$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: dSFXT2zP9zeWMw5aeptKvl2TF7v7wJDCH2pZ+pNzpsA= Subject key identifier: D0:9A:61:DB:4E:9C:19:30:AA:A1:91:3C:1B:46:13:E9:29:45:33:25 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 271BCCF138FE1F244274EEC987CB344D7A7C3376 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:53 +0000 Manifest this update: Tue 12 May 2026 15:09:53 +0000 Manifest next update: Wed 13 May 2026 16:08:53 +0000 Files and hashes: 1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 2: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) 3: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: Rpq/P/bHVsLjQQu9snhUrOF9y/NIPpO3nd9vzBNvfZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1b:cc:f1:38:fe:1f:24:42:74:ee:c9:87:cb:34:4d:7a:7c:33:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: May 12 15:09:53 2026 GMT Not After : May 13 16:08:53 2026 GMT Subject: CN=D09A61DB4E9C1930AAA1913C1B4613E929453325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:56:fc:a4:ed:bc:3f:1f:e5:99:08:00:95: 3d:a0:79:a6:b3:2d:d3:f1:4a:11:13:42:46:4c:d8: e3:59:f7:76:31:81:02:ff:5d:62:b9:3f:fe:71:9c: e7:8d:a9:c8:de:23:73:b8:81:26:13:f1:06:52:44: ba:ea:ee:3e:3d:0d:af:ac:7b:24:a6:fe:b9:51:cf: 6f:c1:20:d5:9a:14:94:02:75:eb:03:4f:20:6d:ce: 58:3b:18:7c:b8:96:fa:c8:5b:02:f9:cc:de:68:60: ab:62:e0:21:71:0a:4f:82:76:32:ba:02:77:d0:8f: b9:01:f3:60:da:3b:6c:b0:dc:84:9a:93:52:fb:f1: c9:b9:20:2f:03:1f:b1:3a:4b:0b:52:52:d7:24:50: b0:07:e2:0c:29:85:15:89:87:15:f6:5c:73:71:b3: bd:0f:7a:5d:c2:60:69:fd:f1:2b:49:a8:20:6e:4d: 4f:ae:2c:d7:e9:d4:2f:1c:ae:8a:ee:dd:09:46:ae: 58:51:c9:fb:c1:78:9a:83:d7:55:2a:76:29:d1:a0: d7:65:f0:4f:69:4c:fa:96:85:cb:64:e9:c0:fa:6f: 65:a1:85:89:70:3c:87:bf:a1:57:5b:b0:14:ae:d0: 04:87:15:ad:5f:fa:2e:8f:dc:61:ce:4d:f3:44:94: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:61:DB:4E:9C:19:30:AA:A1:91:3C:1B:46:13:E9:29:45:33:25 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:b3:8d:a1:6f:0a:da:1f:a4:7e:05:06:a0:fa:3f:4b:d7: 1a:45:18:c2:d1:98:cf:38:a1:03:29:ef:c0:e0:5f:e7:16:dd: 5f:06:67:a0:88:4b:d4:6e:d6:4d:64:b0:00:fe:db:4c:10:4e: 32:18:7f:ba:cd:19:fc:57:63:26:d3:ac:c9:fe:a0:9c:b1:67: 5e:9c:f4:bf:b8:49:9a:48:3b:dd:d5:8e:5c:1a:1c:10:05:20: 9c:2e:ed:38:40:34:0d:6e:b4:b8:07:68:98:e2:f4:49:b1:bf: 77:02:ba:1c:ba:29:07:95:92:f0:6c:d4:de:71:90:1a:57:e1: cf:46:95:32:16:14:96:c7:94:61:98:23:74:bf:85:e3:2a:6f: 77:fd:b2:72:22:d6:99:a6:b6:16:a8:ca:9e:f0:7e:97:dc:42: 12:51:b9:1c:19:9f:ee:4e:2e:68:a3:d4:78:a2:36:0f:03:49: f1:58:41:d9:7a:1d:f3:14:a7:ba:0a:49:a6:f6:cc:ed:ee:83: 01:3f:ba:70:de:98:f6:65:d4:75:71:37:18:8e:30:e4:b4:11: 5d:45:ce:ff:58:23:80:23:14:e9:45:5b:ed:c5:19:77:71:0c: 2c:cf:91:75:8b:d8:f5:2a:40:44:fb:bc:a9:65:ee:42:86:d7: da:60:0c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxvM8Tj+HyRCdO7Jh8s0TXp8M3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA1MTIxNTA5NTNaFw0yNjA1MTMxNjA4NTNaMDMxMTAvBgNV BAMTKEQwOUE2MURCNEU5QzE5MzBBQUExOTEzQzFCNDYxM0U5Mjk0NTMzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDlb8pO28Px/lmQgAlT2geaaz LdPxShETQkZM2ONZ93YxgQL/XWK5P/5xnOeNqcjeI3O4gSYT8QZSRLrq7j49Da+s eySm/rlRz2/BINWaFJQCdesDTyBtzlg7GHy4lvrIWwL5zN5oYKti4CFxCk+CdjK6 AnfQj7kB82DaO2yw3ISak1L78cm5IC8DH7E6SwtSUtckULAH4gwphRWJhxX2XHNx s70Pel3CYGn98StJqCBuTU+uLNfp1C8croru3QlGrlhRyfvBeJqD11UqdinRoNdl 8E9pTPqWhctk6cD6b2WhhYlwPIe/oVdbsBSu0ASHFa1f+i6P3GHOTfNElKhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Jph206cGTCqoZE8G0YT6SlFMyUwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtls42hbwraH6R+BQag+j9L1xpFGMLRmM84 oQMp78DgX+cW3V8GZ6CIS9Ru1k1ksAD+20wQTjIYf7rNGfxXYybTrMn+oJyxZ16c 9L+4SZpIO93VjlwaHBAFIJwu7ThANA1utLgHaJji9Emxv3cCuhy6KQeVkvBs1N5x kBpX4c9GlTIWFJbHlGGYI3S/heMqb3f9snIi1pmmthaoyp7wfpfcQhJRuRwZn+5O Lmij1HiiNg8DSfFYQdl6HfMUp7oKSab2zO3ugwE/unDemPZl1HVxNxiOMOS0EV1F zv9YI4AjFOlFW+3FGXdxDCzPkXWL2PUqQET7vKll7kKG19pgDE4= -----END CERTIFICATE-----Generated at Wed May 13 02:41:07 2026 by rpki-client