$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: L1s5A+vNCRs82grHJRsQJHQ02TKi+zLFyjoSg2zfvC4= Subject key identifier: CB:15:7D:D4:85:B2:09:DA:B6:CD:12:32:A9:AE:42:1C:90:4B:4F:3D Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 7407606DE43DADEB849D1F604DE30ABD044ABE3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:09 +0000 Manifest this update: Tue 12 May 2026 19:46:09 +0000 Manifest next update: Wed 13 May 2026 20:50:09 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 2: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: J35D17+3kcT84m7OLYhDQ1ZVsz7YB1Tq6loCDvFyb+A=) 3: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 4: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:07:60:6d:e4:3d:ad:eb:84:9d:1f:60:4d:e3:0a:bd:04:4a:be:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: May 12 19:46:09 2026 GMT Not After : May 13 20:50:09 2026 GMT Subject: CN=CB157DD485B209DAB6CD1232A9AE421C904B4F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:e2:45:93:1e:08:8e:cc:6d:fd:8c:99:67: ee:b3:58:73:f1:ba:25:90:72:3a:16:ed:c5:7d:2f: 59:91:e6:de:e2:ef:b1:d5:41:9c:9b:62:78:c0:31: 28:79:85:6f:8d:d3:30:e9:28:c8:97:6a:ca:09:69: 69:84:bb:38:b0:c8:13:4f:51:58:60:d4:89:44:81: b3:ac:db:20:39:59:56:bf:d6:2a:7e:45:60:b2:e3: 60:42:2e:4b:16:e2:a7:26:2d:c2:37:c1:27:36:30: 7b:7a:43:20:e7:3d:b1:b5:d5:39:c1:f9:3f:1c:0b: 05:c6:88:75:c3:e4:68:36:16:81:79:49:b1:b2:8d: c8:3f:36:5b:c9:64:79:25:be:31:3c:66:cc:56:72: f6:2a:01:99:18:01:de:f3:73:57:ab:a4:2e:42:9d: bd:40:3d:10:ad:47:c3:72:b3:4a:79:8c:82:25:aa: 8c:06:12:cc:cc:8c:4a:96:fa:01:24:3c:5f:7c:5f: d9:53:2f:94:bf:17:16:cc:dd:c7:f9:75:1b:e2:07: d1:f4:3a:82:f2:c8:47:eb:a5:10:8a:e1:4d:bf:3a: 2f:78:0c:7f:00:e3:b3:d6:e9:06:73:54:fa:7b:bb: 93:89:b4:d1:8c:83:a9:b2:a0:54:a2:4d:f3:63:f1: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:15:7D:D4:85:B2:09:DA:B6:CD:12:32:A9:AE:42:1C:90:4B:4F:3D X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:51:6c:09:54:6c:73:81:08:47:43:db:95:42:b1:7d:f8:24: 62:18:ea:a8:51:f6:b9:13:a5:a9:e5:a5:a9:9e:c9:57:da:a4: 26:5c:e1:ee:70:72:22:b7:4d:0e:80:ba:39:52:fe:b1:dd:ad: 01:b3:f4:e4:ea:e5:b8:ec:01:14:4d:07:d0:52:80:fb:59:f3: eb:7e:64:f9:c9:07:07:59:56:06:68:1e:4b:61:66:b3:81:ed: f4:35:eb:98:f4:bf:c7:97:6a:33:68:4e:8a:90:6d:41:58:49: a7:10:91:e6:d8:05:5b:da:d3:5e:c0:e2:e5:49:3b:3f:dc:4d: fb:89:d6:a3:5f:78:ee:0f:04:79:7b:24:eb:5c:ea:8b:d5:aa: fd:5a:a1:87:a5:a9:6d:d4:38:dd:82:c5:05:e4:fe:6d:2d:b6: 41:7f:28:32:ff:a1:3d:34:f5:88:ce:89:fe:f6:07:76:ce:92: 70:2e:ee:f6:50:f9:7b:87:e0:3b:3c:82:ae:b5:3f:56:2a:3c: 39:c9:20:b1:fe:a0:8b:d7:e4:a8:c8:32:27:e0:04:c3:c1:91: 4a:8b:85:eb:ef:fe:ad:bf:a9:46:2f:3a:9a:92:a9:c6:ab:5f: a8:fe:1f:fe:2e:72:ba:89:fc:ce:53:5f:2d:31:15:90:37:2e: 4e:a4:4a:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAdgbeQ9reuEnR9gTeMKvQRKvjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA1MTIxOTQ2MDlaFw0yNjA1MTMyMDUwMDlaMDMxMTAvBgNV BAMTKENCMTU3REQ0ODVCMjA5REFCNkNEMTIzMkE5QUU0MjFDOTA0QjRGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCeJFkx4Ijsxt/YyZZ+6zWHPx uiWQcjoW7cV9L1mR5t7i77HVQZybYnjAMSh5hW+N0zDpKMiXasoJaWmEuziwyBNP UVhg1IlEgbOs2yA5WVa/1ip+RWCy42BCLksW4qcmLcI3wSc2MHt6QyDnPbG11TnB +T8cCwXGiHXD5Gg2FoF5SbGyjcg/NlvJZHklvjE8ZsxWcvYqAZkYAd7zc1erpC5C nb1APRCtR8Nys0p5jIIlqowGEszMjEqW+gEkPF98X9lTL5S/FxbM3cf5dRviB9H0 OoLyyEfrpRCK4U2/Oi94DH8A47PW6QZzVPp7u5OJtNGMg6myoFSiTfNj8V3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxV91IWyCdq2zRIyqa5CHJBLTz0wHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJRbAlUbHOBCEdD25VCsX34JGIY6qhR9rkT panlpameyVfapCZc4e5wciK3TQ6AujlS/rHdrQGz9OTq5bjsARRNB9BSgPtZ8+t+ ZPnJBwdZVgZoHkthZrOB7fQ165j0v8eXajNoToqQbUFYSacQkebYBVva017A4uVJ Oz/cTfuJ1qNfeO4PBHl7JOtc6ovVqv1aoYelqW3UON2CxQXk/m0ttkF/KDL/oT00 9YjOif72B3bOknAu7vZQ+XuH4Ds8gq61P1YqPDnJILH+oIvX5KjIMifgBMPBkUqL hevv/q2/qUYvOpqSqcarX6j+H/4ucrqJ/M5TXy0xFZA3Lk6kStU= -----END CERTIFICATE-----Generated at Wed May 13 02:16:09 2026 by rpki-client