$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: i16Yrz5McbDQjctJ0ThQoaPigmNoF2nE9eEFJIVxq8E= Subject key identifier: 80:C7:4E:95:CE:96:29:79:45:84:DA:E6:2D:13:28:01:25:40:ED:95 Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 53293E60DCFEFA39B5944F47C34F2E33C1C655A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: 10 Signing time: Wed 13 May 2026 12:25:30 +0000 Manifest this update: Wed 13 May 2026 12:20:30 +0000 Manifest next update: Thu 14 May 2026 14:25:30 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 2: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 3: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: oAD9pm8cxlvXwl3QyNT6j213mAljcbC9lbk1ucpvPTQ=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 5: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:29:3e:60:dc:fe:fa:39:b5:94:4f:47:c3:4f:2e:33:c1:c6:55:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: May 13 12:20:30 2026 GMT Not After : May 14 14:25:30 2026 GMT Subject: CN=80C74E95CE9629794584DAE62D1328012540ED95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:fa:bd:5f:4d:db:f6:4b:2f:71:f2:a8:24: 2b:df:9a:d7:b6:b9:05:26:6a:1d:75:b7:f1:6e:0f: e5:62:c7:52:4a:40:d8:b3:ca:2b:8b:eb:a2:43:a8: 6c:71:f3:0c:c8:ea:76:04:96:75:b0:01:7b:53:b9: f0:57:89:00:6f:64:d2:98:b9:e0:a4:0c:a8:b4:fd: 9c:29:ef:cd:46:19:39:e0:79:c5:ad:0d:bb:4f:90: 70:cd:36:a8:c5:55:84:a6:15:63:c3:af:01:e4:3b: fc:e2:dc:d1:e2:71:f0:10:0b:17:9a:6b:d8:51:d5: d1:0c:bc:a7:4b:e1:f5:55:e5:bf:22:65:7b:53:45: 31:c0:99:84:9e:72:e5:0a:da:cf:77:a6:a9:22:5e: a6:d0:44:f5:6e:82:1d:be:ec:7a:66:c1:d5:7d:45: 4f:2d:f2:53:03:e6:97:09:d0:61:21:75:5a:51:45: d6:84:f0:d0:df:9d:e7:aa:d9:e8:f0:e9:1d:67:73: 87:58:e0:db:9c:a6:ca:c9:65:14:64:de:54:5d:81: de:b6:e0:f5:3c:6e:64:f7:c8:d5:9b:ce:4c:71:74: 99:d6:ea:0d:35:dd:f4:52:c8:4a:4d:ae:26:cc:0d: b3:84:35:04:6b:26:89:d2:a9:dd:24:97:61:47:2d: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C7:4E:95:CE:96:29:79:45:84:DA:E6:2D:13:28:01:25:40:ED:95 X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:24:a6:a0:15:8b:13:3e:d0:80:ec:81:a0:c8:cc:a9:ec: 13:6d:be:02:74:22:d4:72:59:e5:b3:2f:ba:69:6b:56:1b:74: 63:3d:9d:03:81:3c:3a:ce:c9:b4:6a:66:2e:fc:41:a6:e9:47: fb:07:4c:9d:4b:49:87:7c:4e:bc:a1:d6:5f:4b:43:af:04:5e: 98:a0:b9:33:2d:7f:88:6e:3c:aa:ef:52:9b:bc:bd:b7:90:4e: a6:9a:cb:f6:3f:c9:cb:bc:df:8f:99:79:3d:b5:0f:5f:5f:9a: 92:7c:00:ff:54:4a:e2:7b:43:68:0a:64:ce:70:79:75:b5:88: 56:6c:2f:62:57:60:91:3d:15:6f:42:22:25:b1:3b:2a:a8:1f: 03:63:b3:14:f2:74:6f:1e:3a:93:56:ad:2f:28:b1:8c:86:b4: f1:1f:e8:ab:46:d8:ea:bc:6f:5c:96:ca:26:69:86:a7:39:dc: a0:19:89:0f:aa:58:73:60:fb:0b:ed:0c:09:05:c5:7b:87:b7: a0:05:9f:69:72:3f:bb:8a:db:3b:d1:f1:4a:0a:b5:0a:55:ff: dd:66:f4:92:56:a7:51:9c:21:2b:83:1d:76:68:28:e7:b4:96: 50:28:73:ac:c0:88:45:f4:04:c9:9b:09:96:16:69:f8:be:4c: 93:a3:e8:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyk+YNz++jm1lE9Hw08uM8HGVaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA1MTMxMjIwMzBaFw0yNjA1MTQxNDI1MzBaMDMxMTAvBgNV BAMTKDgwQzc0RTk1Q0U5NjI5Nzk0NTg0REFFNjJEMTMyODAxMjU0MEVEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniPq9X03b9ksvcfKoJCvfmte2 uQUmah11t/FuD+Vix1JKQNizyiuL66JDqGxx8wzI6nYElnWwAXtTufBXiQBvZNKY ueCkDKi0/Zwp781GGTngecWtDbtPkHDNNqjFVYSmFWPDrwHkO/zi3NHicfAQCxea a9hR1dEMvKdL4fVV5b8iZXtTRTHAmYSecuUK2s93pqkiXqbQRPVugh2+7HpmwdV9 RU8t8lMD5pcJ0GEhdVpRRdaE8NDfneeq2ejw6R1nc4dY4NucpsrJZRRk3lRdgd62 4PU8bmT3yNWbzkxxdJnW6g013fRSyEpNribMDbOENQRrJonSqd0kl2FHLWyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgMdOlc6WKXlFhNrmLRMoASVA7ZUwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9/JKagFYsTPtCA7IGgyMyp7BNtvgJ0ItRy WeWzL7ppa1YbdGM9nQOBPDrOybRqZi78QabpR/sHTJ1LSYd8Tryh1l9LQ68EXpig uTMtf4huPKrvUpu8vbeQTqaay/Y/ycu834+ZeT21D19fmpJ8AP9USuJ7Q2gKZM5w eXW1iFZsL2JXYJE9FW9CIiWxOyqoHwNjsxTydG8eOpNWrS8osYyGtPEf6KtG2Oq8 b1yWyiZphqc53KAZiQ+qWHNg+wvtDAkFxXuHt6AFn2lyP7uK2zvR8UoKtQpV/91m 9JJWp1GcISuDHXZoKOe0llAoc6zAiEX0BMmbCZYWafi+TJOj6Mc= -----END CERTIFICATE-----Generated at Wed May 13 21:02:48 2026 by rpki-client