$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: suDVuFAs9rnteWNQbvZlzeCK6Kv0dvx99xD1BmYffK0= Subject key identifier: 21:0A:3B:5D:79:0B:97:D7:A0:87:14:4E:BB:A9:35:AD:18:F3:93:D7 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 3A6F9A6BBE0832BE61A58DFB723B9A4E0D5F482D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: 05 Signing time: Tue 05 May 2026 06:55:34 +0000 Manifest this update: Tue 05 May 2026 06:50:34 +0000 Manifest next update: Wed 06 May 2026 07:48:34 +0000 Files and hashes: 1: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: 745tRIP0hnaVeWA5MY6Yi65AL1qmlv5Zokz7j6KqHQc=) 2: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) 3: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6f:9a:6b:be:08:32:be:61:a5:8d:fb:72:3b:9a:4e:0d:5f:48:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: May 5 06:50:34 2026 GMT Not After : May 6 07:48:34 2026 GMT Subject: CN=210A3B5D790B97D7A087144EBBA935AD18F393D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:9e:50:b7:dd:3d:c5:cb:f6:fc:e1:db:e7: 01:5b:24:62:2b:17:2e:de:b7:37:7b:c8:e2:14:7a: ef:0e:10:b8:ef:ca:a3:6d:52:ee:47:cb:f8:a7:ae: b9:4d:31:80:38:2e:7f:62:a9:0b:bf:42:2f:76:c0: 3a:be:5b:47:ea:df:2b:78:89:e8:62:45:67:da:cf: 66:e6:b3:49:b8:6a:51:c5:c0:83:7a:0c:25:00:f9: 4f:b9:72:66:71:85:d1:78:f1:a6:6c:22:d9:a2:b4: c9:77:7d:a1:b7:26:df:1f:e0:59:41:29:33:ee:fe: 4e:4e:02:a5:c1:c4:3d:3f:d5:39:b7:ca:48:c9:79: 83:3a:0e:8d:56:f9:07:12:72:6d:7f:6a:ec:e0:29: e6:55:20:33:03:20:e7:fa:4a:e6:0e:3b:9e:17:ab: be:bd:31:4d:d2:af:bf:6a:7f:42:0b:dd:de:85:cd: a7:96:fa:c3:5d:e2:7d:42:36:c1:26:7f:ca:49:45: e6:2e:01:de:38:c5:44:e1:e4:ff:8a:f5:6f:5c:af: f7:eb:8b:0c:48:0e:bb:3b:36:4a:47:ea:62:60:f9: a8:e8:0e:9e:45:7e:d0:a1:f8:27:ba:ed:a2:d6:2c: 30:98:66:2a:ca:f2:9f:5a:99:45:b0:d7:3c:81:fa: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:3B:5D:79:0B:97:D7:A0:87:14:4E:BB:A9:35:AD:18:F3:93:D7 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f2:7e:ef:5d:62:fe:a4:86:7d:29:9c:cf:24:7f:15:9c:b9: 5d:a7:7d:bf:de:60:87:7b:cd:dd:aa:7e:00:31:11:6f:7b:c2: cd:73:6a:f4:0e:3a:fc:5d:4d:2e:2b:94:0c:e0:99:67:c7:7d: 78:fd:a4:5c:d7:71:9a:3c:ed:68:98:c1:03:99:df:03:9c:3b: 9a:2e:fa:77:b0:bc:eb:f3:69:08:94:ae:70:d6:b3:b9:56:5a: 9b:ad:44:fd:da:f7:14:f9:b6:59:0f:8d:bd:c3:4c:4b:b6:77: 35:2c:ff:f4:3a:06:5a:4f:2c:16:92:a1:67:19:3c:61:21:d5: 45:27:ff:0b:db:65:df:77:a7:e0:87:22:8b:ba:4a:ae:72:fe: 94:1c:0c:df:15:6f:98:5a:17:44:3a:9a:a4:88:8a:87:23:9e: 92:de:18:33:9a:9a:31:93:8c:d4:e5:31:f3:43:97:5b:15:a9: b4:7d:4a:4c:19:f2:b6:a6:c3:8c:8a:2e:fd:8e:ca:54:c0:48: 55:f4:57:ae:22:39:fb:54:50:44:ab:41:c4:29:50:7f:a0:ae: 81:30:e7:bf:62:43:56:1a:76:29:f2:8d:1b:8f:5a:15:a9:e7: b6:f3:1e:94:7c:8a:29:e1:01:0d:01:71:1d:bb:5a:b0:8d:08: 6b:af:c9:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOm+aa74IMr5hpY37cjuaTg1fSC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjA1MDUwNjUwMzRaFw0yNjA1MDYwNzQ4MzRaMDMxMTAvBgNV BAMTKDIxMEEzQjVENzkwQjk3RDdBMDg3MTQ0RUJCQTkzNUFEMThGMzkzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR1p5Qt909xcv2/OHb5wFbJGIr Fy7etzd7yOIUeu8OELjvyqNtUu5Hy/inrrlNMYA4Ln9iqQu/Qi92wDq+W0fq3yt4 iehiRWfaz2bms0m4alHFwIN6DCUA+U+5cmZxhdF48aZsItmitMl3faG3Jt8f4FlB KTPu/k5OAqXBxD0/1Tm3ykjJeYM6Do1W+QcScm1/auzgKeZVIDMDIOf6SuYOO54X q769MU3Sr79qf0IL3d6FzaeW+sNd4n1CNsEmf8pJReYuAd44xUTh5P+K9W9cr/fr iwxIDrs7NkpH6mJg+ajoDp5FftCh+Ce67aLWLDCYZirK8p9amUWw1zyB+riZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQo7XXkLl9eghxROu6k1rRjzk9cwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbyfu9dYv6khn0pnM8kfxWcuV2nfb/eYId7 zd2qfgAxEW97ws1zavQOOvxdTS4rlAzgmWfHfXj9pFzXcZo87WiYwQOZ3wOcO5ou +newvOvzaQiUrnDWs7lWWputRP3a9xT5tlkPjb3DTEu2dzUs//Q6BlpPLBaSoWcZ PGEh1UUn/wvbZd93p+CHIou6Sq5y/pQcDN8Vb5haF0Q6mqSIiocjnpLeGDOamjGT jNTlMfNDl1sVqbR9SkwZ8ramw4yKLv2OylTASFX0V64iOftUUESrQcQpUH+groEw 579iQ1YadinyjRuPWhWp57bzHpR8iinhAQ0BcR27WrCNCGuvyQA= -----END CERTIFICATE-----Generated at Tue May 5 22:09:22 2026 by rpki-client