$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: 7Q/+TylNsmt1tZX6YLXmkcLif3OcFmN/jbxB2ILeyus= Subject key identifier: 33:7F:15:83:01:47:2E:1B:72:97:A4:63:B4:28:79:B4:4B:64:47:38 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 352D486CA415BFE27F05AF5E673FBB651D287907 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:13 +0000 Manifest this update: Tue 12 May 2026 20:53:13 +0000 Manifest next update: Thu 14 May 2026 00:33:13 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) 2: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: JrrRDDff0OM/DQ357VOV0H5KDkPBdCJPZarim93LJUw=) 3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) 4: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) 5: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2d:48:6c:a4:15:bf:e2:7f:05:af:5e:67:3f:bb:65:1d:28:79:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: May 12 20:53:13 2026 GMT Not After : May 14 00:33:13 2026 GMT Subject: CN=337F158301472E1B7297A463B42879B44B644738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:c2:59:7b:04:6f:2c:bb:9f:52:d7:ac:9f: 09:f6:c8:bf:d2:20:3d:95:10:3d:5d:fb:dc:17:7a: e0:f7:85:ef:7c:b6:8a:7d:58:89:4f:16:26:0e:3b: c5:0c:fa:34:f8:5f:db:62:e3:6a:0b:de:ce:59:93: 91:4a:15:04:b7:9e:9e:21:95:3b:80:1c:35:e9:9c: c3:95:87:55:21:a2:3f:e8:0a:61:98:fb:47:7b:da: d6:c9:2e:60:91:c9:11:e6:51:17:41:f0:9b:03:1c: e9:2c:60:41:c6:64:f7:33:ff:f5:48:b9:6c:78:fb: 04:35:ca:36:4c:46:98:a0:00:c3:6b:ac:2f:e0:0b: 75:15:fb:7e:5e:af:76:04:1c:6d:3e:57:4d:41:e0: c5:4a:6c:94:e2:38:61:07:01:4c:e7:36:5b:4b:c1: 19:30:bc:78:79:6a:0f:c5:ca:f8:21:57:39:86:bf: a3:f9:ff:3c:63:c3:b6:37:51:d5:49:95:63:7a:78: 28:07:d2:83:34:6d:d3:ed:f1:eb:d3:f7:91:18:86: cb:8f:c2:64:a2:7f:cc:e2:7f:43:27:48:b3:4b:7b: e4:ee:cf:a1:cb:7e:5a:a4:96:ec:f5:bd:0e:31:91: 85:cd:29:99:0d:d6:a5:b0:c6:ea:a7:5c:30:22:ec: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:15:83:01:47:2E:1B:72:97:A4:63:B4:28:79:B4:4B:64:47:38 X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:25:56:eb:ba:70:64:a8:0a:f7:f1:42:35:13:60:d6:63:7e: 20:a7:b1:54:4d:db:91:bf:23:9f:b4:19:5c:ac:d1:31:bc:a9: dd:92:c7:5f:3f:dc:d4:0d:07:ac:0d:84:1b:b8:93:d4:ae:43: d1:ad:97:7a:f2:fa:3d:b6:39:13:22:80:0b:9e:af:b5:9b:34: 51:d4:3c:a4:83:35:93:0c:09:91:ed:01:4a:d8:54:98:b1:33: 39:6c:df:60:a4:5c:d6:fb:46:41:ce:f5:aa:4f:82:4e:03:a1: e7:d3:cf:1d:12:a4:7d:db:a8:a7:9c:24:e8:cb:4b:10:9a:d7: 41:68:f6:ab:86:6f:8d:d7:76:83:08:62:64:83:ec:41:66:a0: 5b:ac:0e:db:cd:03:98:3e:be:96:c7:e8:3a:41:26:e2:84:bf: 92:30:9a:4c:ff:9f:f1:8b:33:2a:96:5f:1d:27:78:bf:ca:6e: 9f:78:d2:d4:11:6b:84:5d:8f:be:8d:d8:54:75:49:75:86:01: 0c:62:cc:cf:6b:d8:e2:54:fa:e0:c8:36:9c:2a:1b:79:74:40: 19:cc:37:7a:e5:44:54:89:0f:75:c8:bb:76:20:3d:57:30:c1: 37:2b:21:88:5e:ff:91:76:e1:18:2d:58:b4:f8:41:44:7a:97: db:55:5d:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNS1IbKQVv+J/Ba9eZz+7ZR0oeQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA1MTIyMDUzMTNaFw0yNjA1MTQwMDMzMTNaMDMxMTAvBgNV BAMTKDMzN0YxNTgzMDE0NzJFMUI3Mjk3QTQ2M0I0Mjg3OUI0NEI2NDQ3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfMJZewRvLLufUtesnwn2yL/S ID2VED1d+9wXeuD3he98top9WIlPFiYOO8UM+jT4X9ti42oL3s5Zk5FKFQS3np4h lTuAHDXpnMOVh1Uhoj/oCmGY+0d72tbJLmCRyRHmURdB8JsDHOksYEHGZPcz//VI uWx4+wQ1yjZMRpigAMNrrC/gC3UV+35er3YEHG0+V01B4MVKbJTiOGEHAUznNltL wRkwvHh5ag/FyvghVzmGv6P5/zxjw7Y3UdVJlWN6eCgH0oM0bdPt8evT95EYhsuP wmSif8zif0MnSLNLe+Tuz6HLflqkluz1vQ4xkYXNKZkN1qWwxuqnXDAi7KdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM38VgwFHLhtyl6RjtCh5tEtkRzgwHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADclVuu6cGSoCvfxQjUTYNZjfiCnsVRN25G/ I5+0GVys0TG8qd2Sx18/3NQNB6wNhBu4k9SuQ9Gtl3ry+j22ORMigAuer7WbNFHU PKSDNZMMCZHtAUrYVJixMzls32CkXNb7RkHO9apPgk4DoefTzx0SpH3bqKecJOjL SxCa10Fo9quGb43XdoMIYmSD7EFmoFusDtvNA5g+vpbH6DpBJuKEv5Iwmkz/n/GL MyqWXx0neL/Kbp940tQRa4Rdj76N2FR1SXWGAQxizM9r2OJU+uDINpwqG3l0QBnM N3rlRFSJD3XIu3YgPVcwwTcrIYhe/5F24RgtWLT4QUR6l9tVXYg= -----END CERTIFICATE-----Generated at Wed May 13 00:34:26 2026 by rpki-client