$ rpki-client -vvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: 8BTLa63TmnJS9G3mAzpWF1JbNf7g+8AGh+LDC1e4FBw= Subject key identifier: 72:D3:24:3A:D4:AF:1F:52:D4:E6:A1:C4:21:EA:0B:B5:C4:2B:5D:99 Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 21C1FA3C814F0CCBED2C69DA2FF488E0B94E3E14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:50 +0000 Manifest this update: Tue 12 May 2026 19:35:50 +0000 Manifest next update: Wed 13 May 2026 21:59:50 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) 2: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 3: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: +1uDS1nqoVLseWw6+iUYLYJ2yGJCrnEpPLgAdl2B4Q8=) 4: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c1:fa:3c:81:4f:0c:cb:ed:2c:69:da:2f:f4:88:e0:b9:4e:3e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: May 12 19:35:50 2026 GMT Not After : May 13 21:59:50 2026 GMT Subject: CN=72D3243AD4AF1F52D4E6A1C421EA0BB5C42B5D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:92:0e:70:22:94:8e:0a:11:ef:62:84:53: af:0f:ef:95:be:ab:25:c4:71:66:c2:6a:e3:c1:b9: a0:8f:a6:4e:30:bc:87:e8:7f:e0:12:a5:c5:51:58: f0:95:19:77:4a:49:12:5c:0c:82:a6:41:eb:88:1f: 90:c3:f8:54:bc:cc:dc:1f:60:9f:89:7e:25:e0:e2: dd:dc:67:2e:73:da:2d:ed:e8:ea:e0:54:26:28:1e: c6:23:93:3e:f2:e2:75:64:1b:71:c2:3a:a4:e3:c7: d3:ec:84:e1:0e:14:46:fc:6e:47:8b:7a:f4:fd:f6: 5b:6a:5d:c8:35:c3:8d:dc:ca:76:f9:37:d8:fd:62: 16:d1:58:98:5c:96:f5:32:0d:9f:77:ff:c7:2c:6b: ad:06:a4:b6:21:eb:13:f3:6b:d0:f5:6b:3e:4f:44: 96:c1:09:4b:ac:01:56:87:2d:16:a8:4b:1a:c0:6f: 35:a7:c4:e0:53:2c:c9:1c:1e:1d:ba:97:da:1a:da: ab:23:a4:71:9f:a5:24:5f:67:a5:cc:a2:36:a6:1d: 8a:29:dd:82:1c:ab:f9:d4:f4:e0:d2:a2:2e:db:59: e3:bb:04:d2:b5:e4:9d:8a:f2:eb:b5:08:6b:f6:c7: 11:8b:99:6f:df:95:4c:5f:31:95:f9:12:68:2e:b9: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:24:3A:D4:AF:1F:52:D4:E6:A1:C4:21:EA:0B:B5:C4:2B:5D:99 X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c3:82:bb:aa:ba:33:4e:d7:3c:24:41:5c:7c:b8:ad:f5:2b: 13:2b:60:2a:94:74:31:6c:b5:cd:d6:1c:8d:27:7a:b5:e2:44: f5:ab:8a:1a:7f:8f:b8:23:e3:e8:79:bd:d0:b0:35:e4:53:45: c5:3f:02:cf:7b:2c:d5:73:c5:1e:aa:69:65:4c:1f:64:8f:6a: 99:6a:7a:8c:7a:36:05:a9:8d:3f:ba:24:c6:1d:db:00:c1:2c: 5d:36:f0:0f:33:91:4f:1e:b0:e1:a7:63:55:89:46:1a:a1:3f: 0d:c7:1c:4f:aa:2a:07:c3:7f:8d:86:49:0e:fa:40:b1:92:d7: 49:2f:3d:f6:a9:81:ab:9d:e0:53:5b:64:ea:1b:56:46:3e:6f: 45:4d:7b:dc:60:c0:3d:58:46:d7:dd:d7:8d:47:22:0a:55:77: 7b:e8:4b:88:f7:8a:5b:e7:23:59:06:e1:79:83:dd:51:b3:a1: f7:98:3b:35:95:6f:20:27:a4:f7:90:23:f9:8a:fb:11:5a:12: 01:3c:10:c4:fc:77:cd:3b:09:67:3d:8e:4a:3f:19:74:86:26: 60:4f:2d:bd:3c:88:ed:52:b8:7e:13:6d:12:dc:72:28:df:59: 37:ad:79:97:d8:db:77:b2:e5:da:71:0e:b3:ab:f8:ac:fe:01: 59:99:7d:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcH6PIFPDMvtLGnaL/SI4LlOPhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA1MTIxOTM1NTBaFw0yNjA1MTMyMTU5NTBaMDMxMTAvBgNV BAMTKDcyRDMyNDNBRDRBRjFGNTJENEU2QTFDNDIxRUEwQkI1QzQyQjVEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkJIOcCKUjgoR72KEU68P75W+ qyXEcWbCauPBuaCPpk4wvIfof+ASpcVRWPCVGXdKSRJcDIKmQeuIH5DD+FS8zNwf YJ+JfiXg4t3cZy5z2i3t6OrgVCYoHsYjkz7y4nVkG3HCOqTjx9PshOEOFEb8bkeL evT99ltqXcg1w43cynb5N9j9YhbRWJhclvUyDZ93/8csa60GpLYh6xPza9D1az5P RJbBCUusAVaHLRaoSxrAbzWnxOBTLMkcHh26l9oa2qsjpHGfpSRfZ6XMojamHYop 3YIcq/nU9ODSoi7bWeO7BNK15J2K8uu1CGv2xxGLmW/flUxfMZX5EmguuZrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctMkOtSvH1LU5qHEIeoLtcQrXZkwHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPDgruqujNO1zwkQVx8uK31KxMrYCqUdDFs tc3WHI0nerXiRPWrihp/j7gj4+h5vdCwNeRTRcU/As97LNVzxR6qaWVMH2SPaplq eox6NgWpjT+6JMYd2wDBLF028A8zkU8esOGnY1WJRhqhPw3HHE+qKgfDf42GSQ76 QLGS10kvPfapgaud4FNbZOobVkY+b0VNe9xgwD1YRtfd141HIgpVd3voS4j3ilvn I1kG4XmD3VGzofeYOzWVbyAnpPeQI/mK+xFaEgE8EMT8d807CWc9jko/GXSGJmBP Lb08iO1SuH4TbRLccijfWTeteZfY23ey5dpxDrOr+Kz+AVmZfeI= -----END CERTIFICATE-----Generated at Wed May 13 04:47:42 2026 by rpki-client