$ rpki-client -vvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft File: 1351A2C01F31DE3BE0AE00B957282481FA877D80.mft (raw, json) Hash identifier: Anzjriq50BEdM9CH487c0q6aKOPHD4TqR6D0by72u6k= Subject key identifier: D5:C7:5B:7E:40:32:7D:99:6F:BC:0E:51:CB:91:71:03:2F:FB:77:AC Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 Certificate issuer: /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Certificate serial: 2C0673E4633DE228E761B476D59A77898224E13E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:14:05 +0000 Manifest this update: Tue 12 May 2026 14:09:05 +0000 Manifest next update: Wed 13 May 2026 14:34:05 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: VfT1JeeXKm1v01tmdjLA+eN6veAeXQzQ5yXazEtdaok=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: fjuzJS9VCKizjfIN5unaQZhEiXot8Mm25qklVdFMhbs=) 3: 1351A2C01F31DE3BE0AE00B957282481FA877D80.crl (hash: B3th7TKNaSC56XVQxtjpLbcK9WG7JiC4xMZdFKNpfJo=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: XC72sTT1UANPWg5y93bIJ8fKMA+26iRggZMn6hJnkeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:06:73:e4:63:3d:e2:28:e7:61:b4:76:d5:9a:77:89:82:24:e1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Validity Not Before: May 12 14:09:05 2026 GMT Not After : May 13 14:34:05 2026 GMT Subject: CN=D5C75B7E40327D996FBC0E51CB9171032FFB77AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:58:9e:b5:b6:63:a1:60:6b:82:5d:40:fa: 4f:7d:74:57:c6:c4:3e:f2:93:62:6e:25:70:20:bc: ca:8b:6c:24:66:95:b4:49:b7:62:c9:ad:54:c4:99: 93:b8:f2:39:00:a2:b9:37:b9:05:d5:90:4e:18:3c: 0f:a8:33:c4:1b:fd:7e:91:81:51:17:5a:df:c7:e7: ca:47:52:92:46:b5:5d:6e:de:84:10:b4:b5:32:af: 55:d3:07:84:78:25:be:f0:07:a5:ea:48:54:2a:1f: 8e:2e:7a:6c:05:f3:dd:c2:64:31:57:83:26:db:e3: 91:2a:63:e0:4c:30:a7:f2:48:58:0c:8e:86:24:28: 45:3e:68:eb:c2:b0:1f:9d:90:1a:75:2a:52:3c:7e: f9:7d:1f:06:c9:90:b8:27:8d:d7:a9:2c:8d:c7:71: 43:4a:e5:5e:c6:3c:44:93:50:57:8c:64:df:d8:94: f7:d7:a8:96:16:54:a3:5e:8a:6c:6f:6d:bc:ea:4f: af:aa:3f:c1:ba:b1:fc:fe:fe:75:b7:56:9f:04:04: 11:47:96:59:3b:5c:63:42:78:6d:7e:67:82:b3:2d: 57:e6:a6:81:ac:a6:6b:58:86:dd:17:71:4e:cb:c7: 46:2b:57:91:06:20:f9:57:46:40:35:23:0d:70:6c: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:5B:7E:40:32:7D:99:6F:BC:0E:51:CB:91:71:03:2F:FB:77:AC X509v3 Authority Key Identifier: keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c9:b4:2c:77:03:a9:39:ac:a3:5e:5d:7e:e2:50:02:03:a1: de:4b:4d:66:a0:05:a4:71:de:e1:4d:9c:eb:eb:b0:b1:90:8f: 5e:8e:50:e7:2d:33:8f:8a:e6:0c:49:41:66:32:33:f3:a4:70: 30:fb:01:92:d1:a1:dd:30:8d:56:65:52:1d:2d:93:d2:90:59: 6b:63:19:06:70:de:18:c4:a6:cc:03:ce:81:3e:ea:bf:26:8c: f7:f0:d9:fa:a8:a5:c7:d7:50:eb:66:57:1b:a0:f7:1a:31:bc: ad:96:f2:bd:e8:ce:88:d6:ae:48:c4:7a:0e:da:be:f8:85:ab: 41:12:6e:ad:d4:53:5b:17:b1:13:d3:30:15:72:7a:02:f5:9f: 61:a0:54:e8:40:22:79:56:5c:c8:14:a5:17:c6:16:4d:55:dd: 58:f5:64:c5:f5:d6:52:7f:fa:0f:e9:9f:f0:68:4a:6b:a5:49: 7b:d4:19:65:8a:3b:42:c6:15:e3:ac:f8:1e:6e:56:97:82:71: fd:db:7e:06:f7:80:32:b3:86:e7:65:86:fc:ee:6f:4a:c0:f4: 9a:a2:e7:a6:2b:db:32:89:31:a6:3a:83:dd:2b:1f:f1:f4:94: 15:fb:3c:71:2a:f2:be:d7:a6:61:d9:70:1e:cb:5f:fd:70:42: 92:d1:63:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAZz5GM94ijnYbR21Zp3iYIk4T4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0ODFG QTg3N0Q4MDAeFw0yNjA1MTIxNDA5MDVaFw0yNjA1MTMxNDM0MDVaMDMxMTAvBgNV BAMTKEQ1Qzc1QjdFNDAzMjdEOTk2RkJDMEU1MUNCOTE3MTAzMkZGQjc3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87FietbZjoWBrgl1A+k99dFfG xD7yk2JuJXAgvMqLbCRmlbRJt2LJrVTEmZO48jkAork3uQXVkE4YPA+oM8Qb/X6R gVEXWt/H58pHUpJGtV1u3oQQtLUyr1XTB4R4Jb7wB6XqSFQqH44uemwF893CZDFX gybb45EqY+BMMKfySFgMjoYkKEU+aOvCsB+dkBp1KlI8fvl9HwbJkLgnjdepLI3H cUNK5V7GPESTUFeMZN/YlPfXqJYWVKNeimxvbbzqT6+qP8G6sfz+/nW3Vp8EBBFH llk7XGNCeG1+Z4KzLVfmpoGspmtYht0XcU7Lx0YrV5EGIPlXRkA1Iw1wbLuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cdbfkAyfZlvvA5Ry5FxAy/7d6wwHwYDVR0j BBgwFoAUE1GiwB8x3jvgrgC5VygkgfqHfYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlZmNiZjAtNjZlYy00OGQzLWIyMjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAx RjMxREUzQkUwQUUwMEI5NTcyODI0ODFGQTg3N0Q4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzUxQTJDMDFGMzFERTNCRTBBRTAwQjk1NzI4MjQ4MUZBODc3 RDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0 ODFGQTg3N0Q4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbJtCx3A6k5rKNeXX7iUAIDod5LTWagBaRx 3uFNnOvrsLGQj16OUOctM4+K5gxJQWYyM/OkcDD7AZLRod0wjVZlUh0tk9KQWWtj GQZw3hjEpswDzoE+6r8mjPfw2fqopcfXUOtmVxug9xoxvK2W8r3ozojWrkjEeg7a vviFq0ESbq3UU1sXsRPTMBVyegL1n2GgVOhAInlWXMgUpRfGFk1V3Vj1ZMX11lJ/ +g/pn/BoSmulSXvUGWWKO0LGFeOs+B5uVpeCcf3bfgb3gDKzhudlhvzub0rA9Jqi 56Yr2zKJMaY6g90rH/H0lBX7PHEq8r7XpmHZcB7LX/1wQpLRY6Q= -----END CERTIFICATE-----Generated at Wed May 13 05:43:43 2026 by rpki-client