$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: D1zYSZvaf+JBUrPtUDiSFekMP0vUsNVlZ3m5a4TWd/g= Subject key identifier: F4:B9:55:EC:82:50:C5:FB:CB:CA:44:2B:40:B5:E6:99:42:F7:9B:E3 Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 73DF3013552F551568204F2A9ECA167A112DED74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 24 Signing time: Thu 28 May 2026 16:05:23 +0000 Manifest this update: Thu 28 May 2026 16:00:23 +0000 Manifest next update: Fri 29 May 2026 19:09:23 +0000 Files and hashes: 1: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) 2: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: 5KPOfk/DkWYi0Hq3NN5EEjZPgwPGYISURT6SOGI0l90=) 3: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 4: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 10:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:df:30:13:55:2f:55:15:68:20:4f:2a:9e:ca:16:7a:11:2d:ed:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: May 28 16:00:23 2026 GMT Not After : May 29 19:09:23 2026 GMT Subject: CN=F4B955EC8250C5FBCBCA442B40B5E69942F79BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:03:f3:38:ae:c5:2f:cb:e0:f2:80:d1:bb: e9:8e:66:bd:ef:51:5d:29:bb:3b:90:10:a5:0a:80: be:95:21:09:cb:ef:c8:2e:1e:56:cf:b7:74:19:cd: df:15:34:2f:30:59:4c:1e:de:7d:e3:55:6b:0a:36: 61:55:97:44:5e:ed:63:5d:90:3c:e3:f1:28:a0:0b: 4d:42:3a:3e:8a:4b:a6:56:ec:d7:6b:6d:8a:c0:dc: 27:26:31:5a:a7:02:f5:2c:d8:da:b5:9f:72:82:62: ed:6a:b5:a5:8c:8b:00:6b:4c:91:39:b4:1c:5f:be: 22:d9:9b:70:7c:6d:14:0f:13:ac:7e:44:ae:5a:6b: 00:ba:66:ca:47:67:80:33:ce:0f:ff:c0:7a:32:bc: 7c:0a:cf:83:d9:87:e3:4f:a6:c0:25:c7:57:9a:7a: c6:f5:e9:d3:79:4b:53:c8:d5:e7:d6:2c:55:42:23: 55:b1:89:65:af:1e:48:a4:2e:e3:2c:f1:21:cf:67: ec:d5:1f:67:54:15:ca:76:1a:e5:e1:d1:22:19:31: e6:e4:4d:d0:0a:43:73:14:7c:e8:09:2b:63:f2:4d: d0:87:71:85:77:82:e5:0c:9c:c0:29:36:e1:6d:87: 17:db:e2:39:be:00:74:5f:ed:f0:36:48:d1:3a:94: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:55:EC:82:50:C5:FB:CB:CA:44:2B:40:B5:E6:99:42:F7:9B:E3 X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b3:b9:01:e1:2f:40:68:6c:94:dc:84:2f:fd:05:8c:61:f2: 59:b4:ee:3c:4f:4c:e2:7a:16:5e:9f:6e:55:df:5e:eb:7f:1c: f4:b7:0f:b5:56:2b:a3:15:0f:33:4f:4b:97:e0:17:03:7d:33: 91:11:b4:a9:df:24:27:f8:3f:0c:bd:fa:9e:f6:d5:a7:b9:2c: 7d:81:39:ce:87:4a:44:c8:a4:4c:f8:da:fc:4d:83:ea:a1:9a: 20:29:23:bf:b4:9e:77:6e:7b:84:f8:aa:2e:e2:bb:56:2a:ee: b6:61:8c:bd:26:72:00:61:32:c0:7c:a0:2c:57:36:1f:88:7f: a2:8a:67:c4:c9:f9:d0:c4:06:ba:56:0e:df:24:06:9c:22:0f: 34:98:d1:37:0b:11:47:d5:11:5b:e0:e8:42:07:93:9f:2e:55: 43:f9:6f:34:40:0b:89:f7:6f:33:c2:ba:83:9a:62:e9:77:a4: c1:55:35:7d:8f:44:1d:83:0b:da:0d:13:2c:b0:4b:2d:c6:a0: 76:c5:c9:32:79:01:02:30:93:aa:6c:a2:5a:c3:43:d6:89:4d: db:5f:94:28:4d:75:c3:a8:95:8e:2a:2a:a2:0a:16:e7:fd:07: f1:8d:60:39:40:a7:73:1c:c9:c2:33:e1:1b:fc:95:f2:19:53: 1c:d5:b4:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc98wE1UvVRVoIE8qnsoWehEt7XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA1MjgxNjAwMjNaFw0yNjA1MjkxOTA5MjNaMDMxMTAvBgNV BAMTKEY0Qjk1NUVDODI1MEM1RkJDQkNBNDQyQjQwQjVFNjk5NDJGNzlCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yAPzOK7FL8vg8oDRu+mOZr3v UV0puzuQEKUKgL6VIQnL78guHlbPt3QZzd8VNC8wWUwe3n3jVWsKNmFVl0Re7WNd kDzj8SigC01COj6KS6ZW7NdrbYrA3CcmMVqnAvUs2Nq1n3KCYu1qtaWMiwBrTJE5 tBxfviLZm3B8bRQPE6x+RK5aawC6ZspHZ4Azzg//wHoyvHwKz4PZh+NPpsAlx1ea esb16dN5S1PI1efWLFVCI1WxiWWvHkikLuMs8SHPZ+zVH2dUFcp2GuXh0SIZMebk TdAKQ3MUfOgJK2PyTdCHcYV3guUMnMApNuFthxfb4jm+AHRf7fA2SNE6lPjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9LlV7IJQxfvLykQrQLXmmUL3m+MwHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqzuQHhL0BobJTchC/9BYxh8lm07jxPTOJ6 Fl6fblXfXut/HPS3D7VWK6MVDzNPS5fgFwN9M5ERtKnfJCf4Pwy9+p721ae5LH2B Oc6HSkTIpEz42vxNg+qhmiApI7+0nndue4T4qi7iu1Yq7rZhjL0mcgBhMsB8oCxX Nh+If6KKZ8TJ+dDEBrpWDt8kBpwiDzSY0TcLEUfVEVvg6EIHk58uVUP5bzRAC4n3 bzPCuoOaYul3pMFVNX2PRB2DC9oNEyywSy3GoHbFyTJ5AQIwk6psolrDQ9aJTdtf lChNdcOolY4qKqIKFuf9B/GNYDlAp3McycIz4Rv8lfIZUxzVtAg= -----END CERTIFICATE-----Generated at Thu May 28 23:31:48 2026 by rpki-client