$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: NgSWw0/GijT7cnrfJR7S9ym+d16ORg+VmCvZ4aMc4oU= Subject key identifier: FD:A5:A4:14:79:A6:7E:6F:A8:59:1A:03:36:41:2E:32:23:09:21:92 Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 5FF47C2B9DA239C74BD51724E1016DB4CB022E78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:18:45 +0000 Manifest this update: Tue 12 May 2026 21:13:45 +0000 Manifest next update: Wed 13 May 2026 22:28:45 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) 2: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) 4: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: wGESEqTE5pVpg1LSeFdCk3rdu3r3pH7mEARlgCOa5tU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f4:7c:2b:9d:a2:39:c7:4b:d5:17:24:e1:01:6d:b4:cb:02:2e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: May 12 21:13:45 2026 GMT Not After : May 13 22:28:45 2026 GMT Subject: CN=FDA5A41479A67E6FA8591A0336412E3223092192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4d:63:f7:60:67:7e:e8:2d:c5:a1:7a:5f:4b: ec:cb:3d:ea:d7:e6:7a:3f:5c:12:f5:7b:6f:5c:cb: b1:7e:a3:4b:49:bf:a1:9e:b0:ff:55:c1:09:94:df: 80:58:ec:63:1f:0a:5a:2e:87:3f:7b:06:af:8d:c8: 38:f1:ad:2a:ee:86:1f:df:bd:61:85:da:d6:d8:e7: 05:d7:eb:a3:0a:be:ce:77:11:dc:dc:66:eb:8e:1e: 90:6e:5b:1d:dd:29:9d:05:c6:db:e9:7a:a9:89:85: ef:c6:0f:bd:f0:12:3c:fd:d1:17:d3:7e:6d:35:12: 5d:45:9d:84:0e:7a:29:c4:db:6e:05:64:d2:b4:70: e3:a5:48:e5:64:58:f2:2c:16:8b:9b:b8:78:04:43: b6:4f:2a:3c:4f:06:ce:97:34:a8:ef:0a:96:8b:4b: 28:00:cf:aa:93:de:67:2d:1f:99:63:21:df:20:5b: 35:c0:94:97:8e:8f:0f:84:30:99:69:57:33:62:23: bc:46:4f:63:39:b5:d7:b7:86:52:39:d8:38:db:c4: c0:57:f7:f0:e5:2c:d4:54:d3:21:fb:88:bc:16:54: 5f:69:c0:15:0a:d8:48:4f:c4:ca:e1:b1:a8:8c:69: 60:ff:5e:62:af:c3:9a:fd:d8:14:62:c5:a6:65:e6: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:A4:14:79:A6:7E:6F:A8:59:1A:03:36:41:2E:32:23:09:21:92 X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:87:4b:ae:9d:18:0f:b7:23:1c:ce:62:cb:21:10:af:b0:0c: a6:9a:ed:9e:3d:2b:cb:38:93:78:41:b0:b8:48:d0:a1:17:36: b2:b0:af:30:94:a8:3a:1d:a6:37:f5:42:37:00:da:74:69:64: c9:73:27:dd:d2:fc:d6:0b:65:35:ec:d4:a1:5e:ef:a4:37:87: 5e:e0:ec:7f:74:0a:b6:67:e3:bd:bb:a2:04:8d:06:75:eb:99: a8:4b:95:4b:1a:d3:4c:c9:07:ce:d9:1c:ea:91:78:74:8e:2b: ba:dd:1e:25:98:ba:62:2b:bd:d7:f1:77:2f:91:da:90:9b:07: 3b:e4:d0:08:2a:02:76:98:40:72:8b:07:de:38:5e:75:7b:65: e2:2b:c7:67:69:c1:80:15:24:7c:77:45:32:7f:b5:52:27:d1: 3b:83:59:88:32:c5:25:c8:00:28:f4:dd:c0:45:76:f2:e0:67: 5d:fb:a1:a8:6e:a9:35:7d:05:bc:85:3a:49:2e:96:63:78:f9: 58:60:14:eb:24:ee:6a:b0:9f:cd:67:06:7b:d2:c1:e1:ae:49: e6:64:fa:f4:db:a2:d0:0c:41:bb:38:ac:b5:bf:5b:40:b3:2b: 0f:1e:40:e5:fd:22:c0:99:bd:d9:1d:41:5f:50:67:8d:8c:f6: bc:20:2a:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/R8K52iOcdL1Rck4QFttMsCLngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA1MTIyMTEzNDVaFw0yNjA1MTMyMjI4NDVaMDMxMTAvBgNV BAMTKEZEQTVBNDE0NzlBNjdFNkZBODU5MUEwMzM2NDEyRTMyMjMwOTIxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCTWP3YGd+6C3FoXpfS+zLPerX 5no/XBL1e29cy7F+o0tJv6GesP9VwQmU34BY7GMfClouhz97Bq+NyDjxrSruhh/f vWGF2tbY5wXX66MKvs53EdzcZuuOHpBuWx3dKZ0FxtvpeqmJhe/GD73wEjz90RfT fm01El1FnYQOeinE224FZNK0cOOlSOVkWPIsFoubuHgEQ7ZPKjxPBs6XNKjvCpaL SygAz6qT3mctH5ljId8gWzXAlJeOjw+EMJlpVzNiI7xGT2M5tde3hlI52DjbxMBX 9/DlLNRU0yH7iLwWVF9pwBUK2EhPxMrhsaiMaWD/XmKvw5r92BRixaZl5pTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aWkFHmmfm+oWRoDNkEuMiMJIZIwHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2HS66dGA+3IxzOYsshEK+wDKaa7Z49K8s4 k3hBsLhI0KEXNrKwrzCUqDodpjf1QjcA2nRpZMlzJ93S/NYLZTXs1KFe76Q3h17g 7H90CrZn4727ogSNBnXrmahLlUsa00zJB87ZHOqReHSOK7rdHiWYumIrvdfxdy+R 2pCbBzvk0AgqAnaYQHKLB944XnV7ZeIrx2dpwYAVJHx3RTJ/tVIn0TuDWYgyxSXI ACj03cBFdvLgZ137oahuqTV9BbyFOkkulmN4+VhgFOsk7mqwn81nBnvSweGuSeZk +vTbotAMQbs4rLW/W0CzKw8eQOX9IsCZvdkdQV9QZ42M9rwgKkQ= -----END CERTIFICATE-----Generated at Wed May 13 02:27:06 2026 by rpki-client