$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: CLK7By2sMDN4a25Re2+cyMvCtNgCeDTSec6TNlk+olA= Subject key identifier: 01:FA:EA:6A:E1:C0:11:A9:AC:77:D1:6E:0D:FF:6D:4D:4D:34:A1:5A Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 657BBA306B07BB6A5962C1508859E6462970AB66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:11:13 +0000 Manifest this update: Wed 13 May 2026 02:06:13 +0000 Manifest next update: Thu 14 May 2026 05:53:13 +0000 Files and hashes: 1: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: 707xny+2jQR2e37PyJCjS9WyCsyavJj1jNvePn22qmk=) 2: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 3: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7b:ba:30:6b:07:bb:6a:59:62:c1:50:88:59:e6:46:29:70:ab:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: May 13 02:06:13 2026 GMT Not After : May 14 05:53:13 2026 GMT Subject: CN=01FAEA6AE1C011A9AC77D16E0DFF6D4D4D34A15A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:bc:a8:95:85:40:dc:cb:b3:c8:89:d9:dc: 76:61:3e:67:f6:38:11:40:8e:c4:15:b3:1d:c9:f1: ab:fb:d7:8e:d2:e6:4d:80:d7:80:cc:d8:76:20:1c: 14:76:79:d8:c8:f6:48:0b:6d:3f:a1:e1:06:3b:65: 59:ea:79:a1:9c:b2:b8:b8:69:97:8a:f1:75:b7:e9: 73:0b:aa:8f:86:f4:ab:40:7a:76:be:af:ce:c1:21: 9a:2d:a1:02:16:e2:53:00:d2:3e:f2:45:05:56:52: ef:21:52:c8:29:46:04:29:51:ad:3c:3e:2a:b8:4d: 62:f4:8a:7f:4a:42:95:31:c9:e9:49:48:09:bc:3a: 1d:41:f5:a4:e1:f0:58:70:5e:d1:bc:67:f9:e4:0a: 0d:c2:d3:f9:34:66:c1:19:15:8c:f0:20:c8:b2:43: bb:93:50:7e:50:1a:fe:8c:68:d5:b0:b0:f7:48:6e: f1:e1:d3:ad:98:2b:ff:f6:8e:a9:95:3f:f7:38:7a: 30:1d:fe:c4:c5:6c:4c:8c:a2:b3:43:24:40:6c:38: 5b:41:2a:aa:7b:fe:69:39:a8:73:a5:05:51:72:11: 69:2e:36:c5:65:97:94:fd:7d:87:9e:0a:b1:c0:b5: 9c:86:2c:66:2e:46:ed:28:71:49:36:a1:bb:bf:b2: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:EA:6A:E1:C0:11:A9:AC:77:D1:6E:0D:FF:6D:4D:4D:34:A1:5A X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:07:6e:63:1e:b5:8c:bc:2e:2b:1d:39:04:ad:40:2c:f4:75: 85:c3:0a:91:64:31:8a:eb:e6:e0:50:3e:2b:55:86:ad:ac:fe: b8:5c:a9:7e:4d:8e:95:8e:1e:37:1a:94:05:a1:55:5f:28:96: 67:a1:ba:50:3b:7f:3c:31:85:e0:a1:b8:ff:2f:8d:6b:34:8f: d8:40:57:41:58:19:f9:89:3a:58:d9:86:40:f3:30:03:1e:b8: 3d:2d:31:3b:e8:3c:46:91:c9:3a:bf:81:b1:1a:78:dc:f7:09: 4b:f3:26:55:e3:6a:bd:c4:c8:e6:aa:55:d0:28:38:58:8a:f2: dc:e4:a4:f7:f1:9e:dc:21:7a:61:52:1e:b2:67:c3:04:c6:89: 77:d4:2c:3f:d2:78:10:43:0a:cc:fc:cf:8a:3b:9c:a6:56:f1: 17:56:e4:6a:17:b1:27:0f:6c:f0:ae:59:fb:07:b2:79:56:19: 64:95:ba:2e:37:9d:50:20:bc:3f:cb:e7:4d:a4:81:cc:c7:28: de:28:ac:51:14:15:21:8f:65:84:c7:a4:12:18:cc:f8:1d:3b: 52:f3:f9:f7:c8:33:90:e2:1e:ce:10:af:d5:43:bd:ea:38:51: e9:2c:0c:48:ba:ca:94:07:9b:5e:47:6a:4b:d7:18:4a:fc:90: 19:70:f3:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXu6MGsHu2pZYsFQiFnmRilwq2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA1MTMwMjA2MTNaFw0yNjA1MTQwNTUzMTNaMDMxMTAvBgNV BAMTKDAxRkFFQTZBRTFDMDExQTlBQzc3RDE2RTBERkY2RDRENEQzNEExNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+LyolYVA3MuzyInZ3HZhPmf2 OBFAjsQVsx3J8av7147S5k2A14DM2HYgHBR2edjI9kgLbT+h4QY7ZVnqeaGcsri4 aZeK8XW36XMLqo+G9KtAena+r87BIZotoQIW4lMA0j7yRQVWUu8hUsgpRgQpUa08 Piq4TWL0in9KQpUxyelJSAm8Oh1B9aTh8FhwXtG8Z/nkCg3C0/k0ZsEZFYzwIMiy Q7uTUH5QGv6MaNWwsPdIbvHh062YK//2jqmVP/c4ejAd/sTFbEyMorNDJEBsOFtB Kqp7/mk5qHOlBVFyEWkuNsVll5T9fYeeCrHAtZyGLGYuRu0ocUk2obu/suX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfrqauHAEamsd9FuDf9tTU00oVowHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEHbmMetYy8LisdOQStQCz0dYXDCpFkMYrr 5uBQPitVhq2s/rhcqX5NjpWOHjcalAWhVV8olmehulA7fzwxheChuP8vjWs0j9hA V0FYGfmJOljZhkDzMAMeuD0tMTvoPEaRyTq/gbEaeNz3CUvzJlXjar3EyOaqVdAo OFiK8tzkpPfxntwhemFSHrJnwwTGiXfULD/SeBBDCsz8z4o7nKZW8RdW5GoXsScP bPCuWfsHsnlWGWSVui43nVAgvD/L502kgczHKN4orFEUFSGPZYTHpBIYzPgdO1Lz +ffIM5DiHs4Qr9VDveo4UeksDEi6ypQHm15HakvXGEr8kBlw82Y= -----END CERTIFICATE-----Generated at Wed May 13 06:19:01 2026 by rpki-client