$ rpki-client -vvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json) Hash identifier: 0UZa0mqLM1KsUbzqd+QWJpyI8CiFb7VzBmpUkxjVUdU= Subject key identifier: C9:30:AC:2E:C4:22:BC:B8:9A:96:BF:5A:A9:95:3D:FC:D1:D5:43:68 Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2 Certificate serial: 4331398FC4AE35CFFB25652647ABDFA48F5285CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:17 +0000 Manifest this update: Tue 12 May 2026 20:53:17 +0000 Manifest next update: Wed 13 May 2026 21:32:17 +0000 Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=) 2: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: jkkwv+FqrVZHllpA9YUL94RPAjcXKqDkMtgVBIVmZF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:39:8f:c4:ae:35:cf:fb:25:65:26:47:ab:df:a4:8f:52:85:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2 Validity Not Before: May 12 20:53:17 2026 GMT Not After : May 13 21:32:17 2026 GMT Subject: CN=C930AC2EC422BCB89A96BF5AA9953DFCD1D54368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:67:9d:fc:9e:f9:0d:34:96:c5:2a:2c:59: d8:a5:5a:47:8b:95:4d:1a:a8:25:04:12:62:36:60: 98:74:c1:c9:d4:d8:bd:10:58:38:fd:6d:0b:c7:a6: 9a:53:fa:a0:a7:37:2b:02:02:37:6a:05:28:a6:d9: db:a5:75:c4:0b:c7:5d:59:37:22:9d:70:54:18:12: 4f:9d:ec:98:60:fd:d9:13:a6:d5:f3:1d:1b:79:b8: 3c:a1:db:4b:fd:03:c9:b2:78:99:88:cb:cb:8f:0b: ed:fc:2d:17:b9:6c:5a:35:fd:1b:93:e1:f6:01:b5: 24:b3:15:4e:ba:8f:a7:2e:a0:11:61:26:43:1a:3d: ae:19:6a:11:31:1c:34:8e:5a:5d:52:fc:ba:68:84: ca:34:e6:6f:8a:63:7b:72:fa:4a:40:15:f0:af:b4: b1:71:73:a8:8b:08:ee:f8:ac:d5:e3:f7:bf:4e:90: 5f:8b:48:c6:ef:e9:a4:96:6c:9b:25:31:7f:25:ea: 61:a2:80:40:f0:1c:39:f0:1a:21:4d:15:c0:75:94: 83:8b:4d:f1:bf:dd:f8:92:90:df:1f:4b:e5:d7:95: d4:e6:f0:a6:34:56:ae:75:d7:24:21:6c:fb:a9:d6: 7f:a1:e1:89:07:4f:48:4f:48:61:94:ee:98:30:09: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:30:AC:2E:C4:22:BC:B8:9A:96:BF:5A:A9:95:3D:FC:D1:D5:43:68 X509v3 Authority Key Identifier: keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0b:05:37:82:07:c2:6b:54:ed:74:8d:e2:f7:66:48:bf:54: 0d:8b:e9:fb:37:d6:9e:6b:3c:0a:13:3b:52:44:d2:d4:1d:a4: a0:42:62:cd:55:ba:b1:11:2d:b6:f4:b3:47:cb:4d:f0:4e:dd: c0:7e:65:21:c6:a4:b8:89:f1:f2:25:70:dd:72:96:2f:af:a1: f5:d2:f0:79:71:1a:fd:c9:84:4a:c5:43:a6:e0:c5:66:5e:38: 00:27:3b:22:b0:db:a7:52:76:1f:65:14:81:a2:ba:11:79:48: 9b:40:78:85:50:54:90:eb:b1:37:f9:f5:51:4d:ef:f8:0c:cf: 0f:c4:af:ed:56:31:4b:ab:7e:98:a9:28:b9:64:a9:80:d1:0f: 7e:f3:f5:68:aa:ad:94:ce:ef:82:c1:f2:ea:0c:90:12:33:d1: 52:55:37:50:d4:37:de:d0:2f:d5:8d:37:63:3a:57:03:7a:9a: 40:63:2e:cb:90:94:b8:bb:f3:93:7b:b8:b4:20:16:a2:e3:1f: 64:0f:1a:4b:73:7a:dc:94:87:0d:7a:a6:37:04:5d:80:60:6d: b9:41:ad:3b:2e:81:97:a2:c7:3c:e4:4e:dc:d0:be:2e:7c:d2: 5c:66:9a:b5:1b:14:18:73:ba:76:69:0d:70:ee:90:44:2c:1b: df:1a:f8:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzE5j8SuNc/7JWUmR6vfpI9Shc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEw N0I1MTBCMjAeFw0yNjA1MTIyMDUzMTdaFw0yNjA1MTMyMTMyMTdaMDMxMTAvBgNV BAMTKEM5MzBBQzJFQzQyMkJDQjg5QTk2QkY1QUE5OTUzREZDRDFENTQzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2Ged/J75DTSWxSosWdilWkeL lU0aqCUEEmI2YJh0wcnU2L0QWDj9bQvHpppT+qCnNysCAjdqBSim2duldcQLx11Z NyKdcFQYEk+d7Jhg/dkTptXzHRt5uDyh20v9A8myeJmIy8uPC+38LRe5bFo1/RuT 4fYBtSSzFU66j6cuoBFhJkMaPa4ZahExHDSOWl1S/LpohMo05m+KY3ty+kpAFfCv tLFxc6iLCO74rNXj979OkF+LSMbv6aSWbJslMX8l6mGigEDwHDnwGiFNFcB1lIOL TfG/3fiSkN8fS+XXldTm8KY0Vq511yQhbPup1n+h4YkHT0hPSGGU7pgwCRFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTCsLsQivLialr9aqZU9/NHVQ2gwHwYDVR0j BBgwFoAU1p3zAkefR3epoIkhVCBK8Qe1ELIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRmNDI5NmYtMWNhOS00NWZjLWJiMDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0 NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEwN0I1MTBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjlERjMwMjQ3OUY0Nzc3QTlBMDg5MjE1NDIwNEFGMTA3QjUx MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRB RjEwN0I1MTBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALELBTeCB8JrVO10jeL3Zki/VA2L6fs31p5r PAoTO1JE0tQdpKBCYs1VurERLbb0s0fLTfBO3cB+ZSHGpLiJ8fIlcN1yli+vofXS 8HlxGv3JhErFQ6bgxWZeOAAnOyKw26dSdh9lFIGiuhF5SJtAeIVQVJDrsTf59VFN 7/gMzw/Er+1WMUurfpipKLlkqYDRD37z9WiqrZTO74LB8uoMkBIz0VJVN1DUN97Q L9WNN2M6VwN6mkBjLsuQlLi785N7uLQgFqLjH2QPGktzetyUhw16pjcEXYBgbblB rTsugZeixzzkTtzQvi580lxmmrUbFBhzunZpDXDukEQsG98a+Ew= -----END CERTIFICATE-----Generated at Tue May 12 23:20:33 2026 by rpki-client