$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: cR15rFjjG9TQZRxxm0Mc1I+L7doaN+cEhVaDQwfDnpk= Subject key identifier: 75:E4:C7:B2:46:B9:8E:48:66:64:E3:70:4D:A9:A4:94:0C:39:87:8B Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 306ACBE15906FAC5E5047F6FC7774B8E70F68538 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:12 +0000 Manifest this update: Tue 12 May 2026 17:22:12 +0000 Manifest next update: Wed 13 May 2026 17:43:12 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) 2: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: RI14SjkLkQ1hsWYAv8qKrPB7TYonJstmZuCr+4pARqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6a:cb:e1:59:06:fa:c5:e5:04:7f:6f:c7:77:4b:8e:70:f6:85:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: May 12 17:22:12 2026 GMT Not After : May 13 17:43:12 2026 GMT Subject: CN=75E4C7B246B98E486664E3704DA9A4940C39878B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:7e:13:35:17:6c:0e:30:e8:f5:58:6a:fb: 7a:91:a0:77:94:d0:33:6f:25:9c:44:8a:58:fd:9f: e2:b6:1f:11:3a:50:53:03:41:b5:26:e6:d3:14:f6: 0d:6f:fd:65:4d:f3:16:8c:9d:df:4f:d4:a3:b6:0f: 6d:bb:2d:6a:75:03:30:7d:7d:a4:74:5e:73:83:2e: c2:3a:65:f2:39:85:a3:0f:fa:84:7a:ad:b8:44:2c: ec:1b:fe:65:78:7d:b9:e0:67:4c:57:a7:42:7f:8c: 49:1c:17:a0:5e:f6:67:ed:92:68:b0:8f:a9:4b:98: f6:86:e7:ac:dd:f7:f0:04:10:50:78:0a:f5:de:fc: 7c:1a:3f:94:d6:f2:b1:29:c8:f8:cc:84:f3:dd:8f: a5:84:c4:cf:d7:03:f2:9b:6a:46:33:48:1b:ec:64: 71:19:de:6f:43:28:1a:84:8b:a5:33:79:8d:7e:09: 02:69:b8:11:7f:03:5d:5d:47:4b:94:59:e7:b8:bc: ea:28:68:15:59:ec:da:7b:c3:a1:c4:77:a3:9b:cc: 48:b9:81:3a:06:e7:32:13:73:a7:89:8e:6c:31:9c: 0a:a1:98:58:a2:fd:ac:74:93:30:5b:53:cd:26:9f: 9b:a2:bf:0e:59:40:e7:3f:36:4b:89:c7:e3:55:91: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E4:C7:B2:46:B9:8E:48:66:64:E3:70:4D:A9:A4:94:0C:39:87:8B X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b5:c6:cb:1c:74:59:e3:8c:52:88:56:04:8c:cb:8a:cc:98: ce:74:ca:16:da:7d:5e:89:d8:61:2e:02:50:45:97:f0:a2:97: e7:e8:74:d1:3a:8f:27:75:b5:88:73:eb:ef:d9:b2:37:07:59: b0:cc:2c:51:08:eb:0c:f4:7a:81:93:48:bb:b9:62:11:2f:54: 84:84:aa:14:ca:d8:7d:aa:4a:77:d5:23:21:13:7b:f6:1d:86: c6:3c:38:31:3a:45:22:b8:75:a1:40:e1:a0:a8:71:3b:f8:ba: 92:cd:ce:22:89:90:03:b0:df:72:ce:69:d8:3a:0f:e5:0d:23: af:cf:68:d4:4d:5c:02:aa:c5:f2:bb:06:18:03:ff:32:98:07: 3e:bb:8f:7e:91:81:35:37:37:21:c8:f1:dc:ff:b5:64:af:55: 7e:5c:6a:fc:da:e5:f2:3e:6a:60:67:21:60:28:53:01:7e:6e: 86:c6:85:68:ea:42:31:22:ad:83:af:73:e5:75:59:d7:b2:62: 44:4b:bf:77:c0:7e:3a:bc:73:36:6f:71:c7:ad:44:ed:03:aa: ed:6f:5f:4a:15:e5:e4:49:6c:57:ad:b3:e6:5f:a7:e7:58:d4: 81:1c:3d:6c:82:93:07:db:db:ae:2c:65:92:2e:29:0a:05:2a: ef:a8:8b:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGrL4VkG+sXlBH9vx3dLjnD2hTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjA1MTIxNzIyMTJaFw0yNjA1MTMxNzQzMTJaMDMxMTAvBgNV BAMTKDc1RTRDN0IyNDZCOThFNDg2NjY0RTM3MDREQTlBNDk0MEMzOTg3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWn4TNRdsDjDo9Vhq+3qRoHeU 0DNvJZxEilj9n+K2HxE6UFMDQbUm5tMU9g1v/WVN8xaMnd9P1KO2D227LWp1AzB9 faR0XnODLsI6ZfI5haMP+oR6rbhELOwb/mV4fbngZ0xXp0J/jEkcF6Be9mftkmiw j6lLmPaG56zd9/AEEFB4CvXe/HwaP5TW8rEpyPjMhPPdj6WExM/XA/KbakYzSBvs ZHEZ3m9DKBqEi6UzeY1+CQJpuBF/A11dR0uUWee4vOooaBVZ7Np7w6HEd6ObzEi5 gToG5zITc6eJjmwxnAqhmFii/ax0kzBbU80mn5uivw5ZQOc/NkuJx+NVkeEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeTHska5jkhmZONwTamklAw5h4swHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABi1xsscdFnjjFKIVgSMy4rMmM50yhbafV6J 2GEuAlBFl/Cil+fodNE6jyd1tYhz6+/ZsjcHWbDMLFEI6wz0eoGTSLu5YhEvVISE qhTK2H2qSnfVIyETe/YdhsY8ODE6RSK4daFA4aCocTv4upLNziKJkAOw33LOadg6 D+UNI6/PaNRNXAKqxfK7BhgD/zKYBz67j36RgTU3NyHI8dz/tWSvVX5cavza5fI+ amBnIWAoUwF+bobGhWjqQjEirYOvc+V1WdeyYkRLv3fAfjq8czZvccetRO0Dqu1v X0oV5eRJbFets+Zfp+dY1IEcPWyCkwfb264sZZIuKQoFKu+oi24= -----END CERTIFICATE-----Generated at Tue May 12 22:19:28 2026 by rpki-client