$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json) Hash identifier: Y5QbZC6BSgU6SuBD2bZkSthHT1PbPCWzTjkwjl9YprQ= Subject key identifier: 37:3D:49:0D:15:7A:C0:D4:CC:08:A2:3B:E8:75:C4:82:04:41:EB:9B Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Certificate serial: 7724ACE208EEE75D860EA12B2509CDC7D0F37042 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:08:18 +0000 Manifest this update: Tue 12 May 2026 07:03:18 +0000 Manifest next update: Wed 13 May 2026 08:51:18 +0000 Files and hashes: 1: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: DapouIAWwpS4zwwKVMCGEBJUDAgBPPn9yJHzngDd5zs=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:24:ac:e2:08:ee:e7:5d:86:0e:a1:2b:25:09:cd:c7:d0:f3:70:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Validity Not Before: May 12 07:03:18 2026 GMT Not After : May 13 08:51:18 2026 GMT Subject: CN=373D490D157AC0D4CC08A23BE875C4820441EB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:d2:f4:2c:a8:84:7c:db:b9:37:5c:ef:9e: ed:14:2e:72:7a:6d:7f:81:ec:db:48:5e:f5:da:93: e0:c1:bd:ff:ef:a1:c8:57:ae:69:95:0a:f4:63:2d: 1f:c1:71:3e:11:65:e5:f9:ff:e3:6a:9f:68:8d:75: 12:61:57:01:59:88:83:f9:2a:ae:00:e1:a1:ea:be: 27:9c:1b:91:b4:71:54:f8:33:ef:36:01:4f:70:f2: 94:df:0c:fa:b2:63:06:ef:be:e7:02:40:ea:0d:43: 0e:56:74:d3:39:93:c7:85:ac:53:00:7f:87:2e:91: 1a:8d:f9:0c:ce:e5:d3:2b:7b:eb:45:8d:5b:0c:59: 67:08:44:b9:8b:73:ec:95:3e:bc:38:e9:e7:f3:04: b4:e1:57:d8:b4:52:49:f0:c3:b6:e6:ba:42:6d:9b: 09:10:b0:57:99:90:da:29:6b:5b:2c:1b:4c:9e:e6: 19:f1:3b:9a:e9:a7:e0:53:76:33:29:63:db:14:5e: 90:24:17:7e:90:01:88:d3:d5:21:a6:43:1a:ef:47: bd:ad:49:82:27:c5:6b:1b:00:17:52:c6:54:40:2d: 35:bb:83:58:27:a8:0e:46:16:13:99:bf:cb:5b:d8: b6:8d:f2:d2:df:8f:73:94:69:94:03:2c:ee:2f:de: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:49:0D:15:7A:C0:D4:CC:08:A2:3B:E8:75:C4:82:04:41:EB:9B X509v3 Authority Key Identifier: keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:51:91:79:de:0d:b2:48:59:36:c7:fb:fa:3f:68:aa:3e:b1: b7:c0:a1:00:20:01:fd:3e:85:a0:c9:4a:76:75:8e:98:a6:5c: 50:37:a7:27:c6:7b:e6:23:14:42:86:34:8a:b7:7a:ea:6f:0d: 15:8d:a4:13:ca:e9:73:fd:da:a5:b7:93:ba:8d:d7:96:20:10: f5:e8:d2:0d:bb:95:d5:02:44:c9:83:ff:16:c3:6f:17:73:1f: 99:54:c0:b4:d8:26:82:fc:c6:e4:7d:4f:45:ab:82:ea:40:a3: e9:fe:62:a3:65:1e:a3:eb:b2:70:f3:a1:c4:ca:8e:d2:9e:51: f5:70:93:80:9d:80:c4:59:86:7a:2b:65:94:07:bf:19:8d:d9: 1d:79:61:fd:9e:d2:fa:0d:08:23:1c:ca:cf:7c:66:38:45:0d: 30:8e:c0:76:f3:c0:8e:fa:a8:0b:53:47:9b:0f:90:59:0d:64: 68:3c:38:60:5a:01:88:ff:a4:83:9b:a6:c0:b2:0b:d6:c9:94: 7d:2d:5c:56:be:55:7c:35:08:40:ec:a1:84:da:9b:ba:bb:18: 3b:05:92:62:79:8c:fb:65:b6:3a:4e:f3:ec:c4:a4:d0:c4:b4: fa:d4:e0:e3:e2:0a:35:26:6e:bd:dd:af:94:b0:16:2b:3e:1f: 02:c4:73:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdySs4gju512GDqErJQnNx9DzcEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgw NzdFRkFBMzAeFw0yNjA1MTIwNzAzMThaFw0yNjA1MTMwODUxMThaMDMxMTAvBgNV BAMTKDM3M0Q0OTBEMTU3QUMwRDRDQzA4QTIzQkU4NzVDNDgyMDQ0MUVCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/9L0LKiEfNu5N1zvnu0ULnJ6 bX+B7NtIXvXak+DBvf/vochXrmmVCvRjLR/BcT4RZeX5/+Nqn2iNdRJhVwFZiIP5 Kq4A4aHqviecG5G0cVT4M+82AU9w8pTfDPqyYwbvvucCQOoNQw5WdNM5k8eFrFMA f4cukRqN+QzO5dMre+tFjVsMWWcIRLmLc+yVPrw46efzBLThV9i0Uknww7bmukJt mwkQsFeZkNopa1ssG0ye5hnxO5rpp+BTdjMpY9sUXpAkF36QAYjT1SGmQxrvR72t SYInxWsbABdSxlRALTW7g1gnqA5GFhOZv8tb2LaN8tLfj3OUaZQDLO4v3pLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNz1JDRV6wNTMCKI76HXEggRB65swHwYDVR0j BBgwFoAUEA5aQIZYQdVsWrnQzuchiAd++qMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4 NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgwNzdFRkFBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDBFNUE0MDg2NTg0MUQ1NkM1QUI5RDBDRUU3MjE4ODA3N0VG QUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIx ODgwNzdFRkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhRkXneDbJIWTbH+/o/aKo+sbfAoQAgAf0+ haDJSnZ1jpimXFA3pyfGe+YjFEKGNIq3eupvDRWNpBPK6XP92qW3k7qN15YgEPXo 0g27ldUCRMmD/xbDbxdzH5lUwLTYJoL8xuR9T0WrgupAo+n+YqNlHqPrsnDzocTK jtKeUfVwk4CdgMRZhnorZZQHvxmN2R15Yf2e0voNCCMcys98ZjhFDTCOwHbzwI76 qAtTR5sPkFkNZGg8OGBaAYj/pIObpsCyC9bJlH0tXFa+VXw1CEDsoYTam7q7GDsF kmJ5jPtltjpO8+zEpNDEtPrU4OPiCjUmbr3dr5SwFis+HwLEc4c= -----END CERTIFICATE-----Generated at Wed May 13 02:50:22 2026 by rpki-client