$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: KULoJzd1V4kttBeO9zQ8UIvi7ex3bbtey6A6ufusMOs= Subject key identifier: B3:AB:CF:AA:DB:61:BF:DA:63:2A:98:8B:19:7B:7A:0C:44:8B:8E:CB Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 045F3FAE7A2700CA5B64E7A5CBFD4AD7E85DE7CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:27 +0000 Manifest this update: Tue 12 May 2026 19:25:27 +0000 Manifest next update: Wed 13 May 2026 20:55:27 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 2: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: Q6wNAEMi06SOXPoc+kwDa7mnkYjtFjNoIpaYQWCWJj0=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5f:3f:ae:7a:27:00:ca:5b:64:e7:a5:cb:fd:4a:d7:e8:5d:e7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: May 12 19:25:27 2026 GMT Not After : May 13 20:55:27 2026 GMT Subject: CN=B3ABCFAADB61BFDA632A988B197B7A0C448B8ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:44:46:2c:ac:29:18:74:64:6f:d6:19:7a: a5:2b:76:f6:f0:b6:b7:ad:c9:f7:79:44:08:9a:d6: e8:60:b5:04:73:4e:bd:ca:c6:f3:79:50:7d:8c:98: 16:63:89:82:99:cc:d1:97:f1:c8:b0:b1:52:ca:44: 32:89:10:5b:bb:0e:09:76:79:81:52:0e:42:1d:36: 8c:58:b6:dd:12:72:d5:66:d5:c1:43:9a:bf:6e:18: e7:e2:f6:53:f6:a4:e6:9c:ae:0b:39:0b:93:99:ae: 1f:28:e8:4a:81:b3:db:54:ad:90:83:cb:2e:9d:95: 56:2a:cf:96:b3:68:ff:77:58:93:df:8b:e1:e5:37: d7:2f:fc:7e:00:f8:be:87:15:c5:29:8d:51:c9:c1: 28:db:c6:55:91:f7:18:67:05:c5:70:80:be:11:54: 40:cb:d8:91:1f:d8:d5:d0:ed:65:86:4e:e5:b3:81: 29:a0:d5:65:eb:65:bb:a6:1a:f2:59:58:b3:e1:4c: 7d:b9:09:3e:f6:3f:f5:38:97:a4:60:b2:a9:5d:e5: 7d:f9:eb:5b:f4:15:12:7c:12:73:2d:13:f1:c9:df: a1:b3:fb:d7:42:48:8b:ff:4d:45:8b:e4:5c:0a:fe: 51:fa:02:21:65:16:1c:1b:5f:bd:29:56:90:73:29: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:CF:AA:DB:61:BF:DA:63:2A:98:8B:19:7B:7A:0C:44:8B:8E:CB X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bf:27:76:58:a4:22:28:73:f8:38:6c:7f:ae:56:49:b0:5a: ed:fe:38:f6:34:0b:b0:9b:29:70:e9:cd:17:08:37:ba:94:46: 1c:4e:48:85:51:0f:dc:27:36:98:0b:87:fb:a7:fc:6e:26:e2: 06:c2:64:32:50:ef:25:f8:11:98:63:f7:99:5b:c5:8e:e1:a6: d3:d4:e4:47:ea:76:9a:90:e5:4e:bc:08:c2:d9:d7:61:95:5f: de:0b:b7:0d:e8:c1:c1:a2:85:52:6e:62:2d:c7:14:c5:3c:c6: 82:02:80:0b:7b:e2:f4:98:59:9d:01:af:a0:a8:81:bd:24:db: 10:37:6d:b4:7b:79:05:b8:fd:e4:2e:14:2c:d7:84:76:7e:b0: 34:03:7a:58:16:f2:f0:98:d7:dd:10:86:d6:22:80:7e:2c:14: 74:5d:e1:8d:fe:08:d2:a1:71:66:77:82:50:8b:8d:5e:00:98: 28:73:21:4f:22:83:09:ee:d6:9d:be:6e:e9:ac:97:0b:2e:a9: a0:34:59:11:92:fd:b5:5d:ae:97:73:3b:cc:3c:86:95:09:47: 1b:6c:e8:d8:2c:ba:db:40:ca:f3:c1:6b:2e:19:43:a0:e5:9f: 82:76:bf:cb:9b:07:88:6d:08:f6:6b:4f:7e:df:2a:36:4d:75: 7a:fd:72:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBF8/rnonAMpbZOely/1K1+hd58wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA1MTIxOTI1MjdaFw0yNjA1MTMyMDU1MjdaMDMxMTAvBgNV BAMTKEIzQUJDRkFBREI2MUJGREE2MzJBOTg4QjE5N0I3QTBDNDQ4QjhFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6ERGLKwpGHRkb9YZeqUrdvbw tretyfd5RAia1uhgtQRzTr3KxvN5UH2MmBZjiYKZzNGX8ciwsVLKRDKJEFu7Dgl2 eYFSDkIdNoxYtt0SctVm1cFDmr9uGOfi9lP2pOacrgs5C5OZrh8o6EqBs9tUrZCD yy6dlVYqz5azaP93WJPfi+HlN9cv/H4A+L6HFcUpjVHJwSjbxlWR9xhnBcVwgL4R VEDL2JEf2NXQ7WWGTuWzgSmg1WXrZbumGvJZWLPhTH25CT72P/U4l6Rgsqld5X35 61v0FRJ8EnMtE/HJ36Gz+9dCSIv/TUWL5FwK/lH6AiFlFhwbX70pVpBzKWLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6vPqtthv9pjKpiLGXt6DESLjsswHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKC/J3ZYpCIoc/g4bH+uVkmwWu3+OPY0C7Cb KXDpzRcIN7qURhxOSIVRD9wnNpgLh/un/G4m4gbCZDJQ7yX4EZhj95lbxY7hptPU 5EfqdpqQ5U68CMLZ12GVX94Ltw3owcGihVJuYi3HFMU8xoICgAt74vSYWZ0Br6Co gb0k2xA3bbR7eQW4/eQuFCzXhHZ+sDQDelgW8vCY190QhtYigH4sFHRd4Y3+CNKh cWZ3glCLjV4AmChzIU8igwnu1p2+bumslwsuqaA0WRGS/bVdrpdzO8w8hpUJRxts 6NgsuttAyvPBay4ZQ6Dln4J2v8ubB4htCPZrT37fKjZNdXr9cro= -----END CERTIFICATE-----Generated at Wed May 13 02:16:14 2026 by rpki-client