$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json) Hash identifier: pyfPie41e5a6clPCjdjUqDD8QtjY9PbkftBhFGuK1RE= Subject key identifier: 5D:A8:51:6E:9E:8F:5B:95:95:41:BE:F0:A3:F7:D7:0B:E2:02:47:92 Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Certificate serial: 5399CA1BE541CF7A86931A8BCA722D7723D3B16C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:17:00 +0000 Manifest this update: Tue 12 May 2026 06:12:00 +0000 Manifest next update: Wed 13 May 2026 07:50:00 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=) 2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: k4yZ09VI05wmc3Uh2I42YjXcjJOwyhGKBk/1JythfRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:99:ca:1b:e5:41:cf:7a:86:93:1a:8b:ca:72:2d:77:23:d3:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Validity Not Before: May 12 06:12:00 2026 GMT Not After : May 13 07:50:00 2026 GMT Subject: CN=5DA8516E9E8F5B959541BEF0A3F7D70BE2024792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:ad:3a:53:31:1c:b8:96:d0:c6:c4:8c:04: e8:93:30:1d:1a:80:88:be:af:4a:44:01:e9:9c:b7: ce:f3:a3:1f:04:0e:a3:f6:4d:9a:fa:b7:23:50:a2: ce:bd:55:4f:b7:5d:ac:ba:2a:27:e3:d3:99:de:46: fd:5b:3c:3b:ea:82:ce:0e:b7:66:73:b9:2b:4d:87: 2a:55:6f:7c:8e:34:3e:31:a9:be:61:68:4e:82:67: f1:46:e1:d0:40:dd:40:fd:78:eb:8f:97:40:e6:6d: 2a:03:c2:b5:04:8f:0b:55:c0:6b:cc:9f:ee:63:77: 43:63:51:5f:2a:b8:16:e0:90:b9:4b:5c:ce:19:0d: 91:2f:89:b6:eb:ae:f6:fa:00:19:00:a0:e0:08:23: ab:cf:89:41:7b:bf:f5:23:ab:ba:aa:6e:53:f4:5a: 0c:39:0f:b8:6b:09:17:c4:aa:7a:16:69:91:a2:69: 14:d6:c8:a1:f2:f5:5a:8a:4f:45:29:5e:4f:04:ca: c5:35:72:83:4e:42:d7:5d:d4:fa:52:8f:76:6c:89: 43:ad:85:4d:1d:1e:bf:cb:b1:c7:1e:6f:a7:d5:da: 2a:06:e0:6d:a9:a9:24:19:c5:31:80:25:ef:3a:f0: 0d:8f:e2:e1:73:32:3e:6a:ec:11:9b:ad:18:bd:12: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:51:6E:9E:8F:5B:95:95:41:BE:F0:A3:F7:D7:0B:E2:02:47:92 X509v3 Authority Key Identifier: keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4d:84:e6:ce:a5:47:61:5f:9e:de:73:41:8f:dd:ea:a6:c9: 28:62:88:23:6e:90:b7:ad:5f:30:0c:e8:ae:f1:21:30:01:be: 50:a6:a3:b7:31:57:f0:94:4e:52:30:f1:cb:91:00:e2:a8:59: 66:95:84:8a:92:3f:c0:81:c2:0e:40:34:36:56:50:f3:08:11: 75:cc:63:ab:f0:6a:c6:d9:2c:50:3f:c2:fa:8a:c6:91:e0:5b: 78:a3:cd:13:48:ed:c1:b4:01:1c:01:59:c8:d3:a5:6a:df:77: 90:bc:9d:f8:12:9f:a5:66:2f:30:77:c7:41:e5:c0:ab:42:af: 69:63:42:50:7b:f8:b5:0b:9d:8c:2f:86:3e:a9:cf:b9:e6:39: 51:d0:57:78:f2:9c:02:37:1d:0c:d0:00:b5:85:4c:4b:a2:17: 6f:7f:8e:b8:7b:d3:79:83:a5:f2:65:69:15:df:20:82:74:16: d6:a2:ad:40:38:1d:3b:a1:c9:d2:a4:f1:da:bb:13:41:c5:e5: 52:f2:fb:b2:d8:a3:42:d3:16:5c:83:a2:52:31:19:df:c8:a0: 76:4c:1f:fc:c3:bb:b8:e7:32:bb:98:12:20:45:20:c9:db:08: ac:e0:cc:ce:fd:27:0d:2a:db:40:16:3b:8d:03:ff:54:54:40: 79:7c:05:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5nKG+VBz3qGkxqLynItdyPTsWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2 RjJGMUVDRjAeFw0yNjA1MTIwNjEyMDBaFw0yNjA1MTMwNzUwMDBaMDMxMTAvBgNV BAMTKDVEQTg1MTZFOUU4RjVCOTU5NTQxQkVGMEEzRjdENzBCRTIwMjQ3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXK06UzEcuJbQxsSMBOiTMB0a gIi+r0pEAemct87zox8EDqP2TZr6tyNQos69VU+3Xay6Kifj05neRv1bPDvqgs4O t2ZzuStNhypVb3yOND4xqb5haE6CZ/FG4dBA3UD9eOuPl0DmbSoDwrUEjwtVwGvM n+5jd0NjUV8quBbgkLlLXM4ZDZEvibbrrvb6ABkAoOAII6vPiUF7v/Ujq7qqblP0 Wgw5D7hrCRfEqnoWaZGiaRTWyKHy9VqKT0UpXk8EysU1coNOQtdd1PpSj3ZsiUOt hU0dHr/Lscceb6fV2ioG4G2pqSQZxTGAJe868A2P4uFzMj5q7BGbrRi9EvSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXahRbp6PW5WVQb7wo/fXC+ICR5IwHwYDVR0j BBgwFoAUfSGdtIzfdDiYo2/udPqIv28vHs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQyYjRmNzctNzRkMC00Nzk3LWFlZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4 Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2RjJGMUVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDIxOURCNDhDREY3NDM4OThBMzZGRUU3NEZBODhCRjZGMkYx RUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4 QkY2RjJGMUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpNhObOpUdhX57ec0GP3eqmyShiiCNukLet XzAM6K7xITABvlCmo7cxV/CUTlIw8cuRAOKoWWaVhIqSP8CBwg5ANDZWUPMIEXXM Y6vwasbZLFA/wvqKxpHgW3ijzRNI7cG0ARwBWcjTpWrfd5C8nfgSn6VmLzB3x0Hl wKtCr2ljQlB7+LULnYwvhj6pz7nmOVHQV3jynAI3HQzQALWFTEuiF29/jrh703mD pfJlaRXfIIJ0FtairUA4HTuhydKk8dq7E0HF5VLy+7LYo0LTFlyDolIxGd/IoHZM H/zDu7jnMruYEiBFIMnbCKzgzM79Jw0q20AWO40D/1RUQHl8BVI= -----END CERTIFICATE-----Generated at Tue May 12 22:47:32 2026 by rpki-client