$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: ph2ht3KgzttqdVh8lAzblWn8As6GM5Y9taEtQYaoSaI= Subject key identifier: 7A:79:C6:7A:D4:50:EC:52:D5:70:F0:37:1E:B1:76:A3:A0:21:9F:91 Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 7D138FBB24B7CD251BA6B6A1E068F4C2B939F18E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:35:58 +0000 Manifest this update: Tue 12 May 2026 22:30:58 +0000 Manifest next update: Thu 14 May 2026 00:52:58 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) 2: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 3: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 4: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: lVrr26rbuEsCBooN2mMm3hbtZFfGk5dNc42tk3F+NRs=) 5: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:13:8f:bb:24:b7:cd:25:1b:a6:b6:a1:e0:68:f4:c2:b9:39:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: May 12 22:30:58 2026 GMT Not After : May 14 00:52:58 2026 GMT Subject: CN=7A79C67AD450EC52D570F0371EB176A3A0219F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:d0:55:e7:cf:93:63:db:45:47:d3:16:6c: c1:ae:11:cf:c4:11:45:f2:8f:18:29:06:20:fb:ba: d5:e3:a9:24:1f:52:21:79:a2:f2:b7:86:90:d4:d3: 5e:3b:28:63:71:38:43:0f:79:df:d2:84:ee:a1:28: de:60:b2:e0:a5:18:23:f6:92:b1:a5:1b:68:3e:1a: 4d:7f:5f:ff:18:2c:56:ed:30:bb:e3:0c:93:25:13: df:bf:bd:ad:c2:15:b7:18:34:c7:4f:bc:56:e6:73: 20:5c:2c:c7:29:26:0a:62:e6:0e:39:84:aa:78:cb: b5:dd:01:85:b0:90:ff:86:31:de:0d:28:44:00:d3: 7b:71:0e:e0:3a:67:a1:9a:39:b8:54:22:c2:b5:fc: c3:c7:0c:04:68:d2:74:d7:db:58:01:35:6c:b4:10: c8:23:2b:15:18:9c:38:84:bd:25:02:8b:68:27:04: e7:43:3f:93:0c:bc:e7:92:2f:c6:19:2d:8d:ad:b2: ba:01:1d:3a:c2:d4:1d:43:f7:12:e9:c1:a4:dd:3e: 52:89:c6:f4:7d:a1:d1:ff:e7:54:80:48:85:4e:76: 27:67:7d:a8:66:01:0e:66:2f:ff:8c:0f:a2:f3:5b: a1:05:d7:bf:43:39:6f:f0:e5:05:33:3b:7f:f8:cb: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:79:C6:7A:D4:50:EC:52:D5:70:F0:37:1E:B1:76:A3:A0:21:9F:91 X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:33:5e:c1:a0:21:2c:ea:3d:80:fc:b9:46:81:52:9a:4b:10: 49:a2:84:64:d9:7c:82:cb:f0:95:d8:90:9d:06:f7:d2:18:a9: 78:7f:c0:15:0f:0d:d9:cf:0c:6f:8c:0c:1e:21:3c:cf:58:3c: f4:72:4a:df:ee:83:43:da:7f:e8:55:dd:54:9a:df:03:85:d6: 4c:06:e5:63:e1:fa:fd:4f:d8:52:fa:8e:9e:f9:6d:af:41:a3: 09:55:11:65:6a:8d:3f:0e:21:7a:2f:5c:d2:0a:18:ed:a5:81: 05:5c:2f:15:0e:cf:d4:a1:41:46:e9:1b:22:32:40:b6:d4:f6: 63:fe:80:10:cc:cd:ee:01:db:1d:58:de:fc:15:22:22:1b:2c: 9c:67:57:f4:39:20:b9:44:92:f3:a3:48:1b:52:89:20:f4:be: ca:a1:0e:41:df:32:6d:bc:e3:12:15:a0:05:c9:f3:43:35:12: 4b:09:e1:4a:53:c2:9d:09:86:0d:fe:63:01:80:97:f4:26:7e: 24:a2:50:0e:5e:aa:66:74:14:c4:0c:25:51:b1:2c:ff:8b:8d: 04:fd:ef:26:07:17:bd:4a:b5:8c:d0:a4:ac:85:9a:0c:15:7f: 0a:41:3b:80:62:9d:a4:8f:7a:c2:3e:fc:c6:31:ab:7e:79:a5: 16:25:af:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfROPuyS3zSUbprah4Gj0wrk58Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA1MTIyMjMwNThaFw0yNjA1MTQwMDUyNThaMDMxMTAvBgNV BAMTKDdBNzlDNjdBRDQ1MEVDNTJENTcwRjAzNzFFQjE3NkEzQTAyMTlGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5tBV58+TY9tFR9MWbMGuEc/E EUXyjxgpBiD7utXjqSQfUiF5ovK3hpDU0147KGNxOEMPed/ShO6hKN5gsuClGCP2 krGlG2g+Gk1/X/8YLFbtMLvjDJMlE9+/va3CFbcYNMdPvFbmcyBcLMcpJgpi5g45 hKp4y7XdAYWwkP+GMd4NKEQA03txDuA6Z6GaObhUIsK1/MPHDARo0nTX21gBNWy0 EMgjKxUYnDiEvSUCi2gnBOdDP5MMvOeSL8YZLY2tsroBHTrC1B1D9xLpwaTdPlKJ xvR9odH/51SASIVOdidnfahmAQ5mL/+MD6LzW6EF179DOW/w5QUzO3/4y/O7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUennGetRQ7FLVcPA3HrF2o6Ahn5EwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkzXsGgISzqPYD8uUaBUppLEEmihGTZfILL 8JXYkJ0G99IYqXh/wBUPDdnPDG+MDB4hPM9YPPRySt/ug0Paf+hV3VSa3wOF1kwG 5WPh+v1P2FL6jp75ba9BowlVEWVqjT8OIXovXNIKGO2lgQVcLxUOz9ShQUbpGyIy QLbU9mP+gBDMze4B2x1Y3vwVIiIbLJxnV/Q5ILlEkvOjSBtSiSD0vsqhDkHfMm28 4xIVoAXJ80M1EksJ4UpTwp0Jhg3+YwGAl/QmfiSiUA5eqmZ0FMQMJVGxLP+LjQT9 7yYHF71KtYzQpKyFmgwVfwpBO4BinaSPesI+/MYxq355pRYlr58= -----END CERTIFICATE-----Generated at Wed May 13 07:39:29 2026 by rpki-client