$ rpki-client -vvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: slH9/Usvax7midz7c999JTPb4zsmz3RSHBTFjGbYvN8= Subject key identifier: 82:C5:8F:1F:F8:0B:9F:F9:9A:92:EE:61:55:15:30:3A:11:FC:A4:93 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 41F9E288B272FF0AC894350C4C57A3E76620CBD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:42:46 +0000 Manifest this update: Tue 12 May 2026 06:37:46 +0000 Manifest next update: Wed 13 May 2026 07:31:46 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) 2: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: zE3zKw15PIreysA/kdevR2DaOzvpzzdCqm3gT1CMiKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f9:e2:88:b2:72:ff:0a:c8:94:35:0c:4c:57:a3:e7:66:20:cb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: May 12 06:37:46 2026 GMT Not After : May 13 07:31:46 2026 GMT Subject: CN=82C58F1FF80B9FF99A92EE615515303A11FCA493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:15:50:c4:73:2f:04:ac:45:7f:bd:96:29: a7:71:8a:41:f5:77:bb:b9:8c:17:09:ce:bb:c1:b5: 96:f7:43:54:37:9e:e5:39:ca:48:7c:b5:f8:a9:85: ef:93:dc:a7:95:f7:45:b4:8b:29:e6:86:27:6f:b6: ed:91:8a:1c:55:ed:07:a1:ff:fc:4f:18:14:80:fa: e1:88:a6:a2:a3:23:39:93:94:11:65:19:17:d9:bf: 5f:0a:d1:2f:d4:f2:5b:e5:28:a0:b7:89:2c:1e:d4: 86:40:38:c8:14:d1:7c:71:5a:0c:ff:54:8b:8f:c0: d6:da:e8:43:e0:f4:b7:0c:ea:70:cb:3a:a1:9c:de: 8e:25:69:8c:25:28:22:0c:c7:22:ea:de:21:73:51: be:97:86:0c:6b:71:0d:c1:8f:f3:02:02:57:be:42: bb:25:43:54:e1:54:b6:e2:37:de:a3:ab:a4:d3:1e: cc:e8:c5:7f:a9:15:7e:ee:a3:78:c6:15:09:88:99: 1e:29:f9:88:f5:b9:2a:0b:6b:19:74:7e:49:4f:79: 6a:28:af:a4:6b:53:b9:8d:cf:0c:bb:b3:5e:33:2d: 1f:c0:bb:dd:44:23:ba:37:80:c0:45:88:42:a9:0f: 23:d3:8e:ff:08:4f:d6:5c:d7:82:e5:c9:20:53:54: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:8F:1F:F8:0B:9F:F9:9A:92:EE:61:55:15:30:3A:11:FC:A4:93 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:17:4f:a8:0f:ce:da:95:c2:1d:0d:b8:33:90:78:ff:bc:f3: 1c:f3:2e:7e:dc:c2:e9:55:d7:5c:65:ac:cb:37:80:93:0d:49: 9c:03:54:15:58:50:02:07:21:dc:91:2a:f0:16:ad:eb:af:d2: 79:02:7f:01:1c:5e:da:cf:53:d2:64:a5:5a:19:31:c1:63:f0: a2:23:8c:96:70:8c:2c:bf:e6:50:4f:08:1e:e7:88:ec:75:da: 23:c4:bb:5a:0b:bc:d5:b3:ff:81:5d:2d:fd:2c:49:bc:c6:e0: 99:eb:b2:07:32:f5:2b:b7:5c:f6:3a:79:28:b2:bc:40:17:46: f3:0c:25:f1:d5:8d:78:8d:39:38:be:c8:c5:a2:95:61:20:45: 5a:de:25:d0:84:0b:43:02:8b:22:eb:bc:b0:3b:2e:6b:55:fd: 5f:c8:42:ab:0c:ab:ed:75:db:1e:60:ba:45:ff:91:54:f4:b4: 82:48:5e:1f:8a:c8:fb:0e:b9:f4:65:85:bd:00:0a:3c:ba:4a: 5c:f1:96:9a:8f:4d:90:0c:c9:fb:5c:9e:9a:38:b5:f7:5e:59: 7d:a0:bc:ec:04:9c:c6:e9:35:c2:66:78:ca:bd:dd:d0:ff:bc: 2b:c2:d3:ea:3c:e7:4a:cc:de:59:71:13:a8:01:2d:93:9b:e1: 23:78:91:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfniiLJy/wrIlDUMTFej52Ygy9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA1MTIwNjM3NDZaFw0yNjA1MTMwNzMxNDZaMDMxMTAvBgNV BAMTKDgyQzU4RjFGRjgwQjlGRjk5QTkyRUU2MTU1MTUzMDNBMTFGQ0E0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhRVQxHMvBKxFf72WKadxikH1 d7u5jBcJzrvBtZb3Q1Q3nuU5ykh8tfiphe+T3KeV90W0iynmhidvtu2RihxV7Qeh //xPGBSA+uGIpqKjIzmTlBFlGRfZv18K0S/U8lvlKKC3iSwe1IZAOMgU0XxxWgz/ VIuPwNba6EPg9LcM6nDLOqGc3o4laYwlKCIMxyLq3iFzUb6XhgxrcQ3Bj/MCAle+ QrslQ1ThVLbiN96jq6TTHszoxX+pFX7uo3jGFQmImR4p+Yj1uSoLaxl0fklPeWoo r6RrU7mNzwy7s14zLR/Au91EI7o3gMBFiEKpDyPTjv8IT9Zc14LlySBTVE5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsWPH/gLn/maku5hVRUwOhH8pJMwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4XT6gPztqVwh0NuDOQeP+88xzzLn7cwulV 11xlrMs3gJMNSZwDVBVYUAIHIdyRKvAWreuv0nkCfwEcXtrPU9JkpVoZMcFj8KIj jJZwjCy/5lBPCB7niOx12iPEu1oLvNWz/4FdLf0sSbzG4Jnrsgcy9Su3XPY6eSiy vEAXRvMMJfHVjXiNOTi+yMWilWEgRVreJdCEC0MCiyLrvLA7LmtV/V/IQqsMq+11 2x5gukX/kVT0tIJIXh+KyPsOufRlhb0ACjy6SlzxlpqPTZAMyftcnpo4tfdeWX2g vOwEnMbpNcJmeMq93dD/vCvC0+o850rM3llxE6gBLZOb4SN4kQk= -----END CERTIFICATE-----Generated at Tue May 12 22:47:05 2026 by rpki-client