$ rpki-client -vvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json) Hash identifier: O8Eu5aBL98TF1OEDOJwjom9YOsqx37Lt/AZf2IpDA/s= Subject key identifier: 82:B4:C8:3B:F5:B2:4E:D8:DD:DF:32:2E:10:9D:FD:26:3B:31:A9:6A Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Certificate serial: 6A723C1E9E478EB62D40C7F747512E64FBA86AAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:07:00 +0000 Manifest this update: Tue 12 May 2026 23:02:00 +0000 Manifest next update: Thu 14 May 2026 00:27:00 +0000 Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=) 2: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: wpn7GJZw/QOBavbIviG4tlRZ9okYROzRzHIOpHx9MzU=) 3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:72:3c:1e:9e:47:8e:b6:2d:40:c7:f7:47:51:2e:64:fb:a8:6a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Validity Not Before: May 12 23:02:00 2026 GMT Not After : May 14 00:27:00 2026 GMT Subject: CN=82B4C83BF5B24ED8DDDF322E109DFD263B31A96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:7f:bc:dc:30:b0:87:a3:bf:28:bc:4b:2a: 2c:53:71:6b:3c:86:e8:c6:0b:c2:6a:3c:86:df:e4: f1:cf:1e:f5:7d:a1:29:04:cc:3c:c9:9f:ce:a8:bd: ce:28:d8:b3:91:16:e6:b9:12:27:f8:54:83:d0:af: 24:ac:0b:7a:f5:0e:9e:f2:f3:5b:34:49:2f:9b:18: 57:f4:16:c3:ce:9e:20:57:a6:38:5d:5c:e2:5e:39: 47:fd:68:bc:c3:cd:0c:56:bc:0a:d3:98:fc:d0:83: 8c:10:fc:de:c2:0f:d4:7a:2f:e5:e9:ce:c8:02:e5: d8:84:1d:a5:3a:f0:c5:0c:9f:08:0a:47:3e:74:7a: fc:59:d3:0b:f1:79:b6:6e:f2:7c:b6:9f:12:b1:3c: 46:1b:01:6a:e9:2f:9a:8e:61:a7:53:04:e2:fa:4c: bb:4e:9e:6d:05:e5:88:6b:11:73:c4:28:32:ae:6c: 43:4c:1a:3e:48:e7:f6:1f:60:e6:7f:26:30:95:c1: 87:c2:23:c4:88:9a:1b:15:fc:7a:5c:da:94:97:56: 2d:41:32:c1:a1:76:f1:17:ea:70:95:c9:2c:6d:4a: 45:e2:42:0e:ec:b5:87:a8:79:48:66:4a:1f:c1:30: 68:2a:18:c8:23:e3:ec:75:f2:91:69:82:73:54:7e: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:C8:3B:F5:B2:4E:D8:DD:DF:32:2E:10:9D:FD:26:3B:31:A9:6A X509v3 Authority Key Identifier: keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:65:62:d8:76:e8:df:82:8d:29:64:83:04:08:62:a8:a7:99: f0:75:3d:a4:d2:90:4d:03:86:2a:4b:56:ea:68:76:73:ab:27: 68:03:3e:a1:c2:e3:a8:a4:a9:d8:df:6c:c3:20:6f:d2:08:c0: 50:c2:91:ba:f5:36:e0:91:b8:34:09:f6:11:57:9c:2f:dc:6f: 16:54:bd:fa:c8:a3:eb:1b:d8:3f:bd:78:5c:f1:14:93:4e:b2: 94:c6:ac:49:1d:e7:0d:9d:30:ea:bc:c7:4c:65:67:d2:b1:7b: 9d:91:5c:ad:68:95:fa:a5:7c:c4:f1:56:ab:75:a5:d2:43:ab: e3:de:18:1e:72:a7:f2:dc:a3:02:21:dc:02:4d:bb:56:8b:b3: 2b:24:4e:50:64:cc:32:3b:ef:d1:39:93:2d:d9:87:49:20:6c: 1d:38:bf:98:00:91:91:bd:3a:ec:2d:5f:2a:10:94:7e:85:9f: f4:40:1a:70:14:40:d1:97:3d:0d:c4:78:36:b6:73:0e:ac:e6: 06:b0:c9:87:e9:ec:4f:9c:5c:54:4d:07:7b:7e:75:7c:4c:19: d8:ca:16:46:25:97:4c:47:8c:b4:6a:64:43:6c:e2:ba:3a:25: 8d:52:cf:ea:c9:c8:c4:b7:7a:e7:f4:7b:67:33:d8:5c:d9:b9: ed:29:da:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanI8Hp5HjrYtQMf3R1EuZPuoaqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD RDZGQjlCOTAeFw0yNjA1MTIyMzAyMDBaFw0yNjA1MTQwMDI3MDBaMDMxMTAvBgNV BAMTKDgyQjRDODNCRjVCMjRFRDhERERGMzIyRTEwOURGRDI2M0IzMUE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrln+83DCwh6O/KLxLKixTcWs8 hujGC8JqPIbf5PHPHvV9oSkEzDzJn86ovc4o2LORFua5Eif4VIPQrySsC3r1Dp7y 81s0SS+bGFf0FsPOniBXpjhdXOJeOUf9aLzDzQxWvArTmPzQg4wQ/N7CD9R6L+Xp zsgC5diEHaU68MUMnwgKRz50evxZ0wvxebZu8ny2nxKxPEYbAWrpL5qOYadTBOL6 TLtOnm0F5YhrEXPEKDKubENMGj5I5/YfYOZ/JjCVwYfCI8SImhsV/Hpc2pSXVi1B MsGhdvEX6nCVySxtSkXiQg7stYeoeUhmSh/BMGgqGMgj4+x18pFpgnNUfl0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgrTIO/WyTtjd3zIuEJ39JjsxqWowHwYDVR0j BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERlYth26N+CjSlkgwQIYqinmfB1PaTSkE0D hipLVupodnOrJ2gDPqHC46ikqdjfbMMgb9IIwFDCkbr1NuCRuDQJ9hFXnC/cbxZU vfrIo+sb2D+9eFzxFJNOspTGrEkd5w2dMOq8x0xlZ9Kxe52RXK1olfqlfMTxVqt1 pdJDq+PeGB5yp/LcowIh3AJNu1aLsyskTlBkzDI779E5ky3Zh0kgbB04v5gAkZG9 OuwtXyoQlH6Fn/RAGnAUQNGXPQ3EeDa2cw6s5gawyYfp7E+cXFRNB3t+dXxMGdjK FkYll0xHjLRqZENs4ro6JY1Sz+rJyMS3euf0e2cz2FzZue0p2oA= -----END CERTIFICATE-----Generated at Wed May 13 05:24:57 2026 by rpki-client