$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json) Hash identifier: 1NaJEJy1hXFBpH+WwcYGDUjM+E0EBxUSRMpO8P2NzAo= Subject key identifier: 45:80:FA:13:F4:FE:8D:D7:5E:51:2B:D9:DE:6A:3E:7A:3B:49:67:00 Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Certificate serial: 667006F4985D70E5255767A21FA343DB65808AF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:05:18 +0000 Manifest this update: Tue 12 May 2026 22:00:18 +0000 Manifest next update: Wed 13 May 2026 22:20:18 +0000 Files and hashes: 1: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=) 2: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=) 3: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=) 4: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=) 5: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=) 6: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=) 7: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: bx2vYhsn4MiMSi/JoiB47nGwwzgvLMx6PbSQgoncenw=) 8: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:70:06:f4:98:5d:70:e5:25:57:67:a2:1f:a3:43:db:65:80:8a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Validity Not Before: May 12 22:00:18 2026 GMT Not After : May 13 22:20:18 2026 GMT Subject: CN=4580FA13F4FE8DD75E512BD9DE6A3E7A3B496700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:c5:03:07:61:64:ad:fa:7e:16:11:07:a2: 3a:10:da:43:7c:cb:73:b6:55:fd:02:84:4f:b5:73: bf:3f:77:50:fd:19:4c:c8:90:d6:35:cf:29:f8:0e: a6:49:f4:91:77:3b:bb:67:04:cb:9e:54:21:d0:51: 55:54:4a:5f:01:5f:c9:ea:3f:e8:5f:86:0f:35:fa: 09:ea:b0:67:95:c3:e2:14:97:24:28:39:70:44:ef: 65:80:ed:a4:be:ea:bd:d6:a1:58:65:df:9c:a9:2a: 1a:7b:17:e2:b6:f3:28:0c:ec:e9:f4:3d:79:5e:3b: cb:91:ce:5c:8a:65:be:ee:32:08:2c:21:b4:94:ff: 00:71:76:79:26:07:b8:cc:dc:a8:32:a2:1f:63:49: 0f:14:fd:be:ff:75:7f:25:74:22:c6:ca:e1:59:ee: e3:df:d8:9d:7b:34:a7:70:34:52:21:c3:39:6a:ad: 5f:f3:b3:35:eb:88:39:35:ac:20:fb:11:f0:1c:2c: c7:82:a8:27:c0:e4:20:5d:27:39:76:8f:6d:de:71: d9:3b:c4:90:56:1f:c3:d4:98:07:39:d7:75:c1:dc: 09:0a:dd:fa:14:9b:db:e9:f4:99:e2:fe:43:26:ec: 26:f4:f4:08:8e:b7:61:cb:20:81:ff:1c:ab:95:0d: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:FA:13:F4:FE:8D:D7:5E:51:2B:D9:DE:6A:3E:7A:3B:49:67:00 X509v3 Authority Key Identifier: keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a5:45:a0:68:a5:7e:ef:f1:ca:67:7e:e0:70:ce:d1:98:24: c4:57:06:41:d0:91:4d:ca:0e:46:f6:38:4a:0c:b2:f0:02:9d: c3:0a:8f:37:8b:49:c4:10:80:0f:57:a3:ef:9b:a4:44:44:09: 66:88:fb:8d:62:d3:df:a6:f6:dc:da:8e:8f:93:0f:69:a1:fa: 6b:1b:24:7d:47:4f:a8:b0:94:13:4d:c4:8e:40:4b:c6:6b:28: 99:9f:be:54:f6:4d:49:c9:c5:6e:c6:a6:8e:a9:81:43:5a:37: e6:13:20:59:9f:78:29:32:d8:54:01:38:a4:62:ff:9d:0f:04: 0e:11:bd:ed:96:c7:30:2d:74:0b:4b:f2:c2:d6:ec:f3:49:24: 97:72:0a:85:7d:d4:20:8d:e6:cd:ca:b6:d3:c6:ef:e5:4f:77: 88:8f:ab:b7:49:b9:4f:e1:7d:d4:a2:c7:a9:fd:2a:5e:28:b7: 1d:41:e6:9f:94:97:14:16:b4:0a:c4:33:2c:41:41:a9:e9:dc: 9f:35:d0:20:48:8b:7b:43:15:53:f8:62:7e:a7:90:33:a7:a9: 48:7c:32:4b:70:6f:7a:78:67:d5:0d:55:f0:d0:df:37:b8:d3: fe:82:d2:26:6b:c4:2e:ce:b4:e9:2f:db:14:b4:c7:82:89:39: 1a:7a:70:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnAG9JhdcOUlV2eiH6ND22WAivcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC QTA5RUI2NDAeFw0yNjA1MTIyMjAwMThaFw0yNjA1MTMyMjIwMThaMDMxMTAvBgNV BAMTKDQ1ODBGQTEzRjRGRThERDc1RTUxMkJEOURFNkEzRTdBM0I0OTY3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJ8UDB2Fkrfp+FhEHojoQ2kN8 y3O2Vf0ChE+1c78/d1D9GUzIkNY1zyn4DqZJ9JF3O7tnBMueVCHQUVVUSl8BX8nq P+hfhg81+gnqsGeVw+IUlyQoOXBE72WA7aS+6r3WoVhl35ypKhp7F+K28ygM7On0 PXleO8uRzlyKZb7uMggsIbSU/wBxdnkmB7jM3Kgyoh9jSQ8U/b7/dX8ldCLGyuFZ 7uPf2J17NKdwNFIhwzlqrV/zszXriDk1rCD7EfAcLMeCqCfA5CBdJzl2j23ecdk7 xJBWH8PUmAc513XB3AkK3foUm9vp9Jni/kMm7Cb09AiOt2HLIIH/HKuVDSXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYD6E/T+jddeUSvZ3mo+ejtJZwAwHwYDVR0j BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhF QTdCQTA5RUI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2lRaBopX7v8cpnfuBwztGYJMRXBkHQkU3K Dkb2OEoMsvACncMKjzeLScQQgA9Xo++bpERECWaI+41i09+m9tzajo+TD2mh+msb JH1HT6iwlBNNxI5AS8ZrKJmfvlT2TUnJxW7Gpo6pgUNaN+YTIFmfeCky2FQBOKRi /50PBA4Rve2WxzAtdAtL8sLW7PNJJJdyCoV91CCN5s3KttPG7+VPd4iPq7dJuU/h fdSix6n9Kl4otx1B5p+UlxQWtArEMyxBQanp3J810CBIi3tDFVP4Yn6nkDOnqUh8 Mktwb3p4Z9UNVfDQ3ze40/6C0iZrxC7OtOkv2xS0x4KJORp6cKw= -----END CERTIFICATE-----Generated at Wed May 13 02:49:40 2026 by rpki-client