$ rpki-client -vvf rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft File: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft (raw, json) Hash identifier: hCUaoNeX2+fZeRxk5xdxlin8SKD2q1oqhcJzH+b18N0= Subject key identifier: BA:1C:A4:A1:51:0F:9A:C9:EE:81:13:FB:52:82:A1:62:83:7E:BF:C6 Authority key identifier: D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C Certificate issuer: /CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Certificate serial: 2E6EF7DD1AC4947D021542E2901B798A9E9BCD18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:54:47 +0000 Manifest this update: Wed 13 May 2026 00:49:47 +0000 Manifest next update: Thu 14 May 2026 03:32:47 +0000 Files and hashes: 1: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl (hash: K7iMLW+fmcSydkTLCz1DR0w549kryZEF8Z6x7Yp1QiM=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: MblWuzrOZD28wkceG5+ZPQEBVsmdypcKgkkQ4DKBQmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6e:f7:dd:1a:c4:94:7d:02:15:42:e2:90:1b:79:8a:9e:9b:cd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Validity Not Before: May 13 00:49:47 2026 GMT Not After : May 14 03:32:47 2026 GMT Subject: CN=BA1CA4A1510F9AC9EE8113FB5282A162837EBFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:3f:de:9f:9e:47:5c:27:13:d9:2c:83:6b: 8a:18:1f:d6:12:ba:ab:c8:27:5c:e2:b7:b6:66:88: d3:a7:e8:bd:65:b0:ad:06:ca:91:1b:d1:57:16:e2: 0d:0f:96:d4:87:66:f8:5e:71:0f:77:0b:b1:cc:9f: d7:4f:61:c9:5c:12:c8:10:46:cf:9e:7a:6c:38:00: f0:59:4c:a5:ce:69:e5:5f:e0:a8:b5:88:f9:74:8b: 39:f7:7a:ee:9a:be:9f:26:c7:d4:1e:bc:f7:10:93: e4:91:a2:9e:3c:18:f4:62:0f:e6:c5:68:54:3a:98: 8e:35:46:7f:3e:5a:b9:bf:cb:d4:c2:57:6a:83:99: 67:fb:22:be:5d:7c:3b:d2:af:d0:9a:97:2f:e1:bd: e0:f7:b2:62:cd:97:90:f3:bc:f5:a5:b2:9d:46:3a: ad:45:4c:04:fb:f4:dd:54:98:22:48:53:e4:4d:82: 06:9a:72:f3:4b:02:be:83:2e:38:45:a9:4a:7e:8d: 26:73:81:ce:d6:64:c1:6d:8d:f1:b8:b5:c2:5b:e3: 62:c5:6d:56:37:f4:61:3e:37:fa:a1:0f:57:c7:83: 9e:13:7f:08:2f:2e:ee:80:d1:3c:eb:b1:d0:b0:68: 79:62:c2:fc:bd:62:6d:e2:a3:ef:2a:85:9e:80:5d: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:A4:A1:51:0F:9A:C9:EE:81:13:FB:52:82:A1:62:83:7E:BF:C6 X509v3 Authority Key Identifier: keyid:D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3c:f9:b1:00:e3:65:58:bb:44:8c:cf:4a:c9:08:5d:82:d4: 99:8c:40:61:bf:63:8a:47:dc:6e:2a:29:6f:e4:39:3d:09:b1: b2:ea:48:28:a3:b6:f7:21:71:c6:92:c2:28:40:9e:7f:b4:67: ee:af:0d:e8:af:1d:4d:c6:c0:2b:b4:81:48:98:3f:a4:c9:94: f2:ab:37:5c:b4:db:91:7e:df:e5:df:a7:57:c5:36:69:56:33: 54:b0:60:56:e6:e7:b2:cf:46:64:a8:86:00:d5:93:ca:6c:f1: 67:93:8b:f0:34:a5:77:3f:12:76:9b:da:c5:54:25:a7:ee:8a: 9f:a2:ee:02:f3:5b:65:15:f1:29:a8:fc:12:a2:1c:76:99:8c: 8f:a7:ed:ff:96:68:3c:7e:4b:0b:0f:47:95:7c:9d:dd:12:13: 76:15:46:f5:2c:59:2a:da:33:77:b8:b0:a2:50:bf:34:b8:b5: 94:a2:d5:32:10:e3:d2:45:d7:8c:07:bc:c8:d9:1a:8d:18:98: af:1a:40:da:e5:d6:2a:a6:ab:20:55:f9:bd:00:2e:fc:7f:b9: 40:fd:43:97:32:f1:65:f3:f8:33:59:f8:80:05:c3:01:09:71: 14:98:a2:36:5d:a6:c1:9b:3b:d5:b1:be:03:96:4d:40:a0:8f: 4c:55:eb:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm733RrElH0CFULikBt5ip6bzRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5 MzY3MDg0QzAeFw0yNjA1MTMwMDQ5NDdaFw0yNjA1MTQwMzMyNDdaMDMxMTAvBgNV BAMTKEJBMUNBNEExNTEwRjlBQzlFRTgxMTNGQjUyODJBMTYyODM3RUJGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZj/en55HXCcT2SyDa4oYH9YS uqvIJ1zit7ZmiNOn6L1lsK0GypEb0VcW4g0PltSHZvhecQ93C7HMn9dPYclcEsgQ Rs+eemw4APBZTKXOaeVf4Ki1iPl0izn3eu6avp8mx9QevPcQk+SRop48GPRiD+bF aFQ6mI41Rn8+Wrm/y9TCV2qDmWf7Ir5dfDvSr9Caly/hveD3smLNl5DzvPWlsp1G Oq1FTAT79N1UmCJIU+RNggaacvNLAr6DLjhFqUp+jSZzgc7WZMFtjfG4tcJb42LF bVY39GE+N/qhD1fHg54TfwgvLu6A0TzrsdCwaHliwvy9Ym3io+8qhZ6AXXH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhykoVEPmsnugRP7UoKhYoN+v8YwHwYDVR0j BBgwFoAU16Bd/5i7mz0C9LYTCfRvHJNnCEwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY5M2ZjOGYtYWZjYy00ZGVmLTgwNmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5 OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5MzY3MDg0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0EwNURGRjk4QkI5QjNEMDJGNEI2MTMwOUY0NkYxQzkzNjcw ODRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZG MUM5MzY3MDg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG48+bEA42VYu0SMz0rJCF2C1JmMQGG/Y4pH 3G4qKW/kOT0JsbLqSCijtvchccaSwihAnn+0Z+6vDeivHU3GwCu0gUiYP6TJlPKr N1y025F+3+Xfp1fFNmlWM1SwYFbm57LPRmSohgDVk8ps8WeTi/A0pXc/Enab2sVU Jafuip+i7gLzW2UV8Smo/BKiHHaZjI+n7f+WaDx+SwsPR5V8nd0SE3YVRvUsWSra M3e4sKJQvzS4tZSi1TIQ49JF14wHvMjZGo0YmK8aQNrl1iqmqyBV+b0ALvx/uUD9 Q5cy8WXz+DNZ+IAFwwEJcRSYojZdpsGbO9WxvgOWTUCgj0xV6+M= -----END CERTIFICATE-----Generated at Wed May 13 05:36:32 2026 by rpki-client