$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: 9BMISIBw6kY4gi59TlgrYXZ2VUhxI8OIt8vNopeWo/E= Subject key identifier: 4A:54:91:96:D5:36:C2:46:FA:0A:A4:E8:09:BB:16:2D:B2:9F:34:77 Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 19B694C80D6BDF7A2AA0663E586CC1D0E07C3F12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:53 +0000 Manifest this update: Tue 12 May 2026 18:23:53 +0000 Manifest next update: Wed 13 May 2026 21:48:53 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: PDQiWFIVHzVZtxdUHShOwOnqjz1NvnV5A7kaFr0kQKM=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b6:94:c8:0d:6b:df:7a:2a:a0:66:3e:58:6c:c1:d0:e0:7c:3f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: May 12 18:23:53 2026 GMT Not After : May 13 21:48:53 2026 GMT Subject: CN=4A549196D536C246FA0AA4E809BB162DB29F3477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:05:48:40:ee:97:47:08:08:1c:fa:e0:04: 99:1e:76:c2:70:3c:05:ab:ce:94:13:dc:dc:7d:27: b2:6d:2d:e5:3b:49:f4:dc:a0:41:9e:43:fe:db:bd: 39:83:87:50:50:fc:f5:8a:d6:a7:b1:8d:a0:e1:23: ba:59:c6:98:f3:e9:c7:fe:af:85:78:7a:c0:ba:cf: 8c:46:a6:b3:e5:fc:d1:c6:35:e5:0f:3b:52:32:08: 94:21:ae:77:40:f0:4c:05:bc:4b:99:dc:3e:50:89: 7b:8b:c4:b0:a5:f0:28:e0:fd:6a:09:a7:67:ec:bc: 25:b8:81:e2:2a:ef:32:64:bf:e9:f1:de:42:4b:2a: 2d:24:d9:72:79:87:a5:44:7d:77:24:79:86:4b:27: c1:9a:9d:67:d7:63:9c:a6:01:af:96:6e:09:44:c1: 28:3e:f9:49:c1:23:e7:8a:f4:23:23:b0:3c:9d:65: a9:82:f2:c4:c2:26:6d:1c:5c:26:5c:df:d5:35:3e: 39:97:f3:95:fc:83:ec:bb:51:87:5b:43:84:1f:e5: 85:32:65:90:cc:5a:7c:3e:76:c4:9b:e4:c3:3d:37: 1a:87:a0:6e:ca:4a:7b:2e:0a:20:69:7a:b6:28:b4: 00:b6:a3:dd:9f:dd:cd:56:12:ed:41:ea:6b:97:62: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:54:91:96:D5:36:C2:46:FA:0A:A4:E8:09:BB:16:2D:B2:9F:34:77 X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:60:fe:ea:9f:1e:56:bd:69:bc:1a:27:56:26:46:72:75:0c: 8b:11:89:14:ae:f1:42:b9:be:0b:44:ba:7c:ac:f1:6d:fa:bb: 85:0e:c9:30:07:7c:c5:ec:7a:02:13:97:a7:c4:e8:2c:f2:1c: df:da:c6:e3:dc:ee:4e:29:38:f3:13:2c:5f:4d:a9:64:52:4e: 05:28:b9:83:42:dc:97:5d:8e:39:2e:d1:70:62:d4:b6:4a:33: b2:51:35:0a:a5:af:5b:c5:43:0f:c7:94:2d:e1:b6:b6:02:8e: 0d:3d:b3:9b:47:9f:2f:a7:2e:e2:83:67:41:1f:d9:52:5e:1b: 15:14:d1:66:a9:10:80:73:5c:ac:21:eb:43:cc:d4:f9:cc:ea: 7d:b9:24:ac:b7:84:f3:ef:d5:ba:f6:bf:47:6a:59:83:4d:f0: b1:51:ff:ed:c4:e8:2e:1c:c8:ca:f2:c2:08:25:fd:cc:a5:13: e3:cb:2a:7e:3b:fb:2d:64:2d:fb:c2:54:bc:f4:52:8c:1e:76: 2a:fc:ac:71:0b:c0:a5:23:50:98:ce:36:01:a8:79:1a:1a:24: a0:d2:43:83:aa:d1:c6:68:25:77:fe:16:d4:59:84:c4:4b:2e: af:ac:4c:58:69:cc:4e:c1:55:04:7c:67:91:54:ef:bf:6a:e1: df:dc:25:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbaUyA1r33oqoGY+WGzB0OB8PxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjA1MTIxODIzNTNaFw0yNjA1MTMyMTQ4NTNaMDMxMTAvBgNV BAMTKDRBNTQ5MTk2RDUzNkMyNDZGQTBBQTRFODA5QkIxNjJEQjI5RjM0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRAVIQO6XRwgIHPrgBJkedsJw PAWrzpQT3Nx9J7JtLeU7SfTcoEGeQ/7bvTmDh1BQ/PWK1qexjaDhI7pZxpjz6cf+ r4V4esC6z4xGprPl/NHGNeUPO1IyCJQhrndA8EwFvEuZ3D5QiXuLxLCl8Cjg/WoJ p2fsvCW4geIq7zJkv+nx3kJLKi0k2XJ5h6VEfXckeYZLJ8GanWfXY5ymAa+WbglE wSg++UnBI+eK9CMjsDydZamC8sTCJm0cXCZc39U1PjmX85X8g+y7UYdbQ4Qf5YUy ZZDMWnw+dsSb5MM9NxqHoG7KSnsuCiBperYotAC2o92f3c1WEu1B6muXYnGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlSRltU2wkb6CqToCbsWLbKfNHcwHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5g/uqfHla9abwaJ1YmRnJ1DIsRiRSu8UK5 vgtEunys8W36u4UOyTAHfMXsegITl6fE6CzyHN/axuPc7k4pOPMTLF9NqWRSTgUo uYNC3Jddjjku0XBi1LZKM7JRNQqlr1vFQw/HlC3htrYCjg09s5tHny+nLuKDZ0Ef 2VJeGxUU0WapEIBzXKwh60PM1PnM6n25JKy3hPPv1br2v0dqWYNN8LFR/+3E6C4c yMrywggl/cylE+PLKn47+y1kLfvCVLz0Uowedir8rHELwKUjUJjONgGoeRoaJKDS Q4Oq0cZoJXf+FtRZhMRLLq+sTFhpzE7BVQR8Z5FU779q4d/cJaU= -----END CERTIFICATE-----Generated at Wed May 13 00:54:22 2026 by rpki-client