$ rpki-client -vvf rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft File: 7844F23C52D754615D0DCCF2190967C1B89CF85F.mft (raw, json) Hash identifier: jLcfS2Hvg+d2M5tzXgoqCUwEMFOmMENAVfdYnBlqlDQ= Subject key identifier: B2:27:B2:4B:DC:FB:AB:09:65:BA:31:FB:87:64:37:39:8C:AA:98:EB Authority key identifier: 78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F Certificate issuer: /CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Certificate serial: 75BBD5D1FF5112AC47F48E8DAD18271376E30E1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft Manifest number: 13 Signing time: Fri 15 May 2026 23:10:15 +0000 Manifest this update: Fri 15 May 2026 23:05:15 +0000 Manifest next update: Sun 17 May 2026 01:39:15 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: MkT+sF+nybNeeysnued54G0xsj6WfMLE7g6ep+2x6vw=) 2: 7844F23C52D754615D0DCCF2190967C1B89CF85F.crl (hash: +fbLETBNQ5PqUcoaiSnh68S+5QfCBXd6DjYJZsrl73A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 01:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bb:d5:d1:ff:51:12:ac:47:f4:8e:8d:ad:18:27:13:76:e3:0e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Validity Not Before: May 15 23:05:15 2026 GMT Not After : May 17 01:39:15 2026 GMT Subject: CN=B227B24BDCFBAB0965BA31FB876437398CAA98EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:90:03:f2:b1:e0:5d:05:f7:ed:93:c1:a1: 15:ff:7e:c2:06:3f:90:31:92:a6:6b:fd:db:15:3d: f0:03:b2:44:80:7e:bb:4e:44:4d:24:33:7f:a0:63: 6a:52:37:db:12:b1:e7:1a:1d:95:a9:96:f3:a6:5f: 5f:a6:1d:17:ec:23:e9:1d:30:83:3a:c3:ff:70:53: d4:1e:55:78:05:41:75:ce:50:eb:a3:90:a9:20:84: 62:61:b6:e3:66:66:dd:43:36:0c:e3:19:f7:4a:56: 1d:69:37:bb:e4:76:50:5a:d0:bb:1c:3f:ce:a6:29: 0e:0b:1f:2c:73:1b:5d:9d:34:31:31:94:ef:69:75: 91:a0:9e:a5:4f:28:c2:36:28:86:8b:0b:1a:85:51: bb:f1:e8:a3:89:c6:df:d4:d2:2f:f8:6f:89:eb:6b: 70:3a:8a:5d:42:1f:fd:44:d6:bb:0e:5c:bb:da:5b: b3:c0:8f:a0:8d:ee:d8:c0:9c:80:b5:0d:83:9e:dd: f6:f4:e5:a3:7b:af:e3:2e:e5:04:d1:a6:06:b1:29: a2:75:12:5f:50:48:d0:a5:df:d8:38:6a:e5:48:b8: 7e:88:a4:f0:8b:74:0f:e7:3e:87:1b:6a:94:18:e9: ac:39:d1:d9:15:54:42:0c:8b:5a:eb:e7:35:3a:4c: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:B2:4B:DC:FB:AB:09:65:BA:31:FB:87:64:37:39:8C:AA:98:EB X509v3 Authority Key Identifier: keyid:78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d6:20:72:f3:82:23:71:39:8f:2b:88:6e:cc:32:43:a9:65: 98:5c:43:db:50:f6:f5:96:8c:aa:90:79:aa:06:8b:7c:17:6d: 6f:a0:b7:c8:22:eb:5a:46:83:3f:54:4e:6f:54:5b:c9:a4:93: f3:09:ad:7f:1c:25:a0:76:1c:12:a1:17:6a:8d:55:ca:85:5c: 19:ba:27:de:53:c1:a4:85:f0:ca:cf:03:f7:b9:d4:76:98:fe: 8d:e8:c1:15:01:4e:ec:c5:65:56:f6:7d:10:9c:36:25:f3:a7: 2a:38:e9:7b:3d:c7:e8:9b:4d:eb:50:45:18:c4:28:09:0f:e5: 59:60:ea:da:b2:c1:20:61:9e:f0:7e:ae:6c:a1:e0:1b:87:b3: 95:c0:74:00:86:f4:fb:d3:b8:30:33:0e:99:18:e7:3d:08:00: 53:3b:5c:63:19:6c:f7:a1:84:f5:40:3f:e5:71:7c:8e:80:a0: 88:bc:36:0f:05:4c:07:45:5c:db:62:92:10:6c:04:9e:e5:3e: 8d:8c:e2:75:0e:db:f8:50:eb:f6:e5:2f:1b:f1:e1:63:a9:bd: 5a:da:9f:cf:79:d8:59:7b:76:45:a1:2f:d8:a3:ad:52:e4:eb: 15:69:02:26:e8:28:2b:f1:57:bb:e8:30:4c:1f:57:cc:b3:d1: cb:3e:44:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbvV0f9REqxH9I6NrRgnE3bjDh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFC ODlDRjg1RjAeFw0yNjA1MTUyMzA1MTVaFw0yNjA1MTcwMTM5MTVaMDMxMTAvBgNV BAMTKEIyMjdCMjRCRENGQkFCMDk2NUJBMzFGQjg3NjQzNzM5OENBQTk4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiI5AD8rHgXQX37ZPBoRX/fsIG P5AxkqZr/dsVPfADskSAfrtORE0kM3+gY2pSN9sSsecaHZWplvOmX1+mHRfsI+kd MIM6w/9wU9QeVXgFQXXOUOujkKkghGJhtuNmZt1DNgzjGfdKVh1pN7vkdlBa0Lsc P86mKQ4LHyxzG12dNDExlO9pdZGgnqVPKMI2KIaLCxqFUbvx6KOJxt/U0i/4b4nr a3A6il1CH/1E1rsOXLvaW7PAj6CN7tjAnIC1DYOe3fb05aN7r+Mu5QTRpgaxKaJ1 El9QSNCl39g4auVIuH6IpPCLdA/nPocbapQY6aw50dkVVEIMi1rr5zU6TGxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsieyS9z7qwllujH7h2Q3OYyqmOswHwYDVR0j BBgwFoAUeETyPFLXVGFdDczyGQlnwbic+F8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkNjExMzUtNzVlNC00NmM2LWJkZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1 MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFCODlDRjg1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODQ0RjIzQzUyRDc1NDYxNUQwRENDRjIxOTA5NjdDMUI4OUNG ODVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3 QzFCODlDRjg1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/WIHLzgiNxOY8riG7MMkOpZZhcQ9tQ9vWW jKqQeaoGi3wXbW+gt8gi61pGgz9UTm9UW8mkk/MJrX8cJaB2HBKhF2qNVcqFXBm6 J95TwaSF8MrPA/e51HaY/o3owRUBTuzFZVb2fRCcNiXzpyo46Xs9x+ibTetQRRjE KAkP5Vlg6tqywSBhnvB+rmyh4BuHs5XAdACG9PvTuDAzDpkY5z0IAFM7XGMZbPeh hPVAP+VxfI6AoIi8Ng8FTAdFXNtikhBsBJ7lPo2M4nUO2/hQ6/blLxvx4WOpvVra n8952Fl7dkWhL9ijrVLk6xVpAiboKCvxV7voMEwfV8yz0cs+RFE= -----END CERTIFICATE-----Generated at Sat May 16 16:40:35 2026 by rpki-client