$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: u12qBl6lznzrro01OQEyKCwSwCTL71EFK+jzgV5OFIU= Subject key identifier: 5A:81:66:09:EF:66:7E:0A:92:1C:F8:02:1D:62:2A:88:AB:D2:D9:7E Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 42A971ECC6791338496E16FD94E8F1064F62BFCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:03:24 +0000 Manifest this update: Tue 12 May 2026 20:58:24 +0000 Manifest next update: Wed 13 May 2026 21:04:24 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 2: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 3: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) 4: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: A5K6Q5gA286ewWp8yINvwVP2yfKH58iWVbamaBJnPHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:71:ec:c6:79:13:38:49:6e:16:fd:94:e8:f1:06:4f:62:bf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: May 12 20:58:24 2026 GMT Not After : May 13 21:04:24 2026 GMT Subject: CN=5A816609EF667E0A921CF8021D622A88ABD2D97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:a7:78:17:f5:17:dc:8f:3a:6d:c0:03:30: 9d:d2:ab:94:d7:7d:6a:65:61:a3:c9:ce:92:63:02: 6d:d0:d8:c9:70:ab:4d:e2:92:d5:e8:ea:82:23:e6: 9c:ec:4a:f5:4e:ef:37:ae:0d:e0:eb:bd:b3:44:5b: 1c:6b:83:4b:5c:e2:4e:b4:f2:1e:2a:38:2c:98:8e: 9e:73:00:e0:9f:94:db:bf:f5:32:5f:bb:b5:65:b5: af:4f:87:f0:c2:34:62:04:49:7b:b2:5f:9a:c7:ec: 46:6e:e0:39:a8:71:36:9f:f7:e9:a6:0e:3c:ee:08: 6f:fb:40:33:d8:93:0e:85:08:bd:99:91:db:cf:d8: 3f:bf:33:37:6a:e4:35:ad:9d:07:e1:15:38:7e:61: 2e:60:1f:b4:ff:8a:68:fd:fb:9f:84:ae:49:fb:c5: f5:ac:9d:e2:9c:db:2b:dc:db:08:e3:5a:f7:14:72: 9f:72:9d:62:9d:d3:bb:65:c7:de:76:80:bf:fe:fd: 2a:b0:36:3b:cc:cc:17:83:c6:08:58:28:03:1a:30: db:94:6a:e1:3c:04:c1:10:24:83:46:8d:ec:d9:a1: 50:e5:9d:ca:91:b1:2f:c6:9d:f0:1c:4e:db:b0:ef: 14:26:ac:ac:99:cb:04:ea:ee:be:12:bf:e3:c7:77: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:81:66:09:EF:66:7E:0A:92:1C:F8:02:1D:62:2A:88:AB:D2:D9:7E X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:15:9a:77:1f:a4:c6:40:c6:68:af:7f:7d:71:21:c4:1f:b8: 55:47:a0:e1:52:4f:38:d6:0e:c5:09:0f:85:e7:75:5a:69:0a: 9b:eb:5d:1b:de:f8:82:21:62:e6:8a:67:fc:c3:87:3e:13:c3: b2:db:7d:6c:25:f5:86:ec:c9:9e:d9:77:0f:0b:3a:a6:71:a7: ce:af:b6:9a:1e:77:69:01:5a:56:6f:e3:96:9a:2b:04:fa:c8: 4a:f0:dd:18:fb:3b:d6:f1:51:0e:2d:59:05:cb:f8:91:6c:50: 69:95:3d:89:88:83:6f:2a:20:0f:8b:b7:f9:21:37:79:58:a8: fc:ee:88:98:45:7e:68:ed:b5:ed:4a:e5:75:54:b3:db:64:fa: fe:2f:46:de:99:af:c1:70:ba:b2:8c:45:4b:bb:fd:ad:31:31: e6:14:5a:8f:48:32:40:f2:1e:d5:3f:68:b9:46:4b:62:1a:6f: 35:1e:47:de:db:f3:81:fa:de:ba:10:ff:00:a7:2e:f0:e5:0f: ad:44:03:df:c6:f3:1a:34:f1:78:c1:bf:50:ac:7e:75:2d:e9: f5:87:2e:b0:81:ce:4b:5f:04:e5:8b:e5:aa:a3:d9:01:dd:16: 06:88:db:dd:13:f0:71:4e:0b:0b:7f:f6:0a:10:44:a3:57:9b: b7:e4:a1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqlx7MZ5EzhJbhb9lOjxBk9iv8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA1MTIyMDU4MjRaFw0yNjA1MTMyMTA0MjRaMDMxMTAvBgNV BAMTKDVBODE2NjA5RUY2NjdFMEE5MjFDRjgwMjFENjIyQTg4QUJEMkQ5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBad4F/UX3I86bcADMJ3Sq5TX fWplYaPJzpJjAm3Q2Mlwq03iktXo6oIj5pzsSvVO7zeuDeDrvbNEWxxrg0tc4k60 8h4qOCyYjp5zAOCflNu/9TJfu7Vlta9Ph/DCNGIESXuyX5rH7EZu4DmocTaf9+mm DjzuCG/7QDPYkw6FCL2ZkdvP2D+/Mzdq5DWtnQfhFTh+YS5gH7T/imj9+5+Erkn7 xfWsneKc2yvc2wjjWvcUcp9ynWKd07tlx952gL/+/SqwNjvMzBeDxghYKAMaMNuU auE8BMEQJINGjezZoVDlncqRsS/GnfAcTtuw7xQmrKyZywTq7r4Sv+PHdxy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWoFmCe9mfgqSHPgCHWIqiKvS2X4wHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsVmncfpMZAxmivf31xIcQfuFVHoOFSTzjW DsUJD4XndVppCpvrXRve+IIhYuaKZ/zDhz4Tw7LbfWwl9YbsyZ7Zdw8LOqZxp86v tpoed2kBWlZv45aaKwT6yErw3Rj7O9bxUQ4tWQXL+JFsUGmVPYmIg28qIA+Lt/kh N3lYqPzuiJhFfmjtte1K5XVUs9tk+v4vRt6Zr8FwurKMRUu7/a0xMeYUWo9IMkDy HtU/aLlGS2IabzUeR97b84H63roQ/wCnLvDlD61EA9/G8xo08XjBv1CsfnUt6fWH LrCBzktfBOWL5aqj2QHdFgaI290T8HFOCwt/9goQRKNXm7fkobY= -----END CERTIFICATE-----Generated at Wed May 13 01:10:19 2026 by rpki-client