$ rpki-client -vvf rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft File: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft (raw, json) Hash identifier: JFpvc3/lqxwGGmRP4PoFu4PHAVNj3pXCJA5qXnMfZ3M= Subject key identifier: 54:C0:5E:13:4B:9A:08:E7:B5:4E:CA:BE:51:ED:58:D6:53:88:C8:3C Authority key identifier: B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B Certificate issuer: /CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Certificate serial: 3841F30834D51A2777F92BAA60DBD064C1DE6AEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:51 +0000 Manifest this update: Tue 12 May 2026 18:23:51 +0000 Manifest next update: Wed 13 May 2026 19:32:51 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313339393439.roa (hash: 3WYXT0bkqeQjsqbaJ4MScxou4zOpVNziugI00uOfe0Q=) 2: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl (hash: Y+oAtCt+2yS4IXn3o4W2E11GqLXsHE2tjt9FYBwgU5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:41:f3:08:34:d5:1a:27:77:f9:2b:aa:60:db:d0:64:c1:de:6a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Validity Not Before: May 12 18:23:51 2026 GMT Not After : May 13 19:32:51 2026 GMT Subject: CN=54C05E134B9A08E7B54ECABE51ED58D65388C83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:19:5b:8d:e6:42:eb:08:73:9f:a1:87:75:6b: 42:5d:78:c6:81:e7:f1:b8:75:c3:3b:b9:cc:62:8b: 05:fd:bd:ac:b3:b2:1b:6e:3a:a4:41:09:06:1f:4e: c8:36:97:cb:72:b1:10:33:ae:f4:d0:69:a0:72:ec: 85:7a:75:c0:57:70:a5:51:0e:1b:dc:19:49:72:40: 82:30:60:43:84:ed:73:a4:06:b0:5a:58:f9:5b:69: 58:5b:3d:4d:da:63:ca:1e:ca:89:5b:bc:0c:e6:9b: 79:4e:62:b3:36:24:b1:cc:56:83:ce:64:e1:03:bf: f8:ba:e2:b9:25:0f:bd:68:b5:63:a7:b3:0d:45:46: 35:7b:f1:9b:f7:dd:86:ea:d1:7a:ce:3a:47:50:ca: c2:50:a4:ab:31:bb:ad:41:bb:e5:84:be:d3:03:ce: 6b:31:f2:06:5b:6b:ae:88:28:51:92:4f:41:6f:29: 0f:f8:ca:04:b6:97:25:ac:de:95:55:1a:77:82:1b: dc:e9:ac:6f:de:30:00:e7:07:4c:8d:13:e7:e0:59: aa:6b:d7:57:63:67:6a:73:e5:0b:a7:99:14:37:1f: c9:42:6e:80:86:49:8a:23:bf:d6:e6:9d:e6:e7:59: d2:8e:21:d6:dd:85:67:3c:7f:65:8f:13:89:03:12: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:5E:13:4B:9A:08:E7:B5:4E:CA:BE:51:ED:58:D6:53:88:C8:3C X509v3 Authority Key Identifier: keyid:B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f1:e9:c9:32:3c:6d:36:76:2e:c4:79:fb:95:83:57:bb:a4: 6f:78:12:84:57:a4:9a:71:c8:c4:3a:99:ae:3e:33:4b:80:d3: e4:d4:32:1a:dc:79:8b:a8:00:32:5f:cf:d1:f2:d4:c0:f8:73: 11:93:87:ed:46:f1:e9:ce:06:44:a7:fe:9d:a0:1c:80:8c:68: fd:c4:bf:97:26:cc:0a:38:c3:bb:6b:71:01:43:3f:9b:af:be: 8f:9c:fb:c0:4a:67:a5:7e:f8:68:67:70:54:78:70:e4:e9:57: e7:bb:ad:e1:3a:a0:9d:7a:65:cd:35:f7:18:8b:a7:78:38:13: 9d:79:26:00:07:bf:09:8c:0f:6e:90:61:5c:89:a2:47:14:0a: c2:03:73:a1:f0:21:4c:a2:73:68:eb:b0:ec:c1:a8:65:ba:a2: 7e:8c:8b:5b:59:86:7e:f4:b0:ba:51:45:17:42:c7:22:03:27: 89:9c:a1:78:8e:c0:44:a4:9c:5d:46:3a:1b:11:ef:36:51:cf: b4:d6:9a:73:02:62:34:82:d3:06:cf:b6:33:04:55:45:58:3a: b2:2e:83:df:26:72:44:7a:8b:d0:29:37:5b:3b:2a:9b:96:9d: 08:49:e8:59:46:39:99:39:7b:8b:cd:e8:9f:3e:a3:17:ec:52: 60:ca:b3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEHzCDTVGid3+SuqYNvQZMHeauowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRD QTg5QTI5QjAeFw0yNjA1MTIxODIzNTFaFw0yNjA1MTMxOTMyNTFaMDMxMTAvBgNV BAMTKDU0QzA1RTEzNEI5QTA4RTdCNTRFQ0FCRTUxRUQ1OEQ2NTM4OEM4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1GVuN5kLrCHOfoYd1a0JdeMaB 5/G4dcM7ucxiiwX9vayzshtuOqRBCQYfTsg2l8tysRAzrvTQaaBy7IV6dcBXcKVR DhvcGUlyQIIwYEOE7XOkBrBaWPlbaVhbPU3aY8oeyolbvAzmm3lOYrM2JLHMVoPO ZOEDv/i64rklD71otWOnsw1FRjV78Zv33Ybq0XrOOkdQysJQpKsxu61Bu+WEvtMD zmsx8gZba66IKFGST0FvKQ/4ygS2lyWs3pVVGneCG9zprG/eMADnB0yNE+fgWapr 11djZ2pz5QunmRQ3H8lCboCGSYojv9bmnebnWdKOIdbdhWc8f2WPE4kDEtkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMBeE0uaCOe1Tsq+Ue1Y1lOIyDwwHwYDVR0j BBgwFoAUsQPLPJ8gRb1HWm/t0jmubcqJopswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIyOTJiYTgtYWQxYS00MTM5LThjMjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5 RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRDQTg5QTI5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTAzQ0IzQzlGMjA0NUJENDc1QTZGRUREMjM5QUU2RENBODlB MjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFF NkRDQTg5QTI5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfx6ckyPG02di7EefuVg1e7pG94EoRXpJpx yMQ6ma4+M0uA0+TUMhrceYuoADJfz9Hy1MD4cxGTh+1G8enOBkSn/p2gHICMaP3E v5cmzAo4w7trcQFDP5uvvo+c+8BKZ6V++GhncFR4cOTpV+e7reE6oJ16Zc019xiL p3g4E515JgAHvwmMD26QYVyJokcUCsIDc6HwIUyic2jrsOzBqGW6on6Mi1tZhn70 sLpRRRdCxyIDJ4mcoXiOwESknF1GOhsR7zZRz7TWmnMCYjSC0wbPtjMEVUVYOrIu g98mckR6i9ApN1s7KpuWnQhJ6FlGOZk5e4vN6J8+oxfsUmDKs+k= -----END CERTIFICATE-----Generated at Wed May 13 07:34:51 2026 by rpki-client