$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: Uj/bx9Hc7x+LfMtz+jciFOqGLPcjdFCu5nOCkH07YWs= Subject key identifier: 74:0B:F6:BC:E8:DE:19:9B:E5:E4:28:A3:21:FD:F4:2F:8C:34:80:6F Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 634E3DECC9901F59D578A9A431B69A4E5C705E9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:42:45 +0000 Manifest this update: Tue 12 May 2026 06:37:45 +0000 Manifest next update: Wed 13 May 2026 07:41:45 +0000 Files and hashes: 1: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) 2: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: Z6YEtqq1wKpHTTj/zgySYHF4Di7DF9unyKMyfaw/0Eg=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4e:3d:ec:c9:90:1f:59:d5:78:a9:a4:31:b6:9a:4e:5c:70:5e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: May 12 06:37:45 2026 GMT Not After : May 13 07:41:45 2026 GMT Subject: CN=740BF6BCE8DE199BE5E428A321FDF42F8C34806F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:07:96:b5:71:11:92:89:b1:dd:86:dc:2e: 46:78:49:91:95:06:5f:0c:56:94:95:84:b3:42:95: 3b:c5:3f:27:60:31:72:b2:36:09:c6:80:ee:41:cd: f0:1f:3a:4f:0a:a2:8b:ef:42:45:cf:87:01:5c:b6: 87:bc:be:9b:bc:a8:3f:90:fe:7a:89:9f:55:8f:00: 9a:03:86:6b:4e:57:cb:0a:7e:89:1e:eb:ff:90:53: d9:9f:1a:33:94:64:4f:61:16:14:96:a3:fe:86:70: 25:58:7a:85:bc:51:75:3c:a1:03:ff:0c:4a:d2:0b: 1b:72:6c:8d:5c:39:4c:80:2f:30:21:25:96:9b:e2: 3f:b8:9f:25:53:99:4c:9b:0b:79:b5:3a:57:ec:9a: 8e:97:ef:91:15:5e:71:e8:68:05:30:7b:43:31:2d: 4b:98:c1:9a:2a:a2:c8:d6:41:44:c1:dc:f1:aa:3b: dc:02:f0:5e:ce:d3:33:02:cd:c6:bb:f2:ee:63:07: ef:8b:57:cd:13:8e:e4:9c:75:a2:b8:5e:bd:b1:bc: 5e:f1:72:2e:dc:85:bc:cc:c2:07:b6:30:94:c5:b6: 93:e7:f1:8d:a4:be:fd:5c:1a:60:6c:08:5a:16:61: cb:73:11:05:92:6a:2a:46:8e:ca:48:dc:86:ca:f5: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:F6:BC:E8:DE:19:9B:E5:E4:28:A3:21:FD:F4:2F:8C:34:80:6F X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a2:a4:0b:7b:18:81:13:2b:e4:f4:a8:6f:b3:1a:72:71:2c: e9:cf:d5:a2:c5:24:ff:67:49:0c:a5:ab:1a:df:df:04:08:ae: c5:ab:aa:f7:44:e6:61:f5:f6:71:57:86:d4:25:f1:f8:f5:ef: fc:e7:09:18:a6:65:2b:75:ce:66:39:38:95:c2:28:16:63:cf: 66:2c:03:ee:1c:1d:a2:10:6e:0c:1c:b9:cd:47:28:ce:41:09: 00:59:e8:31:4a:62:d2:e6:22:4c:35:c0:0d:80:c8:52:81:5b: 91:5c:5d:57:d0:b6:61:e9:48:5e:b9:dc:b2:0f:9d:f8:ef:6a: da:a3:80:66:9c:6e:a2:13:d8:97:8f:62:74:2c:71:3d:cc:cf: 50:35:d3:02:81:8e:6c:96:12:bf:03:8b:0d:db:69:0b:de:bc: d8:fa:82:28:9c:a1:2e:c2:ab:c2:fe:66:bc:34:f3:14:48:70: f1:6d:16:04:d3:65:f6:72:fb:1c:be:be:0d:7b:fa:c7:6b:fb: 81:7d:e3:ff:91:6d:36:65:ab:ea:ac:c0:27:b3:65:60:30:a7: b3:8b:1c:84:07:6a:16:8d:b9:d2:97:34:79:73:72:5f:65:50: 68:e6:15:13:45:ef:ad:61:9e:6a:0a:93:88:a0:c5:3d:db:0b: b3:89:ea:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0497MmQH1nVeKmkMbaaTlxwXp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA1MTIwNjM3NDVaFw0yNjA1MTMwNzQxNDVaMDMxMTAvBgNV BAMTKDc0MEJGNkJDRThERTE5OUJFNUU0MjhBMzIxRkRGNDJGOEMzNDgwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQgeWtXERkomx3YbcLkZ4SZGV Bl8MVpSVhLNClTvFPydgMXKyNgnGgO5BzfAfOk8KoovvQkXPhwFctoe8vpu8qD+Q /nqJn1WPAJoDhmtOV8sKfoke6/+QU9mfGjOUZE9hFhSWo/6GcCVYeoW8UXU8oQP/ DErSCxtybI1cOUyALzAhJZab4j+4nyVTmUybC3m1Olfsmo6X75EVXnHoaAUwe0Mx LUuYwZoqosjWQUTB3PGqO9wC8F7O0zMCzca78u5jB++LV80TjuScdaK4Xr2xvF7x ci7chbzMwge2MJTFtpPn8Y2kvv1cGmBsCFoWYctzEQWSaipGjspI3IbK9QrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAv2vOjeGZvl5CijIf30L4w0gG8wHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSipAt7GIETK+T0qG+zGnJxLOnP1aLFJP9n SQylqxrf3wQIrsWrqvdE5mH19nFXhtQl8fj17/znCRimZSt1zmY5OJXCKBZjz2Ys A+4cHaIQbgwcuc1HKM5BCQBZ6DFKYtLmIkw1wA2AyFKBW5FcXVfQtmHpSF653LIP nfjvatqjgGacbqIT2JePYnQscT3Mz1A10wKBjmyWEr8Diw3baQvevNj6giicoS7C q8L+Zrw08xRIcPFtFgTTZfZy+xy+vg17+sdr+4F94/+RbTZlq+qswCezZWAwp7OL HIQHahaNudKXNHlzcl9lUGjmFRNF761hnmoKk4igxT3bC7OJ6n0= -----END CERTIFICATE-----Generated at Tue May 12 22:47:06 2026 by rpki-client