$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: GR9jHznx8M6C33Wb5q6yVdbhnqxQMj4SIVzsrjVhxQ4= Subject key identifier: 03:0C:87:F5:95:27:0E:E6:83:06:F4:01:7E:9C:45:4D:9B:CA:1A:A5 Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 336271ECA17890BC043ABA3A62ADB86A58FF5F4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:37 +0000 Manifest this update: Tue 12 May 2026 22:15:37 +0000 Manifest next update: Wed 13 May 2026 23:16:37 +0000 Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: lKDgXEtNUbkcY/rb2jmiWB8baJkvF+VvT/pA87qtiRg=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:62:71:ec:a1:78:90:bc:04:3a:ba:3a:62:ad:b8:6a:58:ff:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: May 12 22:15:37 2026 GMT Not After : May 13 23:16:37 2026 GMT Subject: CN=030C87F595270EE68306F4017E9C454D9BCA1AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:ef:87:8c:09:38:7d:37:a8:d0:8a:f7:f4: d7:a3:46:b1:3f:52:d3:69:cc:27:37:41:97:37:89: c3:cf:2b:e2:7d:05:a3:0b:b9:f1:db:e3:c6:b8:73: c0:f8:22:a1:7e:c4:6a:f3:5f:75:5f:bc:32:81:eb: cb:0f:48:41:af:a7:c7:e2:17:48:da:d7:30:b2:18: 37:33:3f:d8:93:6e:86:a0:a0:5b:7e:82:02:30:82: ff:9c:a9:18:b0:58:09:ca:86:59:9a:da:c9:51:b0: 2b:b3:b6:e5:db:44:b9:f2:5b:73:16:68:70:50:a7: 74:8b:2a:8d:3b:ca:d6:23:30:69:59:6d:73:57:53: ad:8c:ed:69:6a:d0:26:09:01:6b:48:05:55:dc:e4: d6:71:13:28:5f:67:a8:15:c6:7a:36:47:8c:e1:9d: cb:26:9b:2e:ab:d6:74:a3:07:0f:eb:f6:de:05:ea: 62:45:9e:da:7f:03:e6:0a:04:ae:2c:5c:fa:98:df: b3:a7:6f:98:e2:5d:f3:8b:10:be:e0:97:50:ff:5a: 20:7e:e1:75:aa:0f:b3:77:e7:62:d2:bf:50:fe:f8: 64:c6:f6:40:12:7b:ab:1a:d4:4b:61:4c:84:05:a3: 16:82:a3:a8:89:7f:3f:c6:1a:94:1b:02:df:cb:93: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0C:87:F5:95:27:0E:E6:83:06:F4:01:7E:9C:45:4D:9B:CA:1A:A5 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:68:56:2f:49:f6:c6:f6:e5:11:35:c7:b0:17:96:c4:40:ae: 6a:3d:4e:f7:c1:c1:b9:34:0a:ac:96:10:64:b5:79:0b:03:61: 6d:3f:4c:35:bd:92:1c:18:ec:2c:ba:27:5f:4b:5f:70:af:2d: 3f:d0:a2:a6:6b:65:53:78:53:c6:cf:2a:b8:4b:be:1c:d3:f7: dd:b5:13:84:6e:84:6b:f7:89:8b:0b:c4:de:63:3e:7f:c3:70: a9:36:7f:94:2a:b9:5b:52:d0:6c:9a:85:79:1c:31:6e:72:64: 0d:21:2e:0c:33:07:ba:38:07:14:16:90:8d:e2:ec:a7:0e:99: 6f:2c:a6:9d:61:15:89:0e:99:66:bc:85:2d:ba:a1:63:00:ff: 4a:da:c2:4f:67:e7:a9:61:b3:b3:a8:bf:74:5c:0f:65:20:9b: 8d:43:68:e9:37:98:f5:58:f2:dd:60:d0:d3:5d:39:98:5f:43: fe:d1:bf:34:2a:63:14:c5:35:4d:a2:bf:79:f4:a0:5f:56:27: ca:74:51:5d:16:99:19:84:24:38:d2:39:97:1f:84:02:b8:06: 7b:de:99:0c:8a:fd:6a:5e:41:7a:65:4a:39:0b:73:c2:b6:ea: 24:d8:11:f8:68:d6:83:60:89:e4:77:ab:36:e4:70:a8:cd:33: ad:85:62:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2Jx7KF4kLwEOro6Yq24alj/X0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA1MTIyMjE1MzdaFw0yNjA1MTMyMzE2MzdaMDMxMTAvBgNV BAMTKDAzMEM4N0Y1OTUyNzBFRTY4MzA2RjQwMTdFOUM0NTREOUJDQTFBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeu+HjAk4fTeo0Ir39NejRrE/ UtNpzCc3QZc3icPPK+J9BaMLufHb48a4c8D4IqF+xGrzX3VfvDKB68sPSEGvp8fi F0ja1zCyGDczP9iTboagoFt+ggIwgv+cqRiwWAnKhlma2slRsCuztuXbRLnyW3MW aHBQp3SLKo07ytYjMGlZbXNXU62M7Wlq0CYJAWtIBVXc5NZxEyhfZ6gVxno2R4zh ncsmmy6r1nSjBw/r9t4F6mJFntp/A+YKBK4sXPqY37Onb5jiXfOLEL7gl1D/WiB+ 4XWqD7N352LSv1D++GTG9kASe6sa1EthTIQFoxaCo6iJfz/GGpQbAt/Lk1thAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwyH9ZUnDuaDBvQBfpxFTZvKGqUwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApoVi9J9sb25RE1x7AXlsRArmo9TvfBwbk0 CqyWEGS1eQsDYW0/TDW9khwY7Cy6J19LX3CvLT/QoqZrZVN4U8bPKrhLvhzT9921 E4RuhGv3iYsLxN5jPn/DcKk2f5QquVtS0GyahXkcMW5yZA0hLgwzB7o4BxQWkI3i 7KcOmW8spp1hFYkOmWa8hS26oWMA/0rawk9n56lhs7Oov3RcD2Ugm41DaOk3mPVY 8t1g0NNdOZhfQ/7RvzQqYxTFNU2iv3n0oF9WJ8p0UV0WmRmEJDjSOZcfhAK4Bnve mQyK/WpeQXplSjkLc8K26iTYEfho1oNgieR3qzbkcKjNM62FYks= -----END CERTIFICATE-----Generated at Wed May 13 00:27:43 2026 by rpki-client