$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: N1yOEYJDaU9AaFlrVV10iLO35ptUxOCuhLHNFGEojd0= Subject key identifier: 52:00:A3:1A:8B:7D:D6:C0:E8:1F:B4:D3:53:02:46:2C:32:AC:C6:8E Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 1248E5F49C3FA2F5651D2845EF9B85EFEDA895D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:56:37 +0000 Manifest this update: Tue 12 May 2026 05:51:37 +0000 Manifest next update: Wed 13 May 2026 08:14:37 +0000 Files and hashes: 1: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 2: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: peUlttiQpJg9GuekQ7mesH3o/TY2mQKcTpV4iUfFUtc=) 3: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:48:e5:f4:9c:3f:a2:f5:65:1d:28:45:ef:9b:85:ef:ed:a8:95:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: May 12 05:51:37 2026 GMT Not After : May 13 08:14:37 2026 GMT Subject: CN=5200A31A8B7DD6C0E81FB4D35302462C32ACC68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:ae:2c:9c:1a:93:76:91:de:7a:b3:2c:bb: 21:b1:88:29:21:ca:ab:d3:9c:ca:4c:74:c3:bc:0f: 23:22:6f:da:33:7a:d1:3a:09:22:60:a0:f3:ab:d9: 96:ce:47:ff:e8:2f:03:fc:23:22:d0:a1:69:3f:b2: f3:77:2d:91:af:02:7b:89:3a:e2:59:43:84:f4:5c: 7b:7f:00:9d:9b:6d:48:56:98:d2:1f:f4:1b:3a:af: 66:81:6e:d1:4c:c4:28:7d:6a:8f:d3:ee:66:26:93: 64:9f:40:cf:30:27:00:2a:29:19:b9:3e:c5:c2:10: a3:16:7b:34:8e:7a:32:11:71:eb:c4:e4:32:f2:77: 69:91:e3:d8:f2:2e:0c:75:a4:a1:99:60:32:a0:48: 67:d9:5b:96:59:21:9a:7c:f7:09:49:99:ab:10:9b: 13:29:b2:5b:f8:fe:0a:51:81:e2:36:a0:da:f2:e5: d8:1d:57:97:1f:c4:e4:6f:7b:ef:4a:5b:61:7a:ea: d4:64:f5:0f:61:f7:dd:b5:e0:3c:bb:d1:5d:aa:44: 8c:57:d2:a9:f0:60:68:67:8e:cc:47:b7:78:cf:64: 7d:98:29:1f:c6:af:84:6b:8c:08:26:e0:a1:66:1d: a7:d6:18:b9:50:89:6a:2f:a5:da:0c:b9:24:23:24: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:00:A3:1A:8B:7D:D6:C0:E8:1F:B4:D3:53:02:46:2C:32:AC:C6:8E X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0d:5c:e2:80:9b:23:9c:e7:41:de:ee:93:d0:21:88:5a:7a: 79:33:84:54:37:f2:13:e3:54:05:f6:ea:f6:31:5c:66:ee:7e: 93:7a:49:cd:4d:f4:d3:48:af:4c:9a:5a:55:a9:27:ab:11:96: 36:48:14:a3:2d:b3:ab:fa:32:0b:56:f3:3e:96:f8:7b:80:ce: a7:12:47:f6:d5:27:52:32:da:98:28:ef:f1:6b:20:94:4c:cf: 43:c9:35:10:10:bd:35:07:3f:85:3a:3c:90:77:17:bc:e6:bb: 2d:c7:40:ce:df:85:25:49:74:9a:8e:f6:54:f4:01:7f:b5:fb: a8:58:71:0e:04:fd:2f:06:a1:46:71:d9:f7:a1:5b:2b:f2:45: ed:f3:a0:eb:2a:0f:fe:d7:11:89:49:f8:48:8b:45:c8:d1:9d: b8:3e:5a:c9:05:03:74:c0:a6:a6:c4:59:a7:7e:6f:63:7a:06: 5b:57:7b:b4:d5:f9:d2:37:a8:57:44:db:8b:4b:ba:6b:f2:ed: 8e:85:30:6a:a5:1d:9d:51:2e:49:08:f7:1b:40:30:c8:c4:f8: 88:f4:57:6f:22:3e:ce:c6:fd:9b:2f:6e:f8:49:1e:0d:58:e5: 5e:22:86:00:34:31:98:5c:e0:ea:49:43:de:53:fd:cb:fc:83: 36:e4:99:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkjl9Jw/ovVlHShF75uF7+2oldgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA1MTIwNTUxMzdaFw0yNjA1MTMwODE0MzdaMDMxMTAvBgNV BAMTKDUyMDBBMzFBOEI3REQ2QzBFODFGQjREMzUzMDI0NjJDMzJBQ0M2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrq4snBqTdpHeerMsuyGxiCkh yqvTnMpMdMO8DyMib9ozetE6CSJgoPOr2ZbOR//oLwP8IyLQoWk/svN3LZGvAnuJ OuJZQ4T0XHt/AJ2bbUhWmNIf9Bs6r2aBbtFMxCh9ao/T7mYmk2SfQM8wJwAqKRm5 PsXCEKMWezSOejIRcevE5DLyd2mR49jyLgx1pKGZYDKgSGfZW5ZZIZp89wlJmasQ mxMpslv4/gpRgeI2oNry5dgdV5cfxORve+9KW2F66tRk9Q9h99214Dy70V2qRIxX 0qnwYGhnjsxHt3jPZH2YKR/Gr4RrjAgm4KFmHafWGLlQiWovpdoMuSQjJIfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUgCjGot91sDoH7TTUwJGLDKsxo4wHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgNXOKAmyOc50He7pPQIYhaenkzhFQ38hPj VAX26vYxXGbufpN6Sc1N9NNIr0yaWlWpJ6sRljZIFKMts6v6MgtW8z6W+HuAzqcS R/bVJ1Iy2pgo7/FrIJRMz0PJNRAQvTUHP4U6PJB3F7zmuy3HQM7fhSVJdJqO9lT0 AX+1+6hYcQ4E/S8GoUZx2fehWyvyRe3zoOsqD/7XEYlJ+EiLRcjRnbg+WskFA3TA pqbEWad+b2N6BltXe7TV+dI3qFdE24tLumvy7Y6FMGqlHZ1RLkkI9xtAMMjE+Ij0 V28iPs7G/ZsvbvhJHg1Y5V4ihgA0MZhc4OpJQ95T/cv8gzbkmUU= -----END CERTIFICATE-----Generated at Tue May 12 22:47:19 2026 by rpki-client