$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: 3GxLaeorLv6bYgJX+VgE1zZ69KOBQ/3Mdu+n181H9gI= Subject key identifier: 89:33:ED:D7:62:A0:0B:62:21:87:81:5A:16:D8:2A:74:33:9F:39:E2 Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 351AA1FF57BCCB3EB99655E78582706AAA178DCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: 10 Signing time: Wed 13 May 2026 06:24:15 +0000 Manifest this update: Wed 13 May 2026 06:19:15 +0000 Manifest next update: Thu 14 May 2026 07:47:15 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) 2: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: 6AHawHW6/P19h/QYdosWkdT/e/nOJ1ss+cP25QY5c4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1a:a1:ff:57:bc:cb:3e:b9:96:55:e7:85:82:70:6a:aa:17:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: May 13 06:19:15 2026 GMT Not After : May 14 07:47:15 2026 GMT Subject: CN=8933EDD762A00B622187815A16D82A74339F39E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:a3:63:1a:72:e9:2c:b6:bc:12:e4:13:f8: 85:6a:96:7d:2e:a5:c5:0b:be:42:0e:eb:52:04:02: d7:ce:bb:9d:6c:67:ac:17:64:d4:4d:ae:b6:a0:c7: db:88:47:6e:b4:80:89:77:a3:39:34:77:0a:65:65: 77:6d:24:97:75:f9:88:d0:de:a5:51:dc:c2:20:d7: 0e:ed:14:4b:f9:0f:f1:59:b4:01:b5:fc:2e:a6:3e: 80:71:69:42:8d:18:17:0c:b3:68:6b:b7:bb:fa:00: 0b:85:63:a0:6a:66:5a:b5:f7:15:a7:e4:6f:31:57: 55:0e:9f:4e:a7:48:5e:a5:28:08:6b:0d:68:de:fb: a7:0d:e9:b0:65:6c:72:d0:34:d5:19:78:49:05:47: 40:db:c7:8c:df:13:57:0c:76:76:48:ce:55:de:49: 77:28:98:0a:97:5c:19:68:93:d1:87:6c:16:c2:23: 07:61:a4:60:95:89:4a:8f:d1:dd:1a:4e:75:13:44: dd:f6:46:c1:5f:20:03:3a:51:29:2b:c2:90:21:ff: 20:72:4c:91:90:4a:08:5e:38:35:cb:2e:62:93:a7: 6b:26:df:1c:41:a9:0f:db:4c:29:6e:0e:5b:31:22: 9f:45:55:67:c0:6e:8d:5b:89:30:1b:0a:03:d6:ae: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:33:ED:D7:62:A0:0B:62:21:87:81:5A:16:D8:2A:74:33:9F:39:E2 X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:71:87:12:05:52:38:16:d9:2f:13:4e:19:7e:01:26:4d:f3: 07:f3:43:e0:a1:4d:c7:ad:fc:f9:51:2a:d9:4d:c6:fb:5d:b9: 22:92:76:43:b3:0c:3b:33:24:5d:c9:ce:7a:18:23:94:c8:78: 24:48:fb:db:86:e6:c4:d9:77:60:01:c5:d7:c6:21:76:5d:e5: 40:40:aa:99:6c:85:88:dc:91:bf:ef:5d:49:59:e7:63:1a:c1: c0:fd:67:d7:ef:b6:ab:47:43:3d:ca:5a:42:2a:c8:5c:c8:e8: 94:86:a5:a4:f0:d0:80:09:95:db:a9:33:d4:1e:64:e3:b3:91: 07:ff:84:87:4f:e4:36:e0:ed:93:09:dd:79:d9:a2:c7:dc:07: 9c:28:e4:53:b4:bb:5b:6b:2c:01:88:58:65:d2:17:6f:15:85: a9:5c:b5:82:93:e5:be:72:17:2a:27:08:bc:e1:ae:60:5d:fe: 03:1a:8e:87:9b:9a:58:45:b4:1e:2c:36:da:77:be:3f:42:82: e3:25:1d:0a:17:92:8b:6c:9d:48:45:f8:86:39:5c:4f:78:9d: 98:82:71:e7:62:84:b2:51:a6:74:82:b7:f4:84:51:89:e2:0b: 0d:ee:93:88:a6:62:c5:49:2e:b8:58:f5:a0:6c:5a:70:fd:f6: 96:a6:67:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRqh/1e8yz65llXnhYJwaqoXjc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjA1MTMwNjE5MTVaFw0yNjA1MTQwNzQ3MTVaMDMxMTAvBgNV BAMTKDg5MzNFREQ3NjJBMDBCNjIyMTg3ODE1QTE2RDgyQTc0MzM5RjM5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DqNjGnLpLLa8EuQT+IVqln0u pcULvkIO61IEAtfOu51sZ6wXZNRNrragx9uIR260gIl3ozk0dwplZXdtJJd1+YjQ 3qVR3MIg1w7tFEv5D/FZtAG1/C6mPoBxaUKNGBcMs2hrt7v6AAuFY6BqZlq19xWn 5G8xV1UOn06nSF6lKAhrDWje+6cN6bBlbHLQNNUZeEkFR0Dbx4zfE1cMdnZIzlXe SXcomAqXXBlok9GHbBbCIwdhpGCViUqP0d0aTnUTRN32RsFfIAM6USkrwpAh/yBy TJGQSgheODXLLmKTp2sm3xxBqQ/bTCluDlsxIp9FVWfAbo1biTAbCgPWrkT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTPt12KgC2Ihh4FaFtgqdDOfOeIwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVxhxIFUjgW2S8TThl+ASZN8wfzQ+ChTcet /PlRKtlNxvtduSKSdkOzDDszJF3JznoYI5TIeCRI+9uG5sTZd2ABxdfGIXZd5UBA qplshYjckb/vXUlZ52MawcD9Z9fvtqtHQz3KWkIqyFzI6JSGpaTw0IAJldupM9Qe ZOOzkQf/hIdP5Dbg7ZMJ3XnZosfcB5wo5FO0u1trLAGIWGXSF28VhalctYKT5b5y FyonCLzhrmBd/gMajoebmlhFtB4sNtp3vj9CguMlHQoXkotsnUhF+IY5XE94nZiC cedihLJRpnSCt/SEUYniCw3uk4imYsVJLrhY9aBsWnD99pamZ2g= -----END CERTIFICATE-----Generated at Wed May 13 14:25:08 2026 by rpki-client