$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json) Hash identifier: eks6xA4Mcck5Pdih381tHbl+6CUKMCOqlu0VhMT1vOU= Subject key identifier: DF:DD:8F:4D:67:D6:7D:A6:0E:47:6F:79:35:55:94:0C:09:76:BB:8F Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Certificate serial: 0814E8DA5CB4CE56FEF34DFEC837CBC2079330B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:56 +0000 Manifest this update: Tue 12 May 2026 18:23:56 +0000 Manifest next update: Wed 13 May 2026 22:15:56 +0000 Files and hashes: 1: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=) 2: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: lC7D2CZE7EBtwe4+53T6Xc5i9FCyqRbHFEMfJXJesdE=) 3: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:14:e8:da:5c:b4:ce:56:fe:f3:4d:fe:c8:37:cb:c2:07:93:30:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Validity Not Before: May 12 18:23:56 2026 GMT Not After : May 13 22:15:56 2026 GMT Subject: CN=DFDD8F4D67D67DA60E476F793555940C0976BB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:dc:27:fc:4a:d1:16:41:1e:fd:c3:76:ea: 19:bf:98:38:09:4a:b5:1f:c8:d7:d6:24:5d:68:fd: c8:91:a2:18:ba:20:f4:68:77:b8:f1:a3:5f:ca:d1: 19:16:12:38:ad:ba:3f:65:39:6b:51:f9:49:25:bf: 17:ad:b5:6f:27:6a:68:72:29:70:4b:e8:f3:8a:f0: ab:80:c5:64:d5:74:23:1a:a9:84:af:1a:3f:a1:e7: 33:2b:6d:39:de:3f:ac:82:19:41:14:96:90:07:1e: 24:0a:0a:a2:ba:8a:f7:83:f6:72:a3:53:02:c1:ac: 17:8b:47:69:f0:5e:f7:80:82:0a:2c:1f:a6:25:3b: b0:4e:c6:87:1a:44:21:d4:28:48:e2:0e:7e:86:e1: bb:43:66:3e:e5:23:1e:60:a4:cb:1a:d3:11:b7:db: 67:44:91:75:0e:cb:5f:b5:96:1f:e5:45:26:0c:7e: d7:c4:1c:a5:46:00:67:34:13:a9:bf:6d:aa:06:3f: ee:cb:e8:47:ca:bb:7f:12:31:f0:da:82:0a:b0:38: e6:72:1b:11:0e:89:14:37:7b:79:1a:92:ce:e3:bb: 2a:11:4a:d1:52:ca:7e:1d:a7:cf:e4:c1:ef:d2:31: d6:58:eb:f7:b7:75:0d:74:43:c4:40:3a:e8:4a:13: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:8F:4D:67:D6:7D:A6:0E:47:6F:79:35:55:94:0C:09:76:BB:8F X509v3 Authority Key Identifier: keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a2:0f:fa:1a:25:1c:ce:48:be:0a:0f:89:f4:2b:e8:b4:83: e7:dd:c5:65:f6:2a:ff:6e:c9:c4:8d:e4:25:8b:8d:54:9e:8e: e2:11:90:59:84:77:b6:f2:a8:ce:4f:85:44:b0:f8:4e:7b:0b: f2:b7:82:43:b7:59:ff:09:06:42:33:7a:45:c0:a0:2c:be:d3: df:3f:fd:e2:dc:83:a4:58:e3:aa:dc:5c:76:57:9b:be:89:3f: 63:f4:7d:18:1d:b2:9b:3a:66:45:5b:7a:69:db:06:ce:b3:83: 4d:44:f3:83:a8:13:d5:fb:38:bb:0c:01:1f:10:69:42:31:2c: 8d:86:65:56:0d:4e:5b:5f:8f:30:4c:44:02:7f:6c:31:be:7b: 48:c2:87:57:80:63:6f:4f:c8:82:90:f2:56:d4:d4:92:0b:4d: 12:53:4c:3f:ae:b9:a0:05:08:c4:27:91:f7:ec:34:88:a3:ac: 0b:e5:0b:92:85:7e:74:81:55:54:b5:96:48:bc:c6:3c:b9:a4: 7e:41:53:10:8c:81:61:30:e6:c1:66:ab:b0:35:df:15:0c:80: 0e:44:54:bd:e5:75:f7:4a:c3:79:a7:2f:2d:d4:ba:ee:eb:73: 54:24:a2:ef:e5:d6:69:00:6f:70:08:cb:9b:ed:7a:a9:ff:c2: 33:2e:6e:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBTo2ly0zlb+803+yDfLwgeTMLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2 OTg2NThGMzAeFw0yNjA1MTIxODIzNTZaFw0yNjA1MTMyMjE1NTZaMDMxMTAvBgNV BAMTKERGREQ4RjRENjdENjdEQTYwRTQ3NkY3OTM1NTU5NDBDMDk3NkJCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6dwn/ErRFkEe/cN26hm/mDgJ SrUfyNfWJF1o/ciRohi6IPRod7jxo1/K0RkWEjituj9lOWtR+UklvxettW8namhy KXBL6POK8KuAxWTVdCMaqYSvGj+h5zMrbTneP6yCGUEUlpAHHiQKCqK6iveD9nKj UwLBrBeLR2nwXveAggosH6YlO7BOxocaRCHUKEjiDn6G4btDZj7lIx5gpMsa0xG3 22dEkXUOy1+1lh/lRSYMftfEHKVGAGc0E6m/baoGP+7L6EfKu38SMfDaggqwOOZy GxEOiRQ3e3kaks7juyoRStFSyn4dp8/kwe/SMdZY6/e3dQ10Q8RAOuhKE/UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU392PTWfWfaYOR295NVWUDAl2u48wHwYDVR0j BBgwFoAUCWeCxuEI6q7llpLooeRoqmmGWPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI1MGJhYzQtYTZhNy00NTZjLTg1MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZF MTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2OTg2NThGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTY3ODJDNkUxMDhFQUFFRTU5NjkyRThBMUU0NjhBQTY5ODY1 OEYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4 QUE2OTg2NThGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeiD/oaJRzOSL4KD4n0K+i0g+fdxWX2Kv9u ycSN5CWLjVSejuIRkFmEd7byqM5PhUSw+E57C/K3gkO3Wf8JBkIzekXAoCy+098/ /eLcg6RY46rcXHZXm76JP2P0fRgdsps6ZkVbemnbBs6zg01E84OoE9X7OLsMAR8Q aUIxLI2GZVYNTltfjzBMRAJ/bDG+e0jCh1eAY29PyIKQ8lbU1JILTRJTTD+uuaAF CMQnkffsNIijrAvlC5KFfnSBVVS1lki8xjy5pH5BUxCMgWEw5sFmq7A13xUMgA5E VL3ldfdKw3mnLy3Uuu7rc1Qkou/l1mkAb3AIy5vteqn/wjMubrA= -----END CERTIFICATE-----Generated at Wed May 13 02:58:45 2026 by rpki-client