$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: 7XT/cqvKYxVPDucdy8ccVk6Ca8FMGiyRNGn+FFEYtDo= Subject key identifier: 1B:C7:31:05:0C:69:C3:3F:82:7C:0E:C8:CA:C0:53:2C:E3:0A:C3:19 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 4867CA5CDAEA0DB279D2E2163DF99BF8DEE46F7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:56:11 +0000 Manifest this update: Tue 12 May 2026 09:51:11 +0000 Manifest next update: Wed 13 May 2026 13:01:11 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 4: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: CVEAIdhbeVUz0Vsat0vesTWi46uIe74Z+Shnxz1bbiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:67:ca:5c:da:ea:0d:b2:79:d2:e2:16:3d:f9:9b:f8:de:e4:6f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: May 12 09:51:11 2026 GMT Not After : May 13 13:01:11 2026 GMT Subject: CN=1BC731050C69C33F827C0EC8CAC0532CE30AC319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ce:2f:d6:70:b3:69:6b:64:da:a5:3b:6e:7c: f4:e0:fd:6d:e0:f2:b7:29:6c:6f:81:16:22:72:c9: 2b:48:41:c8:e6:b5:14:09:76:59:22:69:f1:d1:60: ae:1f:d7:c1:25:ea:50:f0:5f:b3:49:8e:ed:af:ac: 5f:d0:31:08:43:ac:df:c1:7b:3c:12:88:56:ea:aa: 80:9e:de:75:5d:fa:4f:82:0b:9a:cb:62:bf:79:27: 30:9c:fb:46:2f:89:42:8a:bc:c9:cb:b8:d4:f6:ff: 2a:ea:4d:0b:9a:f4:08:cd:33:a0:e2:4c:72:11:8e: 96:0a:19:25:6d:5f:a5:37:1d:c6:61:5a:e1:94:cf: d5:48:e5:57:f8:03:c6:5e:69:26:46:56:72:c0:58: a3:fb:fd:ce:ab:f0:89:f1:01:ac:ce:c3:c6:39:28: fa:d0:89:76:32:81:69:53:87:18:04:5c:8e:5d:ea: 76:d4:4c:ca:27:b5:02:5f:72:d2:82:5f:fd:a5:6b: 03:d7:62:b0:01:ca:89:4e:55:20:9d:a0:d9:5e:59: e1:f6:c0:0f:34:92:22:3c:9a:45:2b:d9:1b:ca:fe: 48:cb:de:4a:67:81:f2:af:08:35:ae:00:71:81:c4: 86:60:00:60:33:ad:92:92:70:0d:ba:84:1a:a5:be: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:31:05:0C:69:C3:3F:82:7C:0E:C8:CA:C0:53:2C:E3:0A:C3:19 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:20:42:08:27:5b:27:8b:c4:71:82:f0:d4:17:fd:b3:e2:19: 24:a4:01:f0:c1:62:56:6f:c7:9b:0f:c3:95:4b:86:aa:43:25: 2d:fd:95:e7:8b:97:dc:4c:44:58:f0:2f:0c:d3:28:e9:33:5b: 01:77:05:20:fc:5c:a6:20:6a:12:5d:a1:41:de:95:d6:9d:31: ea:f6:e1:3f:a2:67:9a:50:72:36:60:5c:aa:9d:4c:9b:b1:dc: c8:00:d4:57:38:86:23:49:fb:a3:8d:8b:92:02:1a:19:55:0f: db:a8:f5:e0:3e:e6:b7:b9:1b:9e:52:25:81:95:b9:02:59:03: 7b:a1:c3:89:23:cb:6d:91:29:81:0f:e7:59:28:6c:4c:ed:c1: 34:05:ad:37:bb:39:47:c1:0a:71:cd:de:31:c4:0e:22:d5:00: bf:23:0b:cc:88:3b:f2:29:af:9a:c2:f2:37:96:0c:6d:24:9f: 26:bd:1d:1b:2a:c4:bc:69:c8:df:91:f2:11:0c:0e:6d:4d:4b: b3:f7:36:1f:d5:b1:48:f8:68:34:62:5c:97:3e:50:a4:f9:29: 81:6d:a0:59:5c:15:52:07:0d:95:0d:7c:13:22:a3:68:96:fa: 56:d5:6d:31:10:a8:f8:90:3f:8c:af:b5:d1:57:b4:8f:6e:f4: a2:81:f2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGfKXNrqDbJ50uIWPfmb+N7kb30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA1MTIwOTUxMTFaFw0yNjA1MTMxMzAxMTFaMDMxMTAvBgNV BAMTKDFCQzczMTA1MEM2OUMzM0Y4MjdDMEVDOENBQzA1MzJDRTMwQUMzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1zi/WcLNpa2TapTtufPTg/W3g 8rcpbG+BFiJyyStIQcjmtRQJdlkiafHRYK4f18El6lDwX7NJju2vrF/QMQhDrN/B ezwSiFbqqoCe3nVd+k+CC5rLYr95JzCc+0YviUKKvMnLuNT2/yrqTQua9AjNM6Di THIRjpYKGSVtX6U3HcZhWuGUz9VI5Vf4A8ZeaSZGVnLAWKP7/c6r8InxAazOw8Y5 KPrQiXYygWlThxgEXI5d6nbUTMontQJfctKCX/2lawPXYrAByolOVSCdoNleWeH2 wA80kiI8mkUr2RvK/kjL3kpngfKvCDWuAHGBxIZgAGAzrZKScA26hBqlvnG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8cxBQxpwz+CfA7IysBTLOMKwxkwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8gQggnWyeLxHGC8NQX/bPiGSSkAfDBYlZv x5sPw5VLhqpDJS39leeLl9xMRFjwLwzTKOkzWwF3BSD8XKYgahJdoUHeldadMer2 4T+iZ5pQcjZgXKqdTJux3MgA1Fc4hiNJ+6ONi5ICGhlVD9uo9eA+5re5G55SJYGV uQJZA3uhw4kjy22RKYEP51kobEztwTQFrTe7OUfBCnHN3jHEDiLVAL8jC8yIO/Ip r5rC8jeWDG0knya9HRsqxLxpyN+R8hEMDm1NS7P3Nh/VsUj4aDRiXJc+UKT5KYFt oFlcFVIHDZUNfBMio2iW+lbVbTEQqPiQP4yvtdFXtI9u9KKB8rE= -----END CERTIFICATE-----Generated at Wed May 13 02:50:06 2026 by rpki-client