$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json) Hash identifier: NB3CJPnvkzbDxlDNmcYPIHkX2s/WZlXI+8fQNfOAV1A= Subject key identifier: 4E:C5:74:B8:CE:46:A8:41:86:88:A9:FD:FA:F0:E3:0A:3E:DC:3A:37 Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Certificate serial: 4DFD1EF111E1CF20BC21A102666875568D4C47B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft Manifest number: 1D Signing time: Sat 23 May 2026 16:22:51 +0000 Manifest this update: Sat 23 May 2026 16:17:51 +0000 Manifest next update: Sun 24 May 2026 19:22:51 +0000 Files and hashes: 1: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: HbmKRYdRbBt0FJuF24XwO8zdPdZgRveh8OcUUlM0PXg=) 2: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=) 3: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 19:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fd:1e:f1:11:e1:cf:20:bc:21:a1:02:66:68:75:56:8d:4c:47:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Validity Not Before: May 23 16:17:51 2026 GMT Not After : May 24 19:22:51 2026 GMT Subject: CN=4EC574B8CE46A8418688A9FDFAF0E30A3EDC3A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:9d:64:c1:bc:e3:88:ea:99:6c:7e:48:42: cc:61:1b:00:b1:aa:ee:77:9d:7e:4b:59:39:73:ac: 97:a3:c4:bd:61:5b:42:0f:b4:5c:15:3e:c8:7b:73: 3b:b5:56:06:1f:52:c9:8f:08:2f:80:b3:02:83:ce: 8d:46:f7:eb:c8:f4:c4:1c:13:1e:13:65:45:3f:d1: 68:ed:11:23:08:9b:e4:28:ea:6c:be:dc:88:a0:2c: 86:e3:bd:72:10:9a:76:f7:5a:3c:5b:ec:65:1a:d1: ce:87:47:85:07:cb:49:52:f1:5e:c6:16:59:4b:69: 2d:f5:2a:e3:c8:9c:5f:79:ad:75:2b:3c:79:db:0a: cd:e7:c0:31:d1:56:3e:d3:97:4d:f9:d5:fd:48:b8: 77:84:5b:9d:5f:be:bd:73:ac:c9:7c:4d:0a:a8:af: f1:36:bb:bf:98:ed:70:64:82:35:21:3f:2e:09:aa: 6c:6a:04:e8:93:ca:ca:0f:d3:4a:dc:4e:3f:f3:3e: 2e:57:92:fb:ea:8d:6b:a6:fe:47:28:61:b8:36:1f: 5d:60:9f:ac:7a:2e:e8:c3:a3:22:dd:5a:b4:0e:b6: a3:d6:a6:f0:90:c5:16:48:3a:4b:a1:f1:52:4c:91: 9f:ae:4a:7e:1f:e1:c9:6a:d1:78:b3:bf:b0:d4:a2: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C5:74:B8:CE:46:A8:41:86:88:A9:FD:FA:F0:E3:0A:3E:DC:3A:37 X509v3 Authority Key Identifier: keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:37:2a:cc:3d:7b:f5:01:0a:d1:5c:fe:bd:86:af:17:4a:bb: 14:f5:55:d3:6f:90:c5:a7:c5:0d:a4:bc:43:9a:c0:8a:63:ff: 8f:70:49:eb:0b:5f:39:b5:43:79:b5:bf:34:ff:8b:34:99:6a: 08:ef:d0:30:b8:ae:8d:07:83:25:ae:f8:12:dd:a3:ae:ee:5f: 94:1f:2f:2f:00:ed:f4:ec:8f:69:57:94:b9:61:68:02:9a:a2: 04:20:1b:54:11:df:4b:00:1b:8c:40:23:fd:bc:a8:c2:65:e3: 6e:b9:f9:b0:10:b7:66:6c:5e:37:fa:a3:07:d6:e5:bf:90:0c: 77:7f:75:9e:32:50:4b:47:3d:aa:61:60:ee:d4:b2:1d:bb:ae: 09:8d:bd:c5:98:1b:a4:ff:ce:c4:fe:f1:81:29:e7:17:4f:6b: 52:67:53:db:df:c0:e2:c2:4e:83:5d:7e:41:59:cf:1d:96:76: 69:b8:c0:0d:ba:6f:db:bc:83:1a:40:9b:16:9c:af:b2:30:85: 09:fc:aa:df:fc:24:ca:5d:e5:f1:28:4a:a8:a8:61:e8:3a:af: cb:0a:ee:61:76:56:e9:7d:e2:d1:2d:1b:f2:78:d6:ba:6a:8c: 56:61:f2:b8:17:3d:5b:49:14:12:6b:b0:a7:1f:a8:49:f0:69: 59:a9:99:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTf0e8RHhzyC8IaECZmh1Vo1MR7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB RjYxOTE4MDAeFw0yNjA1MjMxNjE3NTFaFw0yNjA1MjQxOTIyNTFaMDMxMTAvBgNV BAMTKDRFQzU3NEI4Q0U0NkE4NDE4Njg4QTlGREZBRjBFMzBBM0VEQzNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVJ1kwbzjiOqZbH5IQsxhGwCx qu53nX5LWTlzrJejxL1hW0IPtFwVPsh7czu1VgYfUsmPCC+AswKDzo1G9+vI9MQc Ex4TZUU/0WjtESMIm+Qo6my+3IigLIbjvXIQmnb3Wjxb7GUa0c6HR4UHy0lS8V7G FllLaS31KuPInF95rXUrPHnbCs3nwDHRVj7Tl0351f1IuHeEW51fvr1zrMl8TQqo r/E2u7+Y7XBkgjUhPy4JqmxqBOiTysoP00rcTj/zPi5XkvvqjWum/kcoYbg2H11g n6x6LujDoyLdWrQOtqPWpvCQxRZIOkuh8VJMkZ+uSn4f4clq0Xizv7DUoteLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsV0uM5GqEGGiKn9+vDjCj7cOjcwHwYDVR0j BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4 NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYz QzJBRjYxOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI3Ksw9e/UBCtFc/r2GrxdKuxT1VdNvkMWn xQ2kvEOawIpj/49wSesLXzm1Q3m1vzT/izSZagjv0DC4ro0HgyWu+BLdo67uX5Qf Ly8A7fTsj2lXlLlhaAKaogQgG1QR30sAG4xAI/28qMJl4265+bAQt2ZsXjf6owfW 5b+QDHd/dZ4yUEtHPaphYO7Ush27rgmNvcWYG6T/zsT+8YEp5xdPa1JnU9vfwOLC ToNdfkFZzx2Wdmm4wA26b9u8gxpAmxacr7IwhQn8qt/8JMpd5fEoSqioYeg6r8sK 7mF2Vul94tEtG/J41rpqjFZh8rgXPVtJFBJrsKcfqEnwaVmpmfs= -----END CERTIFICATE-----Generated at Sun May 24 04:34:51 2026 by rpki-client