$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: oeVNjMYTKFDTVo+e5V5MxQnNCvR2ZnGvOHuiAlK7bfY= Subject key identifier: CB:0D:F2:DA:28:7D:F9:87:7D:DA:55:DA:E8:B7:69:67:4D:E5:1C:8B Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 257C842D27A962D542E202F748229DD536A714D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:34 +0000 Manifest this update: Tue 12 May 2026 22:51:34 +0000 Manifest next update: Thu 14 May 2026 02:07:34 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 2: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: z6RmssvEc1cPsp0EKkxr1hL1f+W2ehCxKhNPzqgesj4=) 3: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 4: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 5: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 6: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 7: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 8: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7c:84:2d:27:a9:62:d5:42:e2:02:f7:48:22:9d:d5:36:a7:14:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: May 12 22:51:34 2026 GMT Not After : May 14 02:07:34 2026 GMT Subject: CN=CB0DF2DA287DF9877DDA55DAE8B769674DE51C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:35:6c:1a:f0:6e:cc:2d:2d:31:38:3e:46: 39:82:68:8d:32:a6:4e:f3:e3:53:5b:45:f9:56:f6: 3b:5e:3e:11:04:e9:f0:30:12:f1:8a:27:90:f3:c5: b1:ae:d1:88:88:ba:c9:11:91:4f:b6:a5:de:82:e1: bc:4c:4e:2f:35:e6:6b:a6:fd:17:b4:f4:b1:4a:35: 42:b3:1e:f8:74:08:a9:03:c3:e3:e7:4d:d0:f1:cc: ca:ee:24:d2:ef:ca:3c:df:cc:49:7f:2d:80:cd:31: be:f4:f1:95:dc:6a:6c:c5:f4:72:87:91:bb:a3:62: 78:3e:2a:8d:31:df:dc:3c:f8:cb:95:88:99:1b:90: 99:69:6a:3a:8e:ca:d0:72:cb:3e:39:4b:98:c6:27: b1:6c:b1:00:7d:b7:8d:62:4a:3d:9a:45:e6:53:92: e8:41:c4:9c:a9:a0:91:50:76:1a:ab:24:45:2c:72: 8f:10:ff:3e:dc:16:42:f8:11:c2:d9:95:80:57:91: 7b:8f:eb:c7:26:b7:43:ab:93:d2:92:db:cb:d5:d1: 04:55:03:76:95:5f:12:d5:7d:e4:79:ba:b0:2f:cb: 4e:ed:f6:6e:88:ba:e2:16:90:df:2a:a0:82:c5:0b: 13:df:c1:73:44:ed:6f:3b:a5:f2:eb:87:69:26:6b: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:F2:DA:28:7D:F9:87:7D:DA:55:DA:E8:B7:69:67:4D:E5:1C:8B X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:af:71:a6:39:75:b0:29:b9:91:09:48:da:e2:05:ea:36: 14:2d:49:82:5d:47:f7:fb:aa:02:4d:c8:bd:d5:26:b8:8f:30: 73:f7:9e:f8:f3:0b:f0:38:49:fd:bf:23:48:af:80:f4:51:c3: 97:f4:cb:56:d4:ff:f5:c2:c0:d3:4b:ed:dc:15:d1:83:93:6a: 31:4f:fa:90:17:45:0d:49:3d:26:52:cb:c6:08:99:58:73:f9: 20:56:66:78:ae:1b:2b:8f:67:02:f5:d6:1b:4e:cc:43:a3:93: 27:90:4b:6c:f2:d5:6b:0b:ac:47:29:cd:36:9d:50:57:2f:90: ce:c3:dd:8a:97:81:86:eb:7b:31:a4:a9:5e:47:4b:8e:08:79: 9b:8d:a0:ce:94:47:2e:a3:72:ea:a7:53:76:24:24:ae:1e:08: 2e:ba:26:17:35:c0:c3:76:df:ca:41:3b:c2:ad:bd:8a:15:bd: f1:f4:df:23:d7:1a:6f:f4:b4:98:f6:50:d1:64:cf:bf:7a:c4: a2:bd:dd:38:56:0e:71:36:d6:24:fa:0c:c9:fc:c5:aa:e6:26: 15:0a:4d:15:72:bb:44:53:ec:18:52:c2:fb:dc:29:7a:53:c0: 49:fd:6d:62:b2:ba:64:84:b5:15:8e:34:23:cc:48:f6:a0:57: d1:15:55:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXyELSepYtVC4gL3SCKd1TanFNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA1MTIyMjUxMzRaFw0yNjA1MTQwMjA3MzRaMDMxMTAvBgNV BAMTKENCMERGMkRBMjg3REY5ODc3RERBNTVEQUU4Qjc2OTY3NERFNTFDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvDVsGvBuzC0tMTg+RjmCaI0y pk7z41NbRflW9jtePhEE6fAwEvGKJ5DzxbGu0YiIuskRkU+2pd6C4bxMTi815mum /Re09LFKNUKzHvh0CKkDw+PnTdDxzMruJNLvyjzfzEl/LYDNMb708ZXcamzF9HKH kbujYng+Ko0x39w8+MuViJkbkJlpajqOytByyz45S5jGJ7FssQB9t41iSj2aReZT kuhBxJypoJFQdhqrJEUsco8Q/z7cFkL4EcLZlYBXkXuP68cmt0Ork9KS28vV0QRV A3aVXxLVfeR5urAvy07t9m6IuuIWkN8qoILFCxPfwXNE7W87pfLrh2kmaznjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyw3y2ih9+Yd92lXa6LdpZ03lHIswHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwhr3GmOXWwKbmRCUja4gXqNhQtSYJdR/f7 qgJNyL3VJriPMHP3nvjzC/A4Sf2/I0ivgPRRw5f0y1bU//XCwNNL7dwV0YOTajFP +pAXRQ1JPSZSy8YImVhz+SBWZniuGyuPZwL11htOzEOjkyeQS2zy1WsLrEcpzTad UFcvkM7D3YqXgYbrezGkqV5HS44IeZuNoM6URy6jcuqnU3YkJK4eCC66Jhc1wMN2 38pBO8KtvYoVvfH03yPXGm/0tJj2UNFkz796xKK93ThWDnE21iT6DMn8xarmJhUK TRVyu0RT7BhSwvvcKXpTwEn9bWKyumSEtRWONCPMSPagV9EVVf8= -----END CERTIFICATE-----Generated at Wed May 13 02:27:33 2026 by rpki-client