$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft File: D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json) Hash identifier: G1LdPtfOiyDdjp+m12OKPQcCP/SdYjUu0iVAfJ4QUSg= Subject key identifier: E9:A9:76:27:EF:D8:5C:19:D3:22:B3:11:F6:2B:42:52:C6:FB:BB:84 Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 Certificate issuer: /CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Certificate serial: 2932F45A8CFDDBB60581B7648BA40B251B1AE56E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:22 +0000 Manifest this update: Tue 12 May 2026 18:08:22 +0000 Manifest next update: Wed 13 May 2026 20:21:22 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=) 2: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: 6OcWf4sFoEz8KIqjtcU2Eq68unF9DK7uaXVq14ZWMLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:32:f4:5a:8c:fd:db:b6:05:81:b7:64:8b:a4:0b:25:1b:1a:e5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Validity Not Before: May 12 18:08:22 2026 GMT Not After : May 13 20:21:22 2026 GMT Subject: CN=E9A97627EFD85C19D322B311F62B4252C6FBBB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:66:e3:c8:f2:4d:6e:f4:f9:34:14:75:ea: f8:fc:d0:22:64:92:c8:30:5c:67:a5:87:61:3f:9d: df:b7:d3:99:af:8c:27:fd:1e:5b:ed:08:f4:a8:6f: 64:c3:5f:dd:61:1e:e2:30:af:cc:8c:b5:58:a6:c5: 53:be:63:7f:ac:f3:f7:43:45:91:6e:99:f8:69:37: 13:eb:47:a4:09:5b:08:33:10:16:c6:7c:7c:8d:9a: b6:19:fd:32:1f:2c:a0:15:c7:8b:ca:af:8b:17:8f: cc:f2:66:16:49:e2:d5:27:34:dc:dc:58:17:80:b9: 5a:c3:fd:13:70:3b:74:e6:74:05:fd:4c:29:d4:a3: 65:89:5b:71:0a:73:1b:c6:22:2b:5d:53:61:c7:3c: af:5f:a7:29:a6:65:b9:da:75:81:07:8c:ab:08:b7: 72:04:96:ff:1a:6c:e8:d2:64:0d:85:01:1f:36:2f: 59:04:55:31:aa:f6:5c:ff:f2:f8:d2:19:17:6b:c6: 5b:9c:5d:93:2e:43:6f:4a:7e:43:7b:55:fe:7d:f2: 79:74:63:2a:b0:d4:86:5a:83:28:f5:6a:88:86:92: 71:a1:59:b0:f6:56:57:08:b4:63:a0:b9:ff:23:7a: 44:56:bc:0f:6a:90:16:d2:47:ab:d6:2c:96:d1:ef: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:76:27:EF:D8:5C:19:D3:22:B3:11:F6:2B:42:52:C6:FB:BB:84 X509v3 Authority Key Identifier: keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:fc:79:34:87:ba:67:df:3f:5f:b7:b8:36:9f:75:63:e7:92: 42:5a:21:37:b4:23:25:71:b1:64:77:16:fa:ba:d3:fc:80:a7: 7e:9d:ba:e3:d9:d2:3c:f6:34:37:50:9f:b7:90:1a:3e:31:77: 0f:7c:91:b6:c8:0a:13:a4:2e:12:d1:95:b6:20:98:bd:4c:9e: 7d:b2:fd:6d:c2:da:59:91:fb:e6:a1:3e:32:93:4d:7f:17:2b: 7e:eb:d4:ff:9f:ab:99:c1:00:96:c7:3c:1e:8a:53:24:0f:91: e4:92:b7:18:48:ee:cd:95:83:e0:db:7b:77:e5:8e:ba:fe:d4: 6e:6a:9c:2f:d7:27:20:cb:e2:92:f9:d4:08:c3:98:ae:44:4d: a0:74:c6:67:b7:67:3e:42:2f:24:e8:c9:57:45:62:32:63:07: df:61:2e:11:ea:fc:be:76:c4:6c:93:f6:9d:dd:40:ea:8e:54: 9a:ad:54:d6:4c:db:73:01:22:05:1e:b7:27:96:cf:c3:3a:dc: 9d:24:01:08:cd:cf:15:f8:e4:b2:28:3f:80:95:6f:68:24:ef: ab:02:76:a4:5d:f5:53:9c:9d:65:18:0f:c6:79:e7:5b:d3:af: dc:4d:88:e4:db:40:15:44:ab:b6:ed:8f:d9:99:b5:fc:47:9d: ac:00:ad:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTL0Woz927YFgbdki6QLJRsa5W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhC RDdBOUFFMDAeFw0yNjA1MTIxODA4MjJaFw0yNjA1MTMyMDIxMjJaMDMxMTAvBgNV BAMTKEU5QTk3NjI3RUZEODVDMTlEMzIyQjMxMUY2MkI0MjUyQzZGQkJCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9mbjyPJNbvT5NBR16vj80CJk ksgwXGelh2E/nd+305mvjCf9HlvtCPSob2TDX91hHuIwr8yMtVimxVO+Y3+s8/dD RZFumfhpNxPrR6QJWwgzEBbGfHyNmrYZ/TIfLKAVx4vKr4sXj8zyZhZJ4tUnNNzc WBeAuVrD/RNwO3TmdAX9TCnUo2WJW3EKcxvGIitdU2HHPK9fpymmZbnadYEHjKsI t3IElv8abOjSZA2FAR82L1kEVTGq9lz/8vjSGRdrxlucXZMuQ29KfkN7Vf598nl0 Yyqw1IZagyj1aoiGknGhWbD2VlcItGOguf8jekRWvA9qkBbSR6vWLJbR7y0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6al2J+/YXBnTIrMR9itCUsb7u4QwHwYDVR0j BBgwFoAU1EGYjCBJ13+dmGUmI6iBCL16muAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMy MDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhCRDdBOUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENDQxOTg4QzIwNDlENzdGOUQ5ODY1MjYyM0E4ODEwOEJEN0E5 QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgx MDhCRDdBOUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAML8eTSHumffP1+3uDafdWPnkkJaITe0IyVx sWR3Fvq60/yAp36duuPZ0jz2NDdQn7eQGj4xdw98kbbIChOkLhLRlbYgmL1Mnn2y /W3C2lmR++ahPjKTTX8XK37r1P+fq5nBAJbHPB6KUyQPkeSStxhI7s2Vg+Dbe3fl jrr+1G5qnC/XJyDL4pL51AjDmK5ETaB0xme3Zz5CLyToyVdFYjJjB99hLhHq/L52 xGyT9p3dQOqOVJqtVNZM23MBIgUetyeWz8M63J0kAQjNzxX45LIoP4CVb2gk76sC dqRd9VOcnWUYD8Z551vTr9xNiOTbQBVEq7btj9mZtfxHnawArVA= -----END CERTIFICATE-----Generated at Wed May 13 11:18:41 2026 by rpki-client