$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: w3sQ30aopsQImpGhSnYit+5Bw6p9xM+N4KtzXeuv5s0= Subject key identifier: CB:5D:42:F7:20:ED:12:2A:6E:0F:FC:F3:A5:9C:56:E0:D1:0C:9E:12 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 2AF703163E87E98C7F5B1B3AFDD5EC3733BA4F34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:43 +0000 Manifest this update: Tue 12 May 2026 17:42:43 +0000 Manifest next update: Wed 13 May 2026 18:18:43 +0000 Files and hashes: 1: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) 2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) 3: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: 1UucfYNdLT+/DuuXg3yJLS3iR3fQewiJEhsCQBPXzZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f7:03:16:3e:87:e9:8c:7f:5b:1b:3a:fd:d5:ec:37:33:ba:4f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: May 12 17:42:43 2026 GMT Not After : May 13 18:18:43 2026 GMT Subject: CN=CB5D42F720ED122A6E0FFCF3A59C56E0D10C9E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:bb:ae:d2:6a:a1:c0:07:40:fb:20:66:ed: 79:13:f7:91:26:da:53:06:b3:3f:5f:1f:58:96:8f: 65:d9:df:c3:36:81:c6:18:ed:02:37:48:94:88:b5: ad:e0:6f:8f:c9:f2:3e:78:a2:61:42:84:40:d2:e7: 6a:ad:19:bc:fd:24:6a:b1:91:bb:fc:da:38:86:35: dd:77:8f:9f:26:0f:52:61:0d:a7:73:50:6a:74:fa: ec:88:77:6e:a5:53:6f:ee:d2:2c:ea:73:b7:2e:0c: 12:8f:38:04:a3:14:98:04:a8:98:84:f5:f0:e5:1a: a5:d6:5b:19:d3:43:f4:6c:1f:2a:48:ee:16:c8:ad: 24:9a:c0:39:a5:d1:fb:5c:17:61:a9:68:b1:5e:b5: ef:8a:f2:63:4a:6b:d7:8d:33:f0:ac:ce:7b:ac:1d: 61:6d:62:0c:bb:90:e0:51:3a:b3:25:dd:49:f3:5c: 67:dd:11:17:5b:fe:c5:45:ee:0b:7a:8b:25:e5:4f: 54:5d:a8:84:11:24:11:09:89:5b:58:f2:7b:5b:4b: cd:04:33:79:94:ff:0b:0c:a7:4b:db:56:2a:52:b2: 29:f3:b6:46:c0:b8:9e:09:2b:b7:c9:68:b1:b8:6e: 2f:9e:1c:ce:66:f2:0e:cd:f1:09:9a:37:6c:2e:90: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:42:F7:20:ED:12:2A:6E:0F:FC:F3:A5:9C:56:E0:D1:0C:9E:12 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bd:b5:d0:8b:51:f9:6a:d3:9a:77:59:5c:60:10:9e:5f:31: d5:4e:8c:78:95:06:f8:95:fa:7c:fe:8a:fd:a3:a9:b6:b1:f5: 3e:5c:63:50:21:07:36:90:28:e6:77:6c:6d:34:90:37:d6:56: 85:7c:51:a2:4e:42:c6:5e:8b:77:35:16:b6:60:81:9d:89:9c: 19:61:b4:0d:5e:04:c8:62:b7:19:be:67:09:a7:98:40:a4:6a: b0:41:4e:4b:3b:3a:92:5f:f9:2c:a6:e5:98:41:7d:f6:84:f5: 45:86:a1:06:f4:46:10:d3:f0:ef:2b:4f:29:62:d3:1b:93:10: a3:a1:d0:5b:b9:9d:85:b5:c0:f0:63:ec:ff:fc:9f:3b:b9:2d: d5:3d:42:70:4b:d2:8b:6c:1d:74:41:ae:0d:40:97:fc:22:9d: ff:9f:70:c4:a5:6f:e6:64:41:de:56:bc:c9:10:a7:63:b9:ea: 4a:cb:d4:a1:ef:13:c7:96:05:5f:ba:cc:99:11:c6:66:05:58: 1e:2f:36:09:ab:4a:f7:1e:10:ba:91:6f:37:44:ba:18:64:ba: 75:0c:6a:d0:fe:21:af:19:e0:54:e8:ef:31:04:ff:e4:dd:f8: 22:33:1c:2d:a2:ec:ed:dc:34:65:3d:3b:1a:46:3a:bb:de:86: 32:40:84:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvcDFj6H6Yx/Wxs6/dXsNzO6TzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA1MTIxNzQyNDNaFw0yNjA1MTMxODE4NDNaMDMxMTAvBgNV BAMTKENCNUQ0MkY3MjBFRDEyMkE2RTBGRkNGM0E1OUM1NkUwRDEwQzlFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLm7uu0mqhwAdA+yBm7XkT95Em 2lMGsz9fH1iWj2XZ38M2gcYY7QI3SJSIta3gb4/J8j54omFChEDS52qtGbz9JGqx kbv82jiGNd13j58mD1JhDadzUGp0+uyId26lU2/u0izqc7cuDBKPOASjFJgEqJiE 9fDlGqXWWxnTQ/RsHypI7hbIrSSawDml0ftcF2GpaLFete+K8mNKa9eNM/Csznus HWFtYgy7kOBROrMl3UnzXGfdERdb/sVF7gt6iyXlT1RdqIQRJBEJiVtY8ntbS80E M3mU/wsMp0vbVipSsinztkbAuJ4JK7fJaLG4bi+eHM5m8g7N8QmaN2wukKMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy11C9yDtEipuD/zzpZxW4NEMnhIwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+9tdCLUflq05p3WVxgEJ5fMdVOjHiVBviV +nz+iv2jqbax9T5cY1AhBzaQKOZ3bG00kDfWVoV8UaJOQsZei3c1FrZggZ2JnBlh tA1eBMhitxm+ZwmnmECkarBBTks7OpJf+Sym5ZhBffaE9UWGoQb0RhDT8O8rTyli 0xuTEKOh0Fu5nYW1wPBj7P/8nzu5LdU9QnBL0otsHXRBrg1Al/winf+fcMSlb+Zk Qd5WvMkQp2O56krL1KHvE8eWBV+6zJkRxmYFWB4vNgmrSvceELqRbzdEuhhkunUM atD+Ia8Z4FTo7zEE/+Td+CIzHC2i7O3cNGU9OxpGOrvehjJAhLI= -----END CERTIFICATE-----Generated at Wed May 13 01:10:54 2026 by rpki-client