$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json) Hash identifier: /CmTn1k80E4HTnMZ9ow5pf/QeLB3d3hopbmCtuiJV64= Subject key identifier: F3:A7:F3:3D:35:43:96:7E:F1:2F:B3:44:26:C1:80:B4:8D:D0:87:CA Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Certificate serial: 2C0BD8C895D94F90D3B125CE6847D8E8A221D697 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft Manifest number: 05 Signing time: Tue 05 May 2026 03:56:38 +0000 Manifest this update: Tue 05 May 2026 03:51:38 +0000 Manifest next update: Wed 06 May 2026 07:47:38 +0000 Files and hashes: 1: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=) 2: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: oQJs7zvMMMsZr/5SxElmWkrb6pjNBVe9ANouDMa6hO0=) 3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=) 4: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=) 5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0b:d8:c8:95:d9:4f:90:d3:b1:25:ce:68:47:d8:e8:a2:21:d6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Validity Not Before: May 5 03:51:38 2026 GMT Not After : May 6 07:47:38 2026 GMT Subject: CN=F3A7F33D3543967EF12FB34426C180B48DD087CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:b5:4e:db:30:39:27:55:e0:42:6d:58:b3: c4:9c:88:c0:c2:b7:c1:15:8c:b4:be:ec:14:9b:7f: 21:ab:d2:13:17:a4:ac:6a:85:09:69:42:cb:6f:6d: 29:7e:bd:7d:84:b4:fb:87:78:ce:d0:46:0f:1f:bb: 8f:e6:22:9b:cb:be:c8:97:60:0c:70:7e:c3:ef:5d: 90:81:68:cf:82:8a:24:5c:1e:c7:e2:eb:09:f5:bf: 9e:8a:4c:87:b1:30:e2:08:b6:31:3b:26:eb:74:d6: 83:d9:54:21:51:d2:2b:23:4c:a8:6b:de:ba:9e:5e: fc:b3:a2:74:2b:54:d1:f7:7c:9f:51:af:e9:24:5c: ff:30:85:1a:24:dc:a8:92:84:48:f1:72:0d:6d:50: a2:9d:ce:78:f5:d3:4a:4b:8f:27:38:c3:83:f9:af: 2f:3d:09:3f:58:55:f1:25:01:0f:3f:ed:ee:3c:80: 92:2a:35:96:63:3e:bc:5b:f6:0e:06:39:07:dd:e7: b8:cb:76:3f:43:5b:2c:0e:93:3f:15:66:bd:a5:54: 8a:18:94:e2:46:8d:38:98:19:a5:c2:7b:bc:98:6b: fb:81:2a:3a:e0:65:db:43:1f:49:82:b9:ba:dd:ee: 6f:a5:31:98:74:f4:ba:07:06:d4:37:7d:07:ae:b2: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:F3:3D:35:43:96:7E:F1:2F:B3:44:26:C1:80:B4:8D:D0:87:CA X509v3 Authority Key Identifier: keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ba:b7:a6:71:60:70:3f:24:21:2b:0c:66:01:e3:e9:b2:16: 0c:18:2a:74:10:e3:c5:8e:9b:13:7f:38:e7:0b:06:4d:da:8c: 88:21:33:e7:94:0f:cf:2a:fd:b3:c3:7b:80:53:da:b7:a5:62: f2:f4:00:54:8a:93:1f:a4:08:4b:24:41:2f:12:c2:35:a0:e5: 4c:ef:a9:86:ef:51:c8:23:02:84:d8:b4:16:e3:77:41:63:07: 4c:94:c8:87:57:8a:20:d0:83:da:58:49:ca:39:41:f9:9d:65: 40:30:f5:64:24:87:f6:7a:2e:31:69:85:6a:dd:8a:54:a9:5a: 4a:4e:9c:69:d6:50:8e:ca:fe:bf:3d:2f:fe:dd:d9:c3:3d:3f: 32:8a:04:59:d0:4d:33:3f:2c:18:dd:8f:26:b7:34:8b:3a:d2: ae:49:90:ca:c4:5d:3f:b1:d4:a4:eb:10:6a:4c:0e:18:4b:8f: 6b:ef:62:04:9f:6d:db:2e:ea:0a:9f:02:c7:0f:cd:20:56:0c: e1:4d:a9:ce:d4:bc:12:c3:46:73:d7:53:15:f1:98:26:7f:12: fb:25:6e:f0:c7:d9:33:db:a0:af:2a:7d:94:ae:89:62:3d:fd: 68:cd:2c:36:33:4e:d2:8d:65:7f:91:8f:8a:b1:0d:e2:cf:89: 9b:0c:d1:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAvYyJXZT5DTsSXOaEfY6KIh1pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4 MDc3QjRFRjAeFw0yNjA1MDUwMzUxMzhaFw0yNjA1MDYwNzQ3MzhaMDMxMTAvBgNV BAMTKEYzQTdGMzNEMzU0Mzk2N0VGMTJGQjM0NDI2QzE4MEI0OEREMDg3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8bVO2zA5J1XgQm1Ys8SciMDC t8EVjLS+7BSbfyGr0hMXpKxqhQlpQstvbSl+vX2EtPuHeM7QRg8fu4/mIpvLvsiX YAxwfsPvXZCBaM+CiiRcHsfi6wn1v56KTIexMOIItjE7Jut01oPZVCFR0isjTKhr 3rqeXvyzonQrVNH3fJ9Rr+kkXP8whRok3KiShEjxcg1tUKKdznj100pLjyc4w4P5 ry89CT9YVfElAQ8/7e48gJIqNZZjPrxb9g4GOQfd57jLdj9DWywOkz8VZr2lVIoY lOJGjTiYGaXCe7yYa/uBKjrgZdtDH0mCubrd7m+lMZh09LoHBtQ3fQeushcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86fzPTVDln7xL7NEJsGAtI3Qh8owHwYDVR0j BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW6t6ZxYHA/JCErDGYB4+myFgwYKnQQ48WO mxN/OOcLBk3ajIghM+eUD88q/bPDe4BT2relYvL0AFSKkx+kCEskQS8SwjWg5Uzv qYbvUcgjAoTYtBbjd0FjB0yUyIdXiiDQg9pYSco5QfmdZUAw9WQkh/Z6LjFphWrd ilSpWkpOnGnWUI7K/r89L/7d2cM9PzKKBFnQTTM/LBjdjya3NIs60q5JkMrEXT+x 1KTrEGpMDhhLj2vvYgSfbdsu6gqfAscPzSBWDOFNqc7UvBLDRnPXUxXxmCZ/Evsl bvDH2TPboK8qfZSuiWI9/WjNLDYzTtKNZX+Rj4qxDeLPiZsM0cU= -----END CERTIFICATE-----Generated at Tue May 5 17:51:34 2026 by rpki-client