$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: bLGLdDZOtq1f+PTCAtmMIYWhpaEimskPD/J36D3oRCI= Subject key identifier: 27:C1:37:C5:1C:96:4E:21:3A:16:B1:F2:8A:2C:E6:F1:48:9D:0C:02 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 2A8CA4F18BC81841D21257D1A3CFD935AA3F5628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:22:44 +0000 Manifest this update: Tue 12 May 2026 12:17:44 +0000 Manifest next update: Wed 13 May 2026 13:05:44 +0000 Files and hashes: 1: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: 7hgsdF4hFg/yWAYXvBCTACTmKyc1ZRTLFzKPe0kB9Kk=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 4: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8c:a4:f1:8b:c8:18:41:d2:12:57:d1:a3:cf:d9:35:aa:3f:56:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: May 12 12:17:44 2026 GMT Not After : May 13 13:05:44 2026 GMT Subject: CN=27C137C51C964E213A16B1F28A2CE6F1489D0C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:a3:bd:bd:99:13:da:f0:5d:b8:69:1d:e5: bf:d9:6a:ba:3f:57:3c:8c:5f:fe:13:90:27:32:dc: f9:3c:58:e4:dc:06:99:b7:f5:3e:c7:33:d1:de:c5: e6:bf:c9:13:69:1c:0e:8a:ba:5d:12:a3:27:66:6f: 6f:08:39:15:37:05:1d:c1:ea:55:32:0c:30:63:77: 64:9c:8b:a7:57:6c:8b:12:89:13:d0:4c:12:73:85: 18:4c:38:94:e4:00:40:76:85:e8:a5:ca:50:84:97: 54:85:35:d8:fc:25:f0:25:66:1c:b0:e3:c6:25:d5: 24:40:e0:6f:ec:b3:89:20:fc:28:9e:c2:90:1a:9b: 29:5d:f0:f7:ff:2c:58:68:07:ae:41:e8:a0:62:ac: 55:f8:f7:09:a3:25:82:45:96:8f:05:ce:3d:78:20: 40:20:cb:37:e3:58:92:df:81:b2:29:5e:eb:54:10: a7:08:a0:e2:48:e4:e9:0c:b3:f2:59:e7:38:bf:8e: 0b:04:16:a4:ee:22:25:d2:c2:f5:1c:1f:1a:f9:bf: 0b:bb:7e:f2:3d:19:54:85:06:16:60:5e:29:51:73: 1b:d4:10:ef:65:ba:3a:8f:96:fd:1f:56:ef:4c:aa: 0e:dc:9d:92:a3:83:2f:33:46:c7:34:7b:84:c0:1b: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C1:37:C5:1C:96:4E:21:3A:16:B1:F2:8A:2C:E6:F1:48:9D:0C:02 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:d4:43:a0:06:04:3f:c4:4e:29:0a:5d:d1:ed:34:dd:95: 69:7f:01:a1:92:cc:13:af:11:32:a6:8f:68:7b:af:77:ec:e2: 84:8e:3d:7e:11:1c:a5:cd:30:dc:e5:dc:07:b5:f2:c9:42:5c: e9:fe:74:33:2e:1a:73:d2:a1:26:7a:f0:99:1f:6e:28:d5:d9: 09:5f:12:a8:6d:eb:bf:d8:9d:ad:40:bd:64:13:63:cd:38:ba: 14:3c:b4:9d:3d:c2:c9:44:c2:d6:ca:b8:f8:23:b8:be:eb:98: f3:85:d8:7f:f5:ab:94:c2:78:2a:83:d6:24:08:69:f0:e1:d4: c2:11:69:b4:50:0a:38:fa:38:25:a0:36:43:d1:a9:45:c5:11: b4:0b:2b:30:3d:cc:bb:68:88:6a:c7:2b:4c:11:ae:ef:b7:21: ea:8f:81:dd:3a:ad:8f:98:65:ba:64:b9:0c:c7:c8:c8:84:e3: 3f:83:6b:50:cb:23:01:c3:9a:08:cf:f7:a1:cf:41:fd:38:47: d4:f6:a3:45:a1:5e:02:80:fe:cb:0e:aa:21:9a:0d:63:55:2d: 13:df:15:93:97:ff:a0:2a:4b:24:5c:90:6a:a9:e8:88:1b:5d: 92:4e:45:d5:ec:1e:e6:7e:bb:d6:7d:57:70:9b:3f:45:c7:93: 02:5b:ec:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoyk8YvIGEHSElfRo8/ZNao/VigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA1MTIxMjE3NDRaFw0yNjA1MTMxMzA1NDRaMDMxMTAvBgNV BAMTKDI3QzEzN0M1MUM5NjRFMjEzQTE2QjFGMjhBMkNFNkYxNDg5RDBDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjqO9vZkT2vBduGkd5b/Zaro/ VzyMX/4TkCcy3Pk8WOTcBpm39T7HM9Hexea/yRNpHA6Kul0Soydmb28IORU3BR3B 6lUyDDBjd2Sci6dXbIsSiRPQTBJzhRhMOJTkAEB2heilylCEl1SFNdj8JfAlZhyw 48Yl1SRA4G/ss4kg/CiewpAamyld8Pf/LFhoB65B6KBirFX49wmjJYJFlo8Fzj14 IEAgyzfjWJLfgbIpXutUEKcIoOJI5OkMs/JZ5zi/jgsEFqTuIiXSwvUcHxr5vwu7 fvI9GVSFBhZgXilRcxvUEO9lujqPlv0fVu9Mqg7cnZKjgy8zRsc0e4TAG7prAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8E3xRyWTiE6FrHyiizm8UidDAIwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc31EOgBgQ/xE4pCl3R7TTdlWl/AaGSzBOv ETKmj2h7r3fs4oSOPX4RHKXNMNzl3Ae18slCXOn+dDMuGnPSoSZ68JkfbijV2Qlf Eqht67/Yna1AvWQTY804uhQ8tJ09wslEwtbKuPgjuL7rmPOF2H/1q5TCeCqD1iQI afDh1MIRabRQCjj6OCWgNkPRqUXFEbQLKzA9zLtoiGrHK0wRru+3IeqPgd06rY+Y ZbpkuQzHyMiE4z+Da1DLIwHDmgjP96HPQf04R9T2o0WhXgKA/ssOqiGaDWNVLRPf FZOX/6AqSyRckGqp6IgbXZJORdXsHuZ+u9Z9V3CbP0XHkwJb7I8= -----END CERTIFICATE-----Generated at Tue May 12 22:38:56 2026 by rpki-client