$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: fZ79dGY8MqnS2juBD4IWTOrjY5/tbHaxVAk+Q15h/co= Subject key identifier: F2:23:39:09:9D:3F:1E:23:F3:FD:CD:ED:2E:64:AE:1C:21:40:C8:65 Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 10B198CF1A7D62E0ACAD294E70FEBD57B4B399EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:24:16 +0000 Manifest this update: Tue 12 May 2026 04:19:16 +0000 Manifest next update: Wed 13 May 2026 07:37:16 +0000 Files and hashes: 1: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: xLGCLWbYOMk0W4oj/kfaZK4UJ1z6ZVVYM0BsEgxCIpY=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:98:cf:1a:7d:62:e0:ac:ad:29:4e:70:fe:bd:57:b4:b3:99:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: May 12 04:19:16 2026 GMT Not After : May 13 07:37:16 2026 GMT Subject: CN=F22339099D3F1E23F3FDCDED2E64AE1C2140C865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:56:0f:25:c8:1f:50:50:e3:7d:7f:47:dd: 9f:c5:fa:bb:86:91:71:ae:a6:51:14:0b:37:df:09: 86:01:4e:56:af:a5:5a:a6:2c:9e:61:28:9f:6b:6a: 68:cb:52:a1:c4:eb:71:94:53:84:1b:ba:ff:c9:29: 9b:e9:61:47:1f:27:ef:52:87:e2:42:8a:25:44:83: 0f:2d:d1:05:3f:db:82:a5:8a:84:e1:52:c2:60:fa: 1f:c2:55:33:23:a8:a1:a3:dd:8c:c1:22:0f:22:06: 7c:ac:a7:70:44:ea:1f:e8:c2:14:28:3d:75:6f:40: 2c:69:37:ac:09:82:b4:e1:a6:55:e3:08:5b:f8:7e: 0f:09:0b:cf:42:b5:c8:84:81:95:27:6e:23:59:9b: 6a:49:a7:9f:5d:64:5b:ab:6e:e3:e8:11:29:e6:cb: 49:8c:f7:dc:72:cd:54:dd:24:90:8e:e2:82:03:d7: 4b:de:1a:75:1e:60:52:57:c5:83:58:40:55:b4:f2: b5:ca:1c:8f:43:32:5e:2a:d3:8e:69:6d:1f:52:ad: 9c:6f:6f:1a:37:44:2f:aa:17:88:d2:06:a1:95:8e: bd:fb:9f:3e:57:6d:d0:12:19:c7:97:01:21:39:4c: 0e:85:81:3e:13:65:5b:03:c2:75:de:2b:e4:95:87: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:39:09:9D:3F:1E:23:F3:FD:CD:ED:2E:64:AE:1C:21:40:C8:65 X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6c:0e:b7:f6:35:58:a8:e0:6f:77:8c:3e:26:38:36:92:a4: 6d:69:d2:75:18:46:73:ac:52:57:27:48:d6:9f:f9:b4:8c:70: b5:d7:46:38:1a:88:9d:be:ab:37:c4:ba:a2:2f:2b:fd:aa:d1: 1a:a8:d4:78:cc:4a:25:70:64:2c:5d:2e:22:eb:5f:09:74:2e: 32:c3:ad:79:02:1f:e7:21:b7:f1:a8:59:b3:c9:99:99:71:83: 70:36:40:67:ac:a2:98:f4:02:ab:0c:78:77:5e:69:22:a7:73: c8:69:33:f4:43:46:21:42:f5:99:18:fd:70:30:4c:a7:c8:18: 0f:cf:60:ae:48:c3:90:95:f3:f1:84:56:14:e9:c7:7b:80:fd: 23:34:93:03:97:36:d3:8f:ca:26:96:29:bf:00:5f:47:d3:c0: 48:14:0c:fa:da:1d:de:34:48:00:2e:83:4d:48:c5:5b:c8:96: ee:8c:44:27:77:68:1d:b9:43:88:a8:4f:0a:73:d2:85:bc:8a: 41:6b:65:b3:83:f7:80:4c:c6:56:dc:3b:49:81:23:47:6b:13: c5:40:21:9a:78:73:b1:b4:f0:69:65:45:db:da:d1:bb:94:b7: f3:a0:81:7c:6b:10:6e:97:63:11:ef:70:b0:94:87:7a:81:ba: 11:32:b0:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELGYzxp9YuCsrSlOcP69V7Szme4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA1MTIwNDE5MTZaFw0yNjA1MTMwNzM3MTZaMDMxMTAvBgNV BAMTKEYyMjMzOTA5OUQzRjFFMjNGM0ZEQ0RFRDJFNjRBRTFDMjE0MEM4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPk1YPJcgfUFDjfX9H3Z/F+ruG kXGuplEUCzffCYYBTlavpVqmLJ5hKJ9ramjLUqHE63GUU4Qbuv/JKZvpYUcfJ+9S h+JCiiVEgw8t0QU/24KlioThUsJg+h/CVTMjqKGj3YzBIg8iBnysp3BE6h/owhQo PXVvQCxpN6wJgrThplXjCFv4fg8JC89CtciEgZUnbiNZm2pJp59dZFurbuPoESnm y0mM99xyzVTdJJCO4oID10veGnUeYFJXxYNYQFW08rXKHI9DMl4q045pbR9SrZxv bxo3RC+qF4jSBqGVjr37nz5XbdASGceXASE5TA6FgT4TZVsDwnXeK+SVh7yBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8iM5CZ0/HiPz/c3tLmSuHCFAyGUwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlsDrf2NVio4G93jD4mODaSpG1p0nUYRnOs UlcnSNaf+bSMcLXXRjgaiJ2+qzfEuqIvK/2q0Rqo1HjMSiVwZCxdLiLrXwl0LjLD rXkCH+cht/GoWbPJmZlxg3A2QGesopj0AqsMeHdeaSKnc8hpM/RDRiFC9ZkY/XAw TKfIGA/PYK5Iw5CV8/GEVhTpx3uA/SM0kwOXNtOPyiaWKb8AX0fTwEgUDPraHd40 SAAug01IxVvIlu6MRCd3aB25Q4ioTwpz0oW8ikFrZbOD94BMxlbcO0mBI0drE8VA IZp4c7G08GllRdva0buUt/OggXxrEG6XYxHvcLCUh3qBuhEysJo= -----END CERTIFICATE-----Generated at Tue May 12 22:39:29 2026 by rpki-client