$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: c5JsCoyzHdJrzqLumc9THlLjL87XdTZQoWu9Ss4nRvc= Subject key identifier: FF:23:8E:53:3B:EE:24:F0:71:DE:2B:93:03:10:A2:48:42:9D:78:30 Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 18DBBF64BCE960E0C8BF7E38C20B50422BBF7700 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:24:52 +0000 Manifest this update: Tue 12 May 2026 08:19:52 +0000 Manifest next update: Wed 13 May 2026 10:58:52 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) 2: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: kPJ9TMM20gEZIAPjxM/pKDnc1JqNxj6RD/DDhBI8Ch0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:db:bf:64:bc:e9:60:e0:c8:bf:7e:38:c2:0b:50:42:2b:bf:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: May 12 08:19:52 2026 GMT Not After : May 13 10:58:52 2026 GMT Subject: CN=FF238E533BEE24F071DE2B930310A248429D7830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:4b:85:df:99:f2:f8:2e:3e:ef:97:1c:0e: 1b:fa:b9:13:dd:5b:ea:3b:0f:1f:90:84:87:eb:68: 33:7d:de:65:7b:72:05:b2:54:7f:3e:96:59:e1:7a: 26:5a:56:49:c3:a2:da:0c:8e:a5:d4:88:af:76:50: d5:99:7b:c3:e5:e4:5f:b3:8b:17:39:2c:55:2b:55: da:ab:ec:22:69:3e:69:db:e5:68:3c:40:d8:da:32: e8:91:fd:22:58:ae:12:e7:cf:46:b3:6a:01:4d:d6: a4:8e:cc:6f:5a:1d:b0:ce:0f:43:2b:9f:83:22:a1: 2a:41:33:4d:10:a1:be:00:3f:58:b5:d1:40:3a:21: 37:30:07:14:4b:ef:54:4f:b8:2b:62:29:c6:7a:83: 4f:f2:67:81:72:eb:6b:d0:a1:69:65:c5:4e:a3:e0: 43:55:c2:ff:95:9b:3e:9b:91:87:ad:8a:7d:78:42: 04:d7:18:64:1c:66:53:e2:b6:6f:e0:ae:60:0b:d7: 80:6a:7f:9b:7a:74:0c:23:a8:f7:8b:ce:24:e8:bd: 90:51:99:ec:eb:fe:33:af:78:70:7c:12:4f:11:44: b1:65:c8:3d:58:68:c0:d2:2f:b3:ce:55:ab:44:64: 1d:39:2e:22:98:62:dc:0d:7f:58:5a:14:c1:fc:cc: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:8E:53:3B:EE:24:F0:71:DE:2B:93:03:10:A2:48:42:9D:78:30 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:38:af:75:14:c6:34:df:34:70:33:61:0a:2d:47:21:18: 32:95:32:b8:76:e3:fc:ee:27:1c:37:63:67:f7:f4:70:0f:e4: 31:2c:37:b5:ed:94:eb:bd:40:0f:ec:5b:39:26:8d:12:1e:7d: 04:46:ef:e6:4d:d7:cc:3c:99:32:bb:bf:f4:c7:50:d4:e2:c9: 2a:cb:38:07:42:58:c6:f7:cb:59:27:ee:4b:2d:75:5e:e4:e5: c7:77:18:9d:9c:b5:bd:c1:69:a3:b2:e0:73:7f:c8:91:af:ca: 97:12:7c:ee:0a:77:36:e3:e1:cb:27:88:56:3e:84:8d:8c:03: 71:7b:1e:f6:c5:b4:2a:48:4b:35:94:27:8f:07:d8:da:b8:dd: eb:72:37:36:80:e4:a1:b6:85:da:0b:f8:d3:34:59:bc:d6:4d: 94:8a:d0:96:29:c5:63:ea:eb:ac:e9:0b:76:26:08:72:ab:e3: 83:5f:58:b1:e9:b8:30:af:01:6d:81:06:82:ba:8c:a7:bd:3c: 13:79:a4:62:62:d2:49:72:7f:8a:e3:1f:1f:f8:4e:83:dd:74: 5e:34:b9:74:ef:72:fc:b4:eb:4c:65:52:4a:5e:a7:17:50:49: 10:0d:08:9f:77:32:18:ff:56:b9:4f:0e:8a:95:7f:f4:ed:1c: 76:26:52:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNu/ZLzpYODIv344wgtQQiu/dwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA1MTIwODE5NTJaFw0yNjA1MTMxMDU4NTJaMDMxMTAvBgNV BAMTKEZGMjM4RTUzM0JFRTI0RjA3MURFMkI5MzAzMTBBMjQ4NDI5RDc4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDkuF35ny+C4+75ccDhv6uRPd W+o7Dx+QhIfraDN93mV7cgWyVH8+llnheiZaVknDotoMjqXUiK92UNWZe8Pl5F+z ixc5LFUrVdqr7CJpPmnb5Wg8QNjaMuiR/SJYrhLnz0azagFN1qSOzG9aHbDOD0Mr n4MioSpBM00Qob4AP1i10UA6ITcwBxRL71RPuCtiKcZ6g0/yZ4Fy62vQoWllxU6j 4ENVwv+Vmz6bkYetin14QgTXGGQcZlPitm/grmAL14Bqf5t6dAwjqPeLziTovZBR mezr/jOveHB8Ek8RRLFlyD1YaMDSL7POVatEZB05LiKYYtwNf1haFMH8zJUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yOOUzvuJPBx3iuTAxCiSEKdeDAwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvzOK91FMY03zRwM2EKLUchGDKVMrh24/zu Jxw3Y2f39HAP5DEsN7XtlOu9QA/sWzkmjRIefQRG7+ZN18w8mTK7v/THUNTiySrL OAdCWMb3y1kn7kstdV7k5cd3GJ2ctb3BaaOy4HN/yJGvypcSfO4Kdzbj4csniFY+ hI2MA3F7HvbFtCpISzWUJ48H2Nq43etyNzaA5KG2hdoL+NM0WbzWTZSK0JYpxWPq 66zpC3YmCHKr44NfWLHpuDCvAW2BBoK6jKe9PBN5pGJi0klyf4rjHx/4ToPddF40 uXTvcvy060xlUkpepxdQSRANCJ93Mhj/VrlPDoqVf/TtHHYmUnI= -----END CERTIFICATE-----Generated at Wed May 13 01:35:39 2026 by rpki-client