$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: HF4IIznNfnLxW3o595v1jbtmMFHeSgUGIoogyPVXHuc= Subject key identifier: 29:9B:31:83:D7:40:BB:A8:C0:1E:CC:E1:9A:3B:19:FA:11:48:B1:5F Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 606EB3E1D333EE779DBD666650BE7CD1684B8984 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:38 +0000 Manifest this update: Tue 12 May 2026 23:32:38 +0000 Manifest next update: Thu 14 May 2026 02:23:38 +0000 Files and hashes: 1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) 3: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: 2EZK5pz+TGz/eh4CVrYef4kFD46rQgFgWvrhsp+Q54w=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6e:b3:e1:d3:33:ee:77:9d:bd:66:66:50:be:7c:d1:68:4b:89:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: May 12 23:32:38 2026 GMT Not After : May 14 02:23:38 2026 GMT Subject: CN=299B3183D740BBA8C01ECCE19A3B19FA1148B15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:1f:bc:7d:64:97:48:36:7d:1e:2b:b1:65: 75:30:87:1a:9e:28:3a:a7:59:d1:a9:2f:60:52:e0: 8d:3f:86:37:2b:36:87:33:2d:4f:22:83:b1:63:f6: 2b:0a:ca:6a:f2:76:14:cb:cd:94:ba:8c:8c:97:3c: 0c:7f:65:18:ee:c1:b2:c8:6d:8a:f7:39:b5:65:85: e5:b7:19:57:96:e5:75:64:a0:07:48:cf:07:1f:0b: 72:cd:e2:ea:d3:18:51:e9:1f:83:98:27:8e:0c:a9: eb:a4:02:fe:73:a3:16:5f:ce:ab:ca:22:2a:9e:28: 82:67:09:d0:1d:5b:39:65:45:df:29:88:c1:7b:15: 43:f4:10:30:42:02:8a:c6:21:da:96:bd:f8:8a:55: 93:9d:29:d0:33:05:7c:30:79:9e:ff:f3:3d:25:a3: 18:d2:a1:94:a3:c1:27:05:5f:bc:6f:bb:9a:d4:b3: 38:37:72:5d:f7:af:df:31:77:b7:79:15:b2:db:78: 37:c3:f2:05:e0:d0:7d:b5:40:73:58:58:11:08:1d: 69:0e:26:b0:f6:86:3a:b7:05:2b:46:e5:cb:41:e1: d8:46:77:0f:0d:51:5e:5a:fe:07:cd:17:12:1b:2d: 01:05:7b:5d:2c:52:f9:10:79:bd:b6:87:91:a4:79: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9B:31:83:D7:40:BB:A8:C0:1E:CC:E1:9A:3B:19:FA:11:48:B1:5F X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:58:8d:ad:e0:6f:1f:43:96:64:6f:9f:be:d6:5b:18:64:73: b3:9a:5b:3f:ad:f1:8a:c7:04:e5:85:76:f2:20:c0:61:ab:b7: 08:60:50:6e:a4:a6:65:d9:65:0c:5f:93:1b:36:cf:37:75:f1: 0f:3d:ba:29:b9:75:ca:26:f7:81:22:49:05:32:c3:d6:8b:98: cd:83:aa:1c:c2:83:41:42:72:13:9a:c7:3c:31:e0:90:41:e1: 0a:e7:ed:fc:a1:51:53:be:93:11:af:b1:88:47:6c:ac:38:9d: 3b:e0:b5:48:d4:ee:f8:87:ee:63:77:00:6c:97:a3:94:58:59: 30:5f:ee:e2:1b:9d:fe:07:9c:19:38:cf:17:53:13:96:84:c0: 14:90:c3:51:b8:e2:ff:95:06:af:01:0f:0c:c5:a2:81:31:88: ed:0e:3b:42:85:57:cb:85:3a:cc:ac:a4:c4:da:91:09:43:4a: 73:fa:a0:fe:33:c9:90:1b:83:ad:ed:1f:40:fb:8c:84:17:19: c6:ea:05:e4:06:85:59:32:e2:a6:8e:36:bd:52:29:ae:eb:42: 74:1e:a7:e8:2f:1a:8d:68:3f:e5:de:8e:0b:72:93:b0:4d:2a: 63:b4:8f:fa:cd:1d:19:98:e3:e5:59:b0:45:06:62:6a:a0:cb: 66:8b:a7:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG6z4dMz7nedvWZmUL580WhLiYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA1MTIyMzMyMzhaFw0yNjA1MTQwMjIzMzhaMDMxMTAvBgNV BAMTKDI5OUIzMTgzRDc0MEJCQThDMDFFQ0NFMTlBM0IxOUZBMTE0OEIxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjh+8fWSXSDZ9HiuxZXUwhxqe KDqnWdGpL2BS4I0/hjcrNoczLU8ig7Fj9isKymrydhTLzZS6jIyXPAx/ZRjuwbLI bYr3ObVlheW3GVeW5XVkoAdIzwcfC3LN4urTGFHpH4OYJ44MqeukAv5zoxZfzqvK IiqeKIJnCdAdWzllRd8piMF7FUP0EDBCAorGIdqWvfiKVZOdKdAzBXwweZ7/8z0l oxjSoZSjwScFX7xvu5rUszg3cl33r98xd7d5FbLbeDfD8gXg0H21QHNYWBEIHWkO JrD2hjq3BStG5ctB4dhGdw8NUV5a/gfNFxIbLQEFe10sUvkQeb22h5GkeXLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZsxg9dAu6jAHszhmjsZ+hFIsV8wHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZYja3gbx9DlmRvn77WWxhkc7OaWz+t8YrH BOWFdvIgwGGrtwhgUG6kpmXZZQxfkxs2zzd18Q89uim5dcom94EiSQUyw9aLmM2D qhzCg0FCchOaxzwx4JBB4Qrn7fyhUVO+kxGvsYhHbKw4nTvgtUjU7viH7mN3AGyX o5RYWTBf7uIbnf4HnBk4zxdTE5aEwBSQw1G44v+VBq8BDwzFooExiO0OO0KFV8uF OsyspMTakQlDSnP6oP4zyZAbg63tH0D7jIQXGcbqBeQGhVky4qaONr1SKa7rQnQe p+gvGo1oP+Xejgtyk7BNKmO0j/rNHRmY4+VZsEUGYmqgy2aLpyY= -----END CERTIFICATE-----Generated at Wed May 13 03:55:53 2026 by rpki-client