$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: VuzjlEtqqi7hJ4SpbMQfXMKiS1Ivfugk8dxJnh2RsX0= Subject key identifier: 86:2F:73:D3:D0:78:85:14:56:85:A8:C4:9B:1A:0B:E7:95:7B:10:38 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 1CF216BB2736A53E708759B53C020A0E147421F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:23:59 +0000 Manifest this update: Wed 13 May 2026 00:18:59 +0000 Manifest next update: Thu 14 May 2026 03:41:59 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) 2: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: h/z0eLTJneCCxvr9y+f8Ubvrvz69eP4P9+YgiVqevW8=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f2:16:bb:27:36:a5:3e:70:87:59:b5:3c:02:0a:0e:14:74:21:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: May 13 00:18:59 2026 GMT Not After : May 14 03:41:59 2026 GMT Subject: CN=862F73D3D07885145685A8C49B1A0BE7957B1038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:e0:81:5c:91:a3:3f:88:6e:a1:40:12:4e: 3d:d5:b8:d7:2c:c7:06:3d:c2:3f:94:de:44:ee:f8: b8:46:56:a1:99:fd:9b:15:93:4a:1a:46:00:11:e1: fe:94:ef:05:e5:7a:c3:f5:d2:90:e1:1f:bf:67:3f: 3f:9c:01:44:ef:56:b0:e1:54:6d:e2:21:8b:19:e2: 3e:40:94:2c:3f:4a:08:20:95:8b:e5:33:e0:c3:dc: f9:27:85:9a:a5:f3:df:5b:b8:2b:c8:27:1b:27:6b: ae:28:d4:c8:84:bf:69:80:50:a6:22:3c:49:61:ed: 18:38:4f:20:eb:7a:0a:98:cf:30:8d:49:a3:2a:a4: 62:37:ce:e8:00:3c:30:5d:df:57:70:de:31:72:60: 27:d3:95:bd:09:3b:1f:d9:9a:3b:4a:eb:2d:fa:fd: 26:99:8e:48:8f:b6:05:10:16:17:42:13:bb:0e:d2: 99:2e:02:ce:06:e6:ca:45:75:b9:a4:89:d2:d4:4f: 09:1f:ea:11:fb:e9:fb:2a:2d:60:c6:e3:ae:dd:e8: 70:81:ba:d9:6e:af:3a:71:20:ce:be:ea:d4:f3:17: e2:36:bd:7b:49:37:2f:51:88:56:0c:75:6f:20:49: ce:ee:43:4d:c7:d7:9b:1e:44:fa:0f:03:6a:f9:4b: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:73:D3:D0:78:85:14:56:85:A8:C4:9B:1A:0B:E7:95:7B:10:38 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:77:31:48:44:2f:e1:ce:ae:3a:50:ed:32:ac:f9:d8:22:07: 74:02:b9:ac:f5:70:8b:eb:ae:5a:7f:33:67:3f:81:5b:62:bf: 26:f1:b0:a4:c7:9f:ba:d5:aa:58:e1:70:a3:03:12:e7:ef:dd: d3:73:93:ff:00:8b:31:fc:59:ce:45:48:3c:b4:b8:a9:7f:9f: e7:66:7c:cc:83:ab:87:18:b8:cb:2d:a7:e8:a8:47:c7:ea:5b: b5:b4:0d:25:4f:0e:61:2e:c3:49:5e:d8:3c:d1:2d:78:37:54: e3:ce:ef:f1:f1:89:5a:d7:6d:0c:08:0b:55:f9:01:6f:39:65: d5:f7:3d:b1:7e:18:ba:7f:3a:49:12:43:42:f3:d6:96:38:50: 5c:db:3e:42:fa:37:4f:22:8a:a3:cc:58:80:55:8d:88:8b:c1: f8:bf:f8:d9:1e:a6:6d:e9:92:62:78:ba:b9:4b:51:20:33:99: 35:a5:d4:b6:57:7b:70:fb:58:bd:71:a3:a8:58:d6:57:2b:bf: 31:30:60:99:c5:dc:a1:14:95:ea:cc:cb:3d:be:5a:d8:a3:1a: 4a:c7:90:90:b0:bf:72:e5:09:7b:cf:c2:05:f3:a0:6e:11:94: 61:ca:39:42:a8:39:d1:04:e0:65:57:40:68:e2:d0:9d:18:01: 14:85:19:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPIWuyc2pT5wh1m1PAIKDhR0IfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA1MTMwMDE4NTlaFw0yNjA1MTQwMzQxNTlaMDMxMTAvBgNV BAMTKDg2MkY3M0QzRDA3ODg1MTQ1Njg1QThDNDlCMUEwQkU3OTU3QjEwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn+CBXJGjP4huoUASTj3VuNcs xwY9wj+U3kTu+LhGVqGZ/ZsVk0oaRgAR4f6U7wXlesP10pDhH79nPz+cAUTvVrDh VG3iIYsZ4j5AlCw/SggglYvlM+DD3PknhZql899buCvIJxsna64o1MiEv2mAUKYi PElh7Rg4TyDregqYzzCNSaMqpGI3zugAPDBd31dw3jFyYCfTlb0JOx/ZmjtK6y36 /SaZjkiPtgUQFhdCE7sO0pkuAs4G5spFdbmkidLUTwkf6hH76fsqLWDG467d6HCB utlurzpxIM6+6tTzF+I2vXtJNy9RiFYMdW8gSc7uQ03H15seRPoPA2r5SySzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhi9z09B4hRRWhajEmxoL55V7EDgwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ3MUhEL+HOrjpQ7TKs+dgiB3QCuaz1cIvr rlp/M2c/gVtivybxsKTHn7rVqljhcKMDEufv3dNzk/8AizH8Wc5FSDy0uKl/n+dm fMyDq4cYuMstp+ioR8fqW7W0DSVPDmEuw0le2DzRLXg3VOPO7/HxiVrXbQwIC1X5 AW85ZdX3PbF+GLp/OkkSQ0Lz1pY4UFzbPkL6N08iiqPMWIBVjYiLwfi/+Nkepm3p kmJ4urlLUSAzmTWl1LZXe3D7WL1xo6hY1lcrvzEwYJnF3KEUlerMyz2+WtijGkrH kJCwv3LlCXvPwgXzoG4RlGHKOUKoOdEE4GVXQGji0J0YARSFGWU= -----END CERTIFICATE-----Generated at Wed May 13 02:50:24 2026 by rpki-client