$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json) Hash identifier: A+kqmFbBrRJbDsFj+WxHc7q0qaxHOEDMhnd0OR6oMBE= Subject key identifier: F1:12:0B:DC:A8:5C:00:37:C4:3E:81:A6:1E:B6:A2:DD:73:6D:E9:49 Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Certificate serial: 542308D9C091E796E0C40C80C2DE61BF7524C100 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:15:53 +0000 Manifest this update: Tue 12 May 2026 16:10:53 +0000 Manifest next update: Wed 13 May 2026 18:24:53 +0000 Files and hashes: 1: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: SESAxJQVwgIPAfmkr3Vq1bzqA8s7cv8VLxva+pgIJus=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:23:08:d9:c0:91:e7:96:e0:c4:0c:80:c2:de:61:bf:75:24:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Validity Not Before: May 12 16:10:53 2026 GMT Not After : May 13 18:24:53 2026 GMT Subject: CN=F1120BDCA85C0037C43E81A61EB6A2DD736DE949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:db:e7:f6:8b:d6:88:7f:2c:d4:95:43:aa: a5:70:b5:fc:af:e4:3c:da:0a:43:89:4b:03:ec:48: be:37:2b:72:a6:b4:a8:66:c1:22:15:08:f3:22:74: 23:f5:76:32:89:b3:ea:d3:21:78:89:27:72:e9:8e: 2d:b4:c7:48:7e:d7:5b:12:d3:89:12:0f:0a:c1:52: bb:7f:5b:b4:47:da:4b:f0:93:ce:48:05:be:d2:77: a0:dd:0f:2c:f5:2e:3e:29:ea:cc:5a:77:30:2e:bd: ba:55:3d:c0:ca:53:4a:cc:da:d5:2f:33:af:84:f7: 92:6d:9a:ad:fc:95:60:2f:f9:99:62:e3:43:0a:a0: bf:71:54:81:53:ee:b6:11:6d:2b:4f:21:62:42:58: e5:ff:fa:7f:6d:42:fd:01:1c:b8:31:af:87:71:4a: 20:3f:cd:66:d5:3b:54:b2:3f:ff:9d:88:f8:da:8d: da:cf:e0:70:4c:ae:5a:ce:c7:00:36:20:ea:4a:41: b7:b3:2a:6c:0a:47:5a:d0:35:fc:78:42:02:f1:a9: e4:81:c2:90:9d:2f:bc:25:5b:50:b9:a1:6c:1d:fb: 39:cd:e3:07:92:c5:46:39:f0:ba:8c:86:b5:fa:ba: b1:35:44:f7:1c:9b:0e:5b:a8:32:85:72:54:0f:a3: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:0B:DC:A8:5C:00:37:C4:3E:81:A6:1E:B6:A2:DD:73:6D:E9:49 X509v3 Authority Key Identifier: keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cf:63:bc:ed:17:7a:78:2d:c7:9a:be:ee:b5:88:73:b6:05: 99:2e:89:d8:8b:23:a3:99:d0:a3:1b:a2:e8:24:2f:e4:3d:73: 33:f6:f2:2f:8d:b2:56:68:a5:0f:e6:78:e8:07:ba:b8:ed:26: e5:e1:b6:42:cf:62:02:4a:93:73:1a:9f:c4:79:bd:1f:b8:a8: aa:18:e2:df:b1:f9:4a:42:cb:29:22:c4:ac:14:ab:e8:49:bf: ea:d7:df:52:b3:fa:cd:65:f9:64:3c:5a:79:56:bf:5c:ae:1a: d2:a3:94:c6:0f:72:cf:8b:93:09:ed:55:e2:26:e3:f7:c2:86: 8f:65:cf:ee:0e:c3:e6:fd:21:29:85:dd:53:ca:b1:93:cf:ab: f4:55:c9:4c:ba:9e:80:f8:a3:8a:c8:fd:59:bc:61:9c:ea:71: fd:bd:5b:84:76:06:e0:95:3c:2e:48:af:c6:0b:1a:49:a7:eb: ad:03:28:8b:7b:08:ef:b7:f5:f0:37:09:6c:40:36:10:e5:9c: e8:ca:9e:c9:33:ea:c3:95:c3:19:e7:60:bd:5a:93:a9:e4:7d: 8e:6c:2e:01:5d:43:33:43:0f:fb:fd:f9:cb:c0:19:f1:33:4a: 49:55:cd:e4:70:27:f5:f2:86:b9:cf:63:8b:31:ab:0a:b5:68: 93:59:9d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCMI2cCR55bgxAyAwt5hv3UkwQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNG MUQ2NThEMTAeFw0yNjA1MTIxNjEwNTNaFw0yNjA1MTMxODI0NTNaMDMxMTAvBgNV BAMTKEYxMTIwQkRDQTg1QzAwMzdDNDNFODFBNjFFQjZBMkRENzM2REU5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMNvn9ovWiH8s1JVDqqVwtfyv 5DzaCkOJSwPsSL43K3KmtKhmwSIVCPMidCP1djKJs+rTIXiJJ3Lpji20x0h+11sS 04kSDwrBUrt/W7RH2kvwk85IBb7Sd6DdDyz1Lj4p6sxadzAuvbpVPcDKU0rM2tUv M6+E95Jtmq38lWAv+Zli40MKoL9xVIFT7rYRbStPIWJCWOX/+n9tQv0BHLgxr4dx SiA/zWbVO1SyP/+diPjajdrP4HBMrlrOxwA2IOpKQbezKmwKR1rQNfx4QgLxqeSB wpCdL7wlW1C5oWwd+znN4weSxUY58LqMhrX6urE1RPccmw5bqDKFclQPo+xlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RIL3KhcADfEPoGmHrai3XNt6UkwHwYDVR0j BBgwFoAUhO5k2lEIKzCUjRL24UuOvPHWWNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3ZjllZjQtZjk5Zi00NGZmLWI5NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1 MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNGMUQ2NThEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEVFNjREQTUxMDgyQjMwOTQ4RDEyRjZFMTRCOEVCQ0YxRDY1 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhF QkNGMUQ2NThEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/PY7ztF3p4Lceavu61iHO2BZkuidiLI6OZ 0KMbougkL+Q9czP28i+NslZopQ/meOgHurjtJuXhtkLPYgJKk3Man8R5vR+4qKoY 4t+x+UpCyykixKwUq+hJv+rX31Kz+s1l+WQ8WnlWv1yuGtKjlMYPcs+LkwntVeIm 4/fCho9lz+4Ow+b9ISmF3VPKsZPPq/RVyUy6noD4o4rI/Vm8YZzqcf29W4R2BuCV PC5Ir8YLGkmn660DKIt7CO+39fA3CWxANhDlnOjKnskz6sOVwxnnYL1ak6nkfY5s LgFdQzNDD/v9+cvAGfEzSklVzeRwJ/XyhrnPY4sxqwq1aJNZnSg= -----END CERTIFICATE-----Generated at Wed May 13 03:59:03 2026 by rpki-client