$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft File: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft (raw, json) Hash identifier: 6NsHDivq9JVn+SrokVEA7FciT3ZK5No/dgdae7nilq8= Subject key identifier: 8A:B0:85:34:1C:2A:7F:4A:CE:50:DA:69:7A:98:3D:7F:AD:E5:2B:15 Authority key identifier: 7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 Certificate issuer: /CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Certificate serial: 79DC70C3AF6FB236BCA0FBFDBD88B369DC3AA4D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:18:46 +0000 Manifest this update: Tue 12 May 2026 21:13:46 +0000 Manifest next update: Wed 13 May 2026 21:19:46 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: ZqUeA+GYRIxCIgCsH9WqtyaWh6HnVZhzhgf8aY+NnIg=) 2: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl (hash: jREefmejLa4TpZbfQGbdOr/RZtoMdKeQNYcOCNQLwnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:dc:70:c3:af:6f:b2:36:bc:a0:fb:fd:bd:88:b3:69:dc:3a:a4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Validity Not Before: May 12 21:13:46 2026 GMT Not After : May 13 21:19:46 2026 GMT Subject: CN=8AB085341C2A7F4ACE50DA697A983D7FADE52B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:8f:19:98:8f:a7:78:f1:0f:03:11:a2:1b: 5e:36:ad:36:83:92:41:e3:ba:44:42:4f:42:bb:4f: 91:a3:02:ab:15:7f:2f:38:7f:4f:4c:5d:d7:de:11: 19:c8:72:95:45:4a:b3:ae:52:45:f3:d8:91:8f:44: 61:27:e9:b1:4f:d6:56:e3:12:c4:dd:39:bf:68:2f: a9:e0:da:e9:a2:41:60:84:eb:34:d6:59:38:f0:32: 0c:29:60:22:33:74:ff:cd:7e:84:22:43:9f:9f:61: 07:22:c7:31:67:98:26:03:92:c8:71:e1:2f:b8:68: 53:8d:c4:ab:78:01:62:88:c0:22:2a:c5:22:61:0b: 95:c8:15:dc:7a:b5:fe:be:53:18:ff:bd:0d:a2:ca: 0c:77:34:05:9b:7e:64:30:0d:19:a1:e7:46:7b:3f: 20:97:53:4d:e3:57:bb:db:89:b7:ce:2b:26:c1:a6: 54:af:1d:15:4c:50:70:34:e0:b7:ec:06:76:8e:f0: 06:33:a0:5e:df:d2:14:5e:59:ae:e6:6f:3a:0c:01: 28:dd:20:ab:57:fc:e2:76:2f:ec:3e:6b:9d:0c:ba: 48:1b:32:f5:ca:f7:8e:ca:1d:95:b2:30:eb:03:da: 96:e6:60:b4:07:3a:1e:46:b9:79:56:b3:97:48:8c: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B0:85:34:1C:2A:7F:4A:CE:50:DA:69:7A:98:3D:7F:AD:E5:2B:15 X509v3 Authority Key Identifier: keyid:7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2d:99:71:2c:05:9b:e5:f4:08:67:91:01:06:36:70:68:29: 2f:d3:d7:29:5a:63:80:ae:c2:6d:79:e2:96:1c:67:f7:13:8d: ac:9a:6c:0c:ff:41:b8:7c:8b:1b:c4:18:ba:94:7f:88:33:a8: 17:13:6e:5b:b5:98:30:9c:12:b9:46:f8:27:d3:3f:44:48:9e: 11:04:76:55:9f:a9:30:fe:ad:e5:bc:0a:e8:7d:b7:e9:49:30: 28:07:a3:4a:97:24:28:5c:05:97:4c:fa:1c:4f:b1:a2:eb:67: 96:f0:bb:06:16:8d:91:a2:f8:f1:69:0d:11:4d:f7:e0:05:0c: 57:21:57:90:67:e5:15:b1:15:6a:4c:ee:fd:58:a6:9b:2a:d9: e2:59:84:1d:5d:18:b8:d1:8c:21:99:d3:3b:25:93:72:2a:87: 15:71:f4:6f:58:64:94:e2:88:74:07:71:68:a5:65:5b:63:fb: 78:9b:6b:28:b2:f4:ca:7e:79:c0:8d:8d:c4:53:37:28:5e:77: d6:35:55:4c:24:15:0b:e4:08:36:12:8b:87:fc:c6:60:3f:e7: 78:b4:72:6f:d3:e8:05:e1:8b:4b:83:92:94:4d:c6:b1:fa:f4: 4f:5f:9c:45:26:7f:10:3b:f0:68:89:46:08:0c:68:c3:22:43: 86:1f:57:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedxww69vsja8oPv9vYizadw6pNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3 NjUwQTVBNDAeFw0yNjA1MTIyMTEzNDZaFw0yNjA1MTMyMTE5NDZaMDMxMTAvBgNV BAMTKDhBQjA4NTM0MUMyQTdGNEFDRTUwREE2OTdBOTgzRDdGQURFNTJCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcI8ZmI+nePEPAxGiG142rTaD kkHjukRCT0K7T5GjAqsVfy84f09MXdfeERnIcpVFSrOuUkXz2JGPRGEn6bFP1lbj EsTdOb9oL6ng2umiQWCE6zTWWTjwMgwpYCIzdP/NfoQiQ5+fYQcixzFnmCYDkshx 4S+4aFONxKt4AWKIwCIqxSJhC5XIFdx6tf6+Uxj/vQ2iygx3NAWbfmQwDRmh50Z7 PyCXU03jV7vbibfOKybBplSvHRVMUHA04LfsBnaO8AYzoF7f0hReWa7mbzoMASjd IKtX/OJ2L+w+a50MukgbMvXK947KHZWyMOsD2pbmYLQHOh5GuXlWs5dIjNsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirCFNBwqf0rOUNppepg9f63lKxUwHwYDVR0j BBgwFoAUfjsO9WU6+iW5/93dtAAUP3ZQpaQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkNTk0MzAtZGU3OC00NTMyLThlMWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2 NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3NjUwQTVBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTNCMEVGNTY1M0FGQTI1QjlGRkRERERCNDAwMTQzRjc2NTBB NUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0 M0Y3NjUwQTVBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEtmXEsBZvl9AhnkQEGNnBoKS/T1ylaY4Cu wm154pYcZ/cTjayabAz/Qbh8ixvEGLqUf4gzqBcTblu1mDCcErlG+CfTP0RInhEE dlWfqTD+reW8Cuh9t+lJMCgHo0qXJChcBZdM+hxPsaLrZ5bwuwYWjZGi+PFpDRFN 9+AFDFchV5Bn5RWxFWpM7v1Yppsq2eJZhB1dGLjRjCGZ0zslk3IqhxVx9G9YZJTi iHQHcWilZVtj+3ibayiy9Mp+ecCNjcRTNyhed9Y1VUwkFQvkCDYSi4f8xmA/53i0 cm/T6AXhi0uDkpRNxrH69E9fnEUmfxA78GiJRggMaMMiQ4YfV9E= -----END CERTIFICATE-----Generated at Wed May 13 00:45:02 2026 by rpki-client