$ rpki-client -vvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: irBfDYKLmkBQ9QU9UECZXk6eiQkIBBBnWJtkFA4zIPc= Subject key identifier: 7E:CB:F0:CB:EF:5A:1B:01:23:E8:8F:74:C3:7D:E7:40:B5:47:FE:14 Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 637DF36ED411E779C26474625B29F33D40039053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:22:28 +0000 Manifest this update: Tue 12 May 2026 03:17:28 +0000 Manifest next update: Wed 13 May 2026 06:47:28 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 2: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: HTPVRNZXwQBpUzu5auEcHdGybGmaBXj/9Urg7/ieNto=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7d:f3:6e:d4:11:e7:79:c2:64:74:62:5b:29:f3:3d:40:03:90:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: May 12 03:17:28 2026 GMT Not After : May 13 06:47:28 2026 GMT Subject: CN=7ECBF0CBEF5A1B0123E88F74C37DE740B547FE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:7d:57:61:54:51:59:39:92:2f:f2:7a:79: 0b:63:78:25:3e:c1:7d:e8:92:73:79:df:a4:d0:62: f1:a9:0b:1a:b1:0f:76:91:8c:79:85:5f:36:d9:04: 07:ac:1d:b9:39:df:fe:88:9e:81:69:ef:78:ce:06: 3b:af:1f:86:7d:bc:55:52:c6:df:33:34:c4:66:d9: 8d:72:80:00:78:ec:de:be:92:b7:c7:eb:d5:56:dc: 30:36:05:32:73:11:ee:ac:14:dd:88:73:40:c1:e2: d8:4c:8c:8e:fc:d5:65:d4:cb:70:f3:31:a0:b9:bb: 68:7a:f0:6f:30:41:41:d4:70:ff:d6:42:d6:01:29: ca:71:4a:69:9b:77:d0:86:75:51:f1:d1:63:e7:d1: c7:f3:a2:1e:7f:c3:81:d4:86:e7:fc:6b:2a:23:1f: 9b:02:a8:55:67:81:c6:32:2c:86:3e:a2:2b:15:0e: d7:7c:be:f3:6e:5b:26:80:7e:8a:f8:ee:3e:48:9a: 8a:fb:a9:d1:18:7d:90:9f:d8:c4:52:3f:f6:96:29: 92:05:aa:37:1c:13:26:92:23:9e:69:de:15:42:2f: 56:10:41:90:ee:43:ec:f0:4a:3f:53:d8:98:9b:0f: c9:ae:4c:75:6b:4a:40:21:5a:f0:c9:e0:54:b4:a6: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CB:F0:CB:EF:5A:1B:01:23:E8:8F:74:C3:7D:E7:40:B5:47:FE:14 X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:7c:e5:aa:35:11:4d:7f:c1:3a:82:31:f5:48:a1:a1:e5: a2:da:10:2d:32:c1:75:c2:2d:56:94:16:5a:52:8b:d7:bb:95: 19:30:37:0e:a8:5d:b4:40:7b:33:f6:19:1b:fa:3b:28:7b:50: 98:17:c1:ec:cb:3c:50:c6:36:64:a8:1a:cf:d6:39:1d:67:2d: f8:4f:59:15:60:35:55:22:7a:01:0c:c1:cc:04:28:d3:72:45: 9a:b4:30:6b:c2:96:8e:6d:c1:8a:f8:ce:d1:b6:d4:fc:83:35: eb:26:c2:b9:8b:08:fe:21:79:10:f6:8c:a9:59:d9:18:ff:bb: bb:c1:86:6c:2f:e6:3d:b3:77:f4:92:f4:16:24:36:04:cc:22: 5d:39:2a:04:cc:40:1e:4a:7d:8a:d6:21:e6:41:48:d8:eb:8e: 8a:62:b7:6f:70:84:d8:b5:b1:a1:92:d9:00:d8:23:03:28:00: 28:12:0e:10:fe:fb:77:9d:77:8e:dc:00:71:a9:20:53:28:0b: 37:54:f3:dc:cc:06:4c:1c:24:19:f3:a2:52:f8:4b:96:74:2d: 93:51:d3:27:63:5b:11:30:4f:49:ee:5e:27:d5:b0:35:be:a4: 0d:85:cc:4d:0b:95:d7:1e:2d:6a:3c:cf:9f:50:d2:bf:c7:21: 71:67:8b:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY33zbtQR53nCZHRiWynzPUADkFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA1MTIwMzE3MjhaFw0yNjA1MTMwNjQ3MjhaMDMxMTAvBgNV BAMTKDdFQ0JGMENCRUY1QTFCMDEyM0U4OEY3NEMzN0RFNzQwQjU0N0ZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tX1XYVRRWTmSL/J6eQtjeCU+ wX3oknN536TQYvGpCxqxD3aRjHmFXzbZBAesHbk53/6InoFp73jOBjuvH4Z9vFVS xt8zNMRm2Y1ygAB47N6+krfH69VW3DA2BTJzEe6sFN2Ic0DB4thMjI781WXUy3Dz MaC5u2h68G8wQUHUcP/WQtYBKcpxSmmbd9CGdVHx0WPn0cfzoh5/w4HUhuf8ayoj H5sCqFVngcYyLIY+oisVDtd8vvNuWyaAfor47j5Imor7qdEYfZCf2MRSP/aWKZIF qjccEyaSI55p3hVCL1YQQZDuQ+zwSj9T2JibD8muTHVrSkAhWvDJ4FS0pqFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsvwy+9aGwEj6I90w33nQLVH/hQwHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6efOWqNRFNf8E6gjH1SKGh5aLaEC0ywXXC LVaUFlpSi9e7lRkwNw6oXbRAezP2GRv6Oyh7UJgXwezLPFDGNmSoGs/WOR1nLfhP WRVgNVUiegEMwcwEKNNyRZq0MGvClo5twYr4ztG21PyDNesmwrmLCP4heRD2jKlZ 2Rj/u7vBhmwv5j2zd/SS9BYkNgTMIl05KgTMQB5KfYrWIeZBSNjrjopit29whNi1 saGS2QDYIwMoACgSDhD++3edd47cAHGpIFMoCzdU89zMBkwcJBnzolL4S5Z0LZNR 0ydjWxEwT0nuXifVsDW+pA2FzE0LldceLWo8z59Q0r/HIXFni4Y= -----END CERTIFICATE-----Generated at Tue May 12 22:46:52 2026 by rpki-client