$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: GPCS90H5BDK9ZDaMKId8o3pLwKc6iZMB++J4WDj5V1o= Subject key identifier: 6F:41:F4:43:A7:F1:12:BC:45:BF:59:56:83:5F:D0:3E:B8:2F:A2:51 Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 6DE8EADD9D537C7256441ABA214CAFB27CA4F68D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:41 +0000 Manifest this update: Tue 12 May 2026 16:05:41 +0000 Manifest next update: Wed 13 May 2026 17:05:41 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 3: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: ndUx98hD8neqrwTr/4ZDQyOuBo08NTh5Zc8OWpzVQxQ=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e8:ea:dd:9d:53:7c:72:56:44:1a:ba:21:4c:af:b2:7c:a4:f6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: May 12 16:05:41 2026 GMT Not After : May 13 17:05:41 2026 GMT Subject: CN=6F41F443A7F112BC45BF5956835FD03EB82FA251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:74:68:08:76:e1:58:4f:a2:8f:ed:6d:c2: 1b:4a:8d:a6:98:62:32:10:0b:4b:a5:d9:b4:c0:ee: d5:74:35:d4:9f:f7:a3:5b:3a:5e:79:fa:11:b4:77: b7:b8:51:f1:b4:62:38:21:05:ac:f6:fd:d7:df:96: 95:80:c7:9f:4e:43:31:ff:04:5d:fb:57:1a:d2:2e: 4e:39:37:01:46:56:62:b0:ff:fb:46:d7:f6:13:56: c5:50:bc:f8:9f:dc:15:f7:1d:94:49:16:48:08:12: 56:04:1b:ee:4a:1c:6d:9c:97:a3:2b:a2:a0:76:63: fc:ce:93:11:a9:ae:79:49:38:e5:c2:47:e5:10:01: cc:0d:24:eb:8d:8f:dc:96:bb:d7:bc:b0:84:a2:c5: 5a:5c:1d:11:2c:14:01:3d:f7:f9:39:25:e7:d5:86: 24:47:6a:39:c5:17:3b:5b:ca:9b:4f:dd:ca:e0:27: 3f:99:b8:29:ef:36:bb:3d:17:e2:20:a8:f3:2d:89: f9:76:a2:1c:2f:f5:46:7b:fc:80:23:14:87:0c:6b: 43:20:02:b9:fe:09:5c:ce:76:ed:9b:82:7c:3b:97: fa:9a:17:4f:ab:16:00:48:14:5a:8d:d2:1d:f6:c7: 2b:29:fb:fc:44:51:bc:5c:84:be:b3:ea:9e:c9:d0: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:F4:43:A7:F1:12:BC:45:BF:59:56:83:5F:D0:3E:B8:2F:A2:51 X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:26:04:29:c2:3d:b6:a3:b5:1f:ea:2e:6e:6a:14:d5:76:d2: ff:53:dc:67:4f:f0:04:85:2d:12:23:46:e3:f0:4b:be:e4:e5: 37:2d:4f:5a:46:e6:ae:2c:c7:59:75:81:46:50:3e:81:04:76: 55:92:e9:46:37:66:c2:f4:37:94:a7:f9:7f:ff:2f:a9:71:e8: 48:e6:22:c7:47:71:52:e4:67:5c:72:16:bf:45:dc:aa:05:ec: a0:98:02:87:5c:a0:e3:93:34:e5:cb:80:1a:ad:45:01:3f:1f: 78:28:35:68:67:3d:a2:5e:11:02:3c:72:8e:08:5e:59:42:73: 22:c0:db:9c:f5:d6:5e:fc:93:fc:e9:48:ad:e0:8a:63:89:51: 04:88:1c:04:23:62:f0:15:34:c1:e2:38:cf:b7:d9:4e:4a:0d: 7f:7c:d2:b2:55:10:cc:81:20:87:c5:82:0b:cd:92:9c:4b:49: 0e:ac:22:4c:5d:1b:07:cc:b9:ce:3f:56:48:ac:27:23:ec:ef: 14:5b:a1:74:a0:7d:c2:38:98:d5:70:45:9b:b8:fb:c0:9e:bb: 60:c5:f1:c6:fe:71:80:16:e7:68:b7:20:0a:9c:5f:1b:fe:51: 0a:04:a0:85:c2:cf:6b:65:c0:e1:a2:81:d3:4e:f0:42:01:96: 99:09:c6:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbejq3Z1TfHJWRBq6IUyvsnyk9o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA1MTIxNjA1NDFaFw0yNjA1MTMxNzA1NDFaMDMxMTAvBgNV BAMTKDZGNDFGNDQzQTdGMTEyQkM0NUJGNTk1NjgzNUZEMDNFQjgyRkEyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwHRoCHbhWE+ij+1twhtKjaaY YjIQC0ul2bTA7tV0NdSf96NbOl55+hG0d7e4UfG0YjghBaz2/dfflpWAx59OQzH/ BF37VxrSLk45NwFGVmKw//tG1/YTVsVQvPif3BX3HZRJFkgIElYEG+5KHG2cl6Mr oqB2Y/zOkxGprnlJOOXCR+UQAcwNJOuNj9yWu9e8sISixVpcHREsFAE99/k5JefV hiRHajnFFztbyptP3crgJz+ZuCnvNrs9F+IgqPMtifl2ohwv9UZ7/IAjFIcMa0Mg Arn+CVzOdu2bgnw7l/qaF0+rFgBIFFqN0h32xysp+/xEUbxchL6z6p7J0BkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb0H0Q6fxErxFv1lWg1/QPrgvolEwHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHomBCnCPbajtR/qLm5qFNV20v9T3GdP8ASF LRIjRuPwS77k5TctT1pG5q4sx1l1gUZQPoEEdlWS6UY3ZsL0N5Sn+X//L6lx6Ejm IsdHcVLkZ1xyFr9F3KoF7KCYAodcoOOTNOXLgBqtRQE/H3goNWhnPaJeEQI8co4I XllCcyLA25z11l78k/zpSK3gimOJUQSIHAQjYvAVNMHiOM+32U5KDX980rJVEMyB IIfFggvNkpxLSQ6sIkxdGwfMuc4/VkisJyPs7xRboXSgfcI4mNVwRZu4+8Ceu2DF 8cb+cYAW52i3IAqcXxv+UQoEoIXCz2tlwOGigdNO8EIBlpkJxhE= -----END CERTIFICATE-----Generated at Wed May 13 07:15:19 2026 by rpki-client