$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft File: 6564F75E34457852F2B66C3764B24E23D7CC229E.mft (raw, json) Hash identifier: ux17FjuJbsIeuzsSE4XyuAnz0S6ksu5fKqKnPdyBz0s= Subject key identifier: FF:59:C5:23:2C:02:BD:65:6B:F7:DC:74:E0:A3:58:52:72:99:89:F6 Authority key identifier: 65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E Certificate issuer: /CN=6564F75E34457852F2B66C3764B24E23D7CC229E Certificate serial: 7CA604FDAEE4D367352BA88CDAC532D21F929FA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:16:26 +0000 Manifest this update: Tue 12 May 2026 10:11:26 +0000 Manifest next update: Wed 13 May 2026 11:27:26 +0000 Files and hashes: 1: 6564F75E34457852F2B66C3764B24E23D7CC229E.crl (hash: M8HkZHloyOg5x7qM+T0+DkfodHGSDynqC7HBHBfbVpU=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ID4fm5BwuuWYs0CbkPkat6AFzlZ1Ymdn+yuQrCTD+tk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a6:04:fd:ae:e4:d3:67:35:2b:a8:8c:da:c5:32:d2:1f:92:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6564F75E34457852F2B66C3764B24E23D7CC229E Validity Not Before: May 12 10:11:26 2026 GMT Not After : May 13 11:27:26 2026 GMT Subject: CN=FF59C5232C02BD656BF7DC74E0A35852729989F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:28:17:0c:5e:0c:2c:9e:19:6c:22:1f:f6: d3:71:de:4d:7f:7e:19:c5:bb:fd:ef:57:c1:96:e0: 1c:71:a8:f9:1d:c4:ef:88:91:36:31:24:8c:65:42: 13:db:fc:1a:4f:a7:65:57:8a:71:95:17:c0:d0:4b: 6b:36:7a:6b:cf:78:45:24:2d:c9:19:77:9e:31:8b: 52:d0:09:2e:eb:14:b4:02:c2:5d:94:eb:70:42:5b: 12:82:51:1c:87:60:46:49:0f:09:dc:08:01:31:08: 6a:5b:c1:90:89:e9:7c:22:83:3f:2a:c9:ac:58:d8: 66:df:78:7a:94:af:f5:b3:a8:ba:48:50:26:71:b6: 3b:e7:80:07:55:c1:1f:12:0a:69:60:2a:5e:0d:97: 12:fe:df:c6:c8:25:4e:48:99:56:64:51:d5:d4:fa: b5:81:05:92:95:36:4c:5f:76:28:25:2a:0d:2f:b8: 78:8e:0c:de:eb:01:df:95:d0:a5:e6:be:3a:e3:8b: 80:84:e0:11:55:c8:08:e4:22:39:2d:ef:f9:01:e5: 0f:ae:79:80:6a:ea:a8:76:ec:a1:74:c5:20:64:64: 4a:4c:e5:46:de:1b:2b:61:db:33:3f:b2:a7:34:b1: 22:8f:cd:70:56:67:a5:d3:27:1b:26:1b:da:3d:2c: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:59:C5:23:2C:02:BD:65:6B:F7:DC:74:E0:A3:58:52:72:99:89:F6 X509v3 Authority Key Identifier: keyid:65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5d:34:68:8c:ff:3e:dd:39:c5:c1:50:5e:ca:25:79:37:17: 3d:a3:82:a8:05:34:ce:aa:bb:d6:a9:01:56:b1:01:7d:2c:d2: 55:a3:40:95:2a:49:ab:80:ea:55:00:a5:6b:ef:a7:78:69:69: dc:91:a6:db:1d:1f:9b:0e:3a:9d:4d:54:35:b8:b7:9c:88:b8: 9e:e9:05:04:b9:a1:cb:c4:46:19:1f:88:68:46:cb:6c:f9:36: 8f:90:aa:4e:ab:8a:99:93:79:13:2b:08:0f:5a:5b:96:21:a7: 3a:c2:06:05:05:56:1e:e2:f2:8e:dd:24:3e:f9:4a:85:d7:36: 1f:78:e1:73:91:5c:0b:fd:e3:16:ae:36:44:84:3e:ac:dd:d2: 93:1d:d3:99:7b:23:bd:5f:cf:7d:77:18:41:29:d9:f5:9e:82: 9f:3c:6f:6e:9a:40:56:db:af:8a:54:99:c5:17:75:bf:1a:56: f6:9c:2b:8d:9d:32:3c:39:0a:af:52:1b:88:ea:da:85:f7:7d: 47:20:a8:c7:d0:e5:6b:2f:0b:96:3d:81:67:3c:c1:7b:f2:55: 1f:3c:b5:e6:47:6d:45:4c:9e:cc:4c:57:26:bd:5e:49:67:a7: 49:d9:96:bc:c2:b9:3c:bc:1d:9d:fd:d4:09:e1:d9:44:85:3f: d3:5c:a9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKYE/a7k02c1K6iM2sUy0h+Sn6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2NEY3NUUzNDQ1Nzg1MkYyQjY2QzM3NjRCMjRFMjNE N0NDMjI5RTAeFw0yNjA1MTIxMDExMjZaFw0yNjA1MTMxMTI3MjZaMDMxMTAvBgNV BAMTKEZGNTlDNTIzMkMwMkJENjU2QkY3REM3NEUwQTM1ODUyNzI5OTg5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWCgXDF4MLJ4ZbCIf9tNx3k1/ fhnFu/3vV8GW4BxxqPkdxO+IkTYxJIxlQhPb/BpPp2VXinGVF8DQS2s2emvPeEUk LckZd54xi1LQCS7rFLQCwl2U63BCWxKCURyHYEZJDwncCAExCGpbwZCJ6Xwigz8q yaxY2GbfeHqUr/WzqLpIUCZxtjvngAdVwR8SCmlgKl4NlxL+38bIJU5ImVZkUdXU +rWBBZKVNkxfdiglKg0vuHiODN7rAd+V0KXmvjrji4CE4BFVyAjkIjkt7/kB5Q+u eYBq6qh27KF0xSBkZEpM5UbeGyth2zM/sqc0sSKPzXBWZ6XTJxsmG9o9LGeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/1nFIywCvWVr99x04KNYUnKZifYwHwYDVR0j BBgwFoAUZWT3XjRFeFLytmw3ZLJOI9fMIp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZGI0MjgtMTk1Yy00OTBhLWFiYzItM2NiNmYwZDU2MGEzLzAvNjU2NEY3NUUz NDQ1Nzg1MkYyQjY2QzM3NjRCMjRFMjNEN0NDMjI5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTY0Rjc1RTM0NDU3ODUyRjJCNjZDMzc2NEIyNEUyM0Q3Q0My MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvNjU2NEY3NUUzNDQ1Nzg1MkYyQjY2QzM3NjRCMjRF MjNEN0NDMjI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApdNGiM/z7dOcXBUF7KJXk3Fz2jgqgFNM6q u9apAVaxAX0s0lWjQJUqSauA6lUApWvvp3hpadyRptsdH5sOOp1NVDW4t5yIuJ7p BQS5ocvERhkfiGhGy2z5No+Qqk6ripmTeRMrCA9aW5YhpzrCBgUFVh7i8o7dJD75 SoXXNh944XORXAv94xauNkSEPqzd0pMd05l7I71fz313GEEp2fWegp88b26aQFbb r4pUmcUXdb8aVvacK42dMjw5Cq9SG4jq2oX3fUcgqMfQ5WsvC5Y9gWc8wXvyVR88 teZHbUVMnsxMVya9Xklnp0nZlrzCuTy8HZ391Anh2USFP9NcqUk= -----END CERTIFICATE-----Generated at Wed May 13 02:59:31 2026 by rpki-client