$ rpki-client -vvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: vemxCUxVMkyLfnWA2BhZ6qGV2sASyl7nTNjWK+3Ypn4= Subject key identifier: 53:10:D2:39:17:90:E1:05:35:30:E0:AF:E3:B4:75:D8:BB:62:D3:D0 Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 2470766822A2F3D09185BBA9EE79F03768461DC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:54:15 +0000 Manifest this update: Tue 12 May 2026 07:49:15 +0000 Manifest next update: Wed 13 May 2026 08:34:15 +0000 Files and hashes: 1: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 2: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: Bo2ilNhBFozui1OMDlc11d366tDzN/JcdinbV/jDG7s=) 3: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) 4: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:70:76:68:22:a2:f3:d0:91:85:bb:a9:ee:79:f0:37:68:46:1d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: May 12 07:49:15 2026 GMT Not After : May 13 08:34:15 2026 GMT Subject: CN=5310D2391790E1053530E0AFE3B475D8BB62D3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:58:df:85:71:63:a9:3f:82:76:82:9f:ec:cd: dc:63:7d:3f:d9:ff:17:d3:99:53:f6:78:a2:bb:23: d3:4e:b7:3a:a6:53:4c:b8:96:1f:c6:a3:a6:40:2e: 9f:2e:45:71:87:30:57:6c:a1:6d:26:cb:b0:3d:f6: a8:63:08:99:97:e3:fb:e0:c9:7e:b4:0b:32:03:48: 3e:a0:81:da:89:4c:12:31:6f:28:be:50:4b:df:ac: 5a:fb:a6:e7:98:a0:36:c8:51:4d:b6:69:d3:51:33: 0e:eb:e0:66:70:6c:bc:9a:9f:ae:e7:75:d4:1b:9c: 9c:2a:fd:5f:da:a1:f7:2e:7e:98:b4:21:98:56:3c: ee:40:4e:bb:b2:a6:2d:5c:77:b4:57:c2:61:da:0b: 71:0d:81:20:98:23:da:17:98:a7:35:91:fb:97:14: cc:79:72:79:c6:f7:cf:f4:e7:4d:62:52:f2:6c:12: b2:8e:0e:6a:5b:a1:fb:a9:86:29:87:be:70:33:2a: 4f:cb:90:02:a8:7f:81:bc:da:7b:e9:22:6f:f8:98: 7a:c3:c8:b5:79:31:e6:75:b0:0d:22:f9:98:cd:64: c1:0b:a1:73:41:3f:24:d6:0a:c8:4f:43:ef:08:6f: 1f:18:b4:c1:6f:97:57:09:bc:fa:f6:2f:d2:c1:2b: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:D2:39:17:90:E1:05:35:30:E0:AF:E3:B4:75:D8:BB:62:D3:D0 X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:d3:1f:f8:7c:ec:53:3a:44:5b:23:d9:f1:ca:05:0b:db: 34:8d:0a:f4:8c:e0:82:b2:c6:64:87:00:1c:3b:e8:53:76:bd: f4:21:8a:78:61:b8:e0:71:74:91:64:9f:6e:b6:2c:10:36:16: 8a:e9:15:2f:b5:f6:83:3a:c3:54:28:50:c9:8a:c8:93:84:23: f9:d6:58:02:bc:70:64:ed:f3:bd:db:2c:9f:65:74:5f:e1:50: 24:a1:bc:aa:86:50:36:c5:f4:f8:01:1a:4d:13:56:37:36:d8: 23:3a:0b:9f:72:85:41:88:2b:9b:0f:bb:35:81:24:4e:0b:ba: 31:a9:32:d8:e2:fa:01:f9:99:09:0e:a3:e2:ce:23:da:79:d2: b7:44:54:a7:b3:98:02:49:3e:ed:41:a6:32:e1:14:fe:15:8f: 60:63:f8:14:e5:29:63:a3:24:cc:bf:ca:49:a9:f7:5b:21:32: c3:89:72:6a:a2:86:7a:03:2d:be:e1:83:da:1a:7a:18:d1:db: bd:7e:d7:21:c7:2f:7d:cc:8e:c6:86:e5:16:e5:6b:82:b1:17: 33:1b:72:6d:96:4b:c4:e9:3a:4d:0c:1c:79:96:0a:50:0b:7b: 0a:16:7a:3d:ca:e3:6b:31:17:68:89:89:2b:43:63:05:b5:76: a0:e5:9c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHB2aCKi89CRhbup7nnwN2hGHcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA1MTIwNzQ5MTVaFw0yNjA1MTMwODM0MTVaMDMxMTAvBgNV BAMTKDUzMTBEMjM5MTc5MEUxMDUzNTMwRTBBRkUzQjQ3NUQ4QkI2MkQzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2WN+FcWOpP4J2gp/szdxjfT/Z /xfTmVP2eKK7I9NOtzqmU0y4lh/Go6ZALp8uRXGHMFdsoW0my7A99qhjCJmX4/vg yX60CzIDSD6ggdqJTBIxbyi+UEvfrFr7pueYoDbIUU22adNRMw7r4GZwbLyan67n ddQbnJwq/V/aofcufpi0IZhWPO5ATruypi1cd7RXwmHaC3ENgSCYI9oXmKc1kfuX FMx5cnnG98/0501iUvJsErKODmpbofuphimHvnAzKk/LkAKof4G82nvpIm/4mHrD yLV5MeZ1sA0i+ZjNZMELoXNBPyTWCshPQ+8Ibx8YtMFvl1cJvPr2L9LBK7+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUxDSOReQ4QU1MOCv47R12Lti09AwHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsZ0x/4fOxTOkRbI9nxygUL2zSNCvSM4IKy xmSHABw76FN2vfQhinhhuOBxdJFkn262LBA2ForpFS+19oM6w1QoUMmKyJOEI/nW WAK8cGTt873bLJ9ldF/hUCShvKqGUDbF9PgBGk0TVjc22CM6C59yhUGIK5sPuzWB JE4LujGpMtji+gH5mQkOo+LOI9p50rdEVKezmAJJPu1BpjLhFP4Vj2Bj+BTlKWOj JMy/ykmp91shMsOJcmqihnoDLb7hg9oaehjR271+1yHHL33MjsaG5Rbla4KxFzMb cm2WS8TpOk0MHHmWClALewoWej3K42sxF2iJiStDYwW1dqDlnDQ= -----END CERTIFICATE-----Generated at Wed May 13 02:26:37 2026 by rpki-client