$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: OKohqoHA56fB6tfVCFFYBxk30kDh7CfERCtp8LZpFDg= Subject key identifier: 17:51:B7:9D:36:3D:02:97:22:97:6F:39:20:42:40:14:40:B8:C4:FD Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 3B82136CF2AEB5CC60CD3CECDB8189CD5CF2480C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:06 +0000 Manifest this update: Tue 12 May 2026 19:41:06 +0000 Manifest next update: Wed 13 May 2026 23:36:06 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) 3: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: C4OIAkp7im3LVzT5XzeaUuX0WhmM+dX5pVY4LcZkhDU=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:82:13:6c:f2:ae:b5:cc:60:cd:3c:ec:db:81:89:cd:5c:f2:48:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: May 12 19:41:06 2026 GMT Not After : May 13 23:36:06 2026 GMT Subject: CN=1751B79D363D029722976F392042401440B8C4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:84:ee:96:b6:75:22:dc:b3:6b:b0:27:ff: 71:f2:71:fe:4f:7e:b1:ab:8d:8b:bf:ad:3f:8b:74: 97:e9:8e:e8:e8:49:f3:7b:ba:e2:eb:53:81:bc:df: dd:62:31:31:3d:b0:7a:54:aa:fc:a9:7a:ed:ab:9a: 7f:b4:18:0b:a3:3c:d3:2f:01:d3:ec:8c:bb:6a:e2: 94:03:26:6d:0e:e7:a8:e0:88:a5:cd:f3:44:c8:a1: d2:7b:78:14:03:c2:b7:e5:96:e3:72:70:b9:73:0d: fc:2e:e0:36:cf:08:d7:55:bf:ce:cd:99:9c:fd:4e: 65:7f:24:2e:e3:dd:78:26:f4:2e:02:a6:4b:9d:25: 0a:83:47:f0:fe:25:b1:5b:b2:7b:fd:37:36:48:6f: cc:ce:e9:5f:56:c3:b5:3a:18:f1:a5:b8:51:1d:08: 9d:c3:26:1c:c7:dd:c2:29:b0:c7:1e:6c:ad:8d:79: ef:83:83:17:51:0d:a5:53:46:44:18:98:0f:3a:9a: b6:18:46:59:f2:07:e3:fa:d7:43:31:14:a0:2b:2c: d1:4d:91:72:b6:e0:59:1f:64:21:57:fa:17:d2:f3: 14:7c:52:7d:82:ef:87:65:e5:06:f4:31:78:0c:ce: a3:74:cf:99:58:34:99:0a:90:75:36:0c:d6:c7:8c: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:B7:9D:36:3D:02:97:22:97:6F:39:20:42:40:14:40:B8:C4:FD X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1a:b1:b6:d6:cf:56:9b:80:79:61:a0:10:a6:14:8f:0c:92: b5:04:94:e0:9c:00:6c:0b:a5:f8:da:5a:76:f8:16:1c:78:6d: af:8b:d2:16:da:ff:57:84:a6:c0:1c:ed:91:cd:28:ce:e5:5a: 00:ec:64:d0:08:41:d3:1d:69:07:28:98:a7:66:60:08:02:b2: 42:b8:ac:00:40:5d:49:b0:4d:79:84:03:25:4b:43:11:1a:3d: e2:64:b4:c4:74:a1:e6:e5:de:b9:bc:61:01:b8:42:41:e8:66: ed:f3:61:78:55:21:3e:2f:bb:5a:5d:5b:15:27:8d:ed:8c:03: 4a:c5:e2:a1:de:41:17:28:fc:1f:79:4c:0b:27:07:2e:23:cb: 71:64:39:81:24:2f:4e:1a:cc:1e:22:e6:99:7e:00:fe:29:28: fb:8e:4c:eb:31:ca:a4:1b:69:17:53:7d:cd:e4:ec:b0:31:ac: 59:32:4c:78:05:01:1b:d2:be:67:d1:de:26:c7:12:90:47:69: d5:7d:48:c3:2e:d5:35:3d:0c:35:9b:a7:5d:02:0d:6b:94:7e: 37:6e:e7:51:7a:00:82:53:df:98:5d:ef:3c:b6:82:23:be:84: ba:4e:f2:d4:66:e2:c0:b7:57:33:b3:eb:ad:8a:31:83:ea:de: 78:a2:c3:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4ITbPKutcxgzTzs24GJzVzySAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA1MTIxOTQxMDZaFw0yNjA1MTMyMzM2MDZaMDMxMTAvBgNV BAMTKDE3NTFCNzlEMzYzRDAyOTcyMjk3NkYzOTIwNDI0MDE0NDBCOEM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41oTulrZ1Ityza7An/3Hycf5P frGrjYu/rT+LdJfpjujoSfN7uuLrU4G8391iMTE9sHpUqvypeu2rmn+0GAujPNMv AdPsjLtq4pQDJm0O56jgiKXN80TIodJ7eBQDwrflluNycLlzDfwu4DbPCNdVv87N mZz9TmV/JC7j3Xgm9C4CpkudJQqDR/D+JbFbsnv9NzZIb8zO6V9Ww7U6GPGluFEd CJ3DJhzH3cIpsMcebK2Nee+DgxdRDaVTRkQYmA86mrYYRlnyB+P610MxFKArLNFN kXK24FkfZCFX+hfS8xR8Un2C74dl5Qb0MXgMzqN0z5lYNJkKkHU2DNbHjOKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF1G3nTY9Apcil285IEJAFEC4xP0wHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMasbbWz1abgHlhoBCmFI8MkrUElOCcAGwL pfjaWnb4Fhx4ba+L0hba/1eEpsAc7ZHNKM7lWgDsZNAIQdMdaQcomKdmYAgCskK4 rABAXUmwTXmEAyVLQxEaPeJktMR0oebl3rm8YQG4QkHoZu3zYXhVIT4vu1pdWxUn je2MA0rF4qHeQRco/B95TAsnBy4jy3FkOYEkL04azB4i5pl+AP4pKPuOTOsxyqQb aRdTfc3k7LAxrFkyTHgFARvSvmfR3ibHEpBHadV9SMMu1TU9DDWbp10CDWuUfjdu 51F6AIJT35hd7zy2giO+hLpO8tRm4sC3VzOz662KMYPq3niiw9w= -----END CERTIFICATE-----Generated at Tue May 12 22:56:28 2026 by rpki-client