$ rpki-client -vvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: X6hxpjyD8BVnmK+uOAeFYyYu0ORJ9orC8gTubqLOzO0= Subject key identifier: B5:91:EA:9C:11:C4:BB:97:88:4D:CE:D6:2A:04:69:9A:30:6D:77:4C Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 60E60AB8D4115C52094A588042DFF417832E980D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:53 +0000 Manifest this update: Tue 12 May 2026 20:06:53 +0000 Manifest next update: Wed 13 May 2026 21:02:53 +0000 Files and hashes: 1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 2: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: zKcJtWV0pUquCTmQXqsvNyyJlyGWmc6RI0y+bxtBD8w=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e6:0a:b8:d4:11:5c:52:09:4a:58:80:42:df:f4:17:83:2e:98:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: May 12 20:06:53 2026 GMT Not After : May 13 21:02:53 2026 GMT Subject: CN=B591EA9C11C4BB97884DCED62A04699A306D774C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:1d:ea:fb:f7:70:54:14:76:df:42:1c:f1: 26:1a:1e:50:81:78:6a:c9:e1:d6:4a:2e:de:6c:46: 19:8a:e7:ce:b7:25:82:e7:f2:6b:66:e4:ca:d3:27: 16:a8:55:e4:ec:c4:32:f7:34:5b:b6:f4:cb:18:d4: 15:1c:64:01:55:f9:e5:82:4b:6f:20:df:68:23:51: 89:d7:48:49:71:9e:b7:cf:0f:72:7a:64:06:5f:da: 21:39:81:09:c1:14:e4:cd:13:ef:92:bd:1d:34:7e: 62:71:97:71:c3:3c:a4:ee:9c:b0:33:26:2e:83:bd: 33:fe:04:76:22:22:a3:49:06:3a:0c:d2:fd:d5:05: 9e:dd:1e:02:48:eb:8e:74:d9:7f:ba:97:33:69:9f: 15:6d:2a:45:58:2e:5a:03:76:92:9d:e1:b7:ff:11: 4f:69:68:e4:5f:c7:e6:3b:12:ea:41:a8:14:44:e6: 05:d2:6f:4c:f5:52:87:5c:ea:8c:d2:0a:aa:f5:e7: c0:a7:9f:08:dc:bd:df:e1:ce:11:1b:a9:95:24:7b: 63:04:c9:9f:50:bc:82:39:ac:75:19:94:45:a6:cd: ee:52:04:f1:1a:89:8b:3c:be:f0:e0:8a:45:d0:85: 87:36:02:08:00:c5:fd:ff:dc:62:e4:90:c8:3e:db: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:EA:9C:11:C4:BB:97:88:4D:CE:D6:2A:04:69:9A:30:6D:77:4C X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:16:57:5e:0b:f5:b6:15:b1:c3:a8:8e:0f:ee:14:44:07:93: e7:7c:16:d6:b0:bc:ee:8d:04:81:90:7b:1e:91:f0:98:36:bb: d2:3b:97:d5:24:20:6f:9c:61:ef:e1:bc:aa:e1:e9:40:ef:01: ec:08:5e:94:71:b0:cb:26:24:1a:0c:57:4b:31:59:fb:60:e7: 35:74:9f:5b:03:7c:70:c1:d2:bc:83:fd:56:9c:61:23:1f:51: a8:95:b9:73:b8:c1:4d:bb:26:54:20:06:56:60:58:b7:da:bd: 90:6b:9c:ed:72:14:90:e9:55:eb:1e:b8:a5:29:95:ad:06:b7: 86:90:13:6b:16:50:34:5f:28:14:39:23:2a:a0:35:01:bf:40: a7:f8:51:26:34:7d:7d:70:63:bc:d2:74:c3:ee:65:46:27:1c: 98:7d:e2:30:e1:81:a1:3a:33:20:69:50:73:39:c9:43:26:53: 4e:24:ea:c1:2e:ea:54:11:91:b8:88:60:84:7d:2b:a4:71:65: a5:0e:1a:95:69:7f:86:5b:35:c1:3e:35:72:43:c6:4d:dc:26: b4:4c:62:5c:7b:19:c2:d3:60:4f:7c:f5:1d:cf:7a:a7:b7:b4: 28:aa:a7:65:20:05:71:d8:77:37:41:f2:42:e7:9d:f8:95:29: 4f:6e:00:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOYKuNQRXFIJSliAQt/0F4MumA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA1MTIyMDA2NTNaFw0yNjA1MTMyMTAyNTNaMDMxMTAvBgNV BAMTKEI1OTFFQTlDMTFDNEJCOTc4ODREQ0VENjJBMDQ2OTlBMzA2RDc3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnx3q+/dwVBR230Ic8SYaHlCB eGrJ4dZKLt5sRhmK5863JYLn8mtm5MrTJxaoVeTsxDL3NFu29MsY1BUcZAFV+eWC S28g32gjUYnXSElxnrfPD3J6ZAZf2iE5gQnBFOTNE++SvR00fmJxl3HDPKTunLAz Ji6DvTP+BHYiIqNJBjoM0v3VBZ7dHgJI64502X+6lzNpnxVtKkVYLloDdpKd4bf/ EU9paORfx+Y7EupBqBRE5gXSb0z1Uodc6ozSCqr158Cnnwjcvd/hzhEbqZUke2ME yZ9QvII5rHUZlEWmze5SBPEaiYs8vvDgikXQhYc2AggAxf3/3GLkkMg+21WLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZHqnBHEu5eITc7WKgRpmjBtd0wwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUWV14L9bYVscOojg/uFEQHk+d8FtawvO6N BIGQex6R8Jg2u9I7l9UkIG+cYe/hvKrh6UDvAewIXpRxsMsmJBoMV0sxWftg5zV0 n1sDfHDB0ryD/VacYSMfUaiVuXO4wU27JlQgBlZgWLfavZBrnO1yFJDpVeseuKUp la0Gt4aQE2sWUDRfKBQ5IyqgNQG/QKf4USY0fX1wY7zSdMPuZUYnHJh94jDhgaE6 MyBpUHM5yUMmU04k6sEu6lQRkbiIYIR9K6RxZaUOGpVpf4ZbNcE+NXJDxk3cJrRM Ylx7GcLTYE989R3Peqe3tCiqp2UgBXHYdzdB8kLnnfiVKU9uADE= -----END CERTIFICATE-----Generated at Wed May 13 05:37:48 2026 by rpki-client