$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: cqnAJNNrvwbElARZ7Zb9gnJBn3V2jqT96X1cJLtXXqM= Subject key identifier: 60:49:4C:97:91:7F:69:62:7C:2E:01:EF:1C:5D:DC:ED:C7:29:3C:3C Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 130B1FF2AE317D3AD3CBC66B6ADEB09953F74F12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:51:29 +0000 Manifest this update: Tue 12 May 2026 22:46:29 +0000 Manifest next update: Thu 14 May 2026 00:36:29 +0000 Files and hashes: 1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: JsM0YESuOjlD7ztSehxbDpdJUMno3t7DBKmUtQyB8JM=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0b:1f:f2:ae:31:7d:3a:d3:cb:c6:6b:6a:de:b0:99:53:f7:4f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: May 12 22:46:29 2026 GMT Not After : May 14 00:36:29 2026 GMT Subject: CN=60494C97917F69627C2E01EF1C5DDCEDC7293C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:9f:15:83:60:0a:41:98:fb:97:78:68:ba: 48:34:68:93:8f:9b:aa:1a:93:8a:06:ec:56:50:16: 6c:84:3a:19:ac:e9:28:49:03:86:b2:31:46:28:cf: fe:42:50:4a:f1:ef:48:e0:9e:7d:aa:e6:87:55:3a: df:dd:e2:ea:6c:a8:f7:aa:55:85:c9:52:88:b1:35: 2e:8a:a0:1d:fe:5d:d9:8f:76:4d:ff:e9:c7:39:a5: 46:98:09:20:b1:2c:60:6b:73:a3:a9:ef:26:b5:d9: 12:d5:22:25:90:69:1c:67:18:7e:0a:8f:b8:f8:49: 65:9c:6a:46:61:72:2c:3b:1e:55:65:0b:69:9a:8e: 21:3f:df:d3:d6:ab:30:05:a0:98:06:e5:91:3c:d9: 66:11:08:ae:8a:6b:b4:5f:2a:cb:e8:b3:02:64:02: 1b:4e:86:3c:da:f1:ab:ad:41:6f:e7:d6:7b:9a:79: 6a:9e:99:58:3c:34:e4:87:ac:b8:c7:95:c7:ab:50: 53:76:b7:2c:3b:d8:a3:08:95:34:ad:3e:76:c4:6e: 2b:5b:2f:42:40:d2:0f:34:ff:95:3c:79:87:ad:52: a8:3e:4b:5b:e4:e3:82:ca:a0:e3:e6:36:15:57:2a: 61:4c:c4:d6:51:fa:d3:1e:b2:3f:16:26:1f:10:4d: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:4C:97:91:7F:69:62:7C:2E:01:EF:1C:5D:DC:ED:C7:29:3C:3C X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:88:ff:5f:ed:46:3c:5f:f9:29:17:86:e7:2b:0d:b4:d7:87: 34:43:f8:5e:08:17:df:28:8a:76:03:b8:d2:e6:8b:6e:8a:45: ad:0a:81:7b:21:38:84:78:04:20:df:55:30:b8:f4:59:12:02: a1:29:53:62:21:d1:90:00:36:44:fc:4d:ab:99:03:b9:8d:d2: ab:0f:ad:d4:c9:1f:af:1c:17:ad:44:b6:ec:e3:d9:aa:c5:ce: 01:a2:03:b3:7d:8d:a0:3b:9b:3e:36:8d:67:ee:fb:62:91:f3: 69:4c:2f:da:f3:1b:ac:05:1b:b4:f6:a0:ec:ed:f2:78:c2:bd: 69:eb:50:1a:5d:93:a2:a8:69:67:5f:ee:30:2d:fe:0d:5f:89: d3:bc:a3:d8:76:5e:ec:72:e2:a4:e2:13:07:54:7e:32:1a:f4: fa:43:41:8b:02:c5:f4:06:2f:be:5e:97:c0:c7:43:ad:94:4b: b4:04:96:3c:b9:4e:d3:c7:1b:d8:0e:a6:ab:cf:3c:6a:60:32: 86:50:bd:70:71:a1:73:a2:8d:49:7d:3d:0c:df:1a:5c:58:e8: 3b:f1:ed:e8:f8:58:02:a3:e8:d5:7e:73:49:bd:93:f2:a6:6e: ab:04:f4:55:ea:8b:87:0b:e5:7b:fd:9b:d6:86:9b:75:5f:db: f6:d0:d5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwsf8q4xfTrTy8Zrat6wmVP3TxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA1MTIyMjQ2MjlaFw0yNjA1MTQwMDM2MjlaMDMxMTAvBgNV BAMTKDYwNDk0Qzk3OTE3RjY5NjI3QzJFMDFFRjFDNUREQ0VEQzcyOTNDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXZ8Vg2AKQZj7l3houkg0aJOP m6oak4oG7FZQFmyEOhms6ShJA4ayMUYoz/5CUErx70jgnn2q5odVOt/d4upsqPeq VYXJUoixNS6KoB3+XdmPdk3/6cc5pUaYCSCxLGBrc6Op7ya12RLVIiWQaRxnGH4K j7j4SWWcakZhciw7HlVlC2majiE/39PWqzAFoJgG5ZE82WYRCK6Ka7RfKsvoswJk AhtOhjza8autQW/n1nuaeWqemVg8NOSHrLjHlcerUFN2tyw72KMIlTStPnbEbitb L0JA0g80/5U8eYetUqg+S1vk44LKoOPmNhVXKmFMxNZR+tMesj8WJh8QTQgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYElMl5F/aWJ8LgHvHF3c7ccpPDwwHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6I/1/tRjxf+SkXhucrDbTXhzRD+F4IF98o inYDuNLmi26KRa0KgXshOIR4BCDfVTC49FkSAqEpU2Ih0ZAANkT8TauZA7mN0qsP rdTJH68cF61Etuzj2arFzgGiA7N9jaA7mz42jWfu+2KR82lML9rzG6wFG7T2oOzt 8njCvWnrUBpdk6KoaWdf7jAt/g1fidO8o9h2Xuxy4qTiEwdUfjIa9PpDQYsCxfQG L75el8DHQ62US7QEljy5TtPHG9gOpqvPPGpgMoZQvXBxoXOijUl9PQzfGlxY6Dvx 7ej4WAKj6NV+c0m9k/KmbqsE9FXqi4cL5Xv9m9aGm3Vf2/bQ1WE= -----END CERTIFICATE-----Generated at Wed May 13 00:44:35 2026 by rpki-client