$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json) Hash identifier: 2OOJ6UbhiT0J+GLMY+8M0m0filGIhmvy0t5L2hUGMC0= Subject key identifier: FD:BC:13:E1:78:B6:CF:8C:10:B6:85:1F:72:3C:C1:23:7B:B4:14:7C Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Certificate serial: 1B361966E5DFAE8060753A5F99A74115BC793F1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:49:29 +0000 Manifest this update: Tue 12 May 2026 14:44:29 +0000 Manifest next update: Wed 13 May 2026 16:11:29 +0000 Files and hashes: 1: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: xJFvIV5M6JAm9ne7SaV3mzotv+lO4iaDz6mtbzat5H8=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:36:19:66:e5:df:ae:80:60:75:3a:5f:99:a7:41:15:bc:79:3f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Validity Not Before: May 12 14:44:29 2026 GMT Not After : May 13 16:11:29 2026 GMT Subject: CN=FDBC13E178B6CF8C10B6851F723CC1237BB4147C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:a9:e5:ef:f8:af:76:d2:57:4d:f7:29:20: af:3c:a1:9b:fa:51:79:c0:19:a7:a3:62:b7:82:93: 1a:4b:6b:e0:86:01:14:68:8a:1e:87:f9:97:3b:36: f3:5f:ab:83:8f:23:af:c6:27:56:a0:4c:c0:59:91: 65:e4:dc:93:56:16:62:2f:fc:ab:e4:9e:23:34:93: c3:b7:25:ba:1a:e3:c4:b2:20:d0:64:91:87:29:01: 38:d7:26:5a:c8:50:80:eb:47:a1:2e:a1:1c:2e:78: a9:5a:5f:e2:b9:0b:e0:f1:3a:3f:96:55:4a:ef:ee: 80:fc:72:72:07:b9:93:83:f0:e4:e2:54:ab:6e:ef: 9a:25:1d:b9:59:5d:cd:86:7b:36:68:5b:6a:5d:4d: e0:cd:e1:1a:01:36:a7:1c:67:4d:f0:ea:a8:b7:63: 93:a7:c9:1d:29:55:cc:67:4c:1e:b4:c8:42:d6:7a: 84:4f:63:9f:da:e3:df:55:fe:16:a2:9b:bf:26:4b: 59:4a:fb:98:61:00:6a:ee:ef:59:ed:d6:19:e8:07: f4:a6:98:da:65:03:de:32:e9:ec:22:02:21:95:bb: 23:f0:5c:0c:f4:c6:58:ec:48:b7:f8:b8:ce:a2:49: 07:93:a9:d5:26:2d:47:23:98:8d:af:17:73:88:99: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:13:E1:78:B6:CF:8C:10:B6:85:1F:72:3C:C1:23:7B:B4:14:7C X509v3 Authority Key Identifier: keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:21:ef:2e:0d:76:b4:49:87:a0:b0:37:d1:e5:21:e9:91:a0: ff:c8:10:22:2b:6d:69:b8:e5:7a:64:99:0e:42:e1:8c:cc:54: 62:d4:e2:77:d6:55:09:29:cf:09:a8:d3:42:d1:17:66:9c:3d: bb:2d:45:7f:d3:fc:f5:ff:e4:f7:7f:46:da:fc:22:60:3a:83: da:4a:d9:92:20:c8:83:48:9d:64:2b:50:b8:93:78:4c:09:ff: e9:33:df:36:2d:01:48:03:da:65:2b:92:07:2a:26:d2:42:5f: 07:f7:c8:f8:3c:b5:40:c9:d2:8d:7c:ba:76:29:bc:1f:e8:1f: 0d:22:b5:2a:c0:e7:75:2b:4c:41:da:95:37:d1:72:88:3b:ef: ca:19:12:eb:d7:4c:a7:0c:22:b8:45:58:d4:9c:1a:26:4f:a7: d9:e0:11:45:0f:bd:49:8c:7e:67:b8:40:7b:67:48:34:4a:50: 62:30:21:75:7c:21:4e:40:03:c9:8b:56:2e:d0:65:a5:17:96: 97:b0:99:15:78:c8:2b:fd:a0:a4:1d:f1:69:f7:0f:3d:76:00: 2b:b2:7a:34:c7:80:f2:29:d5:26:00:4b:58:cf:25:39:ea:2f: 1a:18:9e:c8:5e:e8:0a:8b:5a:48:45:5a:ff:75:d7:90:d5:a0: 1d:b2:0b:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzYZZuXfroBgdTpfmadBFbx5Px0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw NkYxMTc4OTAeFw0yNjA1MTIxNDQ0MjlaFw0yNjA1MTMxNjExMjlaMDMxMTAvBgNV BAMTKEZEQkMxM0UxNzhCNkNGOEMxMEI2ODUxRjcyM0NDMTIzN0JCNDE0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1qnl7/ivdtJXTfcpIK88oZv6 UXnAGaejYreCkxpLa+CGARRoih6H+Zc7NvNfq4OPI6/GJ1agTMBZkWXk3JNWFmIv /KvkniM0k8O3Jboa48SyINBkkYcpATjXJlrIUIDrR6EuoRwueKlaX+K5C+DxOj+W VUrv7oD8cnIHuZOD8OTiVKtu75olHblZXc2GezZoW2pdTeDN4RoBNqccZ03w6qi3 Y5OnyR0pVcxnTB60yELWeoRPY5/a499V/haim78mS1lK+5hhAGru71nt1hnoB/Sm mNplA94y6ewiAiGVuyPwXAz0xljsSLf4uM6iSQeTqdUmLUcjmI2vF3OImWIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/bwT4Xi2z4wQtoUfcjzBI3u0FHwwHwYDVR0j BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0 MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMh7y4NdrRJh6CwN9HlIemRoP/IECIrbWm4 5XpkmQ5C4YzMVGLU4nfWVQkpzwmo00LRF2acPbstRX/T/PX/5Pd/Rtr8ImA6g9pK 2ZIgyINInWQrULiTeEwJ/+kz3zYtAUgD2mUrkgcqJtJCXwf3yPg8tUDJ0o18unYp vB/oHw0itSrA53UrTEHalTfRcog778oZEuvXTKcMIrhFWNScGiZPp9ngEUUPvUmM fme4QHtnSDRKUGIwIXV8IU5AA8mLVi7QZaUXlpewmRV4yCv9oKQd8Wn3Dz12ACuy ejTHgPIp1SYAS1jPJTnqLxoYnshe6AqLWkhFWv9115DVoB2yC6M= -----END CERTIFICATE-----Generated at Wed May 13 01:35:23 2026 by rpki-client