$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: 6ibdFikxB1bFA2PlGl7j7TOLMuyFJ+ZVwjkTfwcjpso= Subject key identifier: C9:B3:9D:76:C4:36:5B:EB:9D:CB:D2:B7:CF:AA:F5:81:76:49:1E:74 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 3EA5E3D61E17A4EB4014A9EDD09AA22BC02A6DB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:34:18 +0000 Manifest this update: Tue 12 May 2026 21:29:18 +0000 Manifest next update: Thu 14 May 2026 00:38:18 +0000 Files and hashes: 1: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) 3: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: 9vw0jvK3zl67rHn5tsS12/lsvXoYlkRv3uhyGzi+YhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a5:e3:d6:1e:17:a4:eb:40:14:a9:ed:d0:9a:a2:2b:c0:2a:6d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: May 12 21:29:18 2026 GMT Not After : May 14 00:38:18 2026 GMT Subject: CN=C9B39D76C4365BEB9DCBD2B7CFAAF58176491E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:65:6a:44:5a:b0:25:71:71:cf:a5:18:bf: 40:61:a9:9c:cd:d1:9d:80:73:40:89:bb:90:35:74: d6:b7:2b:60:88:b6:f7:43:90:db:88:20:72:52:f7: 40:d6:35:d0:cb:fa:e5:83:83:0f:61:37:b8:b2:25: 9f:47:52:de:bb:70:e8:a2:45:f7:e2:34:bf:f3:0b: f5:9d:2a:23:18:7d:8a:72:2e:37:f0:94:cd:98:66: d7:3d:2d:a3:0b:b6:b1:25:9c:59:7b:4c:c2:76:68: 65:61:7f:f6:34:7a:34:b9:54:d8:4d:be:02:d5:1b: c7:2c:5a:49:1e:63:b5:c3:d1:7e:e2:17:2c:8a:bb: 4b:36:47:45:3f:96:b1:dd:96:4d:d8:bd:a0:6f:8c: 19:9e:ed:1a:bd:46:84:68:0b:93:57:94:9a:7c:22: 74:6a:b7:0f:a9:7d:92:54:80:86:d9:85:51:df:86: f1:72:79:d7:0c:bd:f6:1c:0d:b6:b4:ea:dc:c6:7c: 3a:8f:1a:70:5a:b7:8b:3c:e0:72:37:07:55:48:0f: 37:d6:b5:52:58:87:de:43:1b:2b:02:99:88:59:c2: 7d:f0:12:63:69:b0:19:08:26:ff:06:90:82:6d:58: b9:08:69:3a:9a:32:7b:1f:d1:15:3d:a7:90:08:a5: 8e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B3:9D:76:C4:36:5B:EB:9D:CB:D2:B7:CF:AA:F5:81:76:49:1E:74 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:28:e6:9e:21:dc:ff:d9:0e:5b:7c:f3:65:ee:84:66:dc:3e: 79:7c:9f:6e:84:65:e9:c2:15:60:1f:19:fb:4b:83:3a:8e:9a: 63:d7:62:e2:e0:d7:09:3f:86:5a:2a:62:74:08:82:bc:da:37: 13:63:1b:53:20:fe:32:b2:0a:98:14:ef:d8:5b:85:ca:a4:87: c7:70:f4:4c:38:50:e1:b2:3f:7d:e4:98:c9:0b:67:7d:da:a3: ca:39:69:d9:98:0d:8f:0f:05:9e:8d:6e:5e:40:70:89:b0:82: 25:89:9f:68:8a:23:2e:01:e6:13:71:dd:aa:73:8b:81:9f:1c: 3b:49:55:59:12:22:9a:00:ad:13:e2:01:ae:2f:4d:6f:86:aa: 13:45:ca:67:79:94:ff:d4:0b:0b:bd:9d:31:66:e1:8d:5a:b5: c6:40:9c:a7:c1:41:47:cd:6b:14:68:49:51:cc:27:80:9c:fc: a1:b1:3b:65:70:c8:74:b7:f8:6d:11:5e:47:0b:48:d2:46:97: 06:f8:69:81:c7:cc:15:7a:0a:a4:71:38:30:28:9b:ea:ae:48: 79:1c:7a:3f:be:2c:35:77:3a:64:7f:3c:e9:fa:b1:e1:93:92: 7c:72:36:5c:94:7e:4a:a9:de:58:04:4a:ac:4e:30:dc:95:3a: ad:5d:80:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqXj1h4XpOtAFKnt0JqiK8AqbbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA1MTIyMTI5MThaFw0yNjA1MTQwMDM4MThaMDMxMTAvBgNV BAMTKEM5QjM5RDc2QzQzNjVCRUI5RENCRDJCN0NGQUFGNTgxNzY0OTFFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZGVqRFqwJXFxz6UYv0BhqZzN 0Z2Ac0CJu5A1dNa3K2CItvdDkNuIIHJS90DWNdDL+uWDgw9hN7iyJZ9HUt67cOii RffiNL/zC/WdKiMYfYpyLjfwlM2YZtc9LaMLtrElnFl7TMJ2aGVhf/Y0ejS5VNhN vgLVG8csWkkeY7XD0X7iFyyKu0s2R0U/lrHdlk3YvaBvjBme7Rq9RoRoC5NXlJp8 InRqtw+pfZJUgIbZhVHfhvFyedcMvfYcDba06tzGfDqPGnBat4s84HI3B1VIDzfW tVJYh95DGysCmYhZwn3wEmNpsBkIJv8GkIJtWLkIaTqaMnsf0RU9p5AIpY7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybOddsQ2W+udy9K3z6r1gXZJHnQwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMo5p4h3P/ZDlt882XuhGbcPnl8n26EZenC FWAfGftLgzqOmmPXYuLg1wk/hloqYnQIgrzaNxNjG1Mg/jKyCpgU79hbhcqkh8dw 9Ew4UOGyP33kmMkLZ33ao8o5admYDY8PBZ6Nbl5AcImwgiWJn2iKIy4B5hNx3apz i4GfHDtJVVkSIpoArRPiAa4vTW+GqhNFymd5lP/UCwu9nTFm4Y1atcZAnKfBQUfN axRoSVHMJ4Cc/KGxO2VwyHS3+G0RXkcLSNJGlwb4aYHHzBV6CqRxODAom+quSHkc ej++LDV3OmR/POn6seGTknxyNlyUfkqp3lgESqxOMNyVOq1dgD0= -----END CERTIFICATE-----Generated at Wed May 13 06:58:26 2026 by rpki-client