$ rpki-client -vvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: B6t3s3OXR6ART81yPIi0et/6MYZXSBAthks3IR8OOVw= Subject key identifier: 06:F4:53:3E:62:CD:3E:0A:68:9D:4C:5A:99:AB:9E:79:50:86:8C:59 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 4CF3C2F57C3B9458720EBDEDF39A7D200B88CD1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:33 +0000 Manifest this update: Tue 12 May 2026 08:04:33 +0000 Manifest next update: Wed 13 May 2026 09:54:33 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 3: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) 4: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: uORUfJJ75bkWl95jBw2yMfADJWmMt4izKnDUMfJ5k24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f3:c2:f5:7c:3b:94:58:72:0e:bd:ed:f3:9a:7d:20:0b:88:cd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: May 12 08:04:33 2026 GMT Not After : May 13 09:54:33 2026 GMT Subject: CN=06F4533E62CD3E0A689D4C5A99AB9E7950868C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:e4:ee:7d:18:d1:09:2e:a5:21:41:77:1e: a1:b6:5d:91:8e:8f:c1:0d:61:50:95:51:c9:3e:f4: 89:a6:6c:6f:8e:49:8d:58:98:3d:64:05:f7:87:92: b5:fe:0f:db:98:1f:97:99:14:52:1e:d4:f3:da:3a: ca:c8:eb:d8:4c:8c:a7:86:54:35:26:1c:b5:af:4b: e6:a9:e2:76:23:99:d1:c4:3c:b6:af:57:0e:de:27: 04:33:80:a6:93:03:15:7b:c8:d6:af:f3:e1:6a:88: 71:c3:26:25:d4:68:5b:91:6a:8e:90:e8:ff:42:ef: e4:ed:af:78:40:3c:8d:17:f4:69:31:55:1d:47:c2: d8:79:8b:a0:7a:4a:53:30:23:d5:17:20:56:8e:3b: ae:05:16:94:97:21:21:06:88:fd:92:81:05:8a:3c: 92:7b:cc:6f:44:1b:df:0d:6a:57:87:db:e3:bc:4f: e1:13:9d:0b:1b:aa:08:0e:37:45:25:7c:c4:98:10: cb:70:57:90:ff:71:bb:22:7f:e7:83:40:19:d7:31: c9:a4:44:bf:40:c7:20:18:b2:cc:64:68:a0:90:38: 9a:82:cb:23:c3:6f:c8:bb:59:f7:48:3e:e8:41:ae: 3b:54:0f:c9:9f:31:ad:fa:f6:dd:4a:32:2c:2d:e5: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F4:53:3E:62:CD:3E:0A:68:9D:4C:5A:99:AB:9E:79:50:86:8C:59 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6d:fa:8b:72:72:c8:81:94:39:07:ef:24:36:d8:4e:f9:e3: dd:e6:26:19:72:5c:dc:d8:68:8d:62:f1:a6:55:25:3c:cb:74: 69:ba:29:4a:23:b9:84:d8:19:ee:53:bd:b7:79:01:d0:ee:76: e2:57:52:bd:56:37:49:7b:5b:f1:a0:9c:56:7b:de:d6:25:00: 73:86:90:26:aa:d1:79:29:c2:0e:78:1c:52:67:bb:68:93:74: 11:e2:aa:17:8c:03:84:f0:5d:26:78:93:9c:f2:1f:07:d8:82: 5f:f5:fa:7d:6c:a6:a0:95:ad:89:ad:7e:cf:d5:64:08:38:85: e3:54:06:f5:6e:51:e0:a0:f0:2c:eb:e1:1f:d3:f0:2a:8b:b2: 2f:49:ba:7b:bb:75:da:41:ac:52:91:2c:5e:9f:b2:aa:e6:62: 30:b4:e6:2b:b8:b8:3b:b8:ce:36:60:0c:45:59:e5:2a:92:24: fb:1e:26:29:0d:22:cf:9c:75:b1:66:0d:9e:76:99:18:f1:48: 97:28:0a:05:bb:cb:ef:12:90:06:39:89:8d:74:15:b4:63:89: 9a:51:35:59:66:7f:62:f1:89:57:cf:6d:f5:ac:36:91:eb:90: 8c:0b:91:67:f5:e6:72:25:a6:42:e2:f2:a8:0e:f6:5b:d7:bd: 64:97:f1:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPPC9Xw7lFhyDr3t85p9IAuIzRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA1MTIwODA0MzNaFw0yNjA1MTMwOTU0MzNaMDMxMTAvBgNV BAMTKDA2RjQ1MzNFNjJDRDNFMEE2ODlENEM1QTk5QUI5RTc5NTA4NjhDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7duTufRjRCS6lIUF3HqG2XZGO j8ENYVCVUck+9ImmbG+OSY1YmD1kBfeHkrX+D9uYH5eZFFIe1PPaOsrI69hMjKeG VDUmHLWvS+ap4nYjmdHEPLavVw7eJwQzgKaTAxV7yNav8+FqiHHDJiXUaFuRao6Q 6P9C7+Ttr3hAPI0X9GkxVR1Hwth5i6B6SlMwI9UXIFaOO64FFpSXISEGiP2SgQWK PJJ7zG9EG98NaleH2+O8T+ETnQsbqggON0UlfMSYEMtwV5D/cbsif+eDQBnXMcmk RL9AxyAYssxkaKCQOJqCyyPDb8i7WfdIPuhBrjtUD8mfMa369t1KMiwt5SL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvRTPmLNPgponUxamaueeVCGjFkwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdt+otycsiBlDkH7yQ22E75493mJhlyXNzY aI1i8aZVJTzLdGm6KUojuYTYGe5Tvbd5AdDuduJXUr1WN0l7W/GgnFZ73tYlAHOG kCaq0Xkpwg54HFJnu2iTdBHiqheMA4TwXSZ4k5zyHwfYgl/1+n1spqCVrYmtfs/V ZAg4heNUBvVuUeCg8Czr4R/T8CqLsi9Junu7ddpBrFKRLF6fsqrmYjC05iu4uDu4 zjZgDEVZ5SqSJPseJikNIs+cdbFmDZ52mRjxSJcoCgW7y+8SkAY5iY10FbRjiZpR NVlmf2LxiVfPbfWsNpHrkIwLkWf15nIlpkLi8qgO9lvXvWSX8Vk= -----END CERTIFICATE-----Generated at Tue May 12 22:46:35 2026 by rpki-client