$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: TbUzVtqcH0uehzSEIbdf4+5kEMI9H5tylAZvVAlDPZE= Subject key identifier: 47:3C:9B:74:C0:1F:4F:F5:66:CB:7A:EC:F3:DF:5B:2A:96:68:74:98 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 553D5CA8CD558D5178E03B078B9CB6E79500A73E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:41:12 +0000 Manifest this update: Tue 12 May 2026 05:36:12 +0000 Manifest next update: Wed 13 May 2026 09:36:12 +0000 Files and hashes: 1: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: b2q650GcgeVWUigaSS8Bmi/ZD1DSOfcx9JDuR+XGYn0=) 2: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3d:5c:a8:cd:55:8d:51:78:e0:3b:07:8b:9c:b6:e7:95:00:a7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: May 12 05:36:12 2026 GMT Not After : May 13 09:36:12 2026 GMT Subject: CN=473C9B74C01F4FF566CB7AECF3DF5B2A96687498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:6e:8f:22:93:cf:df:48:85:7e:55:85:3a: 8e:7c:62:dc:e0:16:2f:65:f8:73:29:ab:67:a3:22: b7:fa:e6:28:20:04:77:de:96:26:41:e4:bf:5a:83: 60:5d:7b:10:75:75:19:28:ad:d6:ed:ea:58:a9:5d: 9a:11:38:7d:92:17:65:fc:f6:ad:ca:7b:7f:1b:e0: 0e:3e:5b:a3:65:f7:97:c1:bf:ff:a7:80:c5:c3:7b: bf:2a:27:e3:be:32:cd:3d:b9:a3:57:0a:7e:43:1e: 9d:16:81:8c:cf:92:30:05:7b:8e:14:52:de:4b:15: 7e:db:2e:cb:5b:63:e9:a1:ad:96:f4:a3:06:6d:ca: 3f:74:1d:4c:bf:75:72:63:33:32:f7:5f:79:cf:1d: f6:c1:a7:6e:ea:07:a5:2b:63:39:1b:b7:18:88:26: fa:ea:c7:76:40:ef:7a:af:ea:6f:c8:74:01:3d:cb: 7a:46:ec:ff:d9:ce:ed:5c:51:d6:a9:96:63:44:16: 2d:d0:5f:bc:6a:da:64:de:39:7e:0d:e2:cc:5e:db: 65:aa:90:46:65:9a:4b:fd:21:9b:95:1a:c4:12:80: 59:32:a7:43:07:d7:39:c5:0c:8c:31:b2:90:e0:95: cf:8e:b4:a0:1e:99:fe:02:96:ff:e7:3d:59:b1:06: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3C:9B:74:C0:1F:4F:F5:66:CB:7A:EC:F3:DF:5B:2A:96:68:74:98 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:14:a1:d7:a3:6f:c0:37:47:40:bf:d8:15:66:b8:54:20: 04:27:4c:47:96:e6:62:35:3e:ec:47:d4:aa:75:95:b4:b4:c0: 89:18:cc:35:27:22:2e:19:aa:d0:c5:8d:b7:9f:63:b6:53:03: 72:d7:06:cd:a1:b8:c3:8a:17:ea:cb:de:14:93:1a:10:f8:60: 73:80:cb:c7:d1:6d:e3:48:0a:ae:58:00:26:c6:d6:c6:6d:53: e1:89:2f:85:1d:00:9e:e8:36:e6:06:80:dc:a3:ec:79:b4:c1: 96:1e:f2:0c:e3:ac:3b:de:75:08:74:a1:20:95:8c:0a:c3:7d: c8:34:c6:20:00:f3:f1:01:45:5c:46:0f:3d:a8:19:cf:4a:78: e2:63:b4:0d:c6:41:83:2a:44:a6:26:80:99:71:f0:b2:d3:e0: 79:ab:c2:61:96:51:c5:57:01:c2:94:7c:1b:aa:18:14:09:a4: 81:35:1b:c0:32:b7:f6:80:3e:6c:5f:94:85:c4:89:fc:dd:c7: 58:09:0a:71:41:10:d9:97:15:e4:18:0e:2b:4b:f8:29:e5:5a: a6:97:80:12:9c:8d:55:b3:24:8b:04:c0:59:a8:9c:45:cb:69: a4:fd:e5:8c:2f:02:09:61:e4:4a:db:c0:b5:fb:c1:3a:ff:f4: ca:61:70:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVT1cqM1VjVF44DsHi5y255UApz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA1MTIwNTM2MTJaFw0yNjA1MTMwOTM2MTJaMDMxMTAvBgNV BAMTKDQ3M0M5Qjc0QzAxRjRGRjU2NkNCN0FFQ0YzREY1QjJBOTY2ODc0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSU26PIpPP30iFflWFOo58Ytzg Fi9l+HMpq2ejIrf65iggBHfeliZB5L9ag2BdexB1dRkordbt6lipXZoROH2SF2X8 9q3Ke38b4A4+W6Nl95fBv/+ngMXDe78qJ+O+Ms09uaNXCn5DHp0WgYzPkjAFe44U Ut5LFX7bLstbY+mhrZb0owZtyj90HUy/dXJjMzL3X3nPHfbBp27qB6UrYzkbtxiI Jvrqx3ZA73qv6m/IdAE9y3pG7P/Zzu1cUdaplmNEFi3QX7xq2mTeOX4N4sxe22Wq kEZlmkv9IZuVGsQSgFkyp0MH1znFDIwxspDglc+OtKAemf4Clv/nPVmxBucbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzybdMAfT/Vmy3rs899bKpZodJgwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhbFKHXo2/AN0dAv9gVZrhUIAQnTEeW5mI1 PuxH1Kp1lbS0wIkYzDUnIi4ZqtDFjbefY7ZTA3LXBs2huMOKF+rL3hSTGhD4YHOA y8fRbeNICq5YACbG1sZtU+GJL4UdAJ7oNuYGgNyj7Hm0wZYe8gzjrDvedQh0oSCV jArDfcg0xiAA8/EBRVxGDz2oGc9KeOJjtA3GQYMqRKYmgJlx8LLT4HmrwmGWUcVX AcKUfBuqGBQJpIE1G8Ayt/aAPmxflIXEifzdx1gJCnFBENmXFeQYDitL+CnlWqaX gBKcjVWzJIsEwFmonEXLaaT95YwvAglh5ErbwLX7wTr/9MphcBA= -----END CERTIFICATE-----Generated at Wed May 13 03:16:16 2026 by rpki-client