$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft File: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft (raw, json) Hash identifier: YPrfOjzj403O9kXIWge3upjOMMLuKLB2xRmlh+qvZg4= Subject key identifier: D1:7C:C1:F3:27:7A:68:61:9C:E9:E4:13:FC:27:C0:04:95:F1:23:A2 Authority key identifier: 53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C Certificate issuer: /CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Certificate serial: 5966901123545BEC2CC60196B1231B23D99AEF7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:55 +0000 Manifest this update: Tue 12 May 2026 19:35:55 +0000 Manifest next update: Wed 13 May 2026 23:34:55 +0000 Files and hashes: 1: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl (hash: Semla4OKM7TZPTOai3nxMoSFcChJyi5IA7P+YSUkGD8=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: ln/cutFyRprFz8dtBUFO3cjX8Yn8fKNHUiK0Pk7iFOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:66:90:11:23:54:5b:ec:2c:c6:01:96:b1:23:1b:23:d9:9a:ef:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C Validity Not Before: May 12 19:35:55 2026 GMT Not After : May 13 23:34:55 2026 GMT Subject: CN=D17CC1F3277A68619CE9E413FC27C00495F123A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:4e:b6:ca:fe:84:cd:d1:bb:b3:d4:90:76: 05:1a:d3:bb:2d:e5:60:1b:44:db:fc:4b:c8:1b:a5: 79:4b:44:a7:7b:2d:dd:af:b2:fb:61:f4:49:fd:6f: 9b:8e:d2:5e:8b:de:20:08:b0:4c:8b:f0:3f:a7:df: 6a:6a:74:b3:f5:8c:63:a3:f5:26:5e:af:a0:b8:b5: f6:59:89:e4:a7:89:3b:da:f4:4c:a7:9b:bd:74:20: 84:7a:db:ff:11:6a:02:9f:53:6d:99:09:45:fc:00: 24:39:82:cd:ca:92:06:11:e4:76:21:c2:75:a7:1c: 17:c7:0f:ac:54:9f:5b:02:bc:bf:c0:fd:a8:45:e4: 1d:11:9a:1f:23:bf:1a:4d:c2:c4:c6:5f:49:c7:ab: bc:6e:32:c3:cd:52:51:df:bf:28:63:55:01:e1:75: 27:26:92:aa:0c:c5:ee:a6:02:61:19:49:1d:6b:27: ac:bf:71:78:f7:48:a0:49:0d:7e:42:48:24:65:81: fb:a3:42:7c:7f:28:e5:df:af:7d:ac:12:0a:1b:92: 0b:80:8f:e1:1a:24:01:57:a7:39:e5:3a:98:e8:93: 14:4a:78:bc:13:e9:4d:8c:45:db:96:e8:94:f5:c1: cd:87:ff:1a:f9:37:39:6f:d4:52:f7:1c:69:77:fd: 22:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7C:C1:F3:27:7A:68:61:9C:E9:E4:13:FC:27:C0:04:95:F1:23:A2 X509v3 Authority Key Identifier: keyid:53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:54:a1:de:0b:73:87:0c:6b:73:70:be:01:c6:93:97:44:45: a1:5e:e5:34:03:2d:aa:64:ee:8c:d7:d7:e3:8c:28:70:21:f8: 7a:49:8f:8b:6e:b7:f8:01:1e:0c:a3:c3:ee:80:56:6b:92:47: 8f:ba:4c:8f:16:26:6f:a6:26:79:19:db:81:19:76:3d:b4:80: cc:2f:72:d2:8a:0f:4d:87:a9:b6:a0:11:b9:1c:42:7a:47:c6: ad:0f:82:e7:aa:12:88:29:a0:ff:cc:f8:0b:17:cd:ee:8e:02: 31:b9:57:5d:1c:00:55:ba:f4:d8:10:c4:56:67:49:e0:31:c4: f5:fb:a5:eb:d0:f5:84:7c:33:92:90:09:2a:93:a1:4c:63:05: 42:50:38:eb:57:dd:cd:24:14:dc:6e:17:04:ca:52:a5:6f:54: eb:05:28:ef:3c:6a:06:a6:78:ee:a7:06:b6:60:88:1a:f7:ad: 2c:b3:78:62:63:ee:9c:30:51:86:71:49:e7:eb:d6:0b:fc:2e: a7:73:7c:7c:c4:e7:36:f1:94:52:0c:55:ba:9c:7c:2b:0d:2e: 88:49:d9:a5:2b:1e:9a:d1:6c:ff:67:1e:5d:9f:75:36:5f:ea: cf:a9:38:40:8f:e4:f4:1d:31:6f:6b:48:3b:90:3c:07:2c:f1: 18:72:2c:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWaQESNUW+wsxgGWsSMbI9ma730wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2Qjkx RkNCNjczQzAeFw0yNjA1MTIxOTM1NTVaFw0yNjA1MTMyMzM0NTVaMDMxMTAvBgNV BAMTKEQxN0NDMUYzMjc3QTY4NjE5Q0U5RTQxM0ZDMjdDMDA0OTVGMTIzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfU62yv6EzdG7s9SQdgUa07st 5WAbRNv8S8gbpXlLRKd7Ld2vsvth9En9b5uO0l6L3iAIsEyL8D+n32pqdLP1jGOj 9SZer6C4tfZZieSniTva9Eynm710IIR62/8RagKfU22ZCUX8ACQ5gs3KkgYR5HYh wnWnHBfHD6xUn1sCvL/A/ahF5B0Rmh8jvxpNwsTGX0nHq7xuMsPNUlHfvyhjVQHh dScmkqoMxe6mAmEZSR1rJ6y/cXj3SKBJDX5CSCRlgfujQnx/KOXfr32sEgobkguA j+EaJAFXpznlOpjokxRKeLwT6U2MRduW6JT1wc2H/xr5Nzlv1FL3HGl3/SLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XzB8yd6aGGc6eQT/CfABJXxI6IwHwYDVR0j BBgwFoAUUziQSUC/gqjv83FiobrmuR/LZzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0 MEJGODJBOEVGRjM3MTYyQTFCQUU2QjkxRkNCNjczQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzM4OTA0OTQwQkY4MkE4RUZGMzcxNjJBMUJBRTZCOTFGQ0I2 NzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2 QjkxRkNCNjczQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhUod4Lc4cMa3NwvgHGk5dERaFe5TQDLapk 7ozX1+OMKHAh+HpJj4tut/gBHgyjw+6AVmuSR4+6TI8WJm+mJnkZ24EZdj20gMwv ctKKD02HqbagEbkcQnpHxq0PgueqEogpoP/M+AsXze6OAjG5V10cAFW69NgQxFZn SeAxxPX7pevQ9YR8M5KQCSqToUxjBUJQOOtX3c0kFNxuFwTKUqVvVOsFKO88agam eO6nBrZgiBr3rSyzeGJj7pwwUYZxSefr1gv8LqdzfHzE5zbxlFIMVbqcfCsNLohJ 2aUrHprRbP9nHl2fdTZf6s+pOECP5PQdMW9rSDuQPAcs8RhyLGk= -----END CERTIFICATE-----Generated at Wed May 13 01:44:52 2026 by rpki-client