$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: b7mFwR1rEBfIItmGERTRHMPrDzQ39u3dpvWktMS3fLs= Subject key identifier: 88:84:97:0D:B6:67:38:8A:E9:DF:05:2D:14:C5:2E:91:DC:F3:6E:E0 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 549AA5963DC8AE0C1BB2DC4E39502B518F7DC318 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:44 +0000 Manifest this update: Tue 12 May 2026 18:59:44 +0000 Manifest next update: Wed 13 May 2026 21:39:44 +0000 Files and hashes: 1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: M8FUagXVRP0r/D6IyN4Y6p8GAVvRcDayrTRo7TjdaxU=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:a5:96:3d:c8:ae:0c:1b:b2:dc:4e:39:50:2b:51:8f:7d:c3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: May 12 18:59:44 2026 GMT Not After : May 13 21:39:44 2026 GMT Subject: CN=8884970DB667388AE9DF052D14C52E91DCF36EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2e:2b:2f:0d:0e:7e:db:94:45:88:77:f0:ff: 8f:c7:fe:2f:63:03:e6:f9:01:3e:35:96:37:13:8c: d9:14:e4:20:d7:a2:80:7b:63:42:b1:84:36:90:ac: 8e:74:cf:d1:a8:c3:db:10:9f:48:dc:df:2b:95:c2: 19:3d:21:46:0c:94:ab:3b:32:36:e2:c7:8d:c4:8d: 2b:09:62:f5:b6:4c:b4:0e:7f:04:bc:58:03:10:a0: e6:06:56:0f:7a:3e:61:3c:df:fd:e0:01:40:79:04: 57:21:f7:7b:61:d4:78:f7:86:0c:8d:24:51:10:29: 69:45:0a:d6:9b:7f:eb:a5:f1:f0:97:30:12:5d:a7: 4a:80:78:2b:a3:c3:15:31:95:97:ba:d0:f6:d4:ed: 85:45:02:f4:cd:48:fb:e3:a1:f5:2e:23:4e:66:72: 3e:15:d1:f9:02:6d:bc:c1:3b:35:ff:e4:36:e5:d6: 5e:e1:7a:f0:77:5b:6e:e3:88:19:79:33:d3:a3:69: cb:b7:04:c4:10:8a:32:64:2f:ff:86:89:c1:f8:53: 9c:75:3b:92:d3:cb:71:68:f0:d1:4c:18:fe:fa:dd: 85:16:3a:fd:45:98:36:81:ad:79:ad:5c:76:ce:27: 3d:ec:b4:db:a6:6c:27:8c:8e:e4:12:73:43:18:3f: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:97:0D:B6:67:38:8A:E9:DF:05:2D:14:C5:2E:91:DC:F3:6E:E0 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:be:a7:7e:58:2c:74:ae:82:be:10:a0:73:40:f1:29:3f:8a: f8:a0:15:c2:08:49:4a:8c:8b:36:58:59:50:ee:2a:e2:34:c1: 7d:94:66:26:59:60:bb:75:d1:15:0f:6e:cf:d4:5b:47:5a:05: 2b:dd:ab:d8:7b:95:43:aa:61:22:05:08:b8:5b:7b:1c:b9:f6: 80:f6:ce:0c:5e:77:a9:5e:44:ca:a2:8a:82:3b:0b:ee:9d:ea: 51:81:2c:05:d7:02:e4:90:c6:8e:28:b5:e6:37:ef:bb:e7:af: d2:2c:3d:44:6f:36:d5:cd:e4:43:df:86:ba:e5:bb:6a:30:db: 17:7a:30:c4:4e:2e:3d:bb:a6:86:70:77:25:4f:c1:84:a8:08: fe:3a:c2:81:50:18:25:bf:3c:9e:7f:32:3a:0b:9d:11:40:be: 2a:49:0f:4b:d0:c2:68:1d:36:1a:58:fe:cc:83:3f:2a:7c:ad: c3:e6:f3:de:16:1e:f4:11:2a:2d:3b:c4:93:30:08:54:a2:bf: 89:c2:b8:87:bf:8f:e6:b7:09:72:f4:8d:81:b0:91:5d:1c:7f: ac:d1:11:4b:1f:92:c3:b4:1b:e3:7e:29:a2:65:73:3e:55:97: b2:dc:23:01:4f:0c:57:95:a9:5a:cd:09:53:ab:b8:e7:2b:fb: 11:f0:79:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJqllj3IrgwbstxOOVArUY99wxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA1MTIxODU5NDRaFw0yNjA1MTMyMTM5NDRaMDMxMTAvBgNV BAMTKDg4ODQ5NzBEQjY2NzM4OEFFOURGMDUyRDE0QzUyRTkxRENGMzZFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLisvDQ5+25RFiHfw/4/H/i9j A+b5AT41ljcTjNkU5CDXooB7Y0KxhDaQrI50z9Gow9sQn0jc3yuVwhk9IUYMlKs7 Mjbix43EjSsJYvW2TLQOfwS8WAMQoOYGVg96PmE83/3gAUB5BFch93th1Hj3hgyN JFEQKWlFCtabf+ul8fCXMBJdp0qAeCujwxUxlZe60PbU7YVFAvTNSPvjofUuI05m cj4V0fkCbbzBOzX/5Dbl1l7hevB3W27jiBl5M9Ojacu3BMQQijJkL/+GicH4U5x1 O5LTy3Fo8NFMGP763YUWOv1FmDaBrXmtXHbOJz3stNumbCeMjuQSc0MYP8sbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiISXDbZnOIrp3wUtFMUukdzzbuAwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS+p35YLHSugr4QoHNA8Sk/ivigFcIISUqM izZYWVDuKuI0wX2UZiZZYLt10RUPbs/UW0daBSvdq9h7lUOqYSIFCLhbexy59oD2 zgxed6leRMqiioI7C+6d6lGBLAXXAuSQxo4oteY377vnr9IsPURvNtXN5EPfhrrl u2ow2xd6MMROLj27poZwdyVPwYSoCP46woFQGCW/PJ5/MjoLnRFAvipJD0vQwmgd NhpY/syDPyp8rcPm894WHvQRKi07xJMwCFSiv4nCuIe/j+a3CXL0jYGwkV0cf6zR EUsfksO0G+N+KaJlcz5Vl7LcIwFPDFeVqVrNCVOruOcr+xHweao= -----END CERTIFICATE-----Generated at Tue May 12 22:46:29 2026 by rpki-client