$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json) Hash identifier: 2JtguHTvHewMIogam5b9C6LGD3oSayVcriAdfF/I8w8= Subject key identifier: 12:65:3E:22:DC:41:55:68:6A:1A:39:15:C8:77:C3:3C:37:F5:67:62 Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Certificate serial: 683A48AA6547932F7CAE3A248855A398507F85DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:13:41 +0000 Manifest this update: Tue 12 May 2026 21:08:41 +0000 Manifest next update: Thu 14 May 2026 00:57:41 +0000 Files and hashes: 1: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=) 2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=) 3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=) 4: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: y7AsS3Y/q7QDmqZuTE4AOwkPCV2+7enV/V0rkGAf7f8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3a:48:aa:65:47:93:2f:7c:ae:3a:24:88:55:a3:98:50:7f:85:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Validity Not Before: May 12 21:08:41 2026 GMT Not After : May 14 00:57:41 2026 GMT Subject: CN=12653E22DC4155686A1A3915C877C33C37F56762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:df:bc:9f:01:ad:18:88:e3:19:7a:6c:58: b4:d5:66:49:b0:f4:90:a6:1f:03:43:b6:42:af:96: 03:8d:e8:5f:e2:e7:e3:ce:70:92:4c:0b:7d:bc:f1: 92:3d:7b:59:1e:28:75:cb:d0:9a:9f:b0:fe:91:22: e2:5b:c9:25:8e:fb:ff:85:d6:72:2c:6f:18:5b:c2: 98:69:e9:42:6a:60:37:4d:d7:ff:0f:06:f0:24:65: 38:dd:89:81:cc:09:b0:bd:0d:88:b6:14:e2:1c:bc: d1:cf:3d:b1:2d:03:28:ad:3f:ba:6e:c6:66:0d:7d: aa:57:bf:47:57:3d:72:ab:ce:bd:81:9e:ed:48:75: ae:7b:d2:09:48:99:4c:3d:c4:f4:51:22:54:b5:b0: 3e:9d:6c:7e:1a:88:9a:70:2a:dc:15:ac:a2:1b:0d: de:8e:b6:84:78:5f:1a:29:47:d9:70:a4:47:0f:8c: 23:12:26:c4:24:b1:09:95:86:eb:30:57:ee:86:fc: bb:93:e1:1d:65:59:e3:fb:2e:fd:68:be:45:90:79: cd:85:bf:da:ce:2b:92:4f:c5:87:9f:39:3a:f1:a8: 96:24:95:30:38:a8:c2:6d:bc:51:80:9b:c3:45:d7: 38:6a:eb:50:9e:52:82:a6:15:0f:6e:de:63:65:7f: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:3E:22:DC:41:55:68:6A:1A:39:15:C8:77:C3:3C:37:F5:67:62 X509v3 Authority Key Identifier: keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:35:af:f0:4c:fb:fc:6b:1a:00:da:ab:95:a0:87:66:42:f4: 19:1e:5c:71:ff:a4:44:a1:ec:46:58:29:26:45:7c:54:2c:ea: 46:08:48:97:cc:39:6b:1b:5a:88:44:41:c7:89:63:f2:b2:0b: 17:3a:c0:54:92:26:9b:57:5b:25:86:56:58:ae:0d:73:e4:12: c9:1b:7c:3a:75:4a:54:fd:b0:57:d8:6d:d9:fa:7a:75:3f:3a: 52:4a:91:ca:1b:5d:cf:f5:8e:88:4b:68:bd:64:73:87:3a:85: 03:2a:85:cc:01:32:27:8e:cf:05:c6:d6:d4:51:f8:72:b4:51: 3a:19:76:56:fe:5d:08:25:bc:ea:1a:03:75:f6:8e:48:7a:e9: 86:0b:80:84:68:d8:ad:02:a8:d2:53:2c:22:f1:87:73:62:f2: 1a:55:34:ee:ca:72:ac:63:c8:2f:57:a6:70:1e:78:7f:dd:6b: f4:90:30:07:e8:f7:54:1f:0b:1f:9c:c0:da:c6:4c:88:47:98: a3:8f:b9:4d:61:84:f0:95:e7:db:5a:45:01:6b:80:c5:4f:88: f6:22:9b:17:94:9d:cd:27:1e:74:70:39:c7:e5:93:2b:ae:2f: 7b:27:fa:b3:62:e8:86:c8:b4:9a:30:36:e2:4f:1f:b8:cb:81: dc:d7:63:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDpIqmVHky98rjokiFWjmFB/hdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEw NDNENTc4QTAeFw0yNjA1MTIyMTA4NDFaFw0yNjA1MTQwMDU3NDFaMDMxMTAvBgNV BAMTKDEyNjUzRTIyREM0MTU1Njg2QTFBMzkxNUM4NzdDMzNDMzdGNTY3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CN+8nwGtGIjjGXpsWLTVZkmw 9JCmHwNDtkKvlgON6F/i5+POcJJMC3288ZI9e1keKHXL0JqfsP6RIuJbySWO+/+F 1nIsbxhbwphp6UJqYDdN1/8PBvAkZTjdiYHMCbC9DYi2FOIcvNHPPbEtAyitP7pu xmYNfapXv0dXPXKrzr2Bnu1Ida570glImUw9xPRRIlS1sD6dbH4aiJpwKtwVrKIb Dd6OtoR4XxopR9lwpEcPjCMSJsQksQmVhuswV+6G/LuT4R1lWeP7Lv1ovkWQec2F v9rOK5JPxYefOTrxqJYklTA4qMJtvFGAm8NF1zhq61CeUoKmFQ9u3mNlfwCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmU+ItxBVWhqGjkVyHfDPDf1Z2IwHwYDVR0j BBgwFoAUwdXKyyhppFB0qi7vCq9ECgQ9V4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNzUwODgtMDg4ZS00MWMwLWJmY2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0Iy ODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEwNDNENTc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUQ1Q0FDQjI4NjlBNDUwNzRBQTJFRUYwQUFGNDQwQTA0M0Q1 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0 MEEwNDNENTc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM1r/BM+/xrGgDaq5Wgh2ZC9BkeXHH/pESh 7EZYKSZFfFQs6kYISJfMOWsbWohEQceJY/KyCxc6wFSSJptXWyWGVliuDXPkEskb fDp1SlT9sFfYbdn6enU/OlJKkcobXc/1johLaL1kc4c6hQMqhcwBMieOzwXG1tRR +HK0UToZdlb+XQglvOoaA3X2jkh66YYLgIRo2K0CqNJTLCLxh3Ni8hpVNO7Kcqxj yC9XpnAeeH/da/SQMAfo91QfCx+cwNrGTIhHmKOPuU1hhPCV59taRQFrgMVPiPYi mxeUnc0nHnRwOcflkyuuL3sn+rNi6IbItJowNuJPH7jLgdzXY14= -----END CERTIFICATE-----Generated at Wed May 13 01:36:28 2026 by rpki-client