$ rpki-client -vvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: 54Kcggtk/TJua0b/zbwc/Zzk7n+KQOPI2KX50/X+Vb8= Subject key identifier: 63:4E:9F:7F:5D:A4:5A:A5:A6:4F:50:35:4D:B7:DC:26:ED:0C:94:E1 Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 33BDBF3867F3CC7CDC3E23088B6E0C681CFA1A00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:20:56 +0000 Manifest this update: Tue 12 May 2026 16:15:56 +0000 Manifest next update: Wed 13 May 2026 18:19:56 +0000 Files and hashes: 1: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) 2: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) 3: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: 0ALgMN4DEiM8AHnPyfgy0+/t2uXtCeUyJzqGnFrSztc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bd:bf:38:67:f3:cc:7c:dc:3e:23:08:8b:6e:0c:68:1c:fa:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: May 12 16:15:56 2026 GMT Not After : May 13 18:19:56 2026 GMT Subject: CN=634E9F7F5DA45AA5A64F50354DB7DC26ED0C94E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:98:18:db:cf:0f:9f:6d:92:f7:e6:6a:3d: b1:71:0b:02:56:77:8c:00:40:b2:e7:f1:0d:5b:f9: 8e:a4:d2:62:5b:00:4d:a8:9c:64:64:5c:4f:8f:d5: 07:1b:01:91:7e:a5:ec:40:f0:e9:f0:c2:56:79:5b: 45:36:ef:78:2d:f3:dc:b9:77:7f:23:4b:d1:97:7b: 06:6f:7c:56:46:a2:c7:85:c7:5a:37:79:e7:a5:13: b6:ba:07:58:9a:e7:d1:0e:ef:a7:c0:80:4d:4f:fc: d5:b6:63:1b:5c:30:89:03:b2:df:4b:a8:2e:0e:ff: 1b:15:8f:94:ba:56:84:b8:db:2e:3b:59:82:46:72: 0b:15:53:b0:1e:a8:ce:58:57:db:2b:86:6a:54:fd: 8b:98:8c:13:96:84:6c:e4:de:05:7a:ef:f1:d8:98: 1f:d7:75:0f:c5:af:22:2a:3a:07:f8:fd:71:1b:99: 2b:51:e9:a4:81:54:fe:ff:5b:02:8b:f6:89:97:f4: 34:dc:f1:19:8e:bc:52:54:f2:fb:ae:27:71:ec:b4: 16:4c:19:cf:f5:f9:cb:25:27:a3:02:06:fb:fd:11: 5b:67:bd:3b:4e:dc:75:42:5b:24:c5:2a:b7:e8:61: 16:9c:d4:95:f8:e1:3b:70:3e:fa:07:05:e0:1f:a6: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4E:9F:7F:5D:A4:5A:A5:A6:4F:50:35:4D:B7:DC:26:ED:0C:94:E1 X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fb:5f:8f:ac:e1:d3:47:06:b7:70:da:86:46:84:0b:20:ac: cd:29:3f:f9:66:37:2e:38:3f:24:08:59:6a:1e:aa:21:58:6f: a0:72:d6:02:76:8a:43:8d:7a:a6:43:c2:0b:9b:4d:b0:3e:e0: 52:a6:59:81:1f:c2:46:df:e2:07:c8:07:9d:9f:76:de:77:32: f9:8e:e4:0f:6f:b4:eb:11:06:4a:15:7e:85:a4:36:dd:53:28: 8d:6b:19:f5:98:ed:c0:cf:53:db:dc:74:6f:04:d4:90:85:b0: e9:67:d1:79:49:16:3e:d6:83:52:8d:6e:75:25:93:f0:8d:87: b5:f1:df:16:7b:a6:7a:ca:29:48:af:12:b1:7d:b3:05:da:ad: 0b:5c:22:d8:0a:cc:f4:1f:50:f9:da:e5:28:f2:e2:02:4d:1a: 35:a5:a1:42:6f:4b:b8:8b:c2:0e:62:24:c2:b3:9b:13:a6:a9: b0:6c:70:c1:3c:1a:e0:4a:6f:20:68:8a:b3:7f:28:f2:dd:d4: 19:82:43:a5:ec:d5:a6:f4:35:0f:56:06:e5:4e:51:8e:95:37: 99:cc:6e:00:06:a9:79:65:37:d2:4f:55:83:00:a5:74:a1:ec: ca:32:c2:aa:66:2c:8f:ca:0c:25:76:e9:21:4a:79:74:1a:11: a9:e1:26:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM72/OGfzzHzcPiMIi24MaBz6GgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA1MTIxNjE1NTZaFw0yNjA1MTMxODE5NTZaMDMxMTAvBgNV BAMTKDYzNEU5RjdGNURBNDVBQTVBNjRGNTAzNTREQjdEQzI2RUQwQzk0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT65gY288Pn22S9+ZqPbFxCwJW d4wAQLLn8Q1b+Y6k0mJbAE2onGRkXE+P1QcbAZF+pexA8OnwwlZ5W0U273gt89y5 d38jS9GXewZvfFZGoseFx1o3eeelE7a6B1ia59EO76fAgE1P/NW2YxtcMIkDst9L qC4O/xsVj5S6VoS42y47WYJGcgsVU7AeqM5YV9srhmpU/YuYjBOWhGzk3gV67/HY mB/XdQ/FryIqOgf4/XEbmStR6aSBVP7/WwKL9omX9DTc8RmOvFJU8vuuJ3HstBZM Gc/1+cslJ6MCBvv9EVtnvTtO3HVCWyTFKrfoYRac1JX44TtwPvoHBeAfppRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY06ff12kWqWmT1A1TbfcJu0MlOEwHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT7X4+s4dNHBrdw2oZGhAsgrM0pP/lmNy44 PyQIWWoeqiFYb6By1gJ2ikONeqZDwgubTbA+4FKmWYEfwkbf4gfIB52fdt53MvmO 5A9vtOsRBkoVfoWkNt1TKI1rGfWY7cDPU9vcdG8E1JCFsOln0XlJFj7Wg1KNbnUl k/CNh7Xx3xZ7pnrKKUivErF9swXarQtcItgKzPQfUPna5Sjy4gJNGjWloUJvS7iL wg5iJMKzmxOmqbBscME8GuBKbyBoirN/KPLd1BmCQ6Xs1ab0NQ9WBuVOUY6VN5nM bgAGqXllN9JPVYMApXSh7MoywqpmLI/KDCV26SFKeXQaEanhJhQ= -----END CERTIFICATE-----Generated at Wed May 13 04:03:41 2026 by rpki-client