$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: OP+tjclc8UE1CY6u3xmoxMCFWshNjgk1yR/mrayGEEg= Subject key identifier: DF:1F:8D:E8:F8:BC:76:B3:BA:2B:22:23:BE:76:6B:29:FE:9F:8B:FB Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 2A1F98E7B28A75FEB506169D4A323CCAFC76D352 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:01 +0000 Manifest this update: Tue 12 May 2026 08:30:01 +0000 Manifest next update: Wed 13 May 2026 11:26:01 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 2: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) 3: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: AJNsWTANfKO8t6bFx5y1JHMPSiyQPdt2LXfq3cadkQI=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 5: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1f:98:e7:b2:8a:75:fe:b5:06:16:9d:4a:32:3c:ca:fc:76:d3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: May 12 08:30:01 2026 GMT Not After : May 13 11:26:01 2026 GMT Subject: CN=DF1F8DE8F8BC76B3BA2B2223BE766B29FE9F8BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:ae:82:9e:22:b0:d8:57:1f:56:93:51:34: ca:3d:9d:00:7a:52:6d:e6:5c:d0:c1:66:9e:bd:69: b0:3e:2d:dd:c0:8c:e6:a4:02:f9:44:e4:7a:cb:dc: c7:00:c9:ba:e5:6a:01:20:9f:70:40:8b:96:28:c9: 10:11:62:07:77:32:4b:e1:10:d2:2c:ca:26:d6:b4: 86:57:16:a2:06:d2:65:9e:bb:26:d4:a0:1c:cb:28: 07:cd:4a:0f:e8:cf:b9:3a:a8:74:ae:a2:23:ce:f5: 91:9c:c6:49:bf:e2:e6:f4:f3:7e:e4:df:f5:2d:01: 4c:9e:1a:e4:53:98:93:85:eb:32:a7:5c:2a:12:9a: f4:97:9a:c6:a9:a5:96:50:cf:34:17:a2:5b:84:ce: 37:9c:cc:7d:70:30:17:61:b4:7c:2e:8e:1d:29:c9: 51:37:db:e4:e6:55:bd:37:ed:df:fd:f6:22:90:d3: 5a:f6:4f:97:a9:8b:b2:57:b3:6f:68:be:41:fa:30: c0:d0:2b:c9:09:c7:b8:cc:1e:83:7a:b7:b9:25:e2: eb:3b:4b:2d:34:ba:90:e0:cb:9b:94:f8:44:65:08: 4f:d6:10:1a:28:da:b9:50:bc:8d:d2:09:a2:87:2f: 5c:67:97:de:7e:e9:d0:7f:ad:79:8a:48:a6:2c:27: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:8D:E8:F8:BC:76:B3:BA:2B:22:23:BE:76:6B:29:FE:9F:8B:FB X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:73:ed:36:f7:f9:88:0b:44:fa:53:a1:0c:b5:bb:1b:28: 26:5a:d4:5c:f0:89:63:75:50:ef:0a:29:84:64:f6:6f:aa:51: ec:16:25:15:2e:74:7b:1e:3a:0c:b7:8f:bb:05:50:85:ea:58: 45:81:a5:72:25:fa:21:1a:59:4e:88:dc:d5:1d:17:3f:e7:61: 0f:6b:9d:7b:81:39:f2:bf:dc:f4:4c:78:55:af:ff:65:b0:aa: e6:cf:0a:45:04:09:bc:21:97:20:b4:d1:d4:0d:d6:a7:38:6f: 58:b2:10:eb:c2:cc:a2:40:05:a1:10:0e:a8:c9:b8:ea:86:66: 3c:19:5d:cb:37:08:76:f1:34:e5:1f:d3:3c:f2:58:fe:a5:d7: ca:46:de:d6:75:98:8e:36:64:0d:01:5e:17:b5:97:22:7e:97: fd:4a:07:36:61:69:4a:08:99:7d:a2:62:ab:72:cf:9b:66:2a: 20:b2:4a:7d:a4:fb:91:f9:24:97:ac:2c:61:e4:42:83:a4:5d: c9:31:98:53:d7:1f:38:9b:05:0a:ef:fa:f6:f8:e9:b4:0e:f6: 05:9c:ee:af:53:1b:f8:86:cc:1f:d7:a0:af:27:d8:2e:e4:8d: d7:10:fe:47:b2:02:5e:e4:d2:81:2f:4c:1a:21:a0:b2:18:c2: ae:f0:90:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKh+Y57KKdf61BhadSjI8yvx201IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA1MTIwODMwMDFaFw0yNjA1MTMxMTI2MDFaMDMxMTAvBgNV BAMTKERGMUY4REU4RjhCQzc2QjNCQTJCMjIyM0JFNzY2QjI5RkU5RjhCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsd66CniKw2FcfVpNRNMo9nQB6 Um3mXNDBZp69abA+Ld3AjOakAvlE5HrL3McAybrlagEgn3BAi5YoyRARYgd3Mkvh ENIsyibWtIZXFqIG0mWeuybUoBzLKAfNSg/oz7k6qHSuoiPO9ZGcxkm/4ub0837k 3/UtAUyeGuRTmJOF6zKnXCoSmvSXmsappZZQzzQXoluEzjeczH1wMBdhtHwujh0p yVE32+TmVb037d/99iKQ01r2T5epi7JXs29ovkH6MMDQK8kJx7jMHoN6t7kl4us7 Sy00upDgy5uU+ERlCE/WEBoo2rlQvI3SCaKHL1xnl95+6dB/rXmKSKYsJ2anAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3x+N6Pi8drO6KyIjvnZrKf6fi/swHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrtc+029/mIC0T6U6EMtbsbKCZa1FzwiWN1 UO8KKYRk9m+qUewWJRUudHseOgy3j7sFUIXqWEWBpXIl+iEaWU6I3NUdFz/nYQ9r nXuBOfK/3PRMeFWv/2WwqubPCkUECbwhlyC00dQN1qc4b1iyEOvCzKJABaEQDqjJ uOqGZjwZXcs3CHbxNOUf0zzyWP6l18pG3tZ1mI42ZA0BXhe1lyJ+l/1KBzZhaUoI mX2iYqtyz5tmKiCySn2k+5H5JJesLGHkQoOkXckxmFPXHzibBQrv+vb46bQO9gWc 7q9TG/iGzB/XoK8n2C7kjdcQ/keyAl7k0oEvTBohoLIYwq7wkOI= -----END CERTIFICATE-----Generated at Wed May 13 04:16:10 2026 by rpki-client