$ rpki-client -vvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json) Hash identifier: y4TTyre3UCdDVJ1dDYutFDfWcq8RdOZbbLA009XqeA4= Subject key identifier: BF:BE:89:B6:EC:D7:47:11:BA:80:D7:63:BF:CA:2D:F1:09:0F:65:AD Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 Certificate issuer: /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Certificate serial: 21E0D015A727E321A801FA4AD2441B2CB05C13BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:00:07 +0000 Manifest this update: Tue 12 May 2026 21:55:07 +0000 Manifest next update: Thu 14 May 2026 01:19:07 +0000 Files and hashes: 1: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=) 2: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: 4lnT53puvOgiyEXf3Rn5P2Rl86vjkqClMrOX4C37uA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e0:d0:15:a7:27:e3:21:a8:01:fa:4a:d2:44:1b:2c:b0:5c:13:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Validity Not Before: May 12 21:55:07 2026 GMT Not After : May 14 01:19:07 2026 GMT Subject: CN=BFBE89B6ECD74711BA80D763BFCA2DF1090F65AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f7:6a:89:07:1f:2e:5d:ec:c3:ec:20:4e:e6: f3:e4:44:24:da:b8:bb:64:53:16:9f:84:a8:f4:e0: f3:fd:8a:c2:40:0b:11:69:21:db:c7:1c:42:f4:da: 99:79:ea:36:26:eb:45:48:d8:b4:07:35:c1:84:37: 42:cb:b2:93:61:c7:2b:0b:43:d8:51:4c:df:74:fb: d2:b2:4c:22:d8:0e:fd:06:bb:8e:53:44:bd:ed:9f: 33:1d:4b:28:01:f8:bc:43:2a:16:39:c8:ff:e2:37: 9a:97:27:0a:b9:7e:7b:85:ff:d9:3b:59:e0:30:58: 58:0b:c5:46:aa:1f:d3:ee:c9:93:2e:4d:23:ad:a6: 81:3e:bf:2e:2c:78:2d:60:db:1b:b4:28:f5:34:f9: 8d:5c:cb:c4:0e:88:ff:02:2d:c0:55:1d:9e:26:16: b8:d8:e9:ed:fd:96:f6:95:5c:0b:99:10:ed:ee:4f: ba:36:f2:bb:14:b7:80:f8:5f:5a:1c:46:4c:38:7f: f7:81:8c:04:95:5f:48:ef:c2:a5:57:24:cf:17:da: 16:e2:ee:a4:ea:e7:a3:f3:bc:f4:c4:b3:af:1a:f2: 67:11:8a:90:57:0f:d2:0e:9d:c3:01:5f:3d:ee:44: a9:3b:ee:70:25:06:c5:42:c9:57:92:66:b1:59:6a: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:89:B6:EC:D7:47:11:BA:80:D7:63:BF:CA:2D:F1:09:0F:65:AD X509v3 Authority Key Identifier: keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:38:fb:ba:18:da:23:f4:81:75:1c:4e:c3:d1:d6:79:1d:bc: cf:84:ca:ae:d9:61:45:5e:57:f4:05:19:14:af:ec:ff:0a:ac: 4b:6d:09:08:55:3d:70:41:2c:83:1f:dc:c2:32:64:6e:64:b6: 5b:ca:2e:7f:04:af:39:3b:d0:41:aa:b9:62:c9:36:60:0e:94: 5c:c9:bb:04:21:51:9c:7d:c3:2c:27:e8:a8:95:71:55:2c:65: b5:7b:20:c8:92:10:e4:8b:7c:fc:d5:fa:d1:ae:04:95:0f:4d: 4d:ae:b9:d1:b2:b8:00:01:af:fa:a6:92:5d:c1:0b:0f:1e:5d: f7:ab:88:d2:d0:6b:43:26:24:e4:ab:89:37:63:a6:d0:50:e1: 0a:17:db:2e:16:7b:5c:7c:7a:22:d1:c8:e4:19:53:68:69:d4: ca:49:45:0b:46:51:04:6b:2a:13:24:77:34:e7:f2:2d:ce:5c: 2a:ae:f2:ad:09:f0:6f:d8:c3:9f:d9:37:e0:41:07:0b:d8:dd: 67:00:5d:28:46:f9:c2:79:20:b3:16:2b:c9:dc:94:a0:28:e2: a6:e5:fa:87:98:d5:14:7f:f6:40:8f:57:7c:1d:21:a3:98:e3: 9f:ed:1d:32:90:b0:88:52:ea:9c:8e:ef:f8:12:71:ff:57:6c: bf:71:cc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIeDQFacn4yGoAfpK0kQbLLBcE7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhF NDhCOEE5NzAeFw0yNjA1MTIyMTU1MDdaFw0yNjA1MTQwMTE5MDdaMDMxMTAvBgNV BAMTKEJGQkU4OUI2RUNENzQ3MTFCQTgwRDc2M0JGQ0EyREYxMDkwRjY1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI92qJBx8uXezD7CBO5vPkRCTa uLtkUxafhKj04PP9isJACxFpIdvHHEL02pl56jYm60VI2LQHNcGEN0LLspNhxysL Q9hRTN90+9KyTCLYDv0Gu45TRL3tnzMdSygB+LxDKhY5yP/iN5qXJwq5fnuF/9k7 WeAwWFgLxUaqH9PuyZMuTSOtpoE+vy4seC1g2xu0KPU0+Y1cy8QOiP8CLcBVHZ4m FrjY6e39lvaVXAuZEO3uT7o28rsUt4D4X1ocRkw4f/eBjASVX0jvwqVXJM8X2hbi 7qTq56PzvPTEs68a8mcRipBXD9IOncMBXz3uRKk77nAlBsVCyVeSZrFZasCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv76JtuzXRxG6gNdjv8ot8QkPZa0wHwYDVR0j BBgwFoAUiE4jZeS4rwXES9ZJ1bQpaOSLipcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg3YWRlOWYtNmI3OS00NzIzLTk5NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVF NEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhFNDhCOEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODRFMjM2NUU0QjhBRjA1QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4 QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5 NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5 NjhFNDhCOEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANo4+7oY2iP0gXUcTsPR1nkdvM+Eyq7ZYUVe V/QFGRSv7P8KrEttCQhVPXBBLIMf3MIyZG5ktlvKLn8Erzk70EGquWLJNmAOlFzJ uwQhUZx9wywn6KiVcVUsZbV7IMiSEOSLfPzV+tGuBJUPTU2uudGyuAABr/qmkl3B Cw8eXferiNLQa0MmJOSriTdjptBQ4QoX2y4We1x8eiLRyOQZU2hp1MpJRQtGUQRr KhMkdzTn8i3OXCqu8q0J8G/Yw5/ZN+BBBwvY3WcAXShG+cJ5ILMWK8nclKAo4qbl +oeY1RR/9kCPV3wdIaOY45/tHTKQsIhS6pyO7/gScf9XbL9xzD8= -----END CERTIFICATE-----Generated at Wed May 13 09:47:56 2026 by rpki-client