$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json) Hash identifier: rOChjlOo6cryjGIlmHcDAlJiGn/42urcfg+MgwLGnZE= Subject key identifier: 50:1C:EB:1A:55:B2:56:C5:34:4F:D6:5D:55:C6:48:85:4F:A0:3B:72 Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Certificate serial: 2DD47B5DC1ECAFC63FAD86901BB1E6815638A702 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:38 +0000 Manifest this update: Tue 12 May 2026 08:04:38 +0000 Manifest next update: Wed 13 May 2026 08:48:38 +0000 Files and hashes: 1: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=) 2: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=) 3: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: jwZ6ZgV+52Ty9ktwpjvQtiMG75rcT8V9huSdB8+OcWM=) 4: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d4:7b:5d:c1:ec:af:c6:3f:ad:86:90:1b:b1:e6:81:56:38:a7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Validity Not Before: May 12 08:04:38 2026 GMT Not After : May 13 08:48:38 2026 GMT Subject: CN=501CEB1A55B256C5344FD65D55C648854FA03B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:a6:3e:b0:46:6d:bc:37:c3:e9:54:a6:d2: 6e:66:f4:29:70:88:33:0a:cb:b4:9c:85:45:cc:91: 1d:dc:c1:2d:f0:eb:25:61:a3:18:22:fa:0f:06:8b: f6:fe:fb:eb:2d:6f:a5:11:90:b1:64:d1:56:0a:54: ee:03:26:ff:e1:aa:e6:72:a3:50:82:d7:e2:48:ab: 3d:c4:4f:72:10:4b:0e:14:b9:02:17:7b:e9:5a:5a: e7:ec:51:86:0a:3c:cd:db:a0:11:90:73:34:c3:fb: 7a:3c:77:c1:61:d1:b2:e4:63:ec:38:3a:38:9f:bd: b5:b2:b3:1c:5e:91:8f:89:59:b0:23:8c:47:23:23: ec:39:48:96:5d:10:76:4e:46:c0:e0:72:fb:32:d4: e2:3d:96:a1:6d:08:ba:dd:26:20:a2:c8:0f:b0:34: 8d:96:6c:a8:e1:ec:c4:58:f1:03:85:df:b3:f0:c5: 02:b7:d0:1f:ca:c7:78:3b:50:33:dd:a2:4e:29:3c: 25:d3:91:e5:5d:20:e4:cd:c1:79:01:39:76:46:c0: 78:e6:29:32:3e:2b:01:27:92:a0:70:33:53:b0:c4: 73:3a:ac:f9:8d:73:31:d9:c7:47:13:bf:85:05:97: 06:67:58:33:7f:f3:94:a9:99:02:00:1d:cc:bf:bb: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:EB:1A:55:B2:56:C5:34:4F:D6:5D:55:C6:48:85:4F:A0:3B:72 X509v3 Authority Key Identifier: keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8b:a9:86:14:1f:3c:35:21:6d:d2:cc:a7:21:01:6c:a9:c5: 50:d4:81:3e:57:4b:76:51:59:f4:0f:c5:c5:0c:8a:a0:05:4d: 96:84:03:43:dc:59:40:25:24:d4:22:1e:11:b1:05:0b:29:66: 61:fe:1c:dd:7e:03:31:a4:d2:cd:2b:2f:f0:3a:fe:77:da:71: 01:06:c2:07:20:56:18:80:9f:a2:f7:d8:d8:f1:e9:a9:7f:a5: b4:34:9e:33:46:01:d2:60:0e:97:98:6b:d5:16:d9:73:14:10: 20:e7:cf:88:a2:2b:4c:b3:9e:35:18:26:4a:ab:d5:6e:b0:dd: 29:2e:22:68:bc:27:fe:88:ff:15:89:78:e4:f7:d6:e1:38:b6: 4f:b5:4d:14:7f:dd:11:8d:b5:8c:53:96:bc:46:39:a4:0f:e6: 9a:5f:27:c4:60:6a:84:b8:79:43:a1:25:14:f9:4e:14:b2:61: 98:40:1e:22:14:29:da:96:07:48:3e:ee:90:a9:29:fc:64:81: 57:62:87:67:d3:52:8f:9b:eb:e9:ad:29:6d:db:d1:b2:c3:b2: f0:83:0c:7d:9a:c2:3e:15:56:95:03:6a:48:3e:a1:c0:6c:52: 95:5e:22:d1:ca:95:61:87:ef:f5:21:29:0a:11:de:23:d5:b2: 91:1f:c4:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdR7XcHsr8Y/rYaQG7HmgVY4pwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky NUE5RDNCMzAeFw0yNjA1MTIwODA0MzhaFw0yNjA1MTMwODQ4MzhaMDMxMTAvBgNV BAMTKDUwMUNFQjFBNTVCMjU2QzUzNDRGRDY1RDU1QzY0ODg1NEZBMDNCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P6Y+sEZtvDfD6VSm0m5m9Clw iDMKy7SchUXMkR3cwS3w6yVhoxgi+g8Gi/b+++stb6URkLFk0VYKVO4DJv/hquZy o1CC1+JIqz3ET3IQSw4UuQIXe+laWufsUYYKPM3boBGQczTD+3o8d8Fh0bLkY+w4 OjifvbWysxxekY+JWbAjjEcjI+w5SJZdEHZORsDgcvsy1OI9lqFtCLrdJiCiyA+w NI2WbKjh7MRY8QOF37PwxQK30B/Kx3g7UDPdok4pPCXTkeVdIOTNwXkBOXZGwHjm KTI+KwEnkqBwM1OwxHM6rPmNczHZx0cTv4UFlwZnWDN/85SpmQIAHcy/u2NBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBzrGlWyVsU0T9ZdVcZIhU+gO3IwHwYDVR0j BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0 MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIy MjkyNUE5RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+LqYYUHzw1IW3SzKchAWypxVDUgT5XS3ZR WfQPxcUMiqAFTZaEA0PcWUAlJNQiHhGxBQspZmH+HN1+AzGk0s0rL/A6/nfacQEG wgcgVhiAn6L32Njx6al/pbQ0njNGAdJgDpeYa9UW2XMUECDnz4iiK0yznjUYJkqr 1W6w3SkuImi8J/6I/xWJeOT31uE4tk+1TRR/3RGNtYxTlrxGOaQP5ppfJ8RgaoS4 eUOhJRT5ThSyYZhAHiIUKdqWB0g+7pCpKfxkgVdih2fTUo+b6+mtKW3b0bLDsvCD DH2awj4VVpUDakg+ocBsUpVeItHKlWGH7/UhKQoR3iPVspEfxCM= -----END CERTIFICATE-----Generated at Wed May 13 02:36:49 2026 by rpki-client