$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: rY3q4eCZPsyMAfTGv4veIoXEptzsk7zI2k6v27rXpTs= Subject key identifier: 3E:84:FE:1B:02:ED:36:DB:19:8B:63:0B:61:6C:2F:04:E4:08:22:51 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 24711CD3E95E070FDB6835B5D126460115E29328 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: 0F Signing time: Wed 13 May 2026 03:07:00 +0000 Manifest this update: Wed 13 May 2026 03:02:00 +0000 Manifest next update: Thu 14 May 2026 06:57:00 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 2: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 7: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: rtqB2ANh+Zp1ZMQ+fD2Qmm65iQi6aFpQ4RsXTTcKVP0=) 8: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 9: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:71:1c:d3:e9:5e:07:0f:db:68:35:b5:d1:26:46:01:15:e2:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: May 13 03:02:00 2026 GMT Not After : May 14 06:57:00 2026 GMT Subject: CN=3E84FE1B02ED36DB198B630B616C2F04E4082251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:98:d3:6f:a6:fc:27:f8:d7:8c:51:1c:9f: 12:4c:e0:74:fd:d5:95:e0:c2:75:b3:b0:32:49:99: b7:f2:a4:05:44:7f:41:93:c4:d7:57:4b:68:87:b2: 0e:e1:c2:b4:60:10:b9:d6:fc:3c:1a:50:f3:06:ca: 2c:fc:c7:11:d6:4c:ea:24:c9:80:a3:46:e8:a5:5f: d5:19:46:35:25:35:10:cb:a8:94:26:c8:2b:06:66: 8a:37:b1:ef:47:b3:1b:5a:0a:5f:cb:cf:5a:7c:49: 5a:73:4a:9a:13:88:db:b6:02:36:43:47:46:7b:f4: 51:59:73:e9:5f:1f:f7:bb:3c:4b:ce:73:54:05:b4: 05:14:71:ca:cf:2d:43:31:10:a8:80:62:5e:76:e9: c7:50:58:77:b2:0a:b3:71:77:f6:17:f6:ab:88:5e: b9:76:f5:e3:cb:8a:c1:f2:05:e2:58:f2:1f:16:b0: 44:c9:86:f0:a7:68:4c:2b:bf:0d:fa:1d:33:46:5c: bb:87:6a:59:ed:d1:0e:b2:6a:81:3c:c4:5a:8c:1d: 0a:7a:9c:1e:97:53:71:97:6e:4e:aa:ca:c0:a8:24: 6e:ab:8a:41:e9:4c:61:7b:a5:cf:a0:d2:dd:4d:d6: 1e:5b:7a:e1:da:86:87:9e:bc:c1:e9:3d:80:0d:5a: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:84:FE:1B:02:ED:36:DB:19:8B:63:0B:61:6C:2F:04:E4:08:22:51 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:aa:5d:b8:68:ed:18:9d:9d:df:e7:ba:d2:d8:da:3a:12:22: 7c:70:23:88:33:6e:dd:1b:8d:e3:0d:f7:d5:66:ec:b2:15:5c: 2c:a6:d6:6d:72:bc:15:70:7c:33:b0:d0:14:54:72:e8:77:71: 51:05:05:90:19:fd:68:dc:28:51:6c:73:d9:0c:e9:30:47:cf: 64:13:33:83:cf:df:6f:b4:f4:ec:33:93:72:75:8c:34:30:2a: 11:c0:ca:49:dc:23:6d:cb:2d:d4:ff:10:ac:fc:f0:95:e2:30: 72:6c:50:4a:8d:bb:72:3c:ff:1c:5f:c7:89:f7:93:98:20:54: 12:26:53:43:da:b2:79:ef:de:29:90:2b:5c:5d:e7:9c:3a:4d: 81:a9:dc:2b:5e:fd:b1:0f:0d:ce:1d:15:4c:43:0a:95:c7:ab: a4:d9:14:f6:73:c2:3d:b0:71:3c:c6:b8:56:14:09:7c:df:2d: 2a:e9:87:51:c7:ce:cd:04:7a:81:ba:b5:19:d6:dc:af:e3:99: 18:d2:a1:89:b5:0e:7e:db:fd:0e:db:b0:89:14:54:fc:83:4b: 91:2e:3f:f3:2c:4e:ef:3a:b7:7c:f8:44:42:d1:bd:05:18:5c: c8:9f:3d:e9:3d:29:22:bc:0d:b2:cc:78:39:b1:d5:3d:16:d3: 3c:7f:ef:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHEc0+leBw/baDW10SZGARXikygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA1MTMwMzAyMDBaFw0yNjA1MTQwNjU3MDBaMDMxMTAvBgNV BAMTKDNFODRGRTFCMDJFRDM2REIxOThCNjMwQjYxNkMyRjA0RTQwODIyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdpjTb6b8J/jXjFEcnxJM4HT9 1ZXgwnWzsDJJmbfypAVEf0GTxNdXS2iHsg7hwrRgELnW/DwaUPMGyiz8xxHWTOok yYCjRuilX9UZRjUlNRDLqJQmyCsGZoo3se9HsxtaCl/Lz1p8SVpzSpoTiNu2AjZD R0Z79FFZc+lfH/e7PEvOc1QFtAUUccrPLUMxEKiAYl526cdQWHeyCrNxd/YX9quI Xrl29ePLisHyBeJY8h8WsETJhvCnaEwrvw36HTNGXLuHalnt0Q6yaoE8xFqMHQp6 nB6XU3GXbk6qysCoJG6rikHpTGF7pc+g0t1N1h5beuHahoeevMHpPYANWoz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPoT+GwLtNtsZi2MLYWwvBOQIIlEwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCqXbho7Ridnd/nutLY2joSInxwI4gzbt0b jeMN99Vm7LIVXCym1m1yvBVwfDOw0BRUcuh3cVEFBZAZ/WjcKFFsc9kM6TBHz2QT M4PP32+09Owzk3J1jDQwKhHAykncI23LLdT/EKz88JXiMHJsUEqNu3I8/xxfx4n3 k5ggVBImU0Pasnnv3imQK1xd55w6TYGp3Cte/bEPDc4dFUxDCpXHq6TZFPZzwj2w cTzGuFYUCXzfLSrph1HHzs0EeoG6tRnW3K/jmRjSoYm1Dn7b/Q7bsIkUVPyDS5Eu P/MsTu86t3z4RELRvQUYXMifPek9KSK8DbLMeDmx1T0W0zx/770= -----END CERTIFICATE-----Generated at Wed May 13 10:22:55 2026 by rpki-client