$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: GEqrxw5Ct/Cg4T0rxBKKx2heCjia9AXeJ54/5y6ULUQ= Subject key identifier: 44:4F:F8:9A:B7:10:DC:82:D1:29:EB:22:4E:17:15:16:1D:50:58:28 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 08D43420FDDF15883F3EA043DD5F1E7DC06B20EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:31 +0000 Manifest this update: Tue 12 May 2026 17:32:31 +0000 Manifest next update: Wed 13 May 2026 18:32:31 +0000 Files and hashes: 1: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: jZMvxFs3n1txn3RctXhme6MENZ1+iRFS28+7MofFj9Q=) 2: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 3: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) 4: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d4:34:20:fd:df:15:88:3f:3e:a0:43:dd:5f:1e:7d:c0:6b:20:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: May 12 17:32:31 2026 GMT Not After : May 13 18:32:31 2026 GMT Subject: CN=444FF89AB710DC82D129EB224E1715161D505828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:52:a8:08:bf:e7:81:e4:4c:a7:49:6d:13: 17:5c:47:2e:b9:fc:fc:e3:89:50:ef:b8:ca:23:52: 61:ed:37:db:ec:13:fa:0c:b5:86:e7:a4:4a:bf:7b: 9c:1c:9d:3c:02:02:40:3a:e2:76:5f:42:f0:fc:f4: 49:35:74:61:63:00:9e:a0:1f:ce:9d:32:e9:43:ec: 00:32:16:a3:78:bb:b0:0b:79:9c:de:3b:f0:70:85: 26:9c:e7:95:94:f5:9b:b2:4c:89:e0:0a:a9:fa:48: 07:b8:07:96:f4:95:8b:58:31:ac:ea:93:8e:3c:22: 81:01:1b:89:cb:10:2a:55:14:06:dd:16:90:d3:b9: fe:89:80:a6:e7:6b:42:d8:84:da:cb:a2:b4:02:6e: 3c:51:3f:c4:ad:0a:a9:45:13:65:73:3d:3f:3d:61: 76:c7:81:9c:a2:3d:8f:cf:1b:43:3e:5a:4c:9c:f7: 7c:55:51:d8:de:d7:48:a0:54:89:12:aa:69:72:7f: 8a:c5:6d:14:38:10:a1:19:51:5a:b7:f1:6a:2f:66: 7c:b8:bc:f1:b9:49:36:f3:0b:31:09:b5:46:47:bb: a4:de:98:88:b3:af:65:c8:f2:02:87:92:9b:bb:18: d4:ab:76:d1:a3:f6:21:e5:16:db:90:e0:ea:fd:2d: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4F:F8:9A:B7:10:DC:82:D1:29:EB:22:4E:17:15:16:1D:50:58:28 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:15:f6:31:2a:25:a5:a2:6f:07:07:d2:95:31:0d:a6:51: 81:7a:2e:e9:a5:19:d2:e6:23:59:e1:4c:29:36:bc:e5:d1:b6: c7:df:23:2c:35:a3:de:02:5c:a8:b0:50:d8:07:62:d4:ab:3d: 48:21:e7:8b:6a:78:49:19:39:64:1f:c9:51:23:9d:c1:19:99: 70:98:57:50:37:a8:5a:83:19:00:26:35:e2:a0:70:77:27:23: 30:e3:d7:5e:ea:79:c2:9f:f5:43:2a:c2:98:9c:57:f7:e9:7c: e4:e7:aa:04:09:55:ed:8f:9b:fe:34:eb:a4:a9:a8:2f:fa:4f: 1b:35:f3:d5:5a:8e:29:70:5f:40:3e:b0:72:3f:fe:67:3b:f6: f3:27:eb:f2:70:c7:f7:ad:f3:d6:c2:0e:50:45:8a:4d:48:3d: 21:e5:d2:53:57:b3:36:b9:8f:5b:a6:12:a0:17:aa:09:6d:1e: ae:e8:95:a3:d1:82:7b:86:90:19:52:63:b2:3c:9a:75:4c:39: b3:83:2c:18:78:ed:9f:46:dd:33:60:66:87:45:34:c9:ad:56: 81:ab:fa:67:4a:f4:b0:4e:f3:61:4c:bb:36:7a:55:1f:2f:03: 4f:5f:ac:9a:b6:09:8d:35:3d:09:2b:32:e1:c4:73:0f:84:79: b9:a9:67:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNQ0IP3fFYg/PqBD3V8efcBrIOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA1MTIxNzMyMzFaFw0yNjA1MTMxODMyMzFaMDMxMTAvBgNV BAMTKDQ0NEZGODlBQjcxMERDODJEMTI5RUIyMjRFMTcxNTE2MUQ1MDU4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTlKoCL/ngeRMp0ltExdcRy65 /PzjiVDvuMojUmHtN9vsE/oMtYbnpEq/e5wcnTwCAkA64nZfQvD89Ek1dGFjAJ6g H86dMulD7AAyFqN4u7ALeZzeO/BwhSac55WU9ZuyTIngCqn6SAe4B5b0lYtYMazq k448IoEBG4nLECpVFAbdFpDTuf6JgKbna0LYhNrLorQCbjxRP8StCqlFE2VzPT89 YXbHgZyiPY/PG0M+Wkyc93xVUdje10igVIkSqmlyf4rFbRQ4EKEZUVq38WovZny4 vPG5STbzCzEJtUZHu6TemIizr2XI8gKHkpu7GNSrdtGj9iHlFtuQ4Or9Lee9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURE/4mrcQ3ILRKesiThcVFh1QWCgwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHegFfYxKiWlom8HB9KVMQ2mUYF6LumlGdLm I1nhTCk2vOXRtsffIyw1o94CXKiwUNgHYtSrPUgh54tqeEkZOWQfyVEjncEZmXCY V1A3qFqDGQAmNeKgcHcnIzDj117qecKf9UMqwpicV/fpfOTnqgQJVe2Pm/4066Sp qC/6Txs189VajilwX0A+sHI//mc79vMn6/Jwx/et89bCDlBFik1IPSHl0lNXsza5 j1umEqAXqgltHq7olaPRgnuGkBlSY7I8mnVMObODLBh47Z9G3TNgZodFNMmtVoGr +mdK9LBO82FMuzZ6VR8vA09frJq2CY01PQkrMuHEcw+EebmpZ3U= -----END CERTIFICATE-----Generated at Wed May 13 01:14:20 2026 by rpki-client