$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: 7WZc1mcbn+41z2gCdpL02bRAJFo8oGSjb9vXTa2EGrM= Subject key identifier: 0C:88:1C:6D:74:52:FC:06:C4:9D:57:2D:5F:74:EF:88:65:01:29:E4 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 79F136B57A5589C9D7F0ECE1A0A14B1F58976CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:11 +0000 Manifest this update: Tue 12 May 2026 20:17:11 +0000 Manifest next update: Wed 13 May 2026 20:42:11 +0000 Files and hashes: 1: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: p/P9pe8rDT1ti2HP3PdhcmVfv1V7mNzRArQzwPm6Uu4=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:36:b5:7a:55:89:c9:d7:f0:ec:e1:a0:a1:4b:1f:58:97:6c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: May 12 20:17:11 2026 GMT Not After : May 13 20:42:11 2026 GMT Subject: CN=0C881C6D7452FC06C49D572D5F74EF88650129E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:b5:e4:16:c3:75:fa:c2:80:bd:3b:1e:3f: ed:f4:2d:6b:ea:9d:a4:4f:47:39:e4:a3:0b:db:39: a2:91:9e:ed:2b:e7:3a:0b:c9:8a:6b:d1:e6:fb:35: 08:08:46:6a:c4:0e:d2:be:8c:3f:87:d4:2e:89:a1: 87:b6:01:a8:ea:f4:1a:63:81:ff:2c:3d:e2:3d:e8: be:fc:7f:31:c3:ad:16:20:99:b3:3c:fb:06:e2:d4: 62:2e:66:4e:76:99:e8:05:b1:c1:a2:f0:64:c7:71: 93:ec:07:44:2b:bd:fc:3d:f2:9f:ec:1e:fa:a4:ec: 0b:c2:5d:c3:b9:d9:62:a9:c1:5f:7b:91:8d:a8:c8: 4b:49:8a:63:39:8b:f2:84:92:42:de:2f:3e:1c:f7: bb:19:e3:f6:e3:5c:99:6c:26:c0:8b:a7:6c:2b:c5: 06:06:86:75:f8:1e:19:a5:6b:8b:c0:8c:84:98:39: 40:52:65:1d:3a:e0:fd:4c:d7:5e:81:0b:b0:b0:a7: 6c:83:bb:c0:2c:58:ed:2f:65:1c:8e:23:c4:d8:2d: 24:56:98:d0:fb:ff:70:7f:f6:e2:9d:33:bf:cb:51: b4:89:35:54:65:40:50:ba:e0:4a:60:c2:0a:05:5f: 09:04:a5:fa:a0:0f:c3:06:17:14:67:f7:4f:a6:40: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:1C:6D:74:52:FC:06:C4:9D:57:2D:5F:74:EF:88:65:01:29:E4 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:22:25:d1:e6:34:eb:fa:34:f3:69:67:ca:46:0e:23:93:a2: 36:0c:be:c0:cf:2a:f3:1a:42:c2:c3:66:e1:1d:0d:30:04:e6: 11:65:51:af:b0:73:27:29:a5:0d:c2:3a:91:08:de:ab:dd:5d: 0e:44:c6:e3:eb:43:d6:b7:ad:3a:29:2b:98:df:a8:99:02:b3: 47:ea:95:af:a1:b1:d8:90:a2:43:ff:bf:48:9d:b0:4b:04:30: 59:8e:3b:53:9c:58:58:0c:69:cb:b0:9e:38:24:e9:c6:d8:19: 16:79:46:5a:11:2c:99:30:b8:49:bc:bc:fb:4f:3c:1c:70:1f: 80:f6:9c:f8:cc:fc:d0:3f:c6:5b:81:7b:d4:8b:68:c2:72:62: af:c9:25:71:3f:a3:21:3b:7d:f5:28:8f:99:be:25:2f:d9:85: 67:d0:49:82:9e:51:b6:a5:68:f9:23:d4:8f:b1:a3:6f:5e:93: c3:ae:72:d7:04:68:ca:73:80:71:3d:08:0d:11:28:a5:76:6b: c2:cb:07:58:be:15:e1:d7:36:dd:1f:d8:c0:49:ae:dc:c1:7c: 97:2d:f9:4e:e6:19:0a:49:05:a9:22:20:20:b4:b2:86:e7:f9: bf:80:bc:6f:5a:a2:81:08:9b:63:7d:99:21:cb:66:d0:dc:52: 67:90:1d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefE2tXpVicnX8OzhoKFLH1iXbMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA1MTIyMDE3MTFaFw0yNjA1MTMyMDQyMTFaMDMxMTAvBgNV BAMTKDBDODgxQzZENzQ1MkZDMDZDNDlENTcyRDVGNzRFRjg4NjUwMTI5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTbXkFsN1+sKAvTseP+30LWvq naRPRznkowvbOaKRnu0r5zoLyYpr0eb7NQgIRmrEDtK+jD+H1C6JoYe2Aajq9Bpj gf8sPeI96L78fzHDrRYgmbM8+wbi1GIuZk52megFscGi8GTHcZPsB0Qrvfw98p/s Hvqk7AvCXcO52WKpwV97kY2oyEtJimM5i/KEkkLeLz4c97sZ4/bjXJlsJsCLp2wr xQYGhnX4Hhmla4vAjISYOUBSZR064P1M116BC7Cwp2yDu8AsWO0vZRyOI8TYLSRW mND7/3B/9uKdM7/LUbSJNVRlQFC64EpgwgoFXwkEpfqgD8MGFxRn90+mQCoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIgcbXRS/AbEnVctX3TviGUBKeQwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEiJdHmNOv6NPNpZ8pGDiOTojYMvsDPKvMa QsLDZuEdDTAE5hFlUa+wcycppQ3COpEI3qvdXQ5ExuPrQ9a3rTopK5jfqJkCs0fq la+hsdiQokP/v0idsEsEMFmOO1OcWFgMacuwnjgk6cbYGRZ5RloRLJkwuEm8vPtP PBxwH4D2nPjM/NA/xluBe9SLaMJyYq/JJXE/oyE7ffUoj5m+JS/ZhWfQSYKeUbal aPkj1I+xo29ek8OuctcEaMpzgHE9CA0RKKV2a8LLB1i+FeHXNt0f2MBJrtzBfJct +U7mGQpJBakiICC0sobn+b+AvG9aooEIm2N9mSHLZtDcUmeQHaY= -----END CERTIFICATE-----Generated at Wed May 13 00:20:32 2026 by rpki-client