$ rpki-client -vvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json) Hash identifier: QvzghbiEorTxUzsm3OUeAzhDYF/iUeaE0Wf9PDskHFk= Subject key identifier: B3:24:C0:F4:9A:3C:15:33:A7:9E:CB:F3:FB:ED:B3:5E:F1:EA:C8:F5 Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Certificate serial: 31E7C557F72BC90DBF4C2A4FB47E292E408C778E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:49:46 +0000 Manifest this update: Tue 12 May 2026 04:44:46 +0000 Manifest next update: Wed 13 May 2026 07:55:46 +0000 Files and hashes: 1: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: oXPoZuYmzBXKujO8qc82gespIfjW3p1wUEFKGgQHPEQ=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e7:c5:57:f7:2b:c9:0d:bf:4c:2a:4f:b4:7e:29:2e:40:8c:77:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Validity Not Before: May 12 04:44:46 2026 GMT Not After : May 13 07:55:46 2026 GMT Subject: CN=B324C0F49A3C1533A79ECBF3FBEDB35EF1EAC8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:13:3d:f2:20:57:08:37:8a:19:a3:17:cf: e5:e0:c9:52:ee:6c:76:fb:ac:b8:eb:01:3f:39:d9: 73:b4:ff:9b:3c:16:13:0c:f3:ae:80:a1:cc:f9:78: 59:9a:f8:d0:31:f5:18:ec:0b:24:cd:36:d9:6b:ac: 48:ee:3e:b0:a4:95:8f:84:4b:b8:23:09:59:83:28: 75:71:a0:1e:0c:55:2c:4b:a7:62:f6:39:65:5c:22: 5d:a4:0c:22:0b:02:57:a8:be:a7:ef:07:3b:60:d9: f3:7b:ad:45:18:51:36:58:20:f8:fb:53:db:69:0d: c0:7b:93:b8:78:2f:c1:c4:35:d2:ec:b0:6d:53:33: ad:5e:80:5d:7c:58:52:e6:d4:9c:a2:9a:38:31:48: 86:36:a6:aa:e5:4d:f9:70:6b:b7:20:48:6a:9c:b6: a3:1f:51:71:a5:ee:a4:52:60:7e:45:78:02:4b:c3: ce:32:42:69:f2:c9:bf:b3:88:e7:f9:73:7b:c2:e1: ef:41:27:b1:d0:b7:ef:da:e3:9f:19:4d:c7:d8:c2: eb:1b:6b:5b:ea:34:44:14:44:5a:45:fe:55:b0:d3: 3a:ff:ef:ad:00:17:1d:25:e8:b2:ee:aa:69:c8:e8: 50:0f:70:e0:da:e6:d3:07:8a:91:44:57:b9:2d:f9: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:24:C0:F4:9A:3C:15:33:A7:9E:CB:F3:FB:ED:B3:5E:F1:EA:C8:F5 X509v3 Authority Key Identifier: keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c7:e1:b1:50:bc:b0:f3:5c:77:d8:b0:fe:37:47:a8:40:55: 7b:5b:fb:5e:55:f3:70:33:2f:ed:9a:59:ff:74:ac:bb:65:3b: 7a:10:71:ab:48:c8:d2:bb:01:9e:b8:c8:79:8b:34:db:5c:3c: af:6c:ea:63:74:44:17:fc:21:f8:fd:92:0c:68:36:38:33:95: 91:50:d8:09:0b:5d:40:eb:5b:91:1e:1a:c0:f8:85:d6:c5:73: c1:d1:01:a4:0c:84:f1:75:68:ba:86:f2:34:28:9d:c1:40:ac: 2b:1f:a0:c2:d6:22:29:ed:2e:6e:7c:f6:d1:54:7f:00:c2:8e: 38:de:52:87:7b:81:b7:8a:8a:1b:84:75:87:fc:3a:c8:e7:9f: fd:c4:1f:f9:85:a8:59:bd:03:e5:14:07:64:9f:f6:e5:34:25: cd:2a:7b:81:9c:14:25:7a:4b:f0:4e:88:b0:92:9b:d5:e3:94: f9:f8:67:d7:85:b9:fa:32:06:53:dd:16:bf:cc:f4:d2:0c:e0: 0f:ce:43:d1:81:0c:e2:19:71:e9:02:a1:2e:75:e3:00:b0:59: c3:36:eb:c1:bd:b1:ef:44:f5:24:d5:aa:e2:25:29:48:a1:79: a9:71:ae:38:55:15:d6:12:fd:dc:54:0c:46:48:35:13:a1:bf: 0c:18:13:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMefFV/cryQ2/TCpPtH4pLkCMd44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4 NUYxNDY0QTAeFw0yNjA1MTIwNDQ0NDZaFw0yNjA1MTMwNzU1NDZaMDMxMTAvBgNV BAMTKEIzMjRDMEY0OUEzQzE1MzNBNzlFQ0JGM0ZCRURCMzVFRjFFQUM4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/BM98iBXCDeKGaMXz+XgyVLu bHb7rLjrAT852XO0/5s8FhMM866Aocz5eFma+NAx9RjsCyTNNtlrrEjuPrCklY+E S7gjCVmDKHVxoB4MVSxLp2L2OWVcIl2kDCILAleovqfvBztg2fN7rUUYUTZYIPj7 U9tpDcB7k7h4L8HENdLssG1TM61egF18WFLm1JyimjgxSIY2pqrlTflwa7cgSGqc tqMfUXGl7qRSYH5FeAJLw84yQmnyyb+ziOf5c3vC4e9BJ7HQt+/a458ZTcfYwusb a1vqNEQURFpF/lWw0zr/760AFx0l6LLuqmnI6FAPcODa5tMHipFEV7kt+YCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyTA9Jo8FTOnnsvz++2zXvHqyPUwHwYDVR0j BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0 NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIx QTc4NUYxNDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7H4bFQvLDzXHfYsP43R6hAVXtb+15V83Az L+2aWf90rLtlO3oQcatIyNK7AZ64yHmLNNtcPK9s6mN0RBf8Ifj9kgxoNjgzlZFQ 2AkLXUDrW5EeGsD4hdbFc8HRAaQMhPF1aLqG8jQoncFArCsfoMLWIintLm589tFU fwDCjjjeUod7gbeKihuEdYf8Osjnn/3EH/mFqFm9A+UUB2Sf9uU0Jc0qe4GcFCV6 S/BOiLCSm9XjlPn4Z9eFufoyBlPdFr/M9NIM4A/OQ9GBDOIZcekCoS514wCwWcM2 68G9se9E9STVquIlKUihealxrjhVFdYS/dxUDEZINROhvwwYE7E= -----END CERTIFICATE-----Generated at Tue May 12 22:20:18 2026 by rpki-client