$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: N4NtEBgTwaoto4vfi7+7OyOnu+4ypehIg1zMV5AwqpU= Subject key identifier: 1C:E8:2D:CB:AD:42:D6:49:A4:C7:AF:64:6C:D0:6A:F4:CC:38:DC:C7 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 3391418C58E206C7B2A3E4008009D30398DAE33B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:43 +0000 Manifest this update: Tue 12 May 2026 16:05:43 +0000 Manifest next update: Wed 13 May 2026 17:18:43 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 2: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 3: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: 4wvgzFiHYI/TEKPc6YEldXSQ7nkOuzcE7XRNVzfxYVE=) 4: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 5: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:91:41:8c:58:e2:06:c7:b2:a3:e4:00:80:09:d3:03:98:da:e3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: May 12 16:05:43 2026 GMT Not After : May 13 17:18:43 2026 GMT Subject: CN=1CE82DCBAD42D649A4C7AF646CD06AF4CC38DCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:91:83:91:15:b3:3c:be:0e:57:5b:4a:b1: 93:51:1c:35:5d:59:4e:a9:07:76:64:f5:e5:c7:65: e5:04:a2:6e:38:4b:de:d1:b7:81:a7:35:8e:b8:36: 87:37:41:b6:45:c8:84:55:b9:63:cb:11:7a:ba:19: 08:32:f7:40:a4:d0:cd:ea:2e:59:b9:a5:44:1f:af: 88:b7:35:32:56:7d:d4:8e:de:22:09:6d:5c:16:03: a8:b4:b1:f6:74:2a:e2:04:8d:48:2f:e8:c9:4e:6e: d5:77:b4:fb:d4:66:f6:4d:e6:22:34:03:16:63:36: 1b:c1:38:b3:6e:49:36:31:67:d8:02:f4:62:88:3c: 15:c0:98:82:b2:cf:8a:cd:58:e1:19:4c:ea:be:f8: 73:0c:55:60:48:26:aa:a9:39:d8:fe:e1:1a:4b:8a: a9:69:f6:8d:6d:1a:7a:69:db:7a:34:84:ab:ce:ee: a0:ce:b5:4d:23:18:d6:43:55:e3:d0:76:04:e5:b2: 18:6e:7f:30:a6:07:55:95:db:44:01:d3:7e:5a:b0: 49:8a:cd:0b:97:0b:aa:3e:23:f2:c2:49:62:d6:8e: 8e:10:26:d4:61:56:c5:aa:3c:b0:99:0d:9a:0d:b1: 45:b0:0b:8e:23:cd:bf:17:97:5b:8b:55:f4:a3:dc: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:2D:CB:AD:42:D6:49:A4:C7:AF:64:6C:D0:6A:F4:CC:38:DC:C7 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f0:83:54:cf:a4:06:02:fb:a9:aa:6f:4e:39:2f:2e:24:02: a0:6e:4b:f9:50:3c:ce:f3:23:0e:ef:81:e7:6d:ac:c7:43:1b: 56:b9:5e:39:2f:e5:34:67:49:51:3a:eb:2a:da:ff:46:96:f0: ca:fa:25:14:68:90:f2:a1:3b:cb:17:a2:41:2b:75:51:2b:67: f6:b5:0e:2f:24:83:5d:65:b4:46:14:1b:28:a9:07:ee:0a:5d: 32:6e:bc:cb:1b:59:d2:fb:e2:a7:1c:c2:c2:d9:8b:0c:7b:f5: fe:2b:96:82:58:21:d5:52:3c:cd:fb:62:a7:96:0f:ba:95:26: c5:11:76:0d:54:c3:9b:8b:8c:ab:fa:c3:50:ec:19:5f:69:fa: 79:1d:c4:9c:fa:1f:a8:a6:d7:84:13:98:73:0f:28:29:3f:c4: dc:8f:23:90:5e:bd:d5:46:ba:ee:84:40:2f:8c:83:b9:48:ea: 6e:f6:4a:4a:0f:83:4e:95:f4:2e:41:9a:55:7e:0f:c3:1d:dc: 2b:5a:42:95:d6:55:bc:e6:d8:ef:70:ba:33:48:88:09:50:9f: ea:b6:56:3b:87:8a:34:7c:69:cc:e0:4b:f6:42:f8:ae:4c:a7: 2c:ef:c2:38:68:57:1f:3d:38:12:c1:e3:2f:cb:36:9b:f3:22: 56:4a:90:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5FBjFjiBseyo+QAgAnTA5ja4zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA1MTIxNjA1NDNaFw0yNjA1MTMxNzE4NDNaMDMxMTAvBgNV BAMTKDFDRTgyRENCQUQ0MkQ2NDlBNEM3QUY2NDZDRDA2QUY0Q0MzOERDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdJGDkRWzPL4OV1tKsZNRHDVd WU6pB3Zk9eXHZeUEom44S97Rt4GnNY64Noc3QbZFyIRVuWPLEXq6GQgy90Ck0M3q Llm5pUQfr4i3NTJWfdSO3iIJbVwWA6i0sfZ0KuIEjUgv6MlObtV3tPvUZvZN5iI0 AxZjNhvBOLNuSTYxZ9gC9GKIPBXAmIKyz4rNWOEZTOq++HMMVWBIJqqpOdj+4RpL iqlp9o1tGnpp23o0hKvO7qDOtU0jGNZDVePQdgTlshhufzCmB1WV20QB035asEmK zQuXC6o+I/LCSWLWjo4QJtRhVsWqPLCZDZoNsUWwC44jzb8Xl1uLVfSj3FO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOgty61C1kmkx69kbNBq9Mw43McwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDwg1TPpAYC+6mqb045Ly4kAqBuS/lQPM7z Iw7vgedtrMdDG1a5Xjkv5TRnSVE66yra/0aW8Mr6JRRokPKhO8sXokErdVErZ/a1 Di8kg11ltEYUGyipB+4KXTJuvMsbWdL74qccwsLZiwx79f4rloJYIdVSPM37YqeW D7qVJsURdg1Uw5uLjKv6w1DsGV9p+nkdxJz6H6im14QTmHMPKCk/xNyPI5BevdVG uu6EQC+Mg7lI6m72SkoPg06V9C5BmlV+D8Md3CtaQpXWVbzm2O9wujNIiAlQn+q2 VjuHijR8aczgS/ZC+K5MpyzvwjhoVx89OBLB4y/LNpvzIlZKkOc= -----END CERTIFICATE-----Generated at Wed May 13 02:13:27 2026 by rpki-client