$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: MNy5gvotLNES8wMAHp5wnIe8f2zPE/vkkvm3BbROauQ= Subject key identifier: 87:BE:F6:1B:18:3B:6D:57:60:69:24:D2:6B:87:46:0C:EB:AB:27:61 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 6AD272A1625FCDD972C9790BC613F60C04E9CCF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:27:24 +0000 Manifest this update: Tue 12 May 2026 20:22:24 +0000 Manifest next update: Wed 13 May 2026 21:07:24 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) 3: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: f/6czyvS7p4ZhiU+/r/gCiA0BGF3W1x/EGVxz1fK3Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d2:72:a1:62:5f:cd:d9:72:c9:79:0b:c6:13:f6:0c:04:e9:cc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: May 12 20:22:24 2026 GMT Not After : May 13 21:07:24 2026 GMT Subject: CN=87BEF61B183B6D57606924D26B87460CEBAB2761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:e4:35:a0:af:7c:dd:e9:4d:e7:17:2e:e2: d9:f6:57:92:b6:35:a9:29:2e:51:8b:ac:e8:2b:04: 26:3c:5a:23:ce:46:6c:ea:37:38:a0:41:dd:05:be: 5c:cd:d6:6f:4e:d6:f5:51:f2:43:09:aa:d4:95:63: 12:56:4f:4f:59:57:46:1d:8d:f6:ca:36:09:c7:76: 04:7e:2b:94:0c:8d:f0:c8:0a:e1:6e:f1:e8:91:5d: 75:f4:60:4d:3c:d9:08:90:a2:01:64:1b:80:7f:26: 45:0d:7b:c1:a4:f9:45:be:64:cf:01:3f:4e:f6:07: ff:ba:a5:34:84:38:32:68:27:b1:4a:c2:80:86:bb: 45:71:1d:5a:d0:31:af:5b:e8:af:f6:1b:3d:0a:0a: 54:97:9b:ba:6a:62:5b:ec:7a:e0:96:61:1a:6e:87: 6f:9a:83:44:3e:b0:55:83:59:46:67:ca:38:d5:cf: 1c:d4:8e:64:db:6c:d0:5f:12:9f:d4:09:83:41:95: ba:5a:cd:ad:a0:23:28:21:8a:6f:dd:23:19:40:9a: f5:df:17:72:ac:16:a8:f0:01:84:e0:4f:ab:97:f8: e7:73:ac:dc:9c:f2:41:f5:6c:4d:e3:a4:6a:b9:bb: 67:9b:d0:bf:4c:ca:0e:59:f3:1a:db:ba:26:2d:95: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BE:F6:1B:18:3B:6D:57:60:69:24:D2:6B:87:46:0C:EB:AB:27:61 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8e:34:ce:75:1e:0b:3a:80:d1:f7:81:1d:0b:55:e5:45:ee: 44:ec:94:6b:96:aa:09:c8:83:7f:ca:58:4c:cd:4a:06:5f:33: 05:5a:87:12:5b:2b:51:d5:49:ae:70:6b:c4:59:e6:90:94:e0: 09:8e:73:1f:49:d4:2f:80:9b:5e:70:d0:dd:aa:4b:fa:0d:35: 05:d8:67:2b:66:00:5c:64:83:ea:28:04:c6:7b:71:9f:81:55: 50:4b:1e:27:a8:0b:55:73:7e:c0:00:13:23:b0:77:75:77:60: 7f:d7:a1:18:a1:45:de:e6:40:94:aa:1a:69:f7:b0:22:3a:95: 27:25:b1:7b:33:32:ba:cc:87:bd:bb:24:59:1e:6f:46:77:f6: ae:0a:9e:61:ec:70:bd:a0:0f:df:a7:09:b1:8b:8e:bd:55:af: 4d:20:9c:08:31:6e:03:fd:b9:a9:b4:03:e7:1f:af:db:22:d5: f4:6e:ac:13:32:d4:40:89:48:f1:b1:08:56:9f:01:5f:7a:0b: f2:97:b0:ff:63:56:c0:8f:9e:f3:ee:06:d8:de:f0:cf:50:e4: 36:97:63:64:74:8e:e9:f9:4f:f6:3f:7f:9a:6e:c7:c6:f1:dd: 3d:7b:2b:de:f9:fc:ec:22:c1:73:07:f9:3f:a1:21:27:f8:3c: 01:48:1b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatJyoWJfzdlyyXkLxhP2DATpzPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA1MTIyMDIyMjRaFw0yNjA1MTMyMTA3MjRaMDMxMTAvBgNV BAMTKDg3QkVGNjFCMTgzQjZENTc2MDY5MjREMjZCODc0NjBDRUJBQjI3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJuQ1oK983elN5xcu4tn2V5K2 NakpLlGLrOgrBCY8WiPORmzqNzigQd0FvlzN1m9O1vVR8kMJqtSVYxJWT09ZV0Yd jfbKNgnHdgR+K5QMjfDICuFu8eiRXXX0YE082QiQogFkG4B/JkUNe8Gk+UW+ZM8B P072B/+6pTSEODJoJ7FKwoCGu0VxHVrQMa9b6K/2Gz0KClSXm7pqYlvseuCWYRpu h2+ag0Q+sFWDWUZnyjjVzxzUjmTbbNBfEp/UCYNBlbpaza2gIyghim/dIxlAmvXf F3KsFqjwAYTgT6uX+OdzrNyc8kH1bE3jpGq5u2eb0L9Myg5Z8xrbuiYtlS7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh772Gxg7bVdgaSTSa4dGDOurJ2EwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaONM51Hgs6gNH3gR0LVeVF7kTslGuWqgnI g3/KWEzNSgZfMwVahxJbK1HVSa5wa8RZ5pCU4AmOcx9J1C+Am15w0N2qS/oNNQXY ZytmAFxkg+ooBMZ7cZ+BVVBLHieoC1VzfsAAEyOwd3V3YH/XoRihRd7mQJSqGmn3 sCI6lSclsXszMrrMh727JFkeb0Z39q4KnmHscL2gD9+nCbGLjr1Vr00gnAgxbgP9 uam0A+cfr9si1fRurBMy1ECJSPGxCFafAV96C/KXsP9jVsCPnvPuBtje8M9Q5DaX Y2R0jun5T/Y/f5pux8bx3T17K975/OwiwXMH+T+hISf4PAFIG8o= -----END CERTIFICATE-----Generated at Wed May 13 03:48:37 2026 by rpki-client