$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: ZM18+x7WQlW+RgP+m/D72cYzh6Ih+fEg7vGaCe5YlAw= Subject key identifier: 4D:F4:45:D2:E1:CE:D3:64:93:BA:BA:A5:E7:B2:09:D9:E9:8E:0F:82 Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 109274B32432B9E8E576755C10B4DD02BA2B5360 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:19:46 +0000 Manifest this update: Tue 12 May 2026 08:14:46 +0000 Manifest next update: Wed 13 May 2026 09:00:46 +0000 Files and hashes: 1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) 2: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 4: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: AKbRL7hDH5G+JBVY29RaUDUCC58URiw5OWv1OVgGoDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:92:74:b3:24:32:b9:e8:e5:76:75:5c:10:b4:dd:02:ba:2b:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: May 12 08:14:46 2026 GMT Not After : May 13 09:00:46 2026 GMT Subject: CN=4DF445D2E1CED36493BABAA5E7B209D9E98E0F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:bc:4e:58:54:21:e9:77:fe:96:76:d2:05: e9:06:5f:c2:eb:4f:cd:69:29:18:0c:99:69:3b:1f: bd:57:4a:6b:d2:bf:79:8a:ea:d0:be:4a:1f:1a:a4: fe:8c:bf:f8:92:e4:3e:8b:95:c4:49:96:f9:d0:28: 94:ad:c5:20:9a:51:67:d7:7b:b8:bf:87:b5:d2:a6: d3:e6:f3:f2:50:d2:65:a0:40:de:53:f9:1f:d8:a0: 7f:97:bc:f8:24:d6:33:cf:7e:e2:0f:ec:9f:16:cf: 3f:53:49:73:26:fa:73:37:d9:37:0f:49:e9:9e:b8: 2d:6c:de:26:d4:21:81:7c:dd:ed:fa:80:54:8c:29: ee:e4:4a:3e:60:ea:6f:e6:33:54:12:ac:29:4b:fe: 53:ce:71:cf:fc:e9:67:77:80:99:5b:e9:48:da:85: 6d:3b:ff:a8:24:a7:31:32:f1:cc:ea:79:61:cc:52: 12:1a:34:97:0d:60:ad:70:07:10:36:3a:7a:a2:25: 57:9b:68:0a:27:1d:a8:74:43:1b:c4:fa:0b:98:15: 26:bc:c7:7e:1c:ef:6f:f5:11:44:8c:5b:3d:22:62: 06:a3:63:a7:21:b0:48:29:7c:18:f6:5a:7a:34:fa: 7e:35:d0:6b:25:7e:42:67:30:ec:e7:e7:0e:ba:ed: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F4:45:D2:E1:CE:D3:64:93:BA:BA:A5:E7:B2:09:D9:E9:8E:0F:82 X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:87:1f:2e:1b:43:88:09:bc:a5:ac:e4:8f:85:44:ae:ec:a7: e2:d0:b3:52:20:78:55:88:9c:63:b7:1e:37:f0:b6:4d:6a:a9: 7b:9e:9d:90:6a:4b:92:3d:1d:1f:da:e0:5b:1f:8b:82:f0:f5: 69:8b:48:35:d1:af:67:af:4f:54:9f:fc:76:cd:c8:52:1e:d9: b0:df:67:40:05:6f:29:71:1c:b3:56:37:f9:2f:01:2d:86:54: 35:e5:a8:a6:43:a9:85:4c:47:36:b9:21:e9:1a:8b:29:e6:50: 34:63:d1:7e:6f:1b:c3:02:8b:69:83:9c:08:33:5c:00:e6:8d: e9:b3:de:83:54:0f:43:c1:8e:59:91:4c:b2:b2:74:ca:56:e9: 12:80:b8:78:cb:18:ed:21:b8:7c:f7:4d:f4:c3:38:ae:03:9a: 32:1c:05:ad:e2:8c:5c:73:4a:2c:d3:96:28:55:be:4b:ac:a8: 9f:5f:29:82:ce:93:2e:d6:da:67:a6:5b:d0:0e:59:f3:db:01: ba:80:5e:71:fe:cb:55:1a:f9:eb:b3:98:f2:19:bb:11:dd:6e: ba:0f:96:49:62:33:5d:6b:0e:b5:07:22:14:06:f5:76:c3:45: 2f:25:ae:e3:94:53:32:f4:8d:ff:c5:3b:54:e7:ed:08:18:e4: 6e:07:c4:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJJ0syQyuejldnVcELTdArorU2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjA1MTIwODE0NDZaFw0yNjA1MTMwOTAwNDZaMDMxMTAvBgNV BAMTKDRERjQ0NUQyRTFDRUQzNjQ5M0JBQkFBNUU3QjIwOUQ5RTk4RTBGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2rxOWFQh6Xf+lnbSBekGX8Lr T81pKRgMmWk7H71XSmvSv3mK6tC+Sh8apP6Mv/iS5D6LlcRJlvnQKJStxSCaUWfX e7i/h7XSptPm8/JQ0mWgQN5T+R/YoH+XvPgk1jPPfuIP7J8Wzz9TSXMm+nM32TcP SemeuC1s3ibUIYF83e36gFSMKe7kSj5g6m/mM1QSrClL/lPOcc/86Wd3gJlb6Uja hW07/6gkpzEy8czqeWHMUhIaNJcNYK1wBxA2OnqiJVebaAonHah0QxvE+guYFSa8 x34c72/1EUSMWz0iYgajY6chsEgpfBj2Wno0+n410GslfkJnMOzn5w667WwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfRF0uHO02STurql57IJ2emOD4IwHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2HHy4bQ4gJvKWs5I+FRK7sp+LQs1IgeFWI nGO3Hjfwtk1qqXuenZBqS5I9HR/a4Fsfi4Lw9WmLSDXRr2evT1Sf/HbNyFIe2bDf Z0AFbylxHLNWN/kvAS2GVDXlqKZDqYVMRza5IekaiynmUDRj0X5vG8MCi2mDnAgz XADmjemz3oNUD0PBjlmRTLKydMpW6RKAuHjLGO0huHz3TfTDOK4DmjIcBa3ijFxz SizTlihVvkusqJ9fKYLOky7W2memW9AOWfPbAbqAXnH+y1Ua+euzmPIZuxHdbroP lkliM11rDrUHIhQG9XbDRS8lruOUUzL0jf/FO1Tn7QgY5G4HxOQ= -----END CERTIFICATE-----Generated at Tue May 12 22:19:35 2026 by rpki-client