$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: L/XfiVxeoCiz+qpweiycTHI8XoOyh87WWZLAx7bYW44= Subject key identifier: 7A:E6:E1:21:84:AB:35:C7:82:FC:2B:47:5D:7B:80:F7:84:5D:B8:5E Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 784010835D787DA13F4D00219A73C30A7DB0F7C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:13:38 +0000 Manifest this update: Wed 13 May 2026 00:08:38 +0000 Manifest next update: Thu 14 May 2026 01:21:38 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: BPbX6SpVDmxKjF0Hf0cAiMktrjAAKBvCBvPKkiUeQ2g=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:40:10:83:5d:78:7d:a1:3f:4d:00:21:9a:73:c3:0a:7d:b0:f7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: May 13 00:08:38 2026 GMT Not After : May 14 01:21:38 2026 GMT Subject: CN=7AE6E12184AB35C782FC2B475D7B80F7845DB85E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:85:60:be:2a:b5:0e:29:bc:bb:3d:c9:01: 43:98:a6:92:f0:d8:e0:9c:96:93:4b:23:b7:d3:cf: eb:99:9d:ff:8b:6a:b2:a8:e3:39:69:99:f1:fc:f7: af:aa:ce:12:10:38:15:40:cd:10:8a:91:9b:b3:84: a3:d7:64:f3:f8:13:25:d4:f5:4e:b6:d6:93:d1:f6: e2:3c:9c:8d:75:61:68:03:ca:a9:3f:54:83:6b:bb: 03:13:d2:d4:ec:77:ab:27:00:d3:bf:8b:31:e3:db: b1:ac:b2:a1:7b:e7:ac:2b:14:64:06:9b:0c:57:ad: f7:5d:42:64:47:c5:45:9f:f2:d6:a9:50:0d:fd:1b: 47:59:0a:65:f5:1f:5f:72:23:91:8f:77:05:1f:3d: 46:09:b9:b9:a4:83:79:3e:91:ea:b0:9e:ef:4a:99: b0:51:f2:d9:24:53:c7:7b:4d:17:81:57:bb:4d:ca: 02:bf:11:43:5a:1d:f0:bb:e9:7c:28:5b:b3:99:07: 32:d7:14:1a:fe:c7:5f:ec:06:16:b3:42:78:2c:ec: 04:32:30:05:50:3d:91:54:b3:a1:30:e4:f2:0f:f4: 02:ce:e6:5a:a3:51:72:85:93:cb:d2:91:a3:4b:f8: c3:b4:6f:b3:a2:1d:20:f5:2c:e0:c8:f7:b2:39:dd: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:E1:21:84:AB:35:C7:82:FC:2B:47:5D:7B:80:F7:84:5D:B8:5E X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:97:3b:a3:9a:f4:90:b9:00:12:fa:da:0f:fb:1c:37:b7:26: ed:9f:7e:a3:e7:81:a0:d6:0d:4c:9a:2e:11:a6:a2:a4:3e:d5: 94:19:2b:63:8a:4b:c4:6c:9b:80:d0:bb:4a:a1:79:c6:61:09: c4:7d:84:ce:3c:7b:cc:c6:f6:c8:1f:f3:ef:fd:9f:4d:0e:d9: c6:45:e7:22:67:b8:a2:32:71:37:93:dd:d7:96:8e:6f:ad:d0: 87:57:1a:21:20:c5:ed:5b:93:ad:99:b8:2f:c3:09:b1:fe:2a: c0:a6:35:43:45:66:41:b1:94:d9:36:7b:c0:1a:b2:6c:d2:87: a6:8f:9b:ef:6c:c5:8f:ed:21:87:07:dc:73:15:a0:d3:15:bf: e1:4a:9f:3c:20:3f:a1:49:42:e9:02:c4:47:39:66:85:71:ac: ea:c8:09:63:b8:4d:d3:7b:e6:18:73:69:09:f1:50:2e:3e:16: 18:65:80:ac:69:57:a3:9f:4f:7f:fc:78:12:a9:47:6a:58:ba: 5c:da:99:f4:e7:bc:47:0d:c9:e5:a8:82:65:07:a1:bb:7e:44: 92:d3:5b:ef:2b:c3:59:53:8b:77:c0:71:b1:20:d4:22:64:ac: 92:c4:34:98:2b:54:88:db:c1:46:80:f5:31:41:99:39:1c:e3: 7b:4a:2b:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEAQg114faE/TQAhmnPDCn2w98kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA1MTMwMDA4MzhaFw0yNjA1MTQwMTIxMzhaMDMxMTAvBgNV BAMTKDdBRTZFMTIxODRBQjM1Qzc4MkZDMkI0NzVEN0I4MEY3ODQ1REI4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eIVgviq1Dim8uz3JAUOYppLw 2OCclpNLI7fTz+uZnf+LarKo4zlpmfH896+qzhIQOBVAzRCKkZuzhKPXZPP4EyXU 9U621pPR9uI8nI11YWgDyqk/VINruwMT0tTsd6snANO/izHj27GssqF756wrFGQG mwxXrfddQmRHxUWf8tapUA39G0dZCmX1H19yI5GPdwUfPUYJubmkg3k+keqwnu9K mbBR8tkkU8d7TReBV7tNygK/EUNaHfC76XwoW7OZBzLXFBr+x1/sBhazQngs7AQy MAVQPZFUs6Ew5PIP9ALO5lqjUXKFk8vSkaNL+MO0b7OiHSD1LODI97I53ZztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeubhIYSrNceC/CtHXXuA94RduF4wHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiXO6Oa9JC5ABL62g/7HDe3Ju2ffqPngaDW DUyaLhGmoqQ+1ZQZK2OKS8Rsm4DQu0qhecZhCcR9hM48e8zG9sgf8+/9n00O2cZF 5yJnuKIycTeT3deWjm+t0IdXGiEgxe1bk62ZuC/DCbH+KsCmNUNFZkGxlNk2e8Aa smzSh6aPm+9sxY/tIYcH3HMVoNMVv+FKnzwgP6FJQukCxEc5ZoVxrOrICWO4TdN7 5hhzaQnxUC4+FhhlgKxpV6OfT3/8eBKpR2pYulzamfTnvEcNyeWogmUHobt+RJLT W+8rw1lTi3fAcbEg1CJkrJLENJgrVIjbwUaA9TFBmTkc43tKKwE= -----END CERTIFICATE-----Generated at Wed May 13 04:19:05 2026 by rpki-client