$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: K56FBa9bvCMB6+FqxxUuwY0oaZxQGobYqvvkw/WqbWM= Subject key identifier: 51:96:E1:B5:93:B3:6B:21:5D:3F:25:B3:74:91:16:FB:27:5B:49:D5 Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 53F426838B3E12C9BD911DDB0EE43D03C73AFA12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:20:46 +0000 Manifest this update: Tue 12 May 2026 09:15:46 +0000 Manifest next update: Wed 13 May 2026 12:34:46 +0000 Files and hashes: 1: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: vZLd2IROOmodErV0f3MAcGGUhgf7ugU1OKRUkHu9NpQ=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:26:83:8b:3e:12:c9:bd:91:1d:db:0e:e4:3d:03:c7:3a:fa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: May 12 09:15:46 2026 GMT Not After : May 13 12:34:46 2026 GMT Subject: CN=5196E1B593B36B215D3F25B3749116FB275B49D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:d6:e0:42:ee:eb:19:e2:d6:bf:e9:2a:46: c8:1f:96:cc:09:92:48:98:0a:6e:3c:c7:e2:93:5f: 72:d7:b2:6d:ee:fc:4d:5c:e1:76:be:5b:2f:d3:2b: e1:6e:c6:b2:88:0d:99:b5:77:fe:35:c4:ec:fb:c7: ac:a9:da:d3:8b:5e:72:d7:78:41:5a:ce:6c:5e:6d: 4d:83:24:c7:5d:67:fa:2f:1a:96:65:14:b8:14:56: 76:4a:c8:29:2e:a1:bb:47:47:90:8e:6e:3f:c7:c1: 13:ec:95:90:64:c5:f7:1f:76:f4:e6:ab:9b:39:16: b9:10:19:de:14:67:45:60:2b:17:0f:80:4c:f9:3b: 4d:c3:b3:05:bd:7a:1b:2c:ae:9e:e2:55:a1:26:ac: 30:8e:eb:34:f7:d0:82:27:d8:ad:44:fb:e5:b9:63: f3:c4:e7:15:38:23:16:ab:29:ca:6c:83:76:7f:cd: e5:ee:b6:f9:52:3c:c4:e3:be:97:f0:1d:98:2e:b6: 6b:56:74:a0:ca:60:e1:b8:b0:8c:f5:da:ec:29:4d: 11:2f:c7:b7:b2:55:73:cf:16:9e:21:c1:de:62:55: b2:7e:98:f7:ae:8f:6a:a5:f2:a2:97:e9:67:d2:49: c7:72:b9:28:b6:96:e4:aa:06:5d:09:e4:12:ac:17: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:96:E1:B5:93:B3:6B:21:5D:3F:25:B3:74:91:16:FB:27:5B:49:D5 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d8:0d:ad:1a:bd:ae:fe:46:c1:38:5d:9b:dc:f1:d9:25:ee: f2:bc:e0:e7:d8:9b:e9:14:a1:ff:5b:68:7f:95:0d:da:bc:8c: 80:c1:c4:9e:6a:6b:01:3e:e9:99:7e:cf:cd:a0:3e:47:d1:b9: 5d:3b:f2:3d:e1:50:df:3f:50:db:64:3f:81:11:ec:6b:a9:07: 87:34:c9:71:04:89:57:f7:3e:ac:40:f7:28:17:c9:32:ed:ee: 0f:15:63:32:e7:87:c6:6c:f2:ff:56:3d:5c:0c:87:21:30:87: 46:3e:0c:7d:9c:f0:6b:f5:89:10:56:3c:af:a0:33:a0:23:c7: 09:5e:03:d7:88:0e:1b:c8:4e:bd:b8:99:19:eb:be:03:6a:7d: f9:b3:e9:78:c7:93:de:c6:03:3d:cf:92:df:fc:28:9d:ae:57: c2:66:9a:f0:0e:cb:72:f3:7b:7d:56:f5:94:64:6d:cc:b8:b7: 6c:a8:57:3f:49:6e:6a:95:2c:28:1a:dc:d7:38:c9:50:50:db: d8:3e:36:41:69:ba:78:2d:44:6a:07:c8:8b:6c:38:45:04:18: d9:48:9f:17:f3:26:47:c9:2c:78:b6:ef:0f:26:51:97:fd:93: ed:c7:68:be:6c:41:94:47:85:69:5d:d8:a7:0a:1c:e0:9b:80: 3c:2c:07:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/Qmg4s+Esm9kR3bDuQ9A8c6+hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA1MTIwOTE1NDZaFw0yNjA1MTMxMjM0NDZaMDMxMTAvBgNV BAMTKDUxOTZFMUI1OTNCMzZCMjE1RDNGMjVCMzc0OTExNkZCMjc1QjQ5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0dbgQu7rGeLWv+kqRsgflswJ kkiYCm48x+KTX3LXsm3u/E1c4Xa+Wy/TK+FuxrKIDZm1d/41xOz7x6yp2tOLXnLX eEFazmxebU2DJMddZ/ovGpZlFLgUVnZKyCkuobtHR5CObj/HwRPslZBkxfcfdvTm q5s5FrkQGd4UZ0VgKxcPgEz5O03DswW9ehssrp7iVaEmrDCO6zT30IIn2K1E++W5 Y/PE5xU4IxarKcpsg3Z/zeXutvlSPMTjvpfwHZgutmtWdKDKYOG4sIz12uwpTREv x7eyVXPPFp4hwd5iVbJ+mPeuj2ql8qKX6WfSScdyuSi2luSqBl0J5BKsF7RZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZbhtZOzayFdPyWzdJEW+ydbSdUwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPYDa0ava7+RsE4XZvc8dkl7vK84OfYm+kU of9baH+VDdq8jIDBxJ5qawE+6Zl+z82gPkfRuV078j3hUN8/UNtkP4ER7GupB4c0 yXEEiVf3PqxA9ygXyTLt7g8VYzLnh8Zs8v9WPVwMhyEwh0Y+DH2c8Gv1iRBWPK+g M6AjxwleA9eIDhvITr24mRnrvgNqffmz6XjHk97GAz3Pkt/8KJ2uV8JmmvAOy3Lz e31W9ZRkbcy4t2yoVz9JbmqVLCga3Nc4yVBQ29g+NkFpungtRGoHyItsOEUEGNlI nxfzJkfJLHi27w8mUZf9k+3HaL5sQZRHhWld2KcKHOCbgDwsB/I= -----END CERTIFICATE-----Generated at Wed May 13 02:39:50 2026 by rpki-client