$ rpki-client -vvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: Kh9SUuyO0aRSeDslPsThQdxGz1LMbXlTfHWliFWEQjI= Subject key identifier: 3D:0D:10:88:B6:A5:F6:5C:4A:F7:0E:2C:A8:F8:11:95:5E:19:9D:17 Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 516DE871B3695A802413FE44C140C44E95FB5A91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:08:51 +0000 Manifest this update: Tue 12 May 2026 04:03:51 +0000 Manifest next update: Wed 13 May 2026 06:00:51 +0000 Files and hashes: 1: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: 7yexq/KJge+a6hDLJFCm2IcCUnFeQhh1AX17S0FFBy0=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:e8:71:b3:69:5a:80:24:13:fe:44:c1:40:c4:4e:95:fb:5a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: May 12 04:03:51 2026 GMT Not After : May 13 06:00:51 2026 GMT Subject: CN=3D0D1088B6A5F65C4AF70E2CA8F811955E199D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:a2:96:62:4b:9f:05:44:cc:69:02:c1:e2: df:db:f6:a2:dd:0b:94:d0:63:5b:46:26:60:23:19: c6:be:e1:a0:02:5f:87:9d:83:12:aa:58:20:24:35: fe:b9:43:51:c8:0e:71:61:fd:f3:4f:1f:d2:fa:66: 6f:58:84:c5:14:d1:57:58:f5:b6:d8:23:5b:30:4a: 14:93:46:94:40:b1:ed:43:71:c8:9c:15:34:c8:11: 8b:98:8d:d3:ed:60:e6:ca:c7:f9:dc:f0:bd:f0:50: 5b:1e:59:31:7b:f6:13:86:fe:9e:61:bb:9d:75:70: 90:e4:6b:8e:0f:01:ce:8c:0c:22:92:26:d9:7e:bb: c5:1c:91:d9:06:96:26:79:d4:ac:df:49:9b:dd:82: f9:c8:69:05:98:7f:75:67:1f:7f:86:f5:0b:53:6b: d0:b8:ce:e0:60:83:4b:ca:5e:ce:a6:1a:3f:27:af: 1b:53:57:9b:09:68:cd:1c:36:aa:1d:1a:d5:fb:9a: 77:b1:a9:66:18:b1:b3:12:54:95:6b:92:ea:51:43: 4c:19:d0:10:e5:1a:21:b4:ce:4b:3a:eb:20:94:6c: 91:57:8c:3d:79:40:ef:c3:1e:ca:15:08:50:67:9e: 3d:9e:30:32:8e:03:94:75:cd:5f:de:fc:24:da:c0: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:10:88:B6:A5:F6:5C:4A:F7:0E:2C:A8:F8:11:95:5E:19:9D:17 X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:e5:36:a0:3d:9b:ad:6d:83:65:fb:f6:d7:fd:5a:7a:be: 20:00:8e:2f:44:f5:35:4a:95:98:1e:1a:14:f9:c0:8d:97:04: 35:75:df:2d:89:6c:9e:62:be:0a:36:c4:87:e6:7e:f6:d2:aa: 50:00:7a:b7:65:2d:1b:eb:12:a4:b3:87:3b:94:42:d6:18:22: 73:d5:2a:78:90:99:27:9b:b8:d8:a6:ce:38:0a:c7:95:00:27: b3:96:f8:37:89:e8:8f:2e:6e:49:5b:ed:48:08:c9:dc:d8:7e: 33:b7:34:21:bf:12:a7:85:72:ed:01:0e:8f:ee:e7:a5:66:a2: 29:ac:f7:e6:5c:2b:66:51:6c:c7:01:8b:32:c1:62:69:31:00: 63:eb:ed:05:24:f6:5b:a1:e9:c1:cc:be:4d:d0:14:7a:f4:d7: 39:cb:b7:a3:65:69:5a:3f:66:c1:d0:6e:99:4a:29:0c:40:47: 52:32:9a:64:d7:6a:01:e8:5b:d5:6e:1e:b2:87:45:af:59:93: 99:7a:cc:21:62:30:55:e5:86:e5:3a:48:e1:09:c2:e6:1e:b7: aa:8a:c3:61:92:60:bc:73:f3:b2:1b:0e:9b:cf:a7:8d:3c:52: 1d:79:2c:c2:52:e6:b5:9c:d9:b3:bc:be:48:32:70:44:31:5a: 37:cd:d6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUW3ocbNpWoAkE/5EwUDETpX7WpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA1MTIwNDAzNTFaFw0yNjA1MTMwNjAwNTFaMDMxMTAvBgNV BAMTKDNEMEQxMDg4QjZBNUY2NUM0QUY3MEUyQ0E4RjgxMTk1NUUxOTlEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPJqKWYkufBUTMaQLB4t/b9qLd C5TQY1tGJmAjGca+4aACX4edgxKqWCAkNf65Q1HIDnFh/fNPH9L6Zm9YhMUU0VdY 9bbYI1swShSTRpRAse1DccicFTTIEYuYjdPtYObKx/nc8L3wUFseWTF79hOG/p5h u511cJDka44PAc6MDCKSJtl+u8UckdkGliZ51KzfSZvdgvnIaQWYf3VnH3+G9QtT a9C4zuBgg0vKXs6mGj8nrxtTV5sJaM0cNqodGtX7mnexqWYYsbMSVJVrkupRQ0wZ 0BDlGiG0zks66yCUbJFXjD15QO/DHsoVCFBnnj2eMDKOA5R1zV/e/CTawFCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQ0QiLal9lxK9w4sqPgRlV4ZnRcwHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7X5TagPZutbYNl+/bX/Vp6viAAji9E9TVK lZgeGhT5wI2XBDV13y2JbJ5ivgo2xIfmfvbSqlAAerdlLRvrEqSzhzuUQtYYInPV KniQmSebuNimzjgKx5UAJ7OW+DeJ6I8ubklb7UgIydzYfjO3NCG/EqeFcu0BDo/u 56Vmoims9+ZcK2ZRbMcBizLBYmkxAGPr7QUk9luh6cHMvk3QFHr01znLt6NlaVo/ ZsHQbplKKQxAR1IymmTXagHoW9VuHrKHRa9Zk5l6zCFiMFXlhuU6SOEJwuYet6qK w2GSYLxz87IbDpvPp408Uh15LMJS5rWc2bO8vkgycEQxWjfN1h8= -----END CERTIFICATE-----Generated at Tue May 12 22:46:40 2026 by rpki-client