$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: +uJ8ZdlI2yc5oP/Y/rByMc7rpundZZvbD+T/RvcAOEU= Subject key identifier: 18:5A:E6:F6:80:31:63:09:A2:79:2F:0A:D8:8E:9E:15:83:BC:A6:EA Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 5B9CD2164406FF019A4D252AAB26B0AE14B86C0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:35:56 +0000 Manifest this update: Tue 12 May 2026 09:30:56 +0000 Manifest next update: Wed 13 May 2026 10:49:56 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) 3: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: evXhRP20ZIR8Vb5mlHDcCkN1b7H2h4ZKRvQvAs1LWxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:d2:16:44:06:ff:01:9a:4d:25:2a:ab:26:b0:ae:14:b8:6c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: May 12 09:30:56 2026 GMT Not After : May 13 10:49:56 2026 GMT Subject: CN=185AE6F680316309A2792F0AD88E9E1583BCA6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:d1:5f:6e:95:02:33:c0:96:dd:2f:c3:5d: 1b:34:94:2b:bb:86:71:02:22:eb:91:6f:7b:b9:bf: 16:1a:1a:8a:88:0b:e4:9a:b5:a1:be:ff:2b:5c:2f: 17:49:5d:11:cf:d7:0f:de:be:b4:98:f6:72:63:b0: fc:8f:a3:12:47:c1:f4:b1:83:c6:8c:5a:80:58:85: 28:1f:66:c8:72:0d:05:d9:6e:cb:45:8d:ce:3a:03: 14:26:58:b7:14:92:84:5a:ff:44:ab:9c:b2:76:fa: 7d:6c:42:3c:f1:99:4d:bf:27:23:e1:da:8c:1a:6b: 44:e9:db:1a:92:46:24:4b:23:e4:c4:da:f4:e4:2c: cf:6f:10:24:22:80:fc:8b:be:a4:ca:55:d7:b9:a9: be:44:e0:fe:0d:63:a2:01:bd:5b:39:ee:e1:0e:52: 1b:1b:a1:35:c7:df:67:c6:1a:47:50:b4:01:75:d3: b7:34:23:4a:f7:45:f5:2d:4e:e4:02:a4:9e:50:93: 61:5a:15:37:5a:47:5f:50:17:df:87:79:e1:2c:a4: 82:dd:e0:e0:f0:92:0c:9a:8b:b7:4e:67:c8:29:42: 48:ac:f5:4d:48:f0:4f:05:9a:ff:40:b4:5e:19:e5: 9a:c9:0b:1e:b1:72:9c:b9:31:b7:bd:bc:43:28:df: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:E6:F6:80:31:63:09:A2:79:2F:0A:D8:8E:9E:15:83:BC:A6:EA X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:18:b8:10:6e:ad:2d:b4:82:fc:31:95:22:0f:64:f5:b0:6f: 89:89:e9:22:69:c2:d0:3f:e8:a6:80:15:73:dd:54:de:9a:96: c4:3d:bc:55:f2:bd:6a:aa:12:37:72:45:7b:ef:f5:b6:19:2e: 94:81:ec:55:b9:a7:23:f5:6a:ec:db:bb:90:49:16:bb:22:ea: d5:c8:e6:48:7d:3c:52:16:4c:e1:45:88:23:ad:d5:cb:28:bc: ea:34:95:d2:28:10:c0:4a:1f:ab:d3:65:79:12:e0:25:04:e3: 00:31:fd:09:be:58:14:71:e1:0f:fe:7c:ab:f9:ba:d2:7b:a1: 1f:d9:70:1d:be:ca:75:15:a0:86:b3:5d:45:4a:99:ae:1b:6c: 6c:28:c8:b0:61:c0:0a:aa:73:29:a2:7f:f5:6d:02:3e:1f:32: 32:7e:11:5d:86:76:e4:50:27:30:20:5e:38:da:ea:f6:27:26: 72:0d:07:b6:8a:ff:29:ba:9d:6a:28:60:e1:3d:70:66:d2:c8: 25:be:8f:b1:97:0d:f7:9c:75:5d:85:3d:16:18:e5:e0:7b:24: c0:79:92:78:7c:92:52:9a:89:5b:91:3f:85:09:89:cf:fc:dd: 77:e1:ca:39:23:25:70:6b:09:bc:2b:91:9d:49:fc:c9:55:e0: 02:9a:77:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5zSFkQG/wGaTSUqqyawrhS4bAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA1MTIwOTMwNTZaFw0yNjA1MTMxMDQ5NTZaMDMxMTAvBgNV BAMTKDE4NUFFNkY2ODAzMTYzMDlBMjc5MkYwQUQ4OEU5RTE1ODNCQ0E2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD09FfbpUCM8CW3S/DXRs0lCu7 hnECIuuRb3u5vxYaGoqIC+SataG+/ytcLxdJXRHP1w/evrSY9nJjsPyPoxJHwfSx g8aMWoBYhSgfZshyDQXZbstFjc46AxQmWLcUkoRa/0SrnLJ2+n1sQjzxmU2/JyPh 2owaa0Tp2xqSRiRLI+TE2vTkLM9vECQigPyLvqTKVde5qb5E4P4NY6IBvVs57uEO UhsboTXH32fGGkdQtAF107c0I0r3RfUtTuQCpJ5Qk2FaFTdaR19QF9+HeeEspILd 4ODwkgyai7dOZ8gpQkis9U1I8E8Fmv9AtF4Z5ZrJCx6xcpy5Mbe9vEMo35ClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFrm9oAxYwmieS8K2I6eFYO8puowHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwYuBBurS20gvwxlSIPZPWwb4mJ6SJpwtA/ 6KaAFXPdVN6alsQ9vFXyvWqqEjdyRXvv9bYZLpSB7FW5pyP1auzbu5BJFrsi6tXI 5kh9PFIWTOFFiCOt1csovOo0ldIoEMBKH6vTZXkS4CUE4wAx/Qm+WBRx4Q/+fKv5 utJ7oR/ZcB2+ynUVoIazXUVKma4bbGwoyLBhwAqqcymif/VtAj4fMjJ+EV2GduRQ JzAgXjja6vYnJnINB7aK/ym6nWooYOE9cGbSyCW+j7GXDfecdV2FPRYY5eB7JMB5 knh8klKaiVuRP4UJic/83XfhyjkjJXBrCbwrkZ1J/MlV4AKad9s= -----END CERTIFICATE-----Generated at Wed May 13 02:19:15 2026 by rpki-client