$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: QkexjTSmk+nhDTP1IIkRiz9oGdnbq8GxEQJthXyoq/o= Subject key identifier: EB:03:3D:C5:23:6A:12:C9:F4:98:C0:63:C6:A9:A6:75:D9:88:E9:EC Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 6191DD77DD9CD5F2E5BFA6664F5364A922A007B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:25:48 +0000 Manifest this update: Tue 12 May 2026 22:20:48 +0000 Manifest next update: Thu 14 May 2026 01:48:48 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 3: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: BlqIcQBB7NqhCsDNSYf1tPcCQRuBTnKGKAnGY3q1aHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:91:dd:77:dd:9c:d5:f2:e5:bf:a6:66:4f:53:64:a9:22:a0:07:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: May 12 22:20:48 2026 GMT Not After : May 14 01:48:48 2026 GMT Subject: CN=EB033DC5236A12C9F498C063C6A9A675D988E9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:2e:c7:55:d1:62:bc:61:c7:d2:ed:43:f7: 2b:df:76:14:53:53:cd:02:b5:3f:31:13:d2:93:57: 0b:97:aa:ab:88:a9:d0:f7:87:9d:e3:b2:dd:39:42: 17:67:d9:52:b7:4c:1d:ec:c3:9d:ca:63:3e:d6:f1: 2b:35:20:3a:3b:c7:62:26:78:24:97:f1:94:03:06: 61:26:59:15:8b:14:2b:bc:24:0f:67:41:6f:4f:50: 5f:9c:95:54:8d:a5:93:0b:3f:28:66:e9:cf:3e:01: 63:d4:30:a3:af:4e:50:41:79:63:01:4a:d1:dc:48: 05:01:d1:2c:ae:13:de:51:4c:d2:36:81:0c:09:3c: a1:b8:29:55:80:16:6b:89:55:2e:31:4c:cb:1e:60: 37:7c:0f:4a:29:db:8a:91:1c:37:fa:de:b5:06:95: de:3c:b2:e2:dd:a8:0a:ce:e8:13:71:b6:cb:93:51: 38:70:99:4d:d9:28:92:41:76:b1:79:a4:3e:a9:29: 69:35:e0:c5:30:39:90:21:ea:6c:b9:ca:48:13:65: 77:22:4c:0e:c6:4e:16:f1:a7:96:a4:a6:29:52:7c: 47:1e:ba:74:a0:31:93:a0:de:82:f9:ad:bd:07:6f: a5:e9:af:ea:8f:37:22:27:71:85:8c:45:6e:6a:ff: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:3D:C5:23:6A:12:C9:F4:98:C0:63:C6:A9:A6:75:D9:88:E9:EC X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c1:61:fb:e2:63:cd:f8:b0:0d:ef:e3:12:c7:09:a4:e6:1e: 40:4e:32:1d:1c:0b:28:09:27:5e:70:6a:ce:3f:b7:6e:9b:6a: d5:a7:59:54:74:07:f8:d8:b3:17:bc:7a:f0:ed:26:bb:2b:4a: 78:fb:ff:b8:33:b4:ac:de:66:4f:a9:af:15:b6:f2:7f:08:d1: 54:95:01:f1:e8:7c:85:9a:6b:dc:cb:5a:35:60:94:b0:06:6c: 30:c4:bf:9f:b4:df:33:7c:43:29:46:97:ef:6a:76:ee:1e:fa: e4:d1:ec:fa:14:8f:2a:d4:3c:63:0a:cc:d5:cb:69:3c:2f:e6: a3:2a:b5:10:ff:ea:0a:82:06:04:a6:9f:55:5d:00:a3:a4:da: 5b:dc:bf:b5:11:7e:2e:d5:10:59:d8:8d:1b:a1:de:dd:6f:5e: 9b:c7:2a:c4:1b:eb:3c:7a:7a:9f:ab:34:28:0c:2e:fa:57:94: 2e:7e:b4:87:d3:86:d0:a7:d9:07:a8:0b:68:3e:bd:20:24:2c: fb:51:04:a3:73:2d:18:30:79:28:06:aa:69:c6:85:1e:98:18: 6e:5f:28:fe:ac:79:c9:d0:40:d2:8e:b9:1e:3c:77:72:9b:5b: d6:8a:e6:7f:2e:78:f8:50:4e:c5:6c:24:ab:d1:bb:f5:4b:d7: 42:7f:3f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZHdd92c1fLlv6ZmT1NkqSKgB7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA1MTIyMjIwNDhaFw0yNjA1MTQwMTQ4NDhaMDMxMTAvBgNV BAMTKEVCMDMzREM1MjM2QTEyQzlGNDk4QzA2M0M2QTlBNjc1RDk4OEU5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDS7HVdFivGHH0u1D9yvfdhRT U80CtT8xE9KTVwuXqquIqdD3h53jst05Qhdn2VK3TB3sw53KYz7W8Ss1IDo7x2Im eCSX8ZQDBmEmWRWLFCu8JA9nQW9PUF+clVSNpZMLPyhm6c8+AWPUMKOvTlBBeWMB StHcSAUB0SyuE95RTNI2gQwJPKG4KVWAFmuJVS4xTMseYDd8D0op24qRHDf63rUG ld48suLdqArO6BNxtsuTUThwmU3ZKJJBdrF5pD6pKWk14MUwOZAh6my5ykgTZXci TA7GThbxp5akpilSfEceunSgMZOg3oL5rb0Hb6Xpr+qPNyIncYWMRW5q/5E7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wM9xSNqEsn0mMBjxqmmddmI6ewwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPBYfviY834sA3v4xLHCaTmHkBOMh0cCygJ J15was4/t26batWnWVR0B/jYsxe8evDtJrsrSnj7/7gztKzeZk+prxW28n8I0VSV AfHofIWaa9zLWjVglLAGbDDEv5+03zN8QylGl+9qdu4e+uTR7PoUjyrUPGMKzNXL aTwv5qMqtRD/6gqCBgSmn1VdAKOk2lvcv7URfi7VEFnYjRuh3t1vXpvHKsQb6zx6 ep+rNCgMLvpXlC5+tIfThtCn2QeoC2g+vSAkLPtRBKNzLRgweSgGqmnGhR6YGG5f KP6secnQQNKOuR48d3KbW9aK5n8uePhQTsVsJKvRu/VL10J/P/g= -----END CERTIFICATE-----Generated at Wed May 13 00:31:06 2026 by rpki-client