$ rpki-client -vvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: 96lZLvpcVZ0WYfKC7bJWdB++ltZSOOpsd7IrzdA1/HI= Subject key identifier: 79:CA:0C:AE:F9:F7:E0:B1:A2:A1:65:9E:EF:E5:5F:4F:66:4B:51:CC Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 69F563DA84D27FF30DC2FA6E890B1E89808BC9E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:33:58 +0000 Manifest this update: Tue 12 May 2026 07:28:58 +0000 Manifest next update: Wed 13 May 2026 07:55:58 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) 2: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: c3eX/oRz1NDZLSJQtc3ijtCeqWq7TmLIjZxc1GaJxOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f5:63:da:84:d2:7f:f3:0d:c2:fa:6e:89:0b:1e:89:80:8b:c9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: May 12 07:28:58 2026 GMT Not After : May 13 07:55:58 2026 GMT Subject: CN=79CA0CAEF9F7E0B1A2A1659EEFE55F4F664B51CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:b5:eb:10:47:11:01:13:dd:43:68:88:0c: 85:e3:f4:25:25:cd:69:d6:73:be:7c:80:1f:a5:18: 2e:c4:38:8c:91:2b:c9:92:01:ad:bb:77:b4:57:ee: 30:51:fe:32:5a:db:20:2d:37:75:66:4f:6b:7a:38: 3f:a4:1a:e4:a3:5b:9c:0f:5d:6c:8b:25:69:f6:7c: 9e:1c:77:1f:d6:07:37:4b:de:b1:83:8a:50:43:a8: fb:00:68:87:6a:b1:89:61:a6:b1:b0:7e:32:9c:0d: eb:a7:22:04:21:83:ef:11:b0:3a:9e:6a:06:50:89: 7c:20:ed:57:dc:40:ef:d4:ba:26:c1:b1:a4:96:21: 45:dc:14:f1:d3:85:55:f6:cd:1b:6e:4a:f8:0f:0f: f2:6d:c1:d7:23:f9:a8:e2:2a:ca:cb:d1:62:f0:7b: 19:17:82:77:16:57:da:81:1e:e4:1d:f9:5d:43:c3: d2:60:d6:42:36:df:73:c6:e9:f1:15:f8:04:aa:17: e2:ef:95:d1:f8:91:af:54:57:e9:21:bb:b7:5a:ae: f2:3a:73:e5:bc:ef:9e:62:58:39:08:3f:ac:1b:f6: 03:58:8e:44:11:ce:d9:c9:4e:b9:35:82:97:6b:29: ae:4e:40:f9:dc:db:c7:5b:93:68:73:76:2b:06:6a: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CA:0C:AE:F9:F7:E0:B1:A2:A1:65:9E:EF:E5:5F:4F:66:4B:51:CC X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:83:9c:4d:d7:e3:82:71:f3:93:fe:cd:83:1f:f5:22:45:46: d7:cb:d3:e1:13:3d:48:92:16:0a:df:74:d0:9e:08:d8:47:e1: 4f:21:5d:12:77:aa:03:11:61:0f:43:9c:66:1b:42:23:92:82: 12:94:2b:22:3d:4f:05:ee:63:2c:98:38:3f:94:71:65:a8:e3: 19:bf:e5:dd:ee:86:ee:14:c1:d1:79:5d:42:02:f0:e8:2e:46: ec:f4:f5:2c:36:70:b9:28:3d:76:96:ec:11:2e:f0:39:47:41: 05:34:e5:17:3e:73:7e:ff:97:f3:5d:06:aa:da:7f:29:21:e0: 48:c8:cc:80:2b:92:69:89:7f:9e:a2:bf:50:3a:ea:59:bc:ca: 91:12:bf:d7:90:9c:78:f3:03:ad:0c:ed:06:9f:64:87:0b:ab: 3b:86:44:0b:b8:0e:fd:b8:6c:15:7d:86:b8:91:1c:21:75:48: 9d:8c:ec:8c:25:6f:11:08:4a:74:2b:d0:40:06:02:ff:97:4a: e1:ed:82:62:13:2a:f0:5d:33:ca:e4:a9:b4:a4:0f:a4:f3:55: 61:c6:a1:29:0b:bf:36:93:25:c0:bb:4a:e8:44:8a:b0:d8:31: c0:9e:da:80:3f:dd:6a:a3:e0:9b:08:c4:05:34:c0:91:98:8a: 19:a2:ec:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafVj2oTSf/MNwvpuiQseiYCLyegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA1MTIwNzI4NThaFw0yNjA1MTMwNzU1NThaMDMxMTAvBgNV BAMTKDc5Q0EwQ0FFRjlGN0UwQjFBMkExNjU5RUVGRTU1RjRGNjY0QjUxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IrXrEEcRARPdQ2iIDIXj9CUl zWnWc758gB+lGC7EOIyRK8mSAa27d7RX7jBR/jJa2yAtN3VmT2t6OD+kGuSjW5wP XWyLJWn2fJ4cdx/WBzdL3rGDilBDqPsAaIdqsYlhprGwfjKcDeunIgQhg+8RsDqe agZQiXwg7VfcQO/UuibBsaSWIUXcFPHThVX2zRtuSvgPD/Jtwdcj+ajiKsrL0WLw exkXgncWV9qBHuQd+V1Dw9Jg1kI233PG6fEV+ASqF+LvldH4ka9UV+khu7darvI6 c+W8755iWDkIP6wb9gNYjkQRztnJTrk1gpdrKa5OQPnc28dbk2hzdisGaisDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUecoMrvn34LGioWWe7+VfT2ZLUcwwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2DnE3X44Jx85P+zYMf9SJFRtfL0+ETPUiS FgrfdNCeCNhH4U8hXRJ3qgMRYQ9DnGYbQiOSghKUKyI9TwXuYyyYOD+UcWWo4xm/ 5d3uhu4UwdF5XUIC8OguRuz09Sw2cLkoPXaW7BEu8DlHQQU05Rc+c37/l/NdBqra fykh4EjIzIArkmmJf56iv1A66lm8ypESv9eQnHjzA60M7QafZIcLqzuGRAu4Dv24 bBV9hriRHCF1SJ2M7IwlbxEISnQr0EAGAv+XSuHtgmITKvBdM8rkqbSkD6TzVWHG oSkLvzaTJcC7SuhEirDYMcCe2oA/3Wqj4JsIxAU0wJGYihmi7EA= -----END CERTIFICATE-----Generated at Wed May 13 01:35:23 2026 by rpki-client