$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json) Hash identifier: osLKkJFl7BQFkX4aW3Jw//1mdSKSUrlM1cvqnsbq8Bo= Subject key identifier: 9A:F7:F2:10:34:84:CF:5B:59:2B:B1:E7:70:A7:F2:5C:63:C3:18:69 Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Certificate serial: 51421F276C1134EFE41146D32CC8EE776C599F41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft Manifest number: 11 Signing time: Thu 14 May 2026 05:16:59 +0000 Manifest this update: Thu 14 May 2026 05:11:59 +0000 Manifest next update: Fri 15 May 2026 07:36:59 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=) 3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=) 4: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: 5MhURqz1d1dr1YnHlw5ybulWNbPXY+a9UELAjb/IqAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:42:1f:27:6c:11:34:ef:e4:11:46:d3:2c:c8:ee:77:6c:59:9f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Validity Not Before: May 14 05:11:59 2026 GMT Not After : May 15 07:36:59 2026 GMT Subject: CN=9AF7F2103484CF5B592BB1E770A7F25C63C31869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:52:be:94:3e:8c:50:81:96:9b:61:f8:96: 0f:80:bd:8a:dd:03:d7:17:16:e1:28:ee:39:35:7b: 3c:33:18:3e:6b:09:f1:0e:da:36:ba:b2:17:61:6f: 99:4f:5b:98:78:9e:a9:85:b1:94:d3:1f:03:bd:6a: 42:0c:ce:a0:f5:2f:e1:b8:d8:b6:55:71:2a:fd:6c: 8a:d0:41:14:92:7d:48:f7:4e:fb:3b:af:8d:cf:94: aa:a1:5b:83:b6:66:f7:da:ae:b3:58:f6:5d:c3:d6: 1e:56:a7:2d:e1:71:fd:8f:57:4a:c9:b7:2f:8d:b8: b2:f2:73:5d:a6:98:43:b0:30:b9:6b:86:f5:00:fa: ae:94:86:64:a9:3d:b7:26:4e:40:9f:22:0c:e2:e5: b5:5d:06:c1:04:27:6d:df:ab:b9:41:91:09:6a:da: 26:89:c3:e8:af:88:6b:79:21:a8:f9:fe:2c:dd:a8: 02:f4:3e:14:41:cc:50:bd:39:73:7c:94:6f:f9:06: 5d:95:9f:7d:94:ac:f5:a6:dd:eb:e5:6e:e7:57:98: ff:00:99:ff:ba:91:5c:d9:91:8d:65:c3:be:e8:32: b0:55:78:ab:db:d1:ce:b3:e4:21:f8:ee:f9:78:49: 07:7e:78:fa:99:7a:50:13:11:35:f4:57:54:76:e6: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:F2:10:34:84:CF:5B:59:2B:B1:E7:70:A7:F2:5C:63:C3:18:69 X509v3 Authority Key Identifier: keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3f:3b:22:b6:3a:6b:73:d9:ef:8c:78:04:c2:e0:4b:d2:34: 91:03:b2:fc:72:14:c7:96:07:44:ba:25:9e:42:26:07:7e:2d: d4:c3:a7:8a:1b:75:0e:08:21:d6:47:3f:e5:f3:67:59:f1:de: f4:bc:a9:15:4c:a3:86:a8:4e:a9:c1:89:93:8b:b4:71:92:3d: 90:81:1b:7d:dd:c0:3d:79:d2:0a:b6:14:67:bf:be:3f:61:35: 4a:3c:3c:3a:4d:af:27:76:ee:e8:00:33:d3:a5:89:27:21:20: 17:98:ca:00:9b:08:70:e1:37:56:db:70:93:53:3f:80:68:d2: 0f:ad:6d:8f:25:95:34:07:54:3c:0b:39:0e:2f:8a:a7:45:c9: ee:d0:10:e0:8a:2f:c7:4b:dc:a4:78:fd:36:67:d0:da:a1:98: af:06:0b:db:2f:48:3e:62:ae:88:aa:be:d4:b8:fc:ff:c8:6b: e7:5f:7f:54:ad:df:39:e0:72:e2:b2:b8:8a:06:be:ca:3f:75: 4a:21:fe:95:8b:ea:8a:36:0f:82:21:09:ce:d9:49:51:19:38: 3a:d8:b5:a1:a1:74:9c:2c:8c:54:da:6c:cb:eb:6e:c0:74:8d: 62:aa:9a:d9:17:de:56:af:07:75:d0:79:5b:db:84:e8:d1:bc: c5:43:9d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUIfJ2wRNO/kEUbTLMjud2xZn0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMw NzI5RUI3QzAeFw0yNjA1MTQwNTExNTlaFw0yNjA1MTUwNzM2NTlaMDMxMTAvBgNV BAMTKDlBRjdGMjEwMzQ4NENGNUI1OTJCQjFFNzcwQTdGMjVDNjNDMzE4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TVK+lD6MUIGWm2H4lg+AvYrd A9cXFuEo7jk1ezwzGD5rCfEO2ja6shdhb5lPW5h4nqmFsZTTHwO9akIMzqD1L+G4 2LZVcSr9bIrQQRSSfUj3Tvs7r43PlKqhW4O2ZvfarrNY9l3D1h5Wpy3hcf2PV0rJ ty+NuLLyc12mmEOwMLlrhvUA+q6UhmSpPbcmTkCfIgzi5bVdBsEEJ23fq7lBkQlq 2iaJw+iviGt5Iaj5/izdqAL0PhRBzFC9OXN8lG/5Bl2Vn32UrPWm3evlbudXmP8A mf+6kVzZkY1lw77oMrBVeKvb0c6z5CH47vl4SQd+ePqZelATETX0V1R25kVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvfyEDSEz1tZK7HncKfyXGPDGGkwHwYDVR0j BBgwFoAUfGlC2eOdLgcIhUKCy2o3Iwcp63wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiZDU1MzgtNDI3MC00MTJkLTlkNjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlF MzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMwNzI5RUI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzY5NDJEOUUzOUQyRTA3MDg4NTQyODJDQjZBMzcyMzA3MjlF QjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3 MjMwNzI5RUI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKA/OyK2Omtz2e+MeATC4EvSNJEDsvxyFMeW B0S6JZ5CJgd+LdTDp4obdQ4IIdZHP+XzZ1nx3vS8qRVMo4aoTqnBiZOLtHGSPZCB G33dwD150gq2FGe/vj9hNUo8PDpNryd27ugAM9OliSchIBeYygCbCHDhN1bbcJNT P4Bo0g+tbY8llTQHVDwLOQ4viqdFye7QEOCKL8dL3KR4/TZn0NqhmK8GC9svSD5i roiqvtS4/P/Ia+dff1St3zngcuKyuIoGvso/dUoh/pWL6oo2D4IhCc7ZSVEZODrY taGhdJwsjFTabMvrbsB0jWKqmtkX3lavB3XQeVvbhOjRvMVDnVI= -----END CERTIFICATE-----Generated at Thu May 14 09:09:47 2026 by rpki-client