$ rpki-client -vvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: 7MuUHq59tPrn+8QfNx++zpMamjj7pvoMcUA/HwzthpI= Subject key identifier: 97:7C:8E:04:A3:AA:86:30:1F:15:5C:98:8A:EB:04:D9:03:69:C5:8E Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 7CDBA437A34FE438C686904F48A742DC242315B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:55 +0000 Manifest this update: Tue 12 May 2026 22:25:55 +0000 Manifest next update: Wed 13 May 2026 23:30:55 +0000 Files and hashes: 1: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: LFRgWTXKSpHa0kXmeNag3Nly3Tj2x4qajeoZ4hb1fr0=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 4: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:db:a4:37:a3:4f:e4:38:c6:86:90:4f:48:a7:42:dc:24:23:15:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: May 12 22:25:55 2026 GMT Not After : May 13 23:30:55 2026 GMT Subject: CN=977C8E04A3AA86301F155C988AEB04D90369C58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:5e:ad:58:1f:ac:31:83:da:98:db:4a:c5: 65:6d:6e:28:06:0e:fd:57:51:06:76:a4:60:a6:b9: 45:90:fa:e9:53:d8:bc:35:ec:fa:1a:b1:2c:1f:0a: df:90:83:bc:6a:48:72:05:de:9c:a3:c6:6c:2c:0f: 3b:c3:be:94:3f:f6:f9:e7:dc:ff:ae:d1:7a:19:fb: 94:dc:f1:83:34:34:af:59:c1:85:1e:80:1d:7c:3b: c2:9e:29:ae:49:9a:5d:e2:c0:da:ef:fe:2f:fa:86: 92:34:b1:2d:63:06:33:f5:bc:4e:04:9b:18:35:b1: 34:3d:0d:24:45:25:b4:1c:46:56:4c:81:af:c6:c0: ea:90:0b:29:ff:b6:2c:6c:82:f3:2b:d1:c2:d5:6c: 64:a3:81:8f:fd:e3:03:97:6d:90:3c:d4:dd:da:d1: cc:81:3b:d6:30:45:45:cb:4c:46:c0:79:8e:a2:1d: ca:34:ef:5f:03:40:0e:c5:5e:64:7b:f4:3b:7d:c0: c0:5e:1d:1c:81:98:71:5f:52:16:0a:e8:d7:47:92: 45:87:f5:7a:5e:b7:45:dd:ac:3f:fd:99:6e:ed:fa: c0:59:1d:34:93:37:cf:99:1c:f3:f8:44:8f:b2:f1: 03:33:1b:38:f0:a4:22:bc:ae:04:8e:e6:aa:ac:83: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:8E:04:A3:AA:86:30:1F:15:5C:98:8A:EB:04:D9:03:69:C5:8E X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ba:8a:3e:05:ec:31:fc:3a:da:04:00:91:9b:b1:db:35:5d: 29:55:db:70:11:ca:24:1b:1e:1f:3c:90:76:00:ec:00:ac:5d: 0b:d6:40:0f:fc:8e:88:9e:f3:8d:fd:73:d4:90:e9:09:3e:55: ba:0b:58:80:e0:4e:04:c7:ac:05:a4:62:8d:4e:45:49:5d:7e: 77:89:86:d2:9d:a5:76:fa:79:26:9f:c4:94:43:31:f3:1f:90: ab:37:1b:b1:d8:9f:39:e1:9c:60:36:18:c1:11:56:2d:47:95: bc:fb:15:36:c4:d4:1a:68:a3:ed:c9:ea:37:dc:4c:62:9d:d8: ff:cd:e2:f5:a4:80:e9:8a:2a:2c:6b:ed:3a:fa:cf:20:9b:1a: 33:38:4b:6a:d8:d7:55:13:e3:50:8f:55:e0:50:c4:7a:ca:fc: f2:a4:9b:cd:dc:15:f2:f0:54:4d:6c:1a:70:b0:e4:c5:76:f8: 8d:aa:da:b6:0f:0f:cf:6d:3d:e1:be:73:a7:8e:06:52:eb:58: a1:0a:e5:8a:8e:ce:89:a8:74:6e:74:12:06:e9:23:18:b6:23: 07:77:4c:71:aa:fa:f5:20:e2:a5:59:10:38:e4:95:fa:0a:d8: 8c:59:17:d2:08:33:79:4d:84:06:73:43:48:5e:7f:27:3e:9b: b5:1b:88:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNukN6NP5DjGhpBPSKdC3CQjFbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA1MTIyMjI1NTVaFw0yNjA1MTMyMzMwNTVaMDMxMTAvBgNV BAMTKDk3N0M4RTA0QTNBQTg2MzAxRjE1NUM5ODhBRUIwNEQ5MDM2OUM1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtg16tWB+sMYPamNtKxWVtbigG Dv1XUQZ2pGCmuUWQ+ulT2Lw17PoasSwfCt+Qg7xqSHIF3pyjxmwsDzvDvpQ/9vnn 3P+u0XoZ+5Tc8YM0NK9ZwYUegB18O8KeKa5Jml3iwNrv/i/6hpI0sS1jBjP1vE4E mxg1sTQ9DSRFJbQcRlZMga/GwOqQCyn/tixsgvMr0cLVbGSjgY/94wOXbZA81N3a 0cyBO9YwRUXLTEbAeY6iHco0718DQA7FXmR79Dt9wMBeHRyBmHFfUhYK6NdHkkWH 9Xpet0XdrD/9mW7t+sBZHTSTN8+ZHPP4RI+y8QMzGzjwpCK8rgSO5qqsg3obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3yOBKOqhjAfFVyYiusE2QNpxY4wHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC6ij4F7DH8OtoEAJGbsds1XSlV23ARyiQb Hh88kHYA7ACsXQvWQA/8joie8439c9SQ6Qk+VboLWIDgTgTHrAWkYo1ORUldfneJ htKdpXb6eSafxJRDMfMfkKs3G7HYnznhnGA2GMERVi1Hlbz7FTbE1Bpoo+3J6jfc TGKd2P/N4vWkgOmKKixr7Tr6zyCbGjM4S2rY11UT41CPVeBQxHrK/PKkm83cFfLw VE1sGnCw5MV2+I2q2rYPD89tPeG+c6eOBlLrWKEK5YqOzomodG50EgbpIxi2Iwd3 THGq+vUg4qVZEDjklfoK2IxZF9IIM3lNhAZzQ0hefyc+m7UbiAc= -----END CERTIFICATE-----Generated at Wed May 13 00:54:30 2026 by rpki-client