$ rpki-client -vvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: tCl1RTVUZhZ9KyaNjZWSCapocvgvGnA0U6h+nxdGDR0= Subject key identifier: CC:4D:86:CE:F0:55:D9:30:41:0C:09:08:4E:78:E3:65:8C:73:CB:88 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 2A927AB6AEE17B670FE1373A3AAE105ABDCF5C32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:56:41 +0000 Manifest this update: Tue 12 May 2026 05:51:41 +0000 Manifest next update: Wed 13 May 2026 08:22:41 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) 2: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: JiT48KHzQH27f7aqWaDiRZjesbhHZh90bXZWQ7ec4us=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:7a:b6:ae:e1:7b:67:0f:e1:37:3a:3a:ae:10:5a:bd:cf:5c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: May 12 05:51:41 2026 GMT Not After : May 13 08:22:41 2026 GMT Subject: CN=CC4D86CEF055D930410C09084E78E3658C73CB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:5b:e2:be:46:04:84:12:a2:de:ea:7d:7d: 11:7a:6e:fe:db:57:69:7d:ea:fb:f5:cc:73:7b:8c: 59:57:0d:6f:d4:f4:ba:81:b9:7e:99:85:ca:51:1f: 3b:c9:ce:7d:91:4d:b5:8c:9c:4f:a7:cd:1a:18:c4: 78:fc:19:48:0b:4a:8f:31:16:19:e4:42:d4:4b:bc: 1e:9e:fd:1f:98:80:ae:1f:8d:81:13:f9:2c:5c:12: 24:5d:fb:f4:d3:f1:e4:9b:c0:72:82:72:dc:c0:03: 6d:b7:15:5a:2f:f1:d4:b3:68:f7:48:6f:99:b7:b8: e0:29:63:fe:73:46:a1:24:5f:96:66:4b:f4:f7:5d: c6:69:2f:9e:24:61:17:50:c8:c1:c3:88:b9:da:95: 7b:67:dc:29:a6:ea:68:3d:c2:52:02:81:5a:08:8e: b2:15:91:ff:3b:a3:2a:dd:4c:f1:4e:08:1e:ad:16: 53:47:73:e5:f1:36:26:c1:12:f9:de:b7:93:40:98: 43:6a:d5:38:50:4f:6e:63:16:12:a3:2e:c9:df:b2: 72:cb:29:49:82:d1:9a:93:ea:44:8b:b6:0a:12:06: f9:6e:52:eb:02:97:d0:39:fe:a8:18:d9:15:79:ce: 2c:d7:ff:14:62:26:c1:34:6d:79:5a:37:a5:29:17: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:86:CE:F0:55:D9:30:41:0C:09:08:4E:78:E3:65:8C:73:CB:88 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:88:cf:16:23:3d:58:af:db:cd:d7:1c:de:b0:31:1a:30:97: eb:0b:d3:eb:e8:19:49:fd:cf:07:32:d6:59:3f:2b:62:f5:e8: f5:3c:8c:70:a5:c9:79:d1:46:23:c9:35:f1:0f:8d:b6:16:ea: 73:d2:a6:b3:d6:ff:bf:21:24:6c:90:38:d6:d4:17:db:be:97: 57:e3:92:22:40:0d:9a:f7:54:6e:25:8c:e2:ec:4c:6b:6e:ac: 5b:df:2b:6b:3f:c8:19:aa:fc:09:1a:1d:79:4d:35:01:ea:d4: 50:4a:87:fb:2e:76:89:dc:c2:23:de:69:64:e9:80:1a:ad:6a: 33:7c:8a:64:88:83:74:30:5b:1d:68:6f:ff:e2:ab:18:88:b2: da:4c:ed:70:61:70:60:f2:99:57:63:74:f4:6f:e2:3a:e5:6a: 50:92:52:99:b7:d6:c2:fc:23:49:63:10:86:75:26:a1:45:09: 4e:dd:14:7b:5a:fa:d7:0a:9c:af:1e:b9:fd:67:36:bb:52:46: 4d:fb:cb:14:1c:26:22:56:00:eb:42:11:fa:64:91:ee:32:a0: 4c:73:d5:e3:d9:55:4b:6a:27:c5:14:85:e1:0f:8c:9d:db:55: 2d:7d:54:fd:b1:be:63:b7:dd:47:b6:32:fc:07:4f:7c:07:7c: 8e:24:2a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpJ6tq7he2cP4Tc6Oq4QWr3PXDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA1MTIwNTUxNDFaFw0yNjA1MTMwODIyNDFaMDMxMTAvBgNV BAMTKENDNEQ4NkNFRjA1NUQ5MzA0MTBDMDkwODRFNzhFMzY1OEM3M0NCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOlvivkYEhBKi3up9fRF6bv7b V2l96vv1zHN7jFlXDW/U9LqBuX6ZhcpRHzvJzn2RTbWMnE+nzRoYxHj8GUgLSo8x FhnkQtRLvB6e/R+YgK4fjYET+SxcEiRd+/TT8eSbwHKCctzAA223FVov8dSzaPdI b5m3uOApY/5zRqEkX5ZmS/T3XcZpL54kYRdQyMHDiLnalXtn3Cmm6mg9wlICgVoI jrIVkf87oyrdTPFOCB6tFlNHc+XxNibBEvnet5NAmENq1ThQT25jFhKjLsnfsnLL KUmC0ZqT6kSLtgoSBvluUusCl9A5/qgY2RV5zizX/xRiJsE0bXlaN6UpFwCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzE2GzvBV2TBBDAkITnjjZYxzy4gwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+IzxYjPViv283XHN6wMRowl+sL0+voGUn9 zwcy1lk/K2L16PU8jHClyXnRRiPJNfEPjbYW6nPSprPW/78hJGyQONbUF9u+l1fj kiJADZr3VG4ljOLsTGturFvfK2s/yBmq/AkaHXlNNQHq1FBKh/sudoncwiPeaWTp gBqtajN8imSIg3QwWx1ob//iqxiIstpM7XBhcGDymVdjdPRv4jrlalCSUpm31sL8 I0ljEIZ1JqFFCU7dFHta+tcKnK8euf1nNrtSRk37yxQcJiJWAOtCEfpkke4yoExz 1ePZVUtqJ8UUheEPjJ3bVS19VP2xvmO33Ue2MvwHT3wHfI4kKpQ= -----END CERTIFICATE-----Generated at Wed May 13 01:11:21 2026 by rpki-client