$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: fnH5c9hHXvgoihaxZ+nwz+1GnGEvC9txnhUqVYeEGDM= Subject key identifier: BF:B1:A7:69:59:22:B4:EB:49:3B:B5:4F:DE:8E:2D:50:6D:1D:BF:12 Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 43F940D5003EF95CBA0565744931999EB595DBA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 1E Signing time: Sat 23 May 2026 18:35:10 +0000 Manifest this update: Sat 23 May 2026 18:30:10 +0000 Manifest next update: Sun 24 May 2026 20:26:10 +0000 Files and hashes: 1: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: DRjx+ELwVYn/DuL6Yj2/z5AiD6XXfmFnhWg3Wy+Vxh8=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 20:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f9:40:d5:00:3e:f9:5c:ba:05:65:74:49:31:99:9e:b5:95:db:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: May 23 18:30:10 2026 GMT Not After : May 24 20:26:10 2026 GMT Subject: CN=BFB1A7695922B4EB493BB54FDE8E2D506D1DBF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:72:1c:b9:8d:06:7a:6e:f9:55:48:20:a9: 95:13:6e:a7:3c:7a:38:5f:42:36:96:b2:8e:a1:31: 8c:d7:67:a2:75:ac:1d:cf:09:9a:51:53:5a:4d:33: d8:7c:f1:48:e5:23:1a:e0:d1:a6:a3:fd:e3:35:a6: 33:3e:d6:35:1b:fd:27:9f:55:23:df:fe:87:df:84: 92:a4:e3:5b:17:c0:6f:5f:f9:db:d3:08:da:f9:30: 58:13:be:a0:d8:44:e2:e2:0e:e4:02:1d:ba:11:28: c2:00:ab:bc:f8:a1:5d:66:84:9d:34:3d:f6:18:35: 04:0d:93:a5:87:d9:26:d6:8f:35:7f:6c:5c:3e:89: 4d:ac:e2:87:76:17:4d:78:fc:42:73:30:8d:49:5e: fe:99:71:37:6d:a7:38:43:c0:a4:e6:03:54:92:1b: e2:80:63:73:4d:7b:1c:2b:51:5d:22:5b:56:1e:2a: 48:40:c1:4a:ef:b1:8f:7a:dd:72:e8:8b:02:c8:b8: 42:cc:4e:d1:2a:62:02:38:67:dc:d8:fe:3f:a9:a0: 55:84:d4:be:2d:6b:66:20:e9:26:d5:76:1e:48:23: 4a:39:89:89:6e:18:8b:16:47:c1:6c:ae:73:49:d7: 6e:be:73:d3:13:95:fb:28:1f:6e:a1:1c:d1:d2:4d: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:A7:69:59:22:B4:EB:49:3B:B5:4F:DE:8E:2D:50:6D:1D:BF:12 X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:16:06:64:b7:92:7f:d8:9d:7d:e6:f1:61:f2:b8:50:ad:05: 03:6f:82:2e:ed:36:19:37:b8:13:86:30:0a:3d:25:5a:ea:05: bf:df:5b:e8:e9:e5:a2:5a:c9:8f:c3:11:94:ca:2a:9a:6e:61: a3:c2:47:39:43:bd:bd:29:32:4d:2e:32:df:75:2f:48:c3:6e: 91:75:37:9d:70:3a:ff:1d:a0:f0:a1:40:fc:b7:d2:8b:38:28: 1b:7b:da:75:62:bb:23:4d:57:ed:39:9a:58:7e:59:da:e4:71: b0:8f:2c:69:b6:53:a9:b3:4b:a3:ef:44:9c:7b:c1:3d:b4:c0: 32:87:55:32:72:ab:b8:7d:93:87:2f:94:7e:2b:a1:0e:97:1f: a3:bc:fa:15:48:88:0e:8b:ec:87:97:e4:7d:bb:ed:71:2b:30: ea:04:26:ca:8c:91:27:09:60:93:84:3f:6d:ee:eb:5a:8e:b2: 98:24:65:da:66:bd:53:54:ab:a4:c7:af:22:25:49:0f:53:60: 30:7a:d7:53:df:80:39:5a:5c:8c:7f:7a:b4:ea:14:f8:4e:d1: 88:43:df:84:f4:60:a3:fa:26:c7:85:61:bf:e0:a5:a0:0d:a8: 61:43:5d:b1:b1:71:f8:c8:32:ec:3b:bd:3a:a2:7b:4b:d7:c4: 9a:9d:f1:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/lA1QA++Vy6BWV0STGZnrWV26gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA1MjMxODMwMTBaFw0yNjA1MjQyMDI2MTBaMDMxMTAvBgNV BAMTKEJGQjFBNzY5NTkyMkI0RUI0OTNCQjU0RkRFOEUyRDUwNkQxREJGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCku3IcuY0Gem75VUggqZUTbqc8 ejhfQjaWso6hMYzXZ6J1rB3PCZpRU1pNM9h88UjlIxrg0aaj/eM1pjM+1jUb/Sef VSPf/offhJKk41sXwG9f+dvTCNr5MFgTvqDYROLiDuQCHboRKMIAq7z4oV1mhJ00 PfYYNQQNk6WH2SbWjzV/bFw+iU2s4od2F014/EJzMI1JXv6ZcTdtpzhDwKTmA1SS G+KAY3NNexwrUV0iW1YeKkhAwUrvsY963XLoiwLIuELMTtEqYgI4Z9zY/j+poFWE 1L4ta2Yg6SbVdh5II0o5iYluGIsWR8FsrnNJ126+c9MTlfsoH26hHNHSTTp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7GnaVkitOtJO7VP3o4tUG0dvxIwHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEWBmS3kn/YnX3m8WHyuFCtBQNvgi7tNhk3 uBOGMAo9JVrqBb/fW+jp5aJayY/DEZTKKppuYaPCRzlDvb0pMk0uMt91L0jDbpF1 N51wOv8doPChQPy30os4KBt72nViuyNNV+05mlh+WdrkcbCPLGm2U6mzS6PvRJx7 wT20wDKHVTJyq7h9k4cvlH4roQ6XH6O8+hVIiA6L7IeX5H277XErMOoEJsqMkScJ YJOEP23u61qOspgkZdpmvVNUq6THryIlSQ9TYDB611PfgDlaXIx/erTqFPhO0YhD 34T0YKP6JseFYb/gpaANqGFDXbGxcfjIMuw7vTqie0vXxJqd8eQ= -----END CERTIFICATE-----Generated at Sun May 24 04:34:51 2026 by rpki-client