$ rpki-client -vvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: HFzVmvUTBEeC/RU+pWdfLjbwW7iU61XT5hp/qlgGBLQ= Subject key identifier: 42:CF:F0:17:70:2F:C1:8D:6C:67:BF:4C:D5:FB:32:15:A2:10:7D:83 Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 2DCCFAD56047484EF5DC090CD18C4ABE503DEBA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:29:05 +0000 Manifest this update: Wed 13 May 2026 00:24:05 +0000 Manifest next update: Thu 14 May 2026 03:50:05 +0000 Files and hashes: 1: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) 3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: TZUCV0Pqwn6DP//+LC0CAZdUBYokd9F8u9F5SVxf2HE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cc:fa:d5:60:47:48:4e:f5:dc:09:0c:d1:8c:4a:be:50:3d:eb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: May 13 00:24:05 2026 GMT Not After : May 14 03:50:05 2026 GMT Subject: CN=42CFF017702FC18D6C67BF4CD5FB3215A2107D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:e0:ba:54:96:07:dd:36:bf:b3:d3:f6:95: 6c:a9:2d:7f:c3:60:ec:bf:7c:19:6e:21:c6:1a:67: 28:07:6c:11:78:72:21:f9:52:27:77:aa:19:f4:be: 65:bf:85:00:2b:d9:b3:fe:00:8b:c3:89:b5:12:9e: 7d:9b:b1:86:e8:f4:93:72:0b:97:b6:1a:ba:08:32: f4:83:f7:4e:ed:fe:94:85:ef:63:d8:95:83:8c:2f: a7:9b:b1:e1:72:6d:13:70:07:73:8a:79:42:ae:96: d0:2a:09:ed:a0:3d:56:16:1e:b9:0b:b6:f4:45:0d: 51:fe:3e:b2:98:f4:20:ff:18:0c:e1:21:b9:f6:df: 1a:40:8a:f5:76:c6:34:d3:74:b2:b4:28:0d:cf:bc: f2:8f:62:0d:8d:9d:59:ca:71:39:44:aa:c4:29:eb: 6a:57:02:b1:28:17:4a:b3:88:9f:f7:72:9c:1c:1b: 21:2b:a9:ac:76:a6:5d:62:30:2b:9e:de:e9:da:1c: c9:71:66:ad:82:1e:e2:38:b1:39:f9:83:18:35:7c: 50:4f:09:3d:12:69:85:51:e0:3e:bd:f8:7a:98:8b: 65:49:05:ac:ff:c0:89:66:49:a2:2f:7c:c8:4e:6e: 72:d4:51:e3:18:ae:a2:40:61:1f:bd:c2:33:ef:41: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:F0:17:70:2F:C1:8D:6C:67:BF:4C:D5:FB:32:15:A2:10:7D:83 X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:17:39:94:85:a9:e6:8d:ed:c8:c4:f9:cb:1b:0a:59:64:3c: ff:cb:2c:8c:75:bb:77:22:05:93:17:79:83:a3:ae:29:ba:80: ea:5b:44:f5:46:fd:8f:46:c8:f6:07:a2:a9:dd:35:7e:9e:8a: 54:4d:7e:b8:c6:0c:8b:6a:26:82:8b:8e:84:3e:8c:62:3e:30: c5:e9:f9:51:a0:54:1c:0c:39:ab:c0:86:e0:1a:d8:d2:f0:a2: a6:95:50:00:a8:8e:9f:3f:4c:7a:d9:a1:6c:e8:24:0a:7a:00: be:ab:40:7d:15:2e:ec:d8:80:49:66:88:96:f9:7f:92:01:06: 70:33:02:af:56:70:54:9d:06:07:e8:00:eb:5f:c7:47:a3:87: e2:60:18:9d:0b:8e:cb:cd:9b:62:0d:d2:05:ae:82:7d:8e:8d: d3:9b:ae:b5:e1:df:a9:d2:0f:11:ef:eb:54:12:58:a6:ec:b6: 1f:57:62:96:fb:cf:14:e2:31:44:7d:fa:b9:13:af:62:79:30: cc:a2:e5:7c:46:5f:f4:f9:63:81:d3:d5:35:5b:e5:d0:c0:0c: 7f:b6:d3:2d:b1:e7:82:f6:fd:31:9a:63:5e:f8:dd:04:65:e1: 8f:20:cf:eb:3d:53:a3:69:5b:6f:e9:66:fb:fa:28:93:f7:b4: c2:c8:b7:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcz61WBHSE713AkM0YxKvlA966YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA1MTMwMDI0MDVaFw0yNjA1MTQwMzUwMDVaMDMxMTAvBgNV BAMTKDQyQ0ZGMDE3NzAyRkMxOEQ2QzY3QkY0Q0Q1RkIzMjE1QTIxMDdEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8deC6VJYH3Ta/s9P2lWypLX/D YOy/fBluIcYaZygHbBF4ciH5Uid3qhn0vmW/hQAr2bP+AIvDibUSnn2bsYbo9JNy C5e2GroIMvSD907t/pSF72PYlYOML6ebseFybRNwB3OKeUKultAqCe2gPVYWHrkL tvRFDVH+PrKY9CD/GAzhIbn23xpAivV2xjTTdLK0KA3PvPKPYg2NnVnKcTlEqsQp 62pXArEoF0qziJ/3cpwcGyErqax2pl1iMCue3unaHMlxZq2CHuI4sTn5gxg1fFBP CT0SaYVR4D69+HqYi2VJBaz/wIlmSaIvfMhObnLUUeMYrqJAYR+9wjPvQT15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQs/wF3AvwY1sZ79M1fsyFaIQfYMwHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8XOZSFqeaN7cjE+csbCllkPP/LLIx1u3ci BZMXeYOjrim6gOpbRPVG/Y9GyPYHoqndNX6eilRNfrjGDItqJoKLjoQ+jGI+MMXp +VGgVBwMOavAhuAa2NLwoqaVUACojp8/THrZoWzoJAp6AL6rQH0VLuzYgElmiJb5 f5IBBnAzAq9WcFSdBgfoAOtfx0ejh+JgGJ0LjsvNm2IN0gWugn2OjdObrrXh36nS DxHv61QSWKbsth9XYpb7zxTiMUR9+rkTr2J5MMyi5XxGX/T5Y4HT1TVb5dDADH+2 0y2x54L2/TGaY1743QRl4Y8gz+s9U6NpW2/pZvv6KJP3tMLIt2g= -----END CERTIFICATE-----Generated at Wed May 13 02:41:35 2026 by rpki-client