$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: VwAI4rKigquGENwVDJPifRjH4dmHPfcSm4+8djbPivM= Subject key identifier: 1D:CB:98:F1:AD:C2:18:6D:FC:24:03:99:1B:6A:87:82:5F:47:D2:C5 Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 19DBEFDBE9FD5026EFF5EA2D9AEC515FB941B8D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:08 +0000 Manifest this update: Tue 12 May 2026 20:48:08 +0000 Manifest next update: Wed 13 May 2026 20:53:08 +0000 Files and hashes: 1: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: BREuFHZftSVGyLBwgTxgjqim7eaRWYMTPTiL1rIFMjQ=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:db:ef:db:e9:fd:50:26:ef:f5:ea:2d:9a:ec:51:5f:b9:41:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: May 12 20:48:08 2026 GMT Not After : May 13 20:53:08 2026 GMT Subject: CN=1DCB98F1ADC2186DFC2403991B6A87825F47D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:64:a3:79:e8:48:fe:49:8e:b3:3b:5d:5e: 2d:be:bc:01:c0:55:87:e7:e7:26:0c:0d:b8:72:1d: 5e:1d:1a:83:a3:e1:34:13:c6:e5:0e:6f:ef:f4:1d: 9c:96:19:c8:a2:54:58:a9:2e:c2:b7:0e:5d:a7:3c: b1:02:db:6e:b3:24:27:cd:0a:16:3c:05:e4:7e:ff: 95:02:b2:2d:58:9c:47:8f:bc:5e:eb:7d:b0:4b:a7: 2a:56:8d:77:87:68:cd:2b:08:8d:77:21:5d:50:e9: 8f:a8:b5:a9:21:fe:9b:b6:8b:f9:db:c0:27:95:e1: 61:7f:db:26:ed:0c:6d:3d:df:52:85:73:b1:a4:e9: 92:8d:ee:a8:8b:ba:22:8b:30:e3:b9:78:00:bc:98: bc:92:35:7a:6e:93:df:b9:f3:53:12:84:a5:ac:35: 1a:f6:50:c3:e7:1d:34:1c:b9:71:9c:1b:35:c3:a2: 92:3e:ec:47:26:98:30:64:cd:f1:fe:14:01:f4:51: 6c:e2:8a:ec:b9:97:15:51:5c:eb:c0:62:f6:f7:f6: c9:b4:a2:d5:5a:3e:ce:ca:01:f7:2d:27:3b:d7:e1: 9e:03:fc:ed:66:81:42:a1:b7:ca:50:13:70:ac:56: 69:21:85:de:1f:31:7d:7a:c6:f3:77:37:31:cd:ef: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CB:98:F1:AD:C2:18:6D:FC:24:03:99:1B:6A:87:82:5F:47:D2:C5 X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4d:d6:0e:1b:a4:46:12:5d:d4:f4:c4:b2:82:8e:5e:b4:d9: 40:12:56:0c:d4:75:86:87:b6:cc:93:18:15:55:aa:f3:da:6b: b1:0f:cc:62:cf:c6:78:9a:86:78:1d:db:c7:56:04:78:7e:03: 68:a5:b3:c2:3d:1a:bf:f1:03:4f:67:13:06:84:f8:0a:d7:05: 6f:c3:a7:fe:dc:8d:8b:7d:ed:b9:e7:9e:e4:19:bd:86:f9:f5: bc:15:05:b0:a6:64:a9:24:68:da:af:76:60:e4:47:db:0c:23: f8:6c:30:58:66:dd:4d:6f:08:72:ab:8b:fe:89:26:2e:84:a3: 72:a2:fa:2c:38:83:46:ea:cb:88:ff:13:ac:ab:75:18:dc:d1: da:0f:75:ab:35:a1:86:71:8a:56:76:ea:bd:96:5d:84:a3:61: c4:a2:69:81:64:e2:f8:70:c2:9f:69:ed:e1:10:00:81:99:29: 4a:85:f6:80:62:e9:0d:11:78:a4:93:c4:02:78:5f:16:67:06: a4:53:1f:53:87:8a:ba:b8:78:12:0d:f0:ed:b7:aa:94:1c:6b: 1f:0f:d6:45:b3:6f:18:f8:d9:7f:10:29:8d:db:c0:78:4c:a8: d5:bd:e6:c7:6e:ca:88:8d:b2:2f:51:86:4f:5e:ac:f2:ac:c7: b5:41:3c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdvv2+n9UCbv9eotmuxRX7lBuNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjA1MTIyMDQ4MDhaFw0yNjA1MTMyMDUzMDhaMDMxMTAvBgNV BAMTKDFEQ0I5OEYxQURDMjE4NkRGQzI0MDM5OTFCNkE4NzgyNUY0N0QyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBGSjeehI/kmOsztdXi2+vAHA VYfn5yYMDbhyHV4dGoOj4TQTxuUOb+/0HZyWGciiVFipLsK3Dl2nPLEC226zJCfN ChY8BeR+/5UCsi1YnEePvF7rfbBLpypWjXeHaM0rCI13IV1Q6Y+otakh/pu2i/nb wCeV4WF/2ybtDG0931KFc7Gk6ZKN7qiLuiKLMOO5eAC8mLySNXpuk9+581MShKWs NRr2UMPnHTQcuXGcGzXDopI+7EcmmDBkzfH+FAH0UWziiuy5lxVRXOvAYvb39sm0 otVaPs7KAfctJzvX4Z4D/O1mgUKht8pQE3CsVmkhhd4fMX16xvN3NzHN7zYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHcuY8a3CGG38JAOZG2qHgl9H0sUwHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdN1g4bpEYSXdT0xLKCjl602UASVgzUdYaH tsyTGBVVqvPaa7EPzGLPxniahngd28dWBHh+A2ils8I9Gr/xA09nEwaE+ArXBW/D p/7cjYt97bnnnuQZvYb59bwVBbCmZKkkaNqvdmDkR9sMI/hsMFhm3U1vCHKri/6J Ji6Eo3Ki+iw4g0bqy4j/E6yrdRjc0doPdas1oYZxilZ26r2WXYSjYcSiaYFk4vhw wp9p7eEQAIGZKUqF9oBi6Q0ReKSTxAJ4XxZnBqRTH1OHirq4eBIN8O23qpQcax8P 1kWzbxj42X8QKY3bwHhMqNW95sduyoiNsi9Rhk9erPKsx7VBPBg= -----END CERTIFICATE-----Generated at Wed May 13 01:38:23 2026 by rpki-client