b8:89:e4:09:b8:48:07:94: 3a:12:8c:0a:ca:c0:1e:5b:3a:04:5a:c2:de:10:d6:ca:7a:66: 67:e9:38:4e:28:76:1a:aa:79:af:35:b4:8a:7f:51:23:a8:cb: 48:0e:2a:c9:32:63:26:ac:18:ad:1b:b1:b1:a8:83:c0:fa:7b: 8d:2d:dd:72:26:ef:0c:e4:b7:61:47:e4:a6:ec:25:4c:6c:b4: cc:37:56:57:e2:4f:fc:64:28:1e:5d:12:fb:e3:60:2a:fb:1e: 0f:c6:7f:77:15:bb:77:1c:89:19:87:d3:40:17:4f:50:2b:86: 77:5e:e1:00:8b:32:94:bf:f8:31:b6:f0:ee:29:3b:94:48:f7: bc:f1:81:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJiig674aB0JSl2blmYG96+rcKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlE NEZGRkEwMTAeFw0yNjA1MTIxOTIwMjVaFw0yNjA1MTMyMDEzMjVaMDMxMTAvBgNV BAMTKDEyQkU3MUUxOTQwNTkxNUNDMjk4RjY1OUJBRUJGMkMyRjZGRTI3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVoF2vuUaLKtIKEhxNzdIQAju 3kcwgw88+5l78wJ0KT6zCOAvcyFeXpkP1ZpTDEBJMfZYT1YlgcBM6oOK0vXJeZzo Y4Gq8w/cfbOCpeOBmTRCscxv4Q3wascwdny1Zx7mqbFfsNxRbdmkkNjal0/JV06M Hea0N8/bycuwPiUWF4F7blnpSlJFcDAd73J/3vkqIoyL76GNP/S5nu7e9hN2bZKh BK2ZAhbe8QhI+Vp1Yy2OZfYnek6LWf2hm0Ve6/nHFq0TnKwK2rIU7+1gI0Z+YeW5 PmyMZUSNBgVnX/u0jwgSc/OchbSgODsHRiwC/5++5airDlR04pcRa7sSRKb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEr5x4ZQFkVzCmPZZuuvywvb+JyMwHwYDVR0j BBgwFoAUf1o35C4PK319RF5k1Y0T+dT/+gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWNjYzVmNjQtZWQ2Mi00ODQ4LThjMzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQy RTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlENEZGRkEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjVBMzdFNDJFMEYyQjdEN0Q0NDVFNjRENThEMTNGOUQ0RkZG QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEz RjlENEZGRkEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgDzRn6fv+fRTuTLv87oQ31EOOvtmtZBd30 OkDkIwBw0TPikDGW8mE0QfZkpQpmxokoH1KsHjlqX0HzyGjm7Y3I6HtIYZA0VhSX 9ymwKjamSyx1ndc/zcGHE+17JuaX2OBO5YNlatXyA1cbVldRKFooaD92zDW4ieQJ uEgHlDoSjArKwB5bOgRawt4Q1sp6ZmfpOE4odhqqea81tIp/USOoy0gOKskyYyas GK0bsbGog8D6e40t3XIm7wzkt2FH5KbsJUxstMw3VlfiT/xkKB5dEvvjYCr7Hg/G f3cVu3cciRmH00AXT1Arhnde4QCLMpS/+DG28O4pO5RI97zxgXQ= -----END CERTIFICATE-----Generated at Wed May 13 02:50:58 2026 by rpki-client