$ rpki-client -vvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: D+WVYalfyelD7mdAnRYHh/JAkM+VJpDK2ceyuf2KwKs= Subject key identifier: 29:2B:D9:28:E6:0F:4A:1A:12:F4:72:A2:28:92:C4:29:73:72:26:3F Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 4EB1036DB1C169B1B73994FEFED5F590A23816E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:58:03 +0000 Manifest this update: Tue 12 May 2026 06:53:03 +0000 Manifest next update: Wed 13 May 2026 09:08:03 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) 2: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: +MRo9UxKvFmIi3yKzO1F5XiHNSGaNBmIqvzfBkfxTYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b1:03:6d:b1:c1:69:b1:b7:39:94:fe:fe:d5:f5:90:a2:38:16:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: May 12 06:53:03 2026 GMT Not After : May 13 09:08:03 2026 GMT Subject: CN=292BD928E60F4A1A12F472A22892C4297372263F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:06:8c:e4:40:6c:26:c7:9e:9e:40:20:46:b2: 47:e2:e8:12:91:de:2e:b4:07:83:ee:2d:be:a2:1e: 54:65:4c:66:b4:f0:24:76:5a:3f:40:f1:bb:5e:0f: 3e:d3:ef:dd:a4:82:70:fe:f1:91:3d:f0:ee:40:45: e8:e5:2b:f9:37:37:fd:52:de:71:91:97:bc:66:51: 45:82:d0:74:ca:cc:b2:f6:a5:fa:4f:71:bf:ae:e9: 87:11:95:bb:d1:d4:0b:1f:6c:e3:4d:b7:b5:31:3c: ec:d5:e4:6b:9e:9c:ee:10:5e:70:1c:67:d5:90:87: ba:34:e3:d7:05:da:3e:95:04:9e:dd:96:6f:fb:6e: c4:a7:e3:d0:e4:6d:eb:2f:86:75:6d:90:1a:2c:2d: 96:69:31:64:8d:ab:cf:ff:57:b5:d1:23:31:3e:10: f4:9c:9f:39:ae:28:c2:58:f3:51:5d:5a:f2:13:71: 0e:15:39:a4:cb:53:d5:af:30:75:26:11:26:a0:0f: 71:6d:40:76:9c:e7:81:71:bc:6d:77:fa:31:33:16: 2b:46:b9:92:44:77:b1:36:7b:ed:0d:7b:78:d9:2d: 71:94:43:40:33:26:f9:f9:62:65:be:10:61:0c:06: ee:39:56:cc:f2:6f:d8:25:7a:8f:8c:66:0c:c7:99: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:D9:28:E6:0F:4A:1A:12:F4:72:A2:28:92:C4:29:73:72:26:3F X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:54:5d:63:9e:9f:a3:ae:dd:77:6b:f6:de:c1:73:b3:4a:d0: a7:bc:65:6e:17:9f:a4:73:b2:b9:c4:57:f0:20:3c:d2:8b:76: e1:6b:8c:80:de:b5:25:90:e3:44:74:53:41:c6:38:3c:26:32: 0d:06:48:d6:a8:ba:7d:f4:cd:bf:85:9b:b4:f7:70:a7:a4:c3: bc:c1:53:d5:16:19:83:8d:c3:90:b5:66:5d:80:1e:e6:99:c1: 39:d6:e2:b4:a6:f4:3b:26:ad:b8:04:9b:3e:44:1c:ae:cc:f9: b1:10:12:9f:62:74:73:5d:47:09:b1:09:99:19:53:71:fd:e9: 0e:86:b4:5d:1f:38:7b:06:7f:ab:f2:24:0d:32:c6:4d:b3:04: f4:b6:1c:e1:19:a2:28:0a:8f:34:a1:4b:22:ca:45:56:5a:17: 4a:77:66:40:66:6d:de:e0:87:b9:71:1e:74:eb:32:e3:6d:61: 2b:bc:0e:45:65:e3:85:69:61:7b:8f:bb:97:c4:7b:f7:54:7f: 8b:03:58:be:4e:d8:66:ad:5b:cc:c6:41:dc:aa:f1:7c:88:67: 5b:06:4f:ad:3b:7f:df:07:16:cb:7d:10:13:f8:8b:cd:b7:71: 46:3e:cc:a2:ab:df:53:12:e9:53:02:aa:80:87:68:35:db:5b: c0:b2:7c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrEDbbHBabG3OZT+/tX1kKI4FuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA1MTIwNjUzMDNaFw0yNjA1MTMwOTA4MDNaMDMxMTAvBgNV BAMTKDI5MkJEOTI4RTYwRjRBMUExMkY0NzJBMjI4OTJDNDI5NzM3MjI2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6BozkQGwmx56eQCBGskfi6BKR 3i60B4PuLb6iHlRlTGa08CR2Wj9A8bteDz7T792kgnD+8ZE98O5ARejlK/k3N/1S 3nGRl7xmUUWC0HTKzLL2pfpPcb+u6YcRlbvR1AsfbONNt7UxPOzV5GuenO4QXnAc Z9WQh7o049cF2j6VBJ7dlm/7bsSn49DkbesvhnVtkBosLZZpMWSNq8//V7XRIzE+ EPScnzmuKMJY81FdWvITcQ4VOaTLU9WvMHUmESagD3FtQHac54FxvG13+jEzFitG uZJEd7E2e+0Ne3jZLXGUQ0AzJvn5YmW+EGEMBu45Vszyb9gleo+MZgzHmTyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSvZKOYPShoS9HKiKJLEKXNyJj8wHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJUXWOen6Ou3Xdr9t7Bc7NK0Ke8ZW4Xn6Rz srnEV/AgPNKLduFrjIDetSWQ40R0U0HGODwmMg0GSNaoun30zb+Fm7T3cKekw7zB U9UWGYONw5C1Zl2AHuaZwTnW4rSm9DsmrbgEmz5EHK7M+bEQEp9idHNdRwmxCZkZ U3H96Q6GtF0fOHsGf6vyJA0yxk2zBPS2HOEZoigKjzShSyLKRVZaF0p3ZkBmbd7g h7lxHnTrMuNtYSu8DkVl44VpYXuPu5fEe/dUf4sDWL5O2GatW8zGQdyq8XyIZ1sG T607f98HFst9EBP4i823cUY+zKKr31MS6VMCqoCHaDXbW8CyfEw= -----END CERTIFICATE-----Generated at Wed May 13 02:40:42 2026 by rpki-client