$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: E1VYLvB4UzQHZRNIJdFJIOdjecrtYVXEP1kTHIdWHZE= Subject key identifier: 5F:65:E7:E6:BA:76:71:22:E4:BF:B0:8B:66:B4:D2:55:41:F6:33:14 Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 7D04A7EED65372472A7EE97EF7449DAC02409C72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:03:37 +0000 Manifest this update: Tue 12 May 2026 03:58:37 +0000 Manifest next update: Wed 13 May 2026 05:47:37 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) 2: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: +x2sZPBUF4Hviu4BFLytBrqtil/k0Son3OwXFpIA9UQ=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:a7:ee:d6:53:72:47:2a:7e:e9:7e:f7:44:9d:ac:02:40:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: May 12 03:58:37 2026 GMT Not After : May 13 05:47:37 2026 GMT Subject: CN=5F65E7E6BA767122E4BFB08B66B4D25541F63314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:40:b9:38:7f:c3:8e:a0:36:f9:ed:6a:38: ab:09:74:dd:34:00:f3:3e:e2:d6:54:ab:a3:e2:d3: 12:d5:0d:43:c2:e2:f6:2a:f0:35:41:6e:3a:1f:17: 42:e1:3b:a0:40:e7:3d:5b:17:ba:be:08:9b:ba:53: 3a:de:d9:3d:19:e4:8f:d6:03:6a:ba:27:87:67:6f: f4:e5:ea:97:fb:b4:77:8a:35:2a:65:da:6c:b4:16: bb:1e:4b:ed:cc:4b:57:ff:4f:17:0e:83:15:a8:9a: 86:c5:37:2b:78:cb:f0:6e:74:32:73:25:3f:5c:8c: ef:b1:67:dd:88:f5:f0:62:9f:31:69:08:44:37:a4: 36:2a:a1:52:6f:1a:b7:b8:30:a5:bf:d4:42:1a:08: 6a:c4:ac:27:1a:3e:3f:24:86:ed:d3:72:e7:1b:a6: e8:81:e6:16:59:29:48:bf:b7:a2:52:de:92:27:7d: c9:eb:b1:44:f3:22:28:31:e4:43:f7:0c:c5:02:9c: dc:86:fb:1f:fb:c3:30:ef:a5:d4:cd:56:b3:10:c8: ac:c4:e9:77:b4:d2:25:10:1c:15:e4:d3:7b:cb:5f: 43:0e:f6:7d:2a:1f:ab:d2:70:d8:85:5d:3e:15:0d: f9:0e:17:41:f2:e8:13:7e:96:ed:82:49:a9:de:71: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:E7:E6:BA:76:71:22:E4:BF:B0:8B:66:B4:D2:55:41:F6:33:14 X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:3d:a7:b2:9e:67:0d:3d:f7:3a:73:2a:73:4f:cf:0b:f7: cc:70:ab:d4:8e:d4:98:92:64:13:97:98:30:95:1a:02:4d:30: 29:06:81:16:30:88:9c:1a:aa:3e:38:e3:b4:85:23:41:13:2b: 36:da:e3:d8:ec:a0:be:5a:74:a4:30:bc:c3:1b:95:b1:93:48: cd:c2:9b:08:94:e8:f0:ca:12:df:7c:c3:ed:00:50:30:14:ff: dd:c0:a8:7a:48:3e:29:de:1b:77:d1:2f:9c:fa:22:49:72:e1: 78:3a:46:87:98:f5:0d:1d:ce:fc:da:78:c1:1b:85:bd:b2:26: 25:35:a3:61:ab:4e:9d:19:aa:3e:61:49:ca:17:2a:20:2b:f2: 31:95:64:88:37:9d:92:79:6d:bc:7b:45:96:e8:3b:77:59:bd: e5:96:76:79:b2:f4:cf:dc:b0:44:fe:b5:90:c9:87:6d:33:41: 4c:7e:b2:61:51:90:bd:21:ff:55:95:65:eb:e3:83:d3:19:11: 29:e9:ae:8f:b2:fb:ce:b4:25:63:99:b0:6a:6d:1b:f8:d9:b7: c6:34:41:b4:a4:37:ff:6f:16:00:97:f2:66:9b:7c:37:ae:21: 98:67:e4:75:f2:5c:f9:e8:90:b9:6b:b8:34:a3:2b:8b:a6:25: b7:34:5e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQSn7tZTckcqful+90SdrAJAnHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjA1MTIwMzU4MzdaFw0yNjA1MTMwNTQ3MzdaMDMxMTAvBgNV BAMTKDVGNjVFN0U2QkE3NjcxMjJFNEJGQjA4QjY2QjREMjU1NDFGNjMzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXykC5OH/DjqA2+e1qOKsJdN00 APM+4tZUq6Pi0xLVDUPC4vYq8DVBbjofF0LhO6BA5z1bF7q+CJu6Uzre2T0Z5I/W A2q6J4dnb/Tl6pf7tHeKNSpl2my0FrseS+3MS1f/TxcOgxWomobFNyt4y/BudDJz JT9cjO+xZ92I9fBinzFpCEQ3pDYqoVJvGre4MKW/1EIaCGrErCcaPj8khu3Tcucb puiB5hZZKUi/t6JS3pInfcnrsUTzIigx5EP3DMUCnNyG+x/7wzDvpdTNVrMQyKzE 6Xe00iUQHBXk03vLX0MO9n0qH6vScNiFXT4VDfkOF0Hy6BN+lu2CSanecTiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2Xn5rp2cSLkv7CLZrTSVUH2MxQwHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfdPaeynmcNPfc6cypzT88L98xwq9SO1JiS ZBOXmDCVGgJNMCkGgRYwiJwaqj4447SFI0ETKzba49jsoL5adKQwvMMblbGTSM3C mwiU6PDKEt98w+0AUDAU/93AqHpIPineG3fRL5z6Ikly4Xg6RoeY9Q0dzvzaeMEb hb2yJiU1o2GrTp0Zqj5hScoXKiAr8jGVZIg3nZJ5bbx7RZboO3dZveWWdnmy9M/c sET+tZDJh20zQUx+smFRkL0h/1WVZevjg9MZESnpro+y+860JWOZsGptG/jZt8Y0 QbSkN/9vFgCX8mabfDeuIZhn5HXyXPnokLlruDSjK4umJbc0Xv4= -----END CERTIFICATE-----Generated at Tue May 12 22:13:20 2026 by rpki-client