$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: IumHl2Rvt7hSU4T+NpNUCgDqT6XkzvYzK9AAngRk1Go= Subject key identifier: ED:A3:10:C4:20:AB:FE:89:E8:97:AB:13:7E:60:52:AF:CB:9E:D4:A6 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 6C16205898A6265EC1414426EC8E67FB2D0C5C61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:33:54 +0000 Manifest this update: Sat 16 May 2026 15:28:54 +0000 Manifest next update: Sun 17 May 2026 16:31:54 +0000 Files and hashes: 1: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 2: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 3: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 4: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) 5: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 6: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: f1igzIHI7PFptHa2TPhL5HzIqSusiNQ5FtUQTFtKkxE=) 7: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 8: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 9: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:16:20:58:98:a6:26:5e:c1:41:44:26:ec:8e:67:fb:2d:0c:5c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 16 15:28:54 2026 GMT Not After : May 17 16:31:54 2026 GMT Subject: CN=EDA310C420ABFE89E897AB137E6052AFCB9ED4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:40:ce:ea:cd:bd:cc:54:c5:db:f2:a1:81: 56:2f:aa:57:5f:06:f1:82:69:c4:0e:a7:67:10:07: 05:eb:24:15:4a:19:cf:39:b4:b6:dc:d5:d2:6b:4e: 20:e8:67:5a:90:5e:86:c6:7b:fc:cb:ff:1a:38:b5: 28:98:21:cc:55:93:c8:02:24:81:64:4c:03:96:5f: 35:6b:73:b9:67:b2:6c:54:09:ef:81:12:c0:b5:09: 2c:5e:dd:eb:dc:e5:01:47:de:74:c5:49:d3:29:d2: df:de:c0:11:a4:36:37:74:fd:94:f2:7c:9d:6d:ea: 93:c6:6b:0b:77:c3:1c:20:a5:6d:03:f2:d2:c1:a7: 35:04:9b:ec:1c:d6:b8:f8:a4:d7:96:55:ef:52:0b: 6b:55:0a:35:31:87:bc:c0:8b:d5:b3:74:f3:a7:68: 07:dc:ff:da:68:6c:a3:8b:5f:81:54:98:c8:ca:13: 58:ef:9e:58:e2:90:68:8c:b2:78:59:25:e2:e9:75: f1:e1:0b:6d:d9:e5:75:ef:1e:76:b4:50:94:d7:16: 9c:b4:df:fd:b4:cc:cb:36:19:ba:44:cd:f5:33:97: 15:cf:22:48:6a:89:f6:3f:f0:54:94:2d:f8:7e:2e: 24:c6:c6:69:3d:d4:30:3b:2a:01:49:f3:6c:36:e2: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A3:10:C4:20:AB:FE:89:E8:97:AB:13:7E:60:52:AF:CB:9E:D4:A6 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:da:a7:65:6a:bd:1a:55:aa:cf:ef:10:62:9c:88:03:36:cc: 8d:55:5a:e8:a4:7f:98:18:ba:c3:ca:63:40:e3:f6:cd:a7:6e: de:79:0a:b2:58:73:35:d9:f3:ba:7f:dd:8c:7d:d3:3a:6d:0e: 4b:50:bb:64:eb:33:4c:1c:5f:b3:5b:1d:e3:47:50:f5:25:cf: c0:74:70:50:f1:f6:15:aa:a0:64:cb:7e:4e:81:b1:0d:93:9b: 01:ae:86:7c:05:18:5c:a7:ac:57:78:6a:46:66:51:3c:b8:8b: ae:a7:49:96:a0:72:6d:63:b9:4e:d1:d6:29:59:a4:ef:a7:c7: 79:fa:f7:24:1f:01:37:74:60:81:41:57:f5:3a:f5:1f:19:7f: 65:48:6c:f4:db:c6:ba:03:b6:fd:3b:eb:2f:cb:34:00:3a:b9: 2f:ba:4f:b5:c5:61:2b:20:e6:f1:ed:6e:4b:e8:36:6b:f3:b0: 6c:7f:e0:61:9a:60:51:26:7a:1a:65:3b:65:e0:d2:89:52:f4: b9:0b:25:94:a3:5e:24:01:9b:cc:7f:6a:b5:8f:7c:93:e2:31: fc:90:89:9f:25:8a:8a:78:4e:1a:5e:4a:80:96:9e:57:c3:54: 73:df:27:69:0d:92:73:29:5e:12:f2:6c:bd:e6:17:75:29:43: bf:ef:62:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBYgWJimJl7BQUQm7I5n+y0MXGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MTYxNTI4NTRaFw0yNjA1MTcxNjMxNTRaMDMxMTAvBgNV BAMTKEVEQTMxMEM0MjBBQkZFODlFODk3QUIxMzdFNjA1MkFGQ0I5RUQ0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/c0DO6s29zFTF2/KhgVYvqldf BvGCacQOp2cQBwXrJBVKGc85tLbc1dJrTiDoZ1qQXobGe/zL/xo4tSiYIcxVk8gC JIFkTAOWXzVrc7lnsmxUCe+BEsC1CSxe3evc5QFH3nTFSdMp0t/ewBGkNjd0/ZTy fJ1t6pPGawt3wxwgpW0D8tLBpzUEm+wc1rj4pNeWVe9SC2tVCjUxh7zAi9WzdPOn aAfc/9pobKOLX4FUmMjKE1jvnljikGiMsnhZJeLpdfHhC23Z5XXvHna0UJTXFpy0 3/20zMs2GbpEzfUzlxXPIkhqifY/8FSULfh+LiTGxmk91DA7KgFJ82w24uGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7aMQxCCr/onol6sTfmBSr8ue1KYwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrap2VqvRpVqs/vEGKciAM2zI1VWuikf5gY usPKY0Dj9s2nbt55CrJYczXZ87p/3Yx90zptDktQu2TrM0wcX7NbHeNHUPUlz8B0 cFDx9hWqoGTLfk6BsQ2TmwGuhnwFGFynrFd4akZmUTy4i66nSZagcm1juU7R1ilZ pO+nx3n69yQfATd0YIFBV/U69R8Zf2VIbPTbxroDtv076y/LNAA6uS+6T7XFYSsg 5vHtbkvoNmvzsGx/4GGaYFEmehplO2Xg0olS9LkLJZSjXiQBm8x/arWPfJPiMfyQ iZ8liop4ThpeSoCWnlfDVHPfJ2kNknMpXhLybL3mF3UpQ7/vYsE= -----END CERTIFICATE-----Generated at Sat May 16 20:32:05 2026 by rpki-client