$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: s/slZS9OcS/G0yESSLLyue2yHDOlFZMw8EaeU/t7lEA= Subject key identifier: 9B:AC:D1:8D:D4:7E:59:5B:37:FD:C6:E0:47:B8:40:8F:B4:72:30:C4 Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 4D22D26CE27DAF827E02040E0729051C2E7CD0FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: 07 Signing time: Wed 06 May 2026 23:08:57 +0000 Manifest this update: Wed 06 May 2026 23:03:57 +0000 Manifest next update: Fri 08 May 2026 00:52:57 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) 2: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) 3: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 4: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: enk5ajPtEjWoFTok/kQ76EQfeWvVv5FHo0gfnXZcMGs=) 5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 6: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 00:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:22:d2:6c:e2:7d:af:82:7e:02:04:0e:07:29:05:1c:2e:7c:d0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: May 6 23:03:57 2026 GMT Not After : May 8 00:52:57 2026 GMT Subject: CN=9BACD18DD47E595B37FDC6E047B8408FB47230C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:09:12:ff:3b:7d:fd:24:6f:b3:3c:0d:a1: 5f:3a:8d:61:e7:e6:66:f0:d1:63:c7:c8:3f:7c:0b: 3a:ab:1e:12:94:8c:dc:84:76:74:b7:f0:b4:60:32: 8e:9d:a8:fc:39:4f:a1:56:c5:59:60:fb:d6:bd:51: 98:ee:07:92:2e:75:0d:8d:d1:fe:b4:79:9f:b2:90: de:22:e0:05:91:d0:57:dc:8f:9f:ed:8c:58:18:70: f8:5d:b9:45:48:72:ef:68:ab:c0:63:c5:56:e7:e4: 32:35:63:9b:99:bc:92:5e:af:55:dc:59:88:42:a3: f2:51:dd:38:21:ff:46:50:87:91:4d:26:bb:43:70: 97:57:27:0d:04:4f:33:16:fb:55:39:9c:7d:4a:27: b7:a7:54:5d:b4:0e:d8:a2:85:3e:4a:61:33:35:aa: 5f:aa:cf:f5:ad:a8:ba:eb:1f:40:51:54:a1:76:0e: 38:80:e6:9e:98:28:c7:c4:9f:dd:da:bd:24:50:22: 52:f7:76:32:10:b0:e5:68:27:6d:c7:ed:a0:aa:3a: 6f:3b:bb:5d:a3:06:fe:1c:db:10:35:f0:f0:38:40: 23:34:65:ec:27:f6:5c:e7:9e:c8:45:c8:c3:1c:35: bb:c4:7a:f5:63:11:07:6e:8d:59:c9:0b:6c:de:59: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AC:D1:8D:D4:7E:59:5B:37:FD:C6:E0:47:B8:40:8F:B4:72:30:C4 X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:2b:be:65:d3:91:02:c7:90:1b:49:01:bb:cc:08:83:90: 89:68:57:f4:84:4a:e8:c2:b2:4e:10:38:1a:63:fc:7c:b3:8f: cd:72:ea:5e:84:5d:c1:9f:5c:ae:8a:26:3b:a2:9a:a8:db:37: bb:9d:c8:66:79:46:7f:6e:fc:f6:ca:ba:57:6b:ad:3f:23:37: a0:9b:f6:13:d9:1f:dc:ad:27:0c:a0:29:82:73:68:8a:be:8c: 2f:62:c0:e0:1e:16:37:67:6e:30:f1:15:a9:5c:61:e0:c3:3d: 95:a4:ed:e4:69:93:32:c4:f3:46:3a:e7:47:72:4e:eb:12:77: 69:34:a0:4f:61:05:47:8a:4a:5e:b7:df:bb:35:49:85:4d:00: 7d:b5:ae:9b:7c:83:87:6e:7e:8a:89:5b:ff:11:30:4c:0c:4c: 39:8c:1a:94:75:99:5e:4e:2d:1e:58:96:3b:5b:64:0d:95:a8: c3:0e:85:de:bd:56:c9:8c:c9:e1:3a:c0:54:d2:b2:fe:b7:f2: f2:0d:eb:68:03:b0:2d:48:9a:39:c6:04:f4:8f:c4:9c:ca:32: 04:08:fe:56:5e:b8:39:26:7c:b4:c5:31:dd:f9:1c:8d:8c:ac: ff:7b:0f:6e:26:03:52:f0:d3:9c:c1:df:f8:dc:6f:52:83:18: 6f:80:1c:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSLSbOJ9r4J+AgQOBykFHC580PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA1MDYyMzAzNTdaFw0yNjA1MDgwMDUyNTdaMDMxMTAvBgNV BAMTKDlCQUNEMThERDQ3RTU5NUIzN0ZEQzZFMDQ3Qjg0MDhGQjQ3MjMwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3gkS/zt9/SRvszwNoV86jWHn 5mbw0WPHyD98CzqrHhKUjNyEdnS38LRgMo6dqPw5T6FWxVlg+9a9UZjuB5IudQ2N 0f60eZ+ykN4i4AWR0Ffcj5/tjFgYcPhduUVIcu9oq8BjxVbn5DI1Y5uZvJJer1Xc WYhCo/JR3Tgh/0ZQh5FNJrtDcJdXJw0ETzMW+1U5nH1KJ7enVF20DtiihT5KYTM1 ql+qz/WtqLrrH0BRVKF2DjiA5p6YKMfEn93avSRQIlL3djIQsOVoJ23H7aCqOm87 u12jBv4c2xA18PA4QCM0Zewn9lznnshFyMMcNbvEevVjEQdujVnJC2zeWewRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6zRjdR+WVs3/cbgR7hAj7RyMMQwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGumK75l05ECx5AbSQG7zAiDkIloV/SESujC sk4QOBpj/Hyzj81y6l6EXcGfXK6KJjuimqjbN7udyGZ5Rn9u/PbKuldrrT8jN6Cb 9hPZH9ytJwygKYJzaIq+jC9iwOAeFjdnbjDxFalcYeDDPZWk7eRpkzLE80Y650dy TusSd2k0oE9hBUeKSl6337s1SYVNAH21rpt8g4dufoqJW/8RMEwMTDmMGpR1mV5O LR5YljtbZA2VqMMOhd69VsmMyeE6wFTSsv638vIN62gDsC1ImjnGBPSPxJzKMgQI /lZeuDkmfLTFMd35HI2MrP97D24mA1Lw05zB3/jcb1KDGG+AHAA= -----END CERTIFICATE-----Generated at Thu May 7 03:54:28 2026 by rpki-client