$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: jDGr4t0+fO/E5Sv2/nZyyy+fBa0ueJVZLBK9snSz0i8= Subject key identifier: 12:09:53:B0:92:47:C1:94:CE:9D:4B:2C:6E:79:28:12:D0:39:F5:28 Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 06AB8684124C135F489A2C58D1EF1BBF395A1E5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:51:27 +0000 Manifest this update: Tue 12 May 2026 02:46:27 +0000 Manifest next update: Wed 13 May 2026 05:34:27 +0000 Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 4: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: fqNS7p2xASGTHc/1/ngEYxxwG8qnrpxy2iwUyQvfoJk=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ab:86:84:12:4c:13:5f:48:9a:2c:58:d1:ef:1b:bf:39:5a:1e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: May 12 02:46:27 2026 GMT Not After : May 13 05:34:27 2026 GMT Subject: CN=120953B09247C194CE9D4B2C6E792812D039F528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b8:c5:69:52:c8:83:46:5c:b3:66:f3:4b:62: 43:b3:88:cd:6c:ae:a3:ac:de:96:dc:15:ad:c5:c1: 47:09:32:00:35:94:71:9a:e3:8a:ed:f0:02:20:05: 92:f0:46:67:88:42:44:28:2b:64:a2:52:2f:4a:65: 60:3e:03:80:c4:ad:d6:bc:5c:2d:81:d1:8c:87:a1: 2d:6e:92:05:89:e2:4b:f8:32:c7:0b:b4:7b:47:1b: de:47:45:be:31:5f:96:9b:5b:c5:c3:75:5b:48:f7: a6:69:76:75:4a:8e:e4:cc:f4:2b:45:89:74:14:bd: 5e:3c:8a:08:dc:d0:81:26:81:d4:a0:74:87:86:ae: d1:2e:bb:7e:f5:53:d9:b5:77:fa:88:32:1d:75:95: f9:b7:7a:b5:5a:24:d5:5e:52:39:53:66:22:e0:c3: 05:24:80:8a:0e:fb:96:ba:d8:d3:7c:1c:05:9d:35: 15:74:31:ce:32:79:17:25:7e:ee:9c:d1:50:aa:b2: 33:50:ca:a1:46:f2:a0:4d:61:e7:4b:50:f3:9f:57: 59:80:8c:8c:fc:e4:64:7c:04:44:ba:c9:81:95:59: fd:5b:56:ca:36:92:b6:48:70:10:14:64:3b:d7:ab: 07:28:4a:35:23:2e:42:bf:45:4b:3c:97:88:17:ce: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:53:B0:92:47:C1:94:CE:9D:4B:2C:6E:79:28:12:D0:39:F5:28 X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7e:90:e7:5e:fc:33:65:1a:27:49:74:7a:26:e7:40:54:75: 0c:18:c6:bf:56:25:9f:40:dd:00:a3:58:49:02:11:d5:0b:1a: a1:c3:55:81:67:ff:df:d7:0f:1f:72:fb:fb:83:e6:81:5a:48: ee:d7:be:c4:d2:5c:13:74:b8:99:30:8d:3c:be:4f:b1:51:31: 72:33:2f:e6:43:f9:bc:92:13:d0:9c:22:47:7f:5a:cb:89:8d: 44:be:08:12:54:a0:87:f1:53:c4:15:df:df:b8:44:37:d4:f1: 62:0f:2c:38:1c:ba:0a:90:95:9d:f4:e7:d3:67:5c:cd:57:f6: 07:90:a0:9c:d6:a0:c0:83:eb:a8:33:bd:fa:01:3f:2a:04:bf: 73:d0:51:ee:3d:c1:9c:c8:7b:00:ee:79:f0:63:79:e0:44:a6: ed:e4:63:0d:03:35:58:3f:3b:53:c9:fd:27:8f:eb:0b:55:a2: 56:c7:42:87:1d:9a:63:75:03:03:ad:1e:e3:2c:da:c0:81:3d: 3d:ff:77:b6:39:89:24:86:93:51:d6:a2:14:f2:f4:70:ae:a1: 23:20:fa:13:02:17:8f:86:3b:c9:a9:74:48:68:7f:57:6b:96: e2:13:ab:c4:f1:19:76:87:87:a5:7f:ba:d5:c6:cd:eb:c4:04: a8:cb:e8:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBquGhBJME19ImixY0e8bvzlaHl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA1MTIwMjQ2MjdaFw0yNjA1MTMwNTM0MjdaMDMxMTAvBgNV BAMTKDEyMDk1M0IwOTI0N0MxOTRDRTlENEIyQzZFNzkyODEyRDAzOUY1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNuMVpUsiDRlyzZvNLYkOziM1s rqOs3pbcFa3FwUcJMgA1lHGa44rt8AIgBZLwRmeIQkQoK2SiUi9KZWA+A4DErda8 XC2B0YyHoS1ukgWJ4kv4MscLtHtHG95HRb4xX5abW8XDdVtI96ZpdnVKjuTM9CtF iXQUvV48igjc0IEmgdSgdIeGrtEuu371U9m1d/qIMh11lfm3erVaJNVeUjlTZiLg wwUkgIoO+5a62NN8HAWdNRV0Mc4yeRclfu6c0VCqsjNQyqFG8qBNYedLUPOfV1mA jIz85GR8BES6yYGVWf1bVso2krZIcBAUZDvXqwcoSjUjLkK/RUs8l4gXzh+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEglTsJJHwZTOnUssbnkoEtA59SgwHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh+kOde/DNlGidJdHom50BUdQwYxr9WJZ9A 3QCjWEkCEdULGqHDVYFn/9/XDx9y+/uD5oFaSO7XvsTSXBN0uJkwjTy+T7FRMXIz L+ZD+bySE9CcIkd/WsuJjUS+CBJUoIfxU8QV39+4RDfU8WIPLDgcugqQlZ3059Nn XM1X9geQoJzWoMCD66gzvfoBPyoEv3PQUe49wZzIewDuefBjeeBEpu3kYw0DNVg/ O1PJ/SeP6wtVolbHQocdmmN1AwOtHuMs2sCBPT3/d7Y5iSSGk1HWohTy9HCuoSMg +hMCF4+GO8mpdEhof1drluITq8TxGXaHh6V/utXGzevEBKjL6FY= -----END CERTIFICATE-----Generated at Tue May 12 23:20:54 2026 by rpki-client