$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: GjqMnir4ZcXjRWCr1e9oXYSODYH9a/rlqlNci4FMLcU= Subject key identifier: DB:6C:41:6B:6D:B5:47:E1:28:57:69:72:A4:6C:F9:A7:31:E1:7A:8D Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 4DF8ECDDBCCD46A4C2CD24E75F9F1EA2466D21DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:46 +0000 Manifest this update: Tue 12 May 2026 23:32:45 +0000 Manifest next update: Thu 14 May 2026 01:59:45 +0000 Files and hashes: 1: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) 3: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: Du0cw+7a5i4wQk6BB8XlO1+6NtuAXGqSOvwbzLHf2aw=) 4: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f8:ec:dd:bc:cd:46:a4:c2:cd:24:e7:5f:9f:1e:a2:46:6d:21:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: May 12 23:32:45 2026 GMT Not After : May 14 01:59:45 2026 GMT Subject: CN=DB6C416B6DB547E128576972A46CF9A731E17A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:08:d4:0f:38:4d:e4:30:d7:4e:f9:f6:74: 77:01:06:0b:b1:73:04:50:ae:a8:af:a0:1e:00:9c: 10:0e:10:54:3d:c5:29:98:09:95:d5:12:55:43:1e: 6e:14:6f:ae:c5:10:93:b0:bd:fd:bf:30:22:59:88: 1e:35:88:ee:b1:31:9c:4a:77:21:59:13:e6:d1:3c: 61:0e:36:e7:53:53:f3:55:99:41:44:e9:e9:43:73: 5b:d2:fb:51:fa:3f:73:f4:26:81:16:b5:bc:85:23: 90:cd:89:0a:d6:6a:11:cb:10:78:b9:56:a1:4d:3f: 87:4b:4b:07:65:73:35:c5:28:cb:6e:06:59:eb:a6: ea:3a:23:aa:18:a5:0c:bf:4e:b5:06:82:6f:d9:35: f4:5f:af:16:f9:b7:78:76:64:2e:35:70:34:f2:ba: ff:f9:ca:53:ea:81:86:16:f4:93:fc:a2:f4:00:f0: f2:f6:e0:57:ea:7c:9c:0f:95:4d:cb:48:dd:14:b4: a5:f7:a8:d5:a5:41:d4:41:7d:87:95:8a:12:37:09: 7a:40:17:1c:70:68:72:ed:4e:52:f7:1b:b3:63:07: 30:4c:e5:73:c4:0d:55:fe:32:a8:50:19:0e:1a:90: 7b:fb:40:a3:99:ad:74:87:cc:0e:52:94:23:c0:f7: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6C:41:6B:6D:B5:47:E1:28:57:69:72:A4:6C:F9:A7:31:E1:7A:8D X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e2:91:d3:b2:2d:bf:18:9e:73:fd:7b:16:e5:de:08:ed:f7: bb:77:d0:c1:15:49:93:df:17:54:f6:24:a2:68:df:89:cc:92: d2:4a:5f:be:9a:88:bf:35:50:ea:08:98:a2:d5:32:f0:c8:2c: 83:35:86:cc:92:be:b9:92:03:dd:d9:01:81:7e:01:7e:1a:a7: 63:a8:fa:0e:b5:25:75:cb:53:43:1f:09:96:7c:fe:63:c7:54: ba:d9:55:fb:18:27:05:55:3d:11:96:ea:d8:0b:72:2d:3d:44: f8:4e:b9:d8:ad:d2:4b:cf:09:06:0c:c6:68:43:52:02:72:9e: f0:05:b8:be:e2:8e:29:db:ae:c6:a0:6a:c3:34:c5:f1:f2:20: 9c:47:8a:c2:d3:44:f0:a1:e2:6a:f6:6e:da:23:51:96:71:06: 9f:91:ab:41:b2:c0:ad:11:1e:cd:22:57:22:34:0f:c9:6a:0b: d1:13:98:b8:33:66:85:94:97:a8:a0:23:aa:c1:3d:3c:52:6c: f8:21:b7:bf:cb:83:ce:37:fb:db:65:33:dd:af:9b:4d:48:ba: b6:40:b1:b8:19:f5:1a:99:47:a2:86:d7:13:7c:74:9f:54:d0: a0:75:b6:44:54:90:cf:ab:e9:54:f2:95:48:2a:0e:79:7f:3e: f5:c1:86:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfjs3bzNRqTCzSTnX58eokZtId4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA1MTIyMzMyNDVaFw0yNjA1MTQwMTU5NDVaMDMxMTAvBgNV BAMTKERCNkM0MTZCNkRCNTQ3RTEyODU3Njk3MkE0NkNGOUE3MzFFMTdBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsQjUDzhN5DDXTvn2dHcBBgux cwRQrqivoB4AnBAOEFQ9xSmYCZXVElVDHm4Ub67FEJOwvf2/MCJZiB41iO6xMZxK dyFZE+bRPGEONudTU/NVmUFE6elDc1vS+1H6P3P0JoEWtbyFI5DNiQrWahHLEHi5 VqFNP4dLSwdlczXFKMtuBlnrpuo6I6oYpQy/TrUGgm/ZNfRfrxb5t3h2ZC41cDTy uv/5ylPqgYYW9JP8ovQA8PL24FfqfJwPlU3LSN0UtKX3qNWlQdRBfYeVihI3CXpA FxxwaHLtTlL3G7NjBzBM5XPEDVX+MqhQGQ4akHv7QKOZrXSHzA5SlCPA99RlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22xBa221R+EoV2lypGz5pzHheo0wHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/ikdOyLb8YnnP9exbl3gjt97t30MEVSZPf F1T2JKJo34nMktJKX76aiL81UOoImKLVMvDILIM1hsySvrmSA93ZAYF+AX4ap2Oo +g61JXXLU0MfCZZ8/mPHVLrZVfsYJwVVPRGW6tgLci09RPhOudit0kvPCQYMxmhD UgJynvAFuL7ijinbrsagasM0xfHyIJxHisLTRPCh4mr2btojUZZxBp+Rq0GywK0R Hs0iVyI0D8lqC9ETmLgzZoWUl6igI6rBPTxSbPght7/Lg843+9tlM92vm01IurZA sbgZ9RqZR6KG1xN8dJ9U0KB1tkRUkM+r6VTylUgqDnl/PvXBhj0= -----END CERTIFICATE-----Generated at Wed May 13 04:02:50 2026 by rpki-client