$ rpki-client -vvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: BQuugIsveEPHyFHqBFCqkLzT2nQqnUUe3fB1R5qkJdo= Subject key identifier: E8:CE:DB:A3:AA:E3:9B:07:31:09:E0:75:56:6B:E4:31:86:5A:CE:C7 Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 66B685FCBF9E108E1042E8BB2FD2B85237770AB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:56 +0000 Manifest this update: Tue 12 May 2026 19:04:55 +0000 Manifest next update: Wed 13 May 2026 22:04:55 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) 3: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: mqHGTP+HX5HOyBuSwFNatdUsuGso8PiDBpznhw4EGWE=) 4: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b6:85:fc:bf:9e:10:8e:10:42:e8:bb:2f:d2:b8:52:37:77:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: May 12 19:04:55 2026 GMT Not After : May 13 22:04:55 2026 GMT Subject: CN=E8CEDBA3AAE39B073109E075566BE431865ACEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:b1:fa:7a:44:40:62:a2:5b:a0:31:11:ca: 52:19:d2:71:e4:c0:61:23:b1:22:5c:55:12:30:6c: cf:db:c5:6e:15:42:0a:88:24:95:4b:7e:03:5d:bb: 30:77:3c:4e:7b:bc:71:00:a0:8d:e3:21:0f:ed:61: 35:3b:73:43:e0:db:ca:42:41:e6:1f:9e:e1:45:78: d8:89:4f:d3:6d:3c:83:8d:49:9a:c3:a0:19:58:91: 66:79:7a:e4:42:e5:88:ce:26:73:cd:62:7d:94:fb: 9a:2e:3e:f5:7a:46:e1:20:69:eb:56:87:da:0c:93: 2d:d5:d4:a2:44:76:c5:45:5f:9e:ce:63:1e:e7:57: c3:fc:71:25:a0:bb:fb:5e:99:f2:eb:2d:17:9b:b9: 0b:f3:f4:94:a5:08:6c:21:5a:86:f2:34:ec:d1:7d: e2:34:04:b6:74:cb:5a:7a:d5:7f:b7:7c:0c:37:ee: 1c:fd:12:1e:16:3c:0b:02:56:ea:ed:da:6f:d3:93: ee:32:ae:d7:f8:db:72:74:13:0d:1a:52:97:1d:ef: c4:fe:8d:dd:14:1a:6f:d6:c3:ce:b7:5e:62:fd:01: 55:51:1e:51:88:d4:b1:eb:a2:df:19:9d:eb:8f:7b: 17:e7:b1:57:1b:53:5d:c8:1b:15:eb:05:ba:ca:e3: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:DB:A3:AA:E3:9B:07:31:09:E0:75:56:6B:E4:31:86:5A:CE:C7 X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d6:23:90:bc:1a:7d:ca:a2:42:e1:0b:86:69:fc:88:92:86: 1f:28:4c:78:ad:8b:b5:91:65:6a:58:b3:2c:bb:85:8e:51:b4: 2a:d1:71:f3:b7:fe:c4:a7:7f:5c:41:4f:bc:5d:c2:2c:cb:51: ba:a8:c8:24:0e:4a:d7:99:2f:a7:8b:5b:07:7e:f2:f9:51:68: 6e:14:86:05:9e:ad:5d:aa:60:62:4b:c7:96:8d:ae:09:ef:03: 5e:04:c2:8c:d7:a0:8f:c5:d0:ac:47:5c:51:5a:2f:68:13:9c: df:de:89:f2:59:59:b1:66:b8:44:9f:a9:ca:90:73:22:1c:4f: 5d:f8:9a:d7:b4:4c:c6:61:86:3b:91:ae:d8:e0:2f:2e:ad:93: 54:77:72:a9:56:13:6b:4a:1b:81:33:18:eb:1e:08:f5:b0:ae: de:59:cc:26:d7:d2:1b:f5:65:d5:ec:9e:0a:a1:23:f7:39:97: 3a:a2:4e:b4:0a:0d:1c:68:8c:0a:d2:16:68:f8:50:18:66:04: f0:04:01:f3:aa:af:b5:d4:5c:c7:9e:65:c6:1e:8e:33:24:1b: 4b:42:17:37:a1:ef:29:ef:a2:43:9b:53:c8:67:a4:34:47:b8: 6e:b7:69:58:14:73:94:e6:8e:59:d3:8b:6d:bc:63:0f:75:9e: 02:8c:b6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZraF/L+eEI4QQui7L9K4Ujd3CrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjA1MTIxOTA0NTVaFw0yNjA1MTMyMjA0NTVaMDMxMTAvBgNV BAMTKEU4Q0VEQkEzQUFFMzlCMDczMTA5RTA3NTU2NkJFNDMxODY1QUNFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rbH6ekRAYqJboDERylIZ0nHk wGEjsSJcVRIwbM/bxW4VQgqIJJVLfgNduzB3PE57vHEAoI3jIQ/tYTU7c0Pg28pC QeYfnuFFeNiJT9NtPIONSZrDoBlYkWZ5euRC5YjOJnPNYn2U+5ouPvV6RuEgaetW h9oMky3V1KJEdsVFX57OYx7nV8P8cSWgu/temfLrLRebuQvz9JSlCGwhWobyNOzR feI0BLZ0y1p61X+3fAw37hz9Eh4WPAsCVurt2m/Tk+4yrtf423J0Ew0aUpcd78T+ jd0UGm/Ww863XmL9AVVRHlGI1LHrot8ZneuPexfnsVcbU13IGxXrBbrK41q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6M7bo6rjmwcxCeB1VmvkMYZazscwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3WI5C8Gn3KokLhC4Zp/IiShh8oTHiti7WR ZWpYsyy7hY5RtCrRcfO3/sSnf1xBT7xdwizLUbqoyCQOSteZL6eLWwd+8vlRaG4U hgWerV2qYGJLx5aNrgnvA14EwozXoI/F0KxHXFFaL2gTnN/eifJZWbFmuESfqcqQ cyIcT134mte0TMZhhjuRrtjgLy6tk1R3cqlWE2tKG4EzGOseCPWwrt5ZzCbX0hv1 ZdXsngqhI/c5lzqiTrQKDRxojArSFmj4UBhmBPAEAfOqr7XUXMeeZcYejjMkG0tC Fzeh7ynvokObU8hnpDRHuG63aVgUc5TmjlnTi228Yw91ngKMtpU= -----END CERTIFICATE-----Generated at Wed May 13 04:00:08 2026 by rpki-client