$ rpki-client -vvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: o/DotoWjWf7DYaApIbyM4smyln6RpUF/nL6GIR4wxJY= Subject key identifier: BF:42:E9:3C:98:63:30:E3:4B:87:FA:5C:A4:3A:D2:C3:9E:42:FE:4F Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 59B93C110AD33F4AF00DC0CFD8FFAFA446C1A858 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:08:27 +0000 Manifest this update: Tue 12 May 2026 21:03:27 +0000 Manifest next update: Wed 13 May 2026 21:46:27 +0000 Files and hashes: 1: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: uux7RLzPrIXmSvtVBQMANSNJpIDtmLvOcE9QoBHGzvM=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b9:3c:11:0a:d3:3f:4a:f0:0d:c0:cf:d8:ff:af:a4:46:c1:a8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: May 12 21:03:27 2026 GMT Not After : May 13 21:46:27 2026 GMT Subject: CN=BF42E93C986330E34B87FA5CA43AD2C39E42FE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:36:5d:3a:b4:01:b2:63:4e:f5:41:07:1b: 2f:e7:af:85:58:0c:0c:f3:ac:5b:ab:54:35:88:73: aa:9c:2a:66:24:cd:b2:09:d4:f4:bd:99:93:97:fe: cc:0e:22:58:9c:92:69:2a:29:27:51:38:5b:8e:3f: 88:f3:0e:ad:25:c2:0b:aa:19:80:8f:d6:90:70:c4: f6:4d:b5:40:bc:f7:f8:10:bb:f6:d4:07:ee:d3:15: 3c:31:12:91:77:dc:b6:0f:cf:52:6c:9a:d5:ce:ea: 19:4e:7a:91:89:38:30:9e:00:73:80:91:64:ae:c5: af:9b:0b:68:e2:33:ac:49:0d:24:32:17:54:30:8b: e4:1e:d1:5b:7e:55:aa:94:4f:33:33:3f:cc:4d:05: 55:95:04:d1:a7:0d:48:7c:ee:23:39:80:ad:f7:1b: c9:2f:20:13:80:72:d4:f8:7a:e1:8c:59:94:ee:fb: 18:68:48:c0:78:8b:1f:55:ce:7f:49:35:3c:fe:56: c9:5b:72:ce:19:f0:8e:93:e4:d9:65:c5:c0:be:00: ff:69:35:58:d0:62:12:50:52:b7:54:c7:5a:0f:e5: 23:b8:8f:78:b1:d7:70:f2:38:91:43:41:f6:8c:d8: 88:da:14:06:b3:7e:1c:59:e2:93:12:6b:0b:40:00: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:E9:3C:98:63:30:E3:4B:87:FA:5C:A4:3A:D2:C3:9E:42:FE:4F X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:91:1f:03:cb:3f:4f:8e:1d:ad:0b:cd:16:7e:7f:c9:41:d4: 9e:9b:91:f3:a1:99:81:4e:62:ce:12:d2:26:35:fa:99:ca:9e: 4d:bc:fc:fc:b9:b6:a0:4b:f0:db:05:88:5e:10:30:52:ac:86: 58:f3:2e:1f:4e:4b:a0:fd:71:7d:07:fb:c2:79:f2:cd:bf:b5: cb:c4:93:5a:a8:16:54:bb:ca:f8:80:65:83:67:0a:2c:11:c0: 15:66:52:35:92:53:d6:0e:46:b3:65:f2:08:08:e2:27:e4:17: b7:0e:64:29:d6:14:6f:50:31:c7:5e:6d:ea:08:54:f1:4e:0c: 6f:27:73:15:a2:15:4e:c0:ce:2b:7b:a9:ca:f2:b2:51:7a:af: 84:ca:16:e1:5d:1b:a5:2e:86:c0:53:64:19:e9:0d:37:ba:b4: 30:ab:93:e8:4d:1b:ce:7d:21:31:35:e6:66:92:70:a8:6a:ad: c7:cc:a6:ce:f8:5b:25:d2:62:0b:98:b4:fd:fd:24:b9:6a:73: ea:be:4c:df:64:b6:65:50:e4:4b:14:81:44:b3:07:24:69:79: dc:0b:1b:b7:91:ad:59:70:e0:cf:5d:01:e5:37:a5:5c:22:42: ec:c6:1b:88:ed:04:b2:12:c8:98:fc:35:6a:aa:cf:f3:80:a6: bf:0b:85:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbk8EQrTP0rwDcDP2P+vpEbBqFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA1MTIyMTAzMjdaFw0yNjA1MTMyMTQ2MjdaMDMxMTAvBgNV BAMTKEJGNDJFOTNDOTg2MzMwRTM0Qjg3RkE1Q0E0M0FEMkMzOUU0MkZFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiTZdOrQBsmNO9UEHGy/nr4VY DAzzrFurVDWIc6qcKmYkzbIJ1PS9mZOX/swOIlickmkqKSdROFuOP4jzDq0lwguq GYCP1pBwxPZNtUC89/gQu/bUB+7TFTwxEpF33LYPz1JsmtXO6hlOepGJODCeAHOA kWSuxa+bC2jiM6xJDSQyF1Qwi+Qe0Vt+VaqUTzMzP8xNBVWVBNGnDUh87iM5gK33 G8kvIBOActT4euGMWZTu+xhoSMB4ix9Vzn9JNTz+Vslbcs4Z8I6T5NllxcC+AP9p NVjQYhJQUrdUx1oP5SO4j3ix13DyOJFDQfaM2IjaFAazfhxZ4pMSawtAALKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0LpPJhjMONLh/pcpDrSw55C/k8wHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaRHwPLP0+OHa0LzRZ+f8lB1J6bkfOhmYFO Ys4S0iY1+pnKnk28/Py5tqBL8NsFiF4QMFKshljzLh9OS6D9cX0H+8J58s2/tcvE k1qoFlS7yviAZYNnCiwRwBVmUjWSU9YORrNl8ggI4ifkF7cOZCnWFG9QMcdebeoI VPFODG8ncxWiFU7Azit7qcryslF6r4TKFuFdG6UuhsBTZBnpDTe6tDCrk+hNG859 ITE15maScKhqrcfMps74WyXSYguYtP39JLlqc+q+TN9ktmVQ5EsUgUSzByRpedwL G7eRrVlw4M9dAeU3pVwiQuzGG4jtBLISyJj8NWqqz/OApr8LhW8= -----END CERTIFICATE-----Generated at Wed May 13 05:57:32 2026 by rpki-client