$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: 7A0QgVoXZTnRSfUAc5joSEeI0fGMl/RQhSoNyTt/AmA= Subject key identifier: 82:17:DD:3C:9A:0D:39:C8:CD:1F:61:BD:74:E2:6F:AC:93:0C:68:B1 Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 43ED4F42EC7A3AB0642631B7A24BF3D2930F8BA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:12 +0000 Manifest this update: Tue 12 May 2026 19:15:12 +0000 Manifest next update: Wed 13 May 2026 21:49:12 +0000 Files and hashes: 1: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: DVhuixQwtWMG6GLg5gETm3MX7hc+ALNyO1Tdthmk5i0=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ed:4f:42:ec:7a:3a:b0:64:26:31:b7:a2:4b:f3:d2:93:0f:8b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: May 12 19:15:12 2026 GMT Not After : May 13 21:49:12 2026 GMT Subject: CN=8217DD3C9A0D39C8CD1F61BD74E26FAC930C68B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:46:dc:99:cf:2f:c2:42:9d:db:9a:0e:c9: b3:5e:15:b0:57:52:20:28:13:a7:c3:e0:7a:31:6a: 14:33:0d:88:ae:77:9c:ab:1c:f3:25:e2:5c:33:2d: 0a:21:ce:44:6d:f6:e9:46:c9:c5:d0:ba:77:f3:44: 3b:fd:a4:48:f1:5f:38:ff:92:9a:ed:aa:ea:80:84: 6c:d6:6a:12:51:9f:f6:22:4b:b1:b5:b7:82:a9:3c: fb:64:11:4a:b8:4d:bf:d8:0a:9e:61:bb:72:9a:d6: 31:2c:62:48:25:df:17:7c:d7:a8:2f:35:77:c1:72: a7:73:8e:5b:ba:bf:0c:1d:ca:79:12:00:20:ce:78: b0:14:21:43:41:37:4d:8f:50:69:73:68:26:87:ed: b5:39:64:f0:09:c1:35:dd:f8:3c:82:d1:44:b3:3a: 81:88:c1:3e:06:1f:8e:4b:13:f8:7a:66:70:2a:dd: 69:69:c0:2e:98:f8:8a:85:68:bf:90:c9:83:0a:18: 90:bb:42:d1:52:2c:62:3c:aa:55:21:3f:71:f5:ab: e2:4d:62:b3:bd:26:e8:c5:05:79:af:5d:6f:b3:e4: 72:cf:06:6c:58:4d:58:5c:19:3c:57:50:5e:80:2c: 6d:1e:2e:ee:78:5a:6f:3b:c8:84:01:a7:d2:ca:88: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:17:DD:3C:9A:0D:39:C8:CD:1F:61:BD:74:E2:6F:AC:93:0C:68:B1 X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:93:c2:4f:e4:b2:28:62:e3:07:a8:22:51:06:14:2a:da:22: 3a:41:62:99:b7:d4:90:21:9c:da:94:38:da:33:82:05:01:4c: a5:96:c1:bf:34:5b:59:a7:43:a0:3d:fc:8b:7a:fa:c5:e4:24: 0a:9b:b2:1b:76:5d:ea:87:63:e7:3b:2a:8f:fb:1a:7a:7b:43: 27:35:e1:29:13:f9:56:26:68:47:4b:a3:da:52:0e:36:26:2d: 51:25:a4:34:a8:33:14:34:22:12:b8:be:5c:47:97:65:ff:e9: e0:f6:10:ac:f4:61:6f:0d:0e:c1:1d:14:6a:c1:9b:ff:32:1b: c8:9c:78:e8:3c:87:8b:bd:34:89:c6:c1:3f:f6:88:18:1b:3b: bd:06:0a:93:d9:c3:9d:ca:df:17:00:3c:50:2d:10:59:ab:75: 19:f7:9f:86:a9:9c:46:42:ce:8f:2e:a9:7f:e2:f1:ab:bf:e5: dd:29:5f:0c:48:6e:f0:89:55:00:7c:2e:da:d8:3f:a5:b7:fe: a9:4f:c3:8d:bf:4d:5d:41:24:40:b2:ff:a8:df:36:78:91:16: 73:4c:0f:7f:8b:5a:e3:a9:a1:e8:3d:a4:2e:f8:a5:bc:8a:22: e6:f4:dd:53:fc:6f:f1:e1:6d:e9:b8:ab:24:28:47:23:54:05: 37:1e:54:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+1PQux6OrBkJjG3okvz0pMPi6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA1MTIxOTE1MTJaFw0yNjA1MTMyMTQ5MTJaMDMxMTAvBgNV BAMTKDgyMTdERDNDOUEwRDM5QzhDRDFGNjFCRDc0RTI2RkFDOTMwQzY4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKUbcmc8vwkKd25oOybNeFbBX UiAoE6fD4HoxahQzDYiud5yrHPMl4lwzLQohzkRt9ulGycXQunfzRDv9pEjxXzj/ kprtquqAhGzWahJRn/YiS7G1t4KpPPtkEUq4Tb/YCp5hu3Ka1jEsYkgl3xd816gv NXfBcqdzjlu6vwwdynkSACDOeLAUIUNBN02PUGlzaCaH7bU5ZPAJwTXd+DyC0USz OoGIwT4GH45LE/h6ZnAq3WlpwC6Y+IqFaL+QyYMKGJC7QtFSLGI8qlUhP3H1q+JN YrO9JujFBXmvXW+z5HLPBmxYTVhcGTxXUF6ALG0eLu54Wm87yIQBp9LKiIhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghfdPJoNOcjNH2G9dOJvrJMMaLEwHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyTwk/ksihi4weoIlEGFCraIjpBYpm31JAh nNqUONozggUBTKWWwb80W1mnQ6A9/It6+sXkJAqbsht2XeqHY+c7Ko/7Gnp7Qyc1 4SkT+VYmaEdLo9pSDjYmLVElpDSoMxQ0IhK4vlxHl2X/6eD2EKz0YW8NDsEdFGrB m/8yG8iceOg8h4u9NInGwT/2iBgbO70GCpPZw53K3xcAPFAtEFmrdRn3n4apnEZC zo8uqX/i8au/5d0pXwxIbvCJVQB8LtrYP6W3/qlPw42/TV1BJECy/6jfNniRFnNM D3+LWuOpoeg9pC74pbyKIub03VP8b/Hhbem4qyQoRyNUBTceVAw= -----END CERTIFICATE-----Generated at Wed May 13 02:15:46 2026 by rpki-client