$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: BRFZ69/fW1pBvDGPTVpPxfbcSvaTp1fiKybbfZrY9O4= Subject key identifier: D5:61:0F:F8:AD:84:24:0D:25:B8:EE:95:84:59:58:C9:5E:E4:90:6F Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 72FB1EDEEA3CD56AC059E9334ADAEE715684F90C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:51 +0000 Manifest this update: Tue 12 May 2026 15:09:51 +0000 Manifest next update: Wed 13 May 2026 17:04:51 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) 2: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: cLN/z2M50h5AnGqIUTfQbJXwEzmJpMXEgyZbGvkza4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fb:1e:de:ea:3c:d5:6a:c0:59:e9:33:4a:da:ee:71:56:84:f9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: May 12 15:09:51 2026 GMT Not After : May 13 17:04:51 2026 GMT Subject: CN=D5610FF8AD84240D25B8EE95845958C95EE4906F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:2a:e4:27:c9:ba:f2:63:18:7e:38:3a:4e: 71:2a:d5:6d:e5:27:2b:66:96:b4:5a:25:81:de:78: c2:24:81:de:bd:35:19:6e:20:34:14:f8:fd:63:f9: 85:31:6f:f9:ba:86:48:99:db:2a:aa:02:c0:e8:af: d8:e8:69:14:0a:91:86:97:52:5d:ae:41:68:c5:be: 89:9a:24:1d:26:b5:e2:de:2d:fb:57:f2:5a:40:69: 17:0a:0f:29:91:50:84:91:a1:74:70:5e:1f:f7:81: 10:a7:cd:bc:0b:f0:ac:a4:80:12:cf:6a:61:1b:de: 4e:8a:fc:68:5d:90:50:6b:c8:e5:1e:a4:1e:75:8b: 24:f3:6c:d6:ca:e1:c3:d1:13:2e:6e:a6:ca:2c:49: 1d:18:ca:bc:fa:d8:f4:f0:42:58:a6:23:77:99:40: 19:51:19:27:58:03:8b:2e:4b:e6:1f:62:02:37:a6: 79:17:a2:64:b1:ba:61:41:b8:d6:c2:58:38:c0:bf: 7d:c0:bf:5a:45:02:b3:8f:1f:b2:ff:96:a2:dd:ba: 2b:7d:78:c8:6b:55:c4:6f:06:48:15:89:c7:7e:36: a5:46:fb:e6:7f:59:66:ff:f3:4d:85:35:25:3e:88: 1c:70:6d:60:49:03:92:c0:56:91:be:c8:fb:09:c5: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:61:0F:F8:AD:84:24:0D:25:B8:EE:95:84:59:58:C9:5E:E4:90:6F X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:fe:e7:fc:1a:82:8a:a8:a3:75:93:4f:65:61:0c:b8:4a: d5:e8:6e:e1:9b:da:3c:d0:95:1b:b4:43:c1:56:b8:00:55:72: b4:82:48:3a:49:b6:21:69:96:d2:e8:cf:24:9a:2b:68:0b:f7: da:99:ce:9c:dd:04:5e:33:5c:7e:66:f4:4c:eb:ba:7a:bd:84: 25:e1:af:da:7a:46:0a:c5:a5:a4:b6:21:7d:aa:11:95:50:65: bd:1c:40:d1:8b:27:8f:ef:a4:f4:45:12:39:51:bf:6e:4b:e4: 84:09:86:fc:3a:3b:89:dd:79:ab:83:29:65:1f:7f:f2:25:59: 4d:ed:49:e6:db:67:fb:38:eb:e7:5f:24:e2:0e:c7:3b:b5:31: a4:7d:79:c3:42:79:de:ea:50:af:5a:83:52:07:26:fe:e3:85: ce:5c:54:d4:23:b0:ec:4d:26:23:6c:d3:87:bb:86:57:05:fb: e2:65:16:32:6d:ef:85:8d:8e:be:fa:4d:2f:5c:6a:f4:69:0f: 41:37:bf:73:84:ec:81:b9:af:47:75:60:b6:12:2e:82:9c:b2: 72:fe:ca:a7:c9:5b:9b:96:34:00:e7:6b:78:33:f1:7d:e7:cd: 56:38:47:65:03:73:22:25:a0:49:99:25:0e:1d:f2:13:11:5c: 2a:63:f4:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvse3uo81WrAWekzStrucVaE+QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA1MTIxNTA5NTFaFw0yNjA1MTMxNzA0NTFaMDMxMTAvBgNV BAMTKEQ1NjEwRkY4QUQ4NDI0MEQyNUI4RUU5NTg0NTk1OEM5NUVFNDkwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloSrkJ8m68mMYfjg6TnEq1W3l JytmlrRaJYHeeMIkgd69NRluIDQU+P1j+YUxb/m6hkiZ2yqqAsDor9joaRQKkYaX Ul2uQWjFvomaJB0mteLeLftX8lpAaRcKDymRUISRoXRwXh/3gRCnzbwL8KykgBLP amEb3k6K/GhdkFBryOUepB51iyTzbNbK4cPREy5upsosSR0Yyrz62PTwQlimI3eZ QBlRGSdYA4suS+YfYgI3pnkXomSxumFBuNbCWDjAv33Av1pFArOPH7L/lqLduit9 eMhrVcRvBkgVicd+NqVG++Z/WWb/802FNSU+iBxwbWBJA5LAVpG+yPsJxRdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1WEP+K2EJA0luO6VhFlYyV7kkG8wHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABef/uf8GoKKqKN1k09lYQy4StXobuGb2jzQ lRu0Q8FWuABVcrSCSDpJtiFpltLozySaK2gL99qZzpzdBF4zXH5m9Ezrunq9hCXh r9p6RgrFpaS2IX2qEZVQZb0cQNGLJ4/vpPRFEjlRv25L5IQJhvw6O4ndeauDKWUf f/IlWU3tSebbZ/s46+dfJOIOxzu1MaR9ecNCed7qUK9ag1IHJv7jhc5cVNQjsOxN JiNs04e7hlcF++JlFjJt74WNjr76TS9cavRpD0E3v3OE7IG5r0d1YLYSLoKcsnL+ yqfJW5uWNADna3gz8X3nzVY4R2UDcyIloEmZJQ4d8hMRXCpj9Pg= -----END CERTIFICATE-----Generated at Wed May 13 02:15:25 2026 by rpki-client