$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json) Hash identifier: XMD/uobdtHvjWEhATtyagIPusF8+V7tVZxCMhBx6Wwc= Subject key identifier: BC:DB:B2:2F:40:1C:F3:B5:C9:48:3A:42:75:17:02:2F:9F:74:5A:4D Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Certificate serial: 524216FDBC6690B6852AFF2EB2EA9E7F4C0A2344 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:18:21 +0000 Manifest this update: Tue 12 May 2026 13:13:21 +0000 Manifest next update: Wed 13 May 2026 16:27:21 +0000 Files and hashes: 1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: 7JKpbXFoFRKcjJZJRGeXzA5QSSMah7IlU94lrgxAdrQ=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:16:fd:bc:66:90:b6:85:2a:ff:2e:b2:ea:9e:7f:4c:0a:23:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Validity Not Before: May 12 13:13:21 2026 GMT Not After : May 13 16:27:21 2026 GMT Subject: CN=BCDBB22F401CF3B5C9483A427517022F9F745A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:5f:c0:8e:e8:45:45:aa:a9:16:50:9a:c2: 34:4a:26:e2:ca:62:97:4d:be:43:45:f4:b3:ce:6f: d0:f8:6a:18:a8:8d:16:4f:7c:3c:2f:e2:e3:df:0b: 0c:4c:c4:fe:5d:27:20:0a:4d:92:fa:9b:db:9c:d4: 20:f3:29:93:14:d5:ae:6d:51:8a:dd:df:ce:83:10: ab:b9:6c:93:77:4e:9c:65:b0:e4:16:83:88:ce:6b: 66:a7:4d:66:00:88:95:68:0f:98:33:cc:00:bb:c3: 35:00:26:38:ef:50:d8:76:6a:f0:db:e1:79:95:b9: 01:06:14:db:9c:55:2c:fa:80:4c:86:94:f6:3a:81: 99:5c:d6:fe:81:82:21:91:0c:4b:a5:a8:4e:bb:e4: cc:71:51:99:79:42:34:84:d0:03:ce:41:66:3c:63: d3:98:9c:e7:62:46:0c:0b:30:ae:8d:54:c9:83:33: 96:cc:4f:4e:3f:7f:7e:86:7d:20:7f:b7:0a:c9:7b: fb:11:cf:33:29:b3:d6:3e:97:cf:f4:57:5b:98:83: 24:ec:55:e4:7b:7d:c4:02:4b:b7:7d:86:e2:2b:98: 85:28:bc:4e:99:f0:2c:a8:bd:11:af:ea:d5:27:27: d8:89:b9:65:55:cc:f0:1c:ec:c8:0f:5d:d1:d5:52: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:B2:2F:40:1C:F3:B5:C9:48:3A:42:75:17:02:2F:9F:74:5A:4D X509v3 Authority Key Identifier: keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:61:31:cc:e7:a7:77:20:48:b1:b8:ff:3d:7c:fc:17:d6:43: 38:68:a7:16:35:5a:29:df:76:97:45:a4:81:f4:7e:05:ad:42: 7e:37:ed:61:a4:c4:ed:cc:48:86:d7:f8:a3:85:3d:c2:5b:91: 1c:7f:03:5d:05:a5:81:6b:07:29:16:31:20:7d:1b:6d:f9:36: fa:7d:72:f7:41:e4:8a:14:82:5c:be:e9:fe:89:0e:bb:5f:fc: d4:93:0e:ab:8c:44:8c:ac:50:7c:0f:37:f2:92:28:18:84:a9: 20:5f:85:0d:4b:08:8f:bf:fb:a3:ec:49:b4:ac:88:72:f4:e4: a3:51:52:3c:00:df:00:54:e5:ba:c7:b1:be:cd:0b:95:c9:42: a1:ba:ac:c6:0a:77:dd:08:46:38:f0:07:a8:ed:23:21:fd:4b: 68:9b:69:48:cf:37:3e:02:41:6d:8a:50:60:0d:c6:d7:95:5c: 66:91:ba:17:e3:a9:59:e6:b0:d2:40:09:92:3a:f3:ce:eb:cf: 10:db:04:6a:51:bc:7e:52:7e:a2:3a:af:9e:08:5d:d2:b0:bc: c3:4e:03:7c:38:38:03:eb:22:d7:df:1c:1b:99:e2:d3:01:f8: a2:ab:1c:e9:d3:b3:be:15:e3:42:3b:18:ef:fb:64:db:0d:0f: 61:0a:87:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkIW/bxmkLaFKv8usuqef0wKI0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYy QjZCMzc0RTAeFw0yNjA1MTIxMzEzMjFaFw0yNjA1MTMxNjI3MjFaMDMxMTAvBgNV BAMTKEJDREJCMjJGNDAxQ0YzQjVDOTQ4M0E0Mjc1MTcwMjJGOUY3NDVBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8F/AjuhFRaqpFlCawjRKJuLK YpdNvkNF9LPOb9D4ahiojRZPfDwv4uPfCwxMxP5dJyAKTZL6m9uc1CDzKZMU1a5t UYrd386DEKu5bJN3TpxlsOQWg4jOa2anTWYAiJVoD5gzzAC7wzUAJjjvUNh2avDb 4XmVuQEGFNucVSz6gEyGlPY6gZlc1v6BgiGRDEulqE675MxxUZl5QjSE0APOQWY8 Y9OYnOdiRgwLMK6NVMmDM5bMT04/f36GfSB/twrJe/sRzzMps9Y+l8/0V1uYgyTs VeR7fcQCS7d9huIrmIUovE6Z8CyovRGv6tUnJ9iJuWVVzPAc7MgPXdHVUjcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNuyL0Ac87XJSDpCdRcCL590Wk0wHwYDVR0j BBgwFoAUIDAhmsLYveVAs6BrPiIMxitrN04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFD MkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYyQjZCMzc0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDMwMjE5QUMyRDhCREU1NDBCM0EwNkIzRTIyMENDNjJCNkIz NzRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBD QzYyQjZCMzc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdhMcznp3cgSLG4/z18/BfWQzhopxY1Winf dpdFpIH0fgWtQn437WGkxO3MSIbX+KOFPcJbkRx/A10FpYFrBykWMSB9G235Nvp9 cvdB5IoUgly+6f6JDrtf/NSTDquMRIysUHwPN/KSKBiEqSBfhQ1LCI+/+6PsSbSs iHL05KNRUjwA3wBU5brHsb7NC5XJQqG6rMYKd90IRjjwB6jtIyH9S2ibaUjPNz4C QW2KUGANxteVXGaRuhfjqVnmsNJACZI6887rzxDbBGpRvH5SfqI6r54IXdKwvMNO A3w4OAPrItffHBuZ4tMB+KKrHOnTs74V40I7GO/7ZNsND2EKh9w= -----END CERTIFICATE-----Generated at Wed May 13 11:04:04 2026 by rpki-client