$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: FGNhQbuaJ0XoeOSAOPG0yeXkQJlG4NtlONTzL6o+Rrs= Subject key identifier: 20:32:0A:F0:42:BD:7B:8F:2A:BD:95:38:7E:06:3D:C6:59:79:94:F1 Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 14F97DA219D2E3C1DE1FC00C58AE209CC2E9BBA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:36 +0000 Manifest this update: Tue 12 May 2026 17:32:36 +0000 Manifest next update: Wed 13 May 2026 18:56:36 +0000 Files and hashes: 1: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) 2: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) 3: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: thW2RpK6DDrtEsL+e3vidWNkqV/SBD7bgLpCYryTgtE=) 4: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f9:7d:a2:19:d2:e3:c1:de:1f:c0:0c:58:ae:20:9c:c2:e9:bb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: May 12 17:32:36 2026 GMT Not After : May 13 18:56:36 2026 GMT Subject: CN=20320AF042BD7B8F2ABD95387E063DC6597994F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:47:ef:a7:85:2a:a3:97:78:0f:ae:55:f0: af:b5:7f:56:db:c4:a7:05:9c:f4:f7:b4:18:d4:d9: 7c:30:39:12:a9:fa:58:0c:88:0e:29:47:d3:16:e3: b3:5d:9f:dd:df:59:9a:10:50:4c:44:da:ef:2c:9a: 87:fd:57:0a:5d:cb:d3:9e:17:22:c4:eb:db:82:31: 8c:1c:e5:8f:d9:df:0d:ee:5a:82:36:19:84:3a:05: d0:79:4e:d1:7e:e8:8d:fd:c0:89:dd:fc:00:18:1e: 6b:46:78:be:ec:a4:d8:77:05:93:8e:a9:97:9f:8f: 3b:95:9f:46:b9:48:aa:ac:a8:64:f5:44:4e:fc:bb: e4:b1:97:b0:10:21:b5:bc:06:1d:de:73:64:34:e5: 30:88:93:f5:bb:e3:5e:2d:2d:e6:9b:f8:a0:1b:4f: 20:73:db:42:4a:68:d2:8d:fd:6d:af:76:e6:9b:d4: a0:a0:5f:39:86:40:48:12:4d:d1:c9:88:13:7e:49: 32:0b:74:09:b4:98:19:16:82:a1:cc:e3:70:e1:a8: 91:1a:37:48:4f:69:66:10:8e:0f:f8:3e:db:b1:3d: 17:91:af:30:1f:64:dd:8a:2f:d9:bb:df:42:22:65: 80:c9:27:5e:0f:31:1a:c7:b4:80:4c:01:90:00:fd: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:0A:F0:42:BD:7B:8F:2A:BD:95:38:7E:06:3D:C6:59:79:94:F1 X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:6b:56:94:e6:50:45:97:a2:b1:65:83:ba:35:21:eb:47: d8:d2:c2:aa:9e:1f:d4:78:12:71:90:4a:7b:6b:5d:b0:92:6b: 3c:d5:58:a0:b3:52:ef:08:19:98:43:d8:5a:2e:e4:d1:4a:1a: ca:9e:02:68:cd:cf:ff:61:06:4e:9c:37:23:7d:39:f4:f1:40: 06:69:f2:ef:b9:5f:cc:33:a8:10:41:f8:83:f8:81:0d:08:d8: a4:57:0c:7c:0b:53:96:17:9c:b9:4c:25:14:2b:b6:36:78:1a: 3c:2d:20:a6:3e:3a:0d:e3:cb:ea:20:61:bf:12:f3:3d:46:11: 66:81:3f:88:b5:81:be:0f:2d:68:8c:96:3b:44:98:01:92:8e: 72:9b:db:f4:84:76:19:d0:5c:d0:4b:54:e6:fe:f3:b4:c7:6e: e8:db:c6:0a:9c:1a:f5:f1:fc:3f:3e:84:a7:a9:f9:41:ba:06: cc:a1:13:be:57:eb:bc:09:18:2a:43:95:71:a1:2c:29:fa:fa: 52:b8:1d:e8:20:d4:7e:30:b9:9f:83:32:91:51:f2:87:e2:f2: 4e:81:3e:82:ca:80:58:1d:fd:7d:70:65:c2:c8:d3:ad:bf:f3: ef:55:e8:d5:96:70:0b:9f:de:ab:c0:86:77:d4:41:9d:37:cd: c8:d0:ba:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPl9ohnS48HeH8AMWK4gnMLpu6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA1MTIxNzMyMzZaFw0yNjA1MTMxODU2MzZaMDMxMTAvBgNV BAMTKDIwMzIwQUYwNDJCRDdCOEYyQUJEOTUzODdFMDYzREM2NTk3OTk0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuUfvp4Uqo5d4D65V8K+1f1bb xKcFnPT3tBjU2XwwORKp+lgMiA4pR9MW47Ndn93fWZoQUExE2u8smof9Vwpdy9Oe FyLE69uCMYwc5Y/Z3w3uWoI2GYQ6BdB5TtF+6I39wInd/AAYHmtGeL7spNh3BZOO qZefjzuVn0a5SKqsqGT1RE78u+Sxl7AQIbW8Bh3ec2Q05TCIk/W7414tLeab+KAb TyBz20JKaNKN/W2vduab1KCgXzmGQEgSTdHJiBN+STILdAm0mBkWgqHM43DhqJEa N0hPaWYQjg/4PtuxPReRrzAfZN2KL9m730IiZYDJJ14PMRrHtIBMAZAA/UTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDIK8EK9e48qvZU4fgY9xll5lPEwHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy0a1aU5lBFl6KxZYO6NSHrR9jSwqqeH9R4 EnGQSntrXbCSazzVWKCzUu8IGZhD2Fou5NFKGsqeAmjNz/9hBk6cNyN9OfTxQAZp 8u+5X8wzqBBB+IP4gQ0I2KRXDHwLU5YXnLlMJRQrtjZ4GjwtIKY+Og3jy+ogYb8S 8z1GEWaBP4i1gb4PLWiMljtEmAGSjnKb2/SEdhnQXNBLVOb+87THbujbxgqcGvXx /D8+hKep+UG6BsyhE75X67wJGCpDlXGhLCn6+lK4Hegg1H4wuZ+DMpFR8ofi8k6B PoLKgFgd/X1wZcLI062/8+9V6NWWcAuf3qvAhnfUQZ03zcjQuow= -----END CERTIFICATE-----Generated at Wed May 13 01:45:17 2026 by rpki-client