$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft File: 883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json) Hash identifier: lDBXl6qnlK1IBEyBirhXxcAcLs0iisd1qne5Ptn1JrA= Subject key identifier: BC:B9:7E:03:FE:AC:3C:C0:16:F4:DF:09:D5:A3:48:5E:78:27:DE:95 Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Certificate serial: 4743E50F8334B2C4A6A48A915891C99335D54985 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:47:56 +0000 Manifest this update: Tue 12 May 2026 23:42:56 +0000 Manifest next update: Thu 14 May 2026 03:01:56 +0000 Files and hashes: 1: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: Wpjt5zC/ZdmKluV7cBz0xxNUz+d/XoWhjAFd/2K/dpE=) 2: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=) 3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=) 4: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:43:e5:0f:83:34:b2:c4:a6:a4:8a:91:58:91:c9:93:35:d5:49:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Validity Not Before: May 12 23:42:56 2026 GMT Not After : May 14 03:01:56 2026 GMT Subject: CN=BCB97E03FEAC3CC016F4DF09D5A3485E7827DE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:9a:6a:0e:36:63:78:ff:55:22:9f:3c:37: e6:d9:97:f7:70:6b:cb:b6:cb:1d:f9:ef:fc:0a:de: 2e:9b:f7:8c:3b:18:79:5b:34:b5:48:f0:4b:7c:3e: 16:57:2a:86:40:74:66:75:d7:d2:08:96:75:bf:a0: 79:6f:53:85:22:54:2a:d6:24:1a:6e:91:7a:e7:ef: f0:eb:02:a4:cc:e4:46:04:16:1a:47:10:67:68:89: e1:cb:65:9e:e8:ab:63:6c:51:39:8d:b2:bb:23:d4: 48:ca:c0:21:20:62:0f:42:30:0a:81:9b:29:ef:4e: 3b:34:f2:e2:a0:95:0a:3e:04:7f:ce:67:b8:30:a3: e5:6a:b6:21:04:c7:ef:89:c1:6e:a3:8f:73:40:07: 1e:36:9c:ba:5e:e2:15:07:f4:6d:a6:36:b0:0f:e5: 42:3e:42:76:f2:32:f2:cc:e1:45:59:25:29:ee:a3: f0:53:18:8c:44:5e:dd:a0:1a:bc:c9:c3:4d:27:9d: 57:98:98:7f:cb:6f:d5:25:ee:bb:8f:21:0b:66:91: 03:1c:3e:63:2e:b1:fb:cb:fc:49:ba:df:3e:96:ba: f3:10:f5:6c:41:60:c6:42:34:c5:3e:d7:9a:c4:a0: f3:fa:59:6c:68:8f:29:90:93:11:91:66:5a:fc:85: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:7E:03:FE:AC:3C:C0:16:F4:DF:09:D5:A3:48:5E:78:27:DE:95 X509v3 Authority Key Identifier: keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:d9:c2:4f:4f:65:07:81:ab:9e:2a:c1:e8:23:28:7f:e1: b5:72:6e:6b:36:2e:3e:9a:37:21:b4:f0:05:81:3e:a2:50:c0: 54:c9:ee:f0:e9:3d:9e:10:86:6d:b2:72:12:be:04:32:bb:f6: 09:f0:cb:6b:6c:ee:60:c7:7d:87:f7:46:a9:00:f5:f4:39:f6: 49:4c:46:c8:63:4d:aa:68:71:29:59:db:51:13:00:f6:b5:3c: 8b:f3:1a:30:8a:7e:c8:94:27:df:be:6e:ed:a7:46:a5:d8:06: 11:cb:1a:ab:73:6d:5e:ce:21:c2:89:08:5e:b3:dd:b2:dd:4b: 0d:b3:57:d6:9f:51:3b:5f:64:ca:6d:aa:b3:5f:08:dd:eb:6f: ec:81:fd:a6:09:3a:15:89:e4:1d:3c:64:c4:50:1d:6b:cb:e0: 26:46:41:4b:19:7e:7b:77:09:a1:97:6a:a3:f0:81:84:a8:7b: 00:18:fb:87:8f:4f:85:37:ad:a7:ec:bb:71:4e:dd:3e:14:b5: 53:d8:08:d5:26:6c:ef:05:8a:4b:58:d4:3f:52:43:cc:35:35: e6:a5:8d:64:b1:02:eb:c7:44:a2:d7:d0:32:d4:2a:81:91:1b: ce:93:21:fb:d0:09:de:17:e4:ea:de:0d:f9:ce:ce:ff:90:3e: 57:a3:63:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0PlD4M0ssSmpIqRWJHJkzXVSYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4 MkIzQjFBNzAeFw0yNjA1MTIyMzQyNTZaFw0yNjA1MTQwMzAxNTZaMDMxMTAvBgNV BAMTKEJDQjk3RTAzRkVBQzNDQzAxNkY0REYwOUQ1QTM0ODVFNzgyN0RFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsZpqDjZjeP9VIp88N+bZl/dw a8u2yx357/wK3i6b94w7GHlbNLVI8Et8PhZXKoZAdGZ119IIlnW/oHlvU4UiVCrW JBpukXrn7/DrAqTM5EYEFhpHEGdoieHLZZ7oq2NsUTmNsrsj1EjKwCEgYg9CMAqB mynvTjs08uKglQo+BH/OZ7gwo+VqtiEEx++JwW6jj3NABx42nLpe4hUH9G2mNrAP 5UI+QnbyMvLM4UVZJSnuo/BTGIxEXt2gGrzJw00nnVeYmH/Lb9Ul7ruPIQtmkQMc PmMusfvL/Em63z6WuvMQ9WxBYMZCNMU+15rEoPP6WWxojymQkxGRZlr8hfUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLl+A/6sPMAW9N8J1aNIXngn3pUwHwYDVR0j BBgwFoAUiDZk2mE8kGfIFVQ2aTrvGoKzsacwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1ZmE5OGYtMWU4NS00NjM4LWJiOWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2 MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4MkIzQjFBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODM2NjREQTYxM0M5MDY3QzgxNTU0MzY2OTNBRUYxQTgyQjNC MUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVG MUE4MkIzQjFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj82cJPT2UHgaueKsHoIyh/4bVybms2Lj6a NyG08AWBPqJQwFTJ7vDpPZ4Qhm2ychK+BDK79gnwy2ts7mDHfYf3RqkA9fQ59klM RshjTapocSlZ21ETAPa1PIvzGjCKfsiUJ9++bu2nRqXYBhHLGqtzbV7OIcKJCF6z 3bLdSw2zV9afUTtfZMptqrNfCN3rb+yB/aYJOhWJ5B08ZMRQHWvL4CZGQUsZfnt3 CaGXaqPwgYSoewAY+4ePT4U3rafsu3FO3T4UtVPYCNUmbO8FiktY1D9SQ8w1Neal jWSxAuvHRKLX0DLUKoGRG86TIfvQCd4X5OreDfnOzv+QPlejY+4= -----END CERTIFICATE-----Generated at Wed May 13 04:09:39 2026 by rpki-client