$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: z6uxTIGuUQtfp0c4Z3hAHu95UqUiNYnF9UabmO/iUzA= Subject key identifier: FD:53:28:6E:81:BE:B3:92:60:7A:EA:DC:E4:03:F4:E9:29:A3:BF:F5 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 63947DE7104176D45382CAEEFC89A463F820289B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:15:52 +0000 Manifest this update: Tue 12 May 2026 16:10:52 +0000 Manifest next update: Wed 13 May 2026 19:56:52 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 3: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: +l2Laymu4BeHx30L3UOV4QoLY7ICs5GipNL94XRumu8=) 4: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:7d:e7:10:41:76:d4:53:82:ca:ee:fc:89:a4:63:f8:20:28:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: May 12 16:10:52 2026 GMT Not After : May 13 19:56:52 2026 GMT Subject: CN=FD53286E81BEB392607AEADCE403F4E929A3BFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:58:e0:22:e2:cf:54:49:95:9a:98:1d:b3: ad:5e:fa:25:91:cf:64:99:d6:93:e4:a8:a8:98:36: 90:23:4c:19:94:68:82:08:08:a0:e6:11:9e:33:20: 54:ab:88:ad:79:05:00:0f:12:dc:fa:58:52:f6:16: cc:71:df:5b:d2:27:14:61:64:c0:39:81:03:78:52: aa:ff:48:8f:69:42:be:87:cb:b0:b4:cb:af:18:4c: 96:58:d0:b6:39:03:0e:bd:44:34:ff:fa:dd:89:fa: 7b:da:82:53:d6:30:05:a4:62:c3:95:8a:55:94:df: c7:0d:3b:e7:9e:e2:bf:0e:7e:28:72:b3:04:d9:fd: 19:97:f3:61:6f:7d:9e:6f:64:9e:e9:51:54:83:34: 5c:f5:8c:f6:8d:55:ed:55:b7:df:9d:a0:e0:c2:64: 34:b1:3b:eb:44:d5:ae:b0:c7:94:dd:d6:43:42:b6: 90:77:d2:3b:71:51:7e:6a:0a:5a:57:f4:9d:be:55: 51:f0:12:a2:86:74:65:bc:e8:f5:40:0d:f9:9e:0d: e8:fc:e2:de:7c:c8:1c:19:da:73:a7:91:3c:18:66: ef:43:27:1d:d0:64:8c:13:05:06:4c:85:84:50:b2: 09:80:a7:88:19:21:f3:d9:52:df:88:18:19:4e:a2: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:28:6E:81:BE:B3:92:60:7A:EA:DC:E4:03:F4:E9:29:A3:BF:F5 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a8:ea:b9:27:5b:04:64:89:b3:90:03:83:7b:a8:9f:e9:42: 05:9c:46:49:9d:49:c2:33:90:a7:93:7a:17:72:2a:0f:e0:a0: c3:a9:57:7a:e8:a2:82:fb:92:58:0b:1a:65:a0:02:c3:64:86: 8a:01:c5:01:26:5e:03:91:6f:b6:ea:36:35:d1:fb:f7:71:01: f2:65:c9:26:8e:77:c5:a0:91:02:90:40:77:43:37:0a:8a:bd: 9a:80:c8:63:fd:77:73:12:c6:47:c3:16:e5:a6:67:37:91:2d: dc:bd:e2:d2:a5:f5:e1:c2:00:24:83:52:2a:86:46:81:f3:87: 43:56:76:5a:1e:e9:6b:28:ce:c2:ae:46:2a:93:ff:43:32:f3: f9:50:8d:81:7c:49:7f:db:32:a9:f5:54:34:fb:90:2e:4e:da: 07:e3:d4:1f:31:a7:e0:70:0c:cc:ef:e5:b9:1f:db:e3:c4:94: 2d:e3:c8:9e:68:77:b0:a1:68:4e:6b:77:36:1b:cb:10:1f:44: b3:8a:b9:44:a6:38:65:4a:4d:fc:19:57:aa:33:18:28:60:0a: 57:05:5f:1e:14:5d:22:8b:65:39:d2:a5:55:92:b4:c5:fc:c1: 55:bd:57:3c:7d:70:e4:ab:26:78:65:c9:fa:78:d9:53:96:f6: ee:d3:a1:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5R95xBBdtRTgsru/ImkY/ggKJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA1MTIxNjEwNTJaFw0yNjA1MTMxOTU2NTJaMDMxMTAvBgNV BAMTKEZENTMyODZFODFCRUIzOTI2MDdBRUFEQ0U0MDNGNEU5MjlBM0JGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGFjgIuLPVEmVmpgds61e+iWR z2SZ1pPkqKiYNpAjTBmUaIIICKDmEZ4zIFSriK15BQAPEtz6WFL2Fsxx31vSJxRh ZMA5gQN4Uqr/SI9pQr6Hy7C0y68YTJZY0LY5Aw69RDT/+t2J+nvaglPWMAWkYsOV ilWU38cNO+ee4r8OfihyswTZ/RmX82FvfZ5vZJ7pUVSDNFz1jPaNVe1Vt9+doODC ZDSxO+tE1a6wx5Td1kNCtpB30jtxUX5qClpX9J2+VVHwEqKGdGW86PVADfmeDej8 4t58yBwZ2nOnkTwYZu9DJx3QZIwTBQZMhYRQsgmAp4gZIfPZUt+IGBlOouKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VMoboG+s5Jgeurc5AP06Smjv/UwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGo6rknWwRkibOQA4N7qJ/pQgWcRkmdScIz kKeTehdyKg/goMOpV3roooL7klgLGmWgAsNkhooBxQEmXgORb7bqNjXR+/dxAfJl ySaOd8WgkQKQQHdDNwqKvZqAyGP9d3MSxkfDFuWmZzeRLdy94tKl9eHCACSDUiqG RoHzh0NWdloe6WsozsKuRiqT/0My8/lQjYF8SX/bMqn1VDT7kC5O2gfj1B8xp+Bw DMzv5bkf2+PElC3jyJ5od7ChaE5rdzYbyxAfRLOKuUSmOGVKTfwZV6ozGChgClcF Xx4UXSKLZTnSpVWStMX8wVW9Vzx9cOSrJnhlyfp42VOW9u7ToYo= -----END CERTIFICATE-----Generated at Wed May 13 00:44:20 2026 by rpki-client