$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft File: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft (raw, json) Hash identifier: 6s3PUJeV/i7wREBVtmk3EnEKYHfdRxU2fd5a0Sfo5u8= Subject key identifier: 2C:51:4B:82:70:FD:AA:01:4A:CF:7E:8A:35:94:FB:8A:0E:B3:3C:98 Authority key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA Certificate issuer: /CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA Certificate serial: 6D7CAFAC5E68EF75D6380240B8BF2D0BD93DEFB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:53:08 +0000 Manifest this update: Tue 12 May 2026 12:48:08 +0000 Manifest next update: Wed 13 May 2026 14:41:08 +0000 Files and hashes: 1: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl (hash: FWBiv4dh6egidJVfDP3pZC4wT+CexslGgti8A/83Mjw=) 2: 3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (hash: quvbYNmn/O14F1WsMTm8aak0xPXGeYxU82kt65bFRhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7c:af:ac:5e:68:ef:75:d6:38:02:40:b8:bf:2d:0b:d9:3d:ef:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA Validity Not Before: May 12 12:48:08 2026 GMT Not After : May 13 14:41:08 2026 GMT Subject: CN=2C514B8270FDAA014ACF7E8A3594FB8A0EB33C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:c5:ac:75:73:5a:74:d8:82:d1:7c:b4:e4: 45:6a:7c:a6:8a:8b:e3:39:15:01:ff:19:14:66:6a: 64:c4:44:2c:17:04:5d:fc:57:8f:f7:07:56:90:50: 78:8e:5c:1a:bb:87:37:b9:6e:f1:d8:46:65:40:37: a3:5e:ae:cc:a8:90:ea:05:8f:b6:43:f4:a4:64:e8: 2a:7c:25:93:76:7e:8f:f8:50:e5:36:69:f8:55:cd: 49:99:af:6b:9f:02:8e:27:c6:2b:e5:bc:fc:d5:82: f8:c9:3e:67:70:53:62:25:08:9a:e1:b3:eb:c2:25: 70:45:65:3c:0f:43:30:05:c5:87:e6:f1:cb:4f:fa: 04:bb:d2:8e:26:01:a8:73:26:e4:1d:9a:33:4a:43: 90:0d:4f:b9:7c:89:06:02:03:4e:b3:66:47:5f:25: 23:bf:f4:09:0a:c0:f7:ba:33:4e:85:b0:f3:6d:d8: 96:32:d4:b3:d8:9c:bd:14:a4:29:fc:26:77:96:c0: cf:46:83:95:54:95:c1:48:72:33:a8:43:dd:fd:73: fc:f3:51:69:d9:c6:34:98:42:34:99:8f:5a:e7:46: bf:85:73:c8:9b:cc:a2:27:b4:80:d0:e5:96:b3:b8: 5d:a6:ca:1b:43:4c:b3:ab:7a:08:3a:5c:e5:ef:bc: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:51:4B:82:70:FD:AA:01:4A:CF:7E:8A:35:94:FB:8A:0E:B3:3C:98 X509v3 Authority Key Identifier: keyid:08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6e:01:ec:4a:26:82:84:81:93:41:0a:a1:97:72:39:4a:0b: c5:e8:67:73:e5:5f:5a:6e:f6:4b:bd:23:3b:dc:7b:48:bf:83: 22:6b:9e:35:1c:d3:8f:5d:cb:93:de:c0:3d:f2:52:26:13:af: fb:b3:dc:21:04:b0:9b:e9:a1:b2:95:73:82:72:b4:af:e8:98: a4:91:0b:b4:53:e6:25:15:a9:9b:2c:e4:23:51:92:39:ff:66: cd:39:4e:f8:b8:f8:14:73:b9:6e:28:32:f7:1d:17:9b:c6:4d: 87:58:36:40:f3:70:13:06:dd:3f:2e:0a:97:2d:b0:10:06:a7: 22:b3:17:48:5a:6d:3b:31:99:17:64:40:13:21:ad:97:fd:2f: 0f:bf:f3:e3:59:d5:ea:c2:e1:3a:45:6f:83:b0:5c:a9:b7:33: a4:7e:b2:b7:b1:1e:25:95:f9:6a:6c:8d:f6:cc:a3:f1:3c:51: 93:39:e0:cc:44:c4:ea:84:06:ca:a8:16:19:74:69:95:29:fa: 1e:8d:f5:ed:c9:c1:7b:8d:29:c1:f7:88:78:e7:48:f8:e7:12: 28:8f:01:c1:4d:06:62:e9:2f:dc:62:f3:74:cb:0b:02:c4:d6: fb:10:85:f8:af:4c:80:7e:5b:65:9f:6b:2b:7a:23:18:05:f3: 1b:4e:ab:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXyvrF5o73XWOAJAuL8tC9k977cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBD OUZBQzZDQTAeFw0yNjA1MTIxMjQ4MDhaFw0yNjA1MTMxNDQxMDhaMDMxMTAvBgNV BAMTKDJDNTE0QjgyNzBGREFBMDE0QUNGN0U4QTM1OTRGQjhBMEVCMzNDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbsWsdXNadNiC0Xy05EVqfKaK i+M5FQH/GRRmamTERCwXBF38V4/3B1aQUHiOXBq7hze5bvHYRmVAN6NersyokOoF j7ZD9KRk6Cp8JZN2fo/4UOU2afhVzUmZr2ufAo4nxivlvPzVgvjJPmdwU2IlCJrh s+vCJXBFZTwPQzAFxYfm8ctP+gS70o4mAahzJuQdmjNKQ5ANT7l8iQYCA06zZkdf JSO/9AkKwPe6M06FsPNt2JYy1LPYnL0UpCn8JneWwM9Gg5VUlcFIcjOoQ939c/zz UWnZxjSYQjSZj1rnRr+Fc8ibzKIntIDQ5ZazuF2myhtDTLOregg6XOXvvFH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFFLgnD9qgFKz36KNZT7ig6zPJgwHwYDVR0j BBgwFoAUCJMwczjY17pVzAwGJ5FQoMn6xsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiYTBkMzgtY2E2Mi00YzJiLTkwZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMz OEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBDOUZBQzZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODkzMzA3MzM4RDhEN0JBNTVDQzBDMDYyNzkxNTBBMEM5RkFD NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiYTBkMzgtY2E2Mi00YzJiLTkw ZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUw QTBDOUZBQzZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZuAexKJoKEgZNBCqGXcjlKC8XoZ3PlX1pu 9ku9Izvce0i/gyJrnjUc049dy5PewD3yUiYTr/uz3CEEsJvpobKVc4JytK/omKSR C7RT5iUVqZss5CNRkjn/Zs05Tvi4+BRzuW4oMvcdF5vGTYdYNkDzcBMG3T8uCpct sBAGpyKzF0habTsxmRdkQBMhrZf9Lw+/8+NZ1erC4TpFb4OwXKm3M6R+srexHiWV +WpsjfbMo/E8UZM54MxExOqEBsqoFhl0aZUp+h6N9e3JwXuNKcH3iHjnSPjnEiiP AcFNBmLpL9xi83TLCwLE1vsQhfivTIB+W2Wfayt6IxgF8xtOq1M= -----END CERTIFICATE-----Generated at Wed May 13 00:43:43 2026 by rpki-client