$ rpki-client -vvf rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft File: 202D68B92C393694107A2F9B59DF1822383F0A40.mft (raw, json) Hash identifier: Gqsgn873JCO/uze1UrguUixisjbB64X3L5RGoCz/ZMU= Subject key identifier: E1:B7:FC:B8:AB:38:2D:7C:62:94:94:31:0C:DD:01:AC:5B:4A:EF:26 Authority key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 Certificate issuer: /CN=202D68B92C393694107A2F9B59DF1822383F0A40 Certificate serial: 124437F08BF9DA79599761286C05C812C77CF5FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:48 +0000 Manifest this update: Tue 12 May 2026 19:30:48 +0000 Manifest next update: Wed 13 May 2026 23:09:48 +0000 Files and hashes: 1: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JJn7HIlfA2u7cKl1pj836AvFJgvd06b+L9BxXbXGPiQ=) 2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: s1JJ4qxqnX+/x2wRLTL/vn6XvEiBu3g0RUuaHJFKCfY=) 3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: sVkX/3BAqlUnIX3vPMQ13bPbeRbhUsec2KXwzV7qXyg=) 4: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 59w4gZXVO0UF24xOSJ6tHWLfwtyek7qt4pTN2C7JT58=) 5: 202D68B92C393694107A2F9B59DF1822383F0A40.crl (hash: UY7gegRUDlEMxWlUVe3IESd85er49IlEgk4rq3H42BU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:44:37:f0:8b:f9:da:79:59:97:61:28:6c:05:c8:12:c7:7c:f5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202D68B92C393694107A2F9B59DF1822383F0A40 Validity Not Before: May 12 19:30:48 2026 GMT Not After : May 13 23:09:48 2026 GMT Subject: CN=E1B7FCB8AB382D7C629494310CDD01AC5B4AEF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:c4:3e:28:34:f5:ad:2a:e8:e0:40:66:00: 47:9f:3a:2c:b6:c3:3e:d5:ee:4c:b3:ca:73:69:96: cf:7b:d7:70:0a:58:00:30:d8:f6:40:0e:83:a8:28: f2:61:53:96:1b:94:d8:55:27:f4:61:bf:5b:61:5d: 8b:a9:0d:c9:79:f5:53:b4:24:2e:2c:93:45:86:fc: 7c:03:86:e2:0d:80:46:d3:ae:e2:74:37:8c:25:84: dc:ec:ee:67:38:99:68:bd:e2:69:e3:60:17:17:cb: a7:ff:67:cd:8e:2b:19:fc:2a:65:9b:8f:a6:ed:ef: 37:84:ee:fe:ca:2a:e0:19:24:7a:1f:4f:18:3f:1c: 35:87:20:df:39:b3:65:ae:4b:06:c5:d1:7f:2d:ea: 5b:f0:84:dc:42:48:e8:e0:cc:e2:e2:21:fc:a7:38: 09:d9:c2:db:3c:62:c9:64:07:5b:b8:c2:76:28:62: 4f:06:e7:02:ac:f9:d1:75:f6:45:e4:e2:59:2c:b8: ca:d3:95:3d:6a:02:2b:24:fa:d5:d5:9d:a7:36:ac: 38:26:b1:ef:74:c5:99:7c:a0:4f:d2:0d:61:05:e1: 6d:e7:a7:41:92:bf:ac:f4:59:cd:bf:43:6c:f0:89: c2:c8:a5:3b:bd:a6:0f:32:e6:e4:cc:0c:51:48:e0: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B7:FC:B8:AB:38:2D:7C:62:94:94:31:0C:DD:01:AC:5B:4A:EF:26 X509v3 Authority Key Identifier: keyid:20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:bc:72:3a:00:83:64:e3:d9:e4:2e:74:c9:12:ca:40:bf: 42:b0:e5:5f:32:bd:20:0d:cd:0d:4f:b1:e2:3b:78:06:e1:06: f1:ff:e5:db:10:06:a8:55:a7:92:d4:69:0f:f1:36:62:9c:34: 8e:1f:ab:55:b2:da:d0:9a:87:3c:84:f9:fd:90:54:9a:b2:52: 2f:25:44:5d:5b:72:a2:31:8e:d5:ef:88:a1:12:95:5f:55:6c: f9:2d:f9:4a:0b:d3:c8:0e:cf:8f:10:4b:2b:18:29:c0:71:16: ad:62:ab:5d:f2:04:97:d7:f5:f2:a3:85:4e:b2:bc:c1:cb:99: 69:4d:8e:0e:5d:0a:9d:19:c9:e2:05:ff:1e:69:28:1d:82:1a: 77:1d:8e:fa:eb:c6:a6:c9:46:d8:8f:e0:7a:96:63:df:93:48: 65:88:8f:2f:30:d7:88:47:11:6a:76:8f:a4:0f:50:59:90:79: ac:44:3e:5d:71:c9:26:62:20:26:e6:72:0b:32:f9:89:cc:65: bd:98:1a:4f:e9:9d:13:f5:41:44:d7:01:e3:6a:c3:ad:47:78: 92:b8:99:e7:c6:2f:0b:38:51:c9:1d:e0:c5:cb:be:d3:0d:10: 35:be:53:6f:65:2c:56:74:41:83:84:e9:4b:d4:bf:33:f5:40: e1:73:16:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkQ38Iv52nlZl2EobAXIEsd89f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4MjIz ODNGMEE0MDAeFw0yNjA1MTIxOTMwNDhaFw0yNjA1MTMyMzA5NDhaMDMxMTAvBgNV BAMTKEUxQjdGQ0I4QUIzODJEN0M2Mjk0OTQzMTBDREQwMUFDNUI0QUVGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmcQ+KDT1rSro4EBmAEefOiy2 wz7V7kyzynNpls9713AKWAAw2PZADoOoKPJhU5YblNhVJ/Rhv1thXYupDcl59VO0 JC4sk0WG/HwDhuINgEbTruJ0N4wlhNzs7mc4mWi94mnjYBcXy6f/Z82OKxn8KmWb j6bt7zeE7v7KKuAZJHofTxg/HDWHIN85s2WuSwbF0X8t6lvwhNxCSOjgzOLiIfyn OAnZwts8YslkB1u4wnYoYk8G5wKs+dF19kXk4lksuMrTlT1qAisk+tXVnac2rDgm se90xZl8oE/SDWEF4W3np0GSv6z0Wc2/Q2zwicLIpTu9pg8y5uTMDFFI4DqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bf8uKs4LXxilJQxDN0BrFtK7yYwHwYDVR0j BBgwFoAUIC1ouSw5NpQQei+bWd8YIjg/CkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3MjkyOTEtYTFhNy00YjE5LTkzZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4Qjky QzM5MzY5NDEwN0EyRjlCNTlERjE4MjIzODNGMEE0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJENjhCOTJDMzkzNjk0MTA3QTJGOUI1OURGMTgyMjM4M0Yw QTQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4 MjIzODNGMEE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJrvHI6AINk49nkLnTJEspAv0Kw5V8yvSAN zQ1PseI7eAbhBvH/5dsQBqhVp5LUaQ/xNmKcNI4fq1Wy2tCahzyE+f2QVJqyUi8l RF1bcqIxjtXviKESlV9VbPkt+UoL08gOz48QSysYKcBxFq1iq13yBJfX9fKjhU6y vMHLmWlNjg5dCp0ZyeIF/x5pKB2CGncdjvrrxqbJRtiP4HqWY9+TSGWIjy8w14hH EWp2j6QPUFmQeaxEPl1xySZiICbmcgsy+YnMZb2YGk/pnRP1QUTXAeNqw61HeJK4 mefGLws4Uckd4MXLvtMNEDW+U29lLFZ0QYOE6UvUvzP1QOFzFkM= -----END CERTIFICATE-----Generated at Wed May 13 02:27:10 2026 by rpki-client