$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: FU268/qonAktTbWEF2+G/5GIzz8Fk0IBWoBYLu9Pefk= Subject key identifier: 68:14:DC:31:B8:AB:70:69:62:6A:88:B9:AD:97:17:5F:EA:B7:1A:97 Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 17E0E94964FA87A513AC4F6C0A95671B4FFBA3B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:25:46 +0000 Manifest this update: Tue 12 May 2026 22:20:46 +0000 Manifest next update: Wed 13 May 2026 23:55:46 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) 2: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: l9rJa46U1IJFvIy6sCAgpae6K63bb0RRwSeycr/JzTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e0:e9:49:64:fa:87:a5:13:ac:4f:6c:0a:95:67:1b:4f:fb:a3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: May 12 22:20:46 2026 GMT Not After : May 13 23:55:46 2026 GMT Subject: CN=6814DC31B8AB7069626A88B9AD97175FEAB71A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:98:a1:73:c0:f9:b5:30:b2:16:ee:09:c2: 32:5c:7b:52:f4:36:0f:09:d1:38:32:93:84:b7:7b: 98:07:1d:7b:02:bd:7b:14:47:de:f0:34:54:a7:a1: 17:49:70:02:86:18:82:8c:61:12:12:36:b0:0e:25: 45:c6:1a:ef:46:75:9a:12:7b:01:68:bc:4e:17:dd: 8e:ef:82:fc:a8:30:61:f7:68:34:f1:23:6e:30:3b: 50:cb:41:a7:6e:96:a4:83:60:65:6c:53:e2:03:7b: c0:68:43:e8:68:cd:b9:28:f1:5c:c5:d2:8f:7e:cf: 96:8f:e2:8b:68:09:cd:d8:c3:42:d8:a0:62:98:03: 79:1a:dc:6b:d9:fc:0e:f0:58:83:b2:cd:1f:23:b2: c6:e5:3b:ac:77:9e:e8:19:9f:7b:b3:5b:6e:d0:f9: 6b:bf:04:5c:d5:92:5c:a2:cd:d8:2d:44:af:d0:fc: 7e:c8:a8:a8:59:44:34:62:e0:f6:40:33:cc:96:95: 9b:af:c3:d3:20:d5:a4:04:3d:2e:01:c6:8d:c5:b8: 88:96:d5:47:f1:a7:e1:dd:7c:84:1e:3f:2d:4a:24: 51:f6:42:ad:6b:12:d7:92:75:24:fb:26:f7:e1:48: ed:ee:69:8c:09:51:8d:17:67:87:c4:83:b5:40:79: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:DC:31:B8:AB:70:69:62:6A:88:B9:AD:97:17:5F:EA:B7:1A:97 X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:41:c6:85:0e:4a:d8:9f:c0:91:65:36:b2:b5:61:86:ae:18: c9:a5:2b:55:a8:14:f8:a4:94:ea:d5:58:13:59:de:84:a9:80: d1:27:3f:46:1f:d0:1e:53:4c:da:23:20:07:2a:67:cc:eb:86: 52:21:de:b1:11:b5:fb:17:97:1a:ba:58:30:54:96:56:2c:e4: ee:74:e8:ef:e4:9f:fb:b1:55:86:bc:81:c7:97:38:34:8f:6a: c7:8c:4e:db:5e:22:35:84:a2:7e:ed:2e:e4:12:59:66:6d:02: f9:19:bc:73:de:d6:5c:74:f8:ff:c1:04:78:53:6e:f9:df:5a: 43:58:c7:2b:7c:aa:dc:db:7e:bb:72:2e:21:8c:df:1f:6c:a2: 18:32:4e:55:2d:ef:cd:c1:3d:74:0e:ac:52:a7:fe:82:31:04: 39:2b:71:7f:13:10:b2:58:79:94:5a:9e:21:1d:eb:ce:70:1b: 6a:8c:9c:40:e2:b7:bc:68:67:9d:47:1f:ad:e2:f0:9a:62:c4: df:4d:4b:a9:6b:72:16:98:16:92:00:89:10:16:a2:55:0f:27: 31:8d:58:c5:aa:ea:61:27:db:2d:d7:ce:3f:9a:a4:d4:d0:a6: c0:dd:99:59:d2:30:63:c8:b8:d0:c7:dd:04:f7:4f:64:be:a9: 2b:29:d6:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+DpSWT6h6UTrE9sCpVnG0/7o7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA1MTIyMjIwNDZaFw0yNjA1MTMyMzU1NDZaMDMxMTAvBgNV BAMTKDY4MTREQzMxQjhBQjcwNjk2MjZBODhCOUFEOTcxNzVGRUFCNzFBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TJihc8D5tTCyFu4JwjJce1L0 Ng8J0Tgyk4S3e5gHHXsCvXsUR97wNFSnoRdJcAKGGIKMYRISNrAOJUXGGu9GdZoS ewFovE4X3Y7vgvyoMGH3aDTxI24wO1DLQadulqSDYGVsU+IDe8BoQ+hozbko8VzF 0o9+z5aP4otoCc3Yw0LYoGKYA3ka3GvZ/A7wWIOyzR8jssblO6x3nugZn3uzW27Q +Wu/BFzVklyizdgtRK/Q/H7IqKhZRDRi4PZAM8yWlZuvw9Mg1aQEPS4Bxo3FuIiW 1Ufxp+HdfIQePy1KJFH2Qq1rEteSdST7JvfhSO3uaYwJUY0XZ4fEg7VAeQiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBTcMbircGliaoi5rZcXX+q3GpcwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZBxoUOStifwJFlNrK1YYauGMmlK1WoFPik lOrVWBNZ3oSpgNEnP0Yf0B5TTNojIAcqZ8zrhlIh3rERtfsXlxq6WDBUllYs5O50 6O/kn/uxVYa8gceXODSPaseMTtteIjWEon7tLuQSWWZtAvkZvHPe1lx0+P/BBHhT bvnfWkNYxyt8qtzbfrtyLiGM3x9sohgyTlUt783BPXQOrFKn/oIxBDkrcX8TELJY eZRaniEd685wG2qMnEDit7xoZ51HH63i8JpixN9NS6lrchaYFpIAiRAWolUPJzGN WMWq6mEn2y3Xzj+apNTQpsDdmVnSMGPIuNDH3QT3T2S+qSsp1n0= -----END CERTIFICATE-----Generated at Wed May 13 03:56:19 2026 by rpki-client