$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: Ureq/tNkAFk9TBR3tEYc4jzhRimd0JYYmEnyGV0QY6Y= Subject key identifier: 5A:45:FD:E5:3D:B8:4B:69:92:DD:81:70:63:42:D2:C4:8B:F3:B2:03 Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 2F0D95CCCD448D4C1E36DF01AD9D6E342DE98133 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:48:02 +0000 Manifest this update: Tue 12 May 2026 20:43:02 +0000 Manifest next update: Wed 13 May 2026 23:42:02 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=) 2: 3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (hash: naJE/Bidj2O+YOMcboAw9DP7KPCUYJEXAx9uQDGJprM=) 3: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: 3w62a9Hox27yL5kVQ4p+ECsNIXUasolLV4FUHXc8XMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0d:95:cc:cd:44:8d:4c:1e:36:df:01:ad:9d:6e:34:2d:e9:81:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: May 12 20:43:02 2026 GMT Not After : May 13 23:42:02 2026 GMT Subject: CN=5A45FDE53DB84B6992DD81706342D2C48BF3B203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:50:a0:64:a4:cf:74:c4:94:a3:06:ce:1f: af:8e:24:cf:03:03:95:c2:4d:8e:a8:07:50:fa:45: ff:d6:bc:a0:61:a4:ed:ba:5a:dd:10:c9:6f:29:77: 5e:a8:81:c1:d8:5b:21:13:d8:ac:71:51:28:57:18: 80:ed:18:46:fb:de:4c:b0:57:6c:f2:3e:f8:34:95: a8:6c:90:42:7d:99:72:ff:d0:3e:f5:32:11:b2:a7: b3:af:ad:a8:e7:13:cc:8e:1c:d8:97:8d:27:11:e8: fb:21:1a:f4:f4:b2:60:99:83:be:9c:87:60:ce:eb: af:78:e0:c0:36:4d:92:df:be:8b:db:f1:3d:d3:21: 3b:3e:e5:be:55:d1:3b:40:28:a2:d9:34:e9:d3:af: 75:4b:9e:87:47:fa:a2:f5:37:81:d4:23:d6:28:dc: 30:5f:9d:6c:a7:33:f1:7a:42:0e:de:d2:e0:2d:d7: 24:cc:3e:78:27:c7:99:47:58:3c:db:eb:63:01:43: 79:7e:f0:48:23:26:09:4d:93:a8:09:8d:00:f7:da: fe:3b:98:71:c5:79:c5:ee:e2:90:c3:20:0a:86:ed: 24:5c:99:ee:7c:9e:f6:83:09:11:dd:63:6f:35:d4: a2:0f:ef:53:7b:c2:a7:43:d9:1e:30:9d:11:b6:4e: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:45:FD:E5:3D:B8:4B:69:92:DD:81:70:63:42:D2:C4:8B:F3:B2:03 X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:fb:ac:76:49:91:c0:e1:4a:52:8f:13:07:3e:6d:58:14:59: bf:4f:24:10:82:e5:62:19:85:e4:60:fa:fd:5f:89:e8:95:5b: 70:b8:23:28:e5:26:96:cc:45:df:14:97:43:01:5b:12:38:43: ec:6b:77:24:50:ad:ef:0f:47:b0:23:69:26:2d:45:2c:65:3b: 26:a1:e8:cb:71:42:df:22:b6:c4:b9:ff:c6:7c:b8:1a:82:c5: c5:b9:63:49:ec:de:5a:ff:93:3b:64:82:6f:7f:cb:2c:1d:51: 84:78:22:98:fb:9f:84:88:f8:71:ec:b9:c5:d1:72:8e:72:9d: c6:3b:62:6e:cf:5d:db:27:d8:a7:b8:88:11:c7:50:a6:3c:ba: ca:b0:67:b4:56:19:de:d6:cd:e4:84:02:35:8b:ef:26:05:ff: 5e:e4:ff:04:29:b1:82:22:5c:c3:e3:60:8f:01:03:ed:53:7b: 67:b1:31:ad:c8:61:20:12:ff:3b:4c:78:98:aa:ed:d5:1b:0f: a1:f5:30:9a:17:5f:93:af:04:9f:d3:5c:86:65:81:14:5c:00: 5a:bf:59:d2:81:b9:b6:0b:c9:4d:5a:53:f7:98:74:71:24:38: ae:08:7d:a3:3f:3c:0b:be:20:8d:03:7f:3f:ee:6a:06:81:b5: 08:d8:1b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULw2VzM1EjUweNt8BrZ1uNC3pgTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA1MTIyMDQzMDJaFw0yNjA1MTMyMzQyMDJaMDMxMTAvBgNV BAMTKDVBNDVGREU1M0RCODRCNjk5MkREODE3MDYzNDJEMkM0OEJGM0IyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehVCgZKTPdMSUowbOH6+OJM8D A5XCTY6oB1D6Rf/WvKBhpO26Wt0QyW8pd16ogcHYWyET2KxxUShXGIDtGEb73kyw V2zyPvg0lahskEJ9mXL/0D71MhGyp7OvrajnE8yOHNiXjScR6PshGvT0smCZg76c h2DO66944MA2TZLfvovb8T3TITs+5b5V0TtAKKLZNOnTr3VLnodH+qL1N4HUI9Yo 3DBfnWynM/F6Qg7e0uAt1yTMPngnx5lHWDzb62MBQ3l+8EgjJglNk6gJjQD32v47 mHHFecXu4pDDIAqG7SRcme58nvaDCRHdY2811KIP71N7wqdD2R4wnRG2TsJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkX95T24S2mS3YFwY0LSxIvzsgMwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX7rHZJkcDhSlKPEwc+bVgUWb9PJBCC5WIZ heRg+v1fieiVW3C4IyjlJpbMRd8Ul0MBWxI4Q+xrdyRQre8PR7AjaSYtRSxlOyah 6MtxQt8itsS5/8Z8uBqCxcW5Y0ns3lr/kztkgm9/yywdUYR4Ipj7n4SI+HHsucXR co5yncY7Ym7PXdsn2Ke4iBHHUKY8usqwZ7RWGd7WzeSEAjWL7yYF/17k/wQpsYIi XMPjYI8BA+1Te2exMa3IYSAS/ztMeJiq7dUbD6H1MJoXX5OvBJ/TXIZlgRRcAFq/ WdKBubYLyU1aU/eYdHEkOK4IfaM/PAu+II0Dfz/uagaBtQjYGyo= -----END CERTIFICATE-----Generated at Wed May 13 02:26:40 2026 by rpki-client