$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft File: 6392804C8E02387641837CC130058F05667A805F.mft (raw, json) Hash identifier: 9f8hW4F/zAf3GC7u2oXPtb7+wef2AM89cwcE5MLTpR0= Subject key identifier: 2A:A9:25:9D:84:CC:33:61:12:AD:B9:0A:23:9C:58:F2:42:A5:5C:78 Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F Certificate serial: 3A22154E56F9FD688965128626346035525F25BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:08:34 +0000 Manifest this update: Tue 12 May 2026 21:03:34 +0000 Manifest next update: Thu 14 May 2026 00:50:34 +0000 Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: pPJq2G46Sz99bsDL9wBJRoipwgn9lZRSYh+JhFJc+0o=) 2: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=) 3: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=) 4: 6392804C8E02387641837CC130058F05667A805F.crl (hash: sA8z4LqxsGHtvRPVQmTfqnnpOQFeSi0zjbRGX6PnVBA=) 5: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: TRMnk8iAgB4rpOEvi1c2ELL28OXN6Zn5l8OWp2rvcOg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:22:15:4e:56:f9:fd:68:89:65:12:86:26:34:60:35:52:5f:25:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6392804C8E02387641837CC130058F05667A805F Validity Not Before: May 12 21:03:34 2026 GMT Not After : May 14 00:50:34 2026 GMT Subject: CN=2AA9259D84CC336112ADB90A239C58F242A55C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:28:34:5c:ce:6f:f2:25:8f:18:59:84:eb: d2:9c:c5:b2:a3:28:d1:6a:32:14:1a:aa:44:a9:0d: ca:8d:64:ba:b9:4c:6d:2b:1c:ed:7d:6e:f8:5e:e4: 7d:34:6a:58:11:6e:5d:94:fe:3e:a2:f4:39:ad:1e: 99:70:2d:79:34:9b:82:50:48:83:e5:4b:11:66:5a: 6b:5f:d8:dc:cc:ec:ff:76:85:7d:e9:86:1c:82:d6: 39:07:92:0a:f1:f0:42:69:71:a0:c9:51:99:3b:a7: 12:c8:4d:1d:a2:e0:10:4e:e3:50:37:98:1b:a5:da: 8b:22:86:a7:4f:58:59:8b:11:d5:e3:08:e1:f0:47: 1e:13:cc:8c:3e:c0:e7:dc:46:08:ef:b1:90:38:62: 49:93:8c:59:d4:c9:c5:71:12:57:74:d7:d5:db:7e: 25:67:3b:4e:4d:5a:3f:b7:03:c5:fe:c1:09:fe:e7: 31:dd:32:76:92:23:01:0c:b7:78:b0:14:a3:25:a0: 2f:b2:d1:9d:00:05:21:78:42:6e:f8:4e:1d:2d:94: ff:b4:95:e7:82:73:44:80:74:3e:78:09:04:71:73: 26:23:19:89:4c:ee:bf:3d:12:bc:27:a5:e2:da:c1: a0:a8:18:6e:d2:e2:87:4b:fb:0e:cb:fc:1e:a1:ae: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A9:25:9D:84:CC:33:61:12:AD:B9:0A:23:9C:58:F2:42:A5:5C:78 X509v3 Authority Key Identifier: keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:8c:00:d1:05:63:0b:74:82:ea:a4:9a:6d:c5:83:45:fa: 37:90:ac:27:3c:42:ce:4f:da:93:ae:bf:65:37:e0:e9:e8:c8: 73:7d:2b:14:63:21:8a:c7:96:b2:01:87:78:11:cd:dc:bf:c7: 92:37:ed:8c:4e:a7:12:7d:94:f8:8b:15:7a:3f:0b:fa:59:be: e5:d3:b9:de:87:dd:96:72:9f:16:2d:dd:66:4b:e7:9f:f7:81: cd:c3:45:3c:c7:51:ce:5e:24:ff:ea:7a:f6:b2:bb:81:f4:f3: cb:34:db:0f:3f:1b:a0:ee:82:8d:27:6c:5f:61:8a:55:b9:13: 4c:02:6c:69:6f:f8:93:bf:0c:0a:5b:f4:22:b5:1f:64:76:57: a1:c2:e9:90:fd:d3:ef:ef:dd:34:df:ca:1a:c7:54:8a:61:b1: 6f:9e:0f:c2:be:10:21:35:19:e9:60:fa:38:65:1d:94:d1:99: 3a:f8:1a:6e:c9:d5:62:66:45:66:72:b0:cb:50:59:50:a5:9b: af:0c:96:fd:a7:32:39:56:c5:31:13:4d:6d:4b:e3:fe:9e:09: 80:8d:2f:c3:b8:11:17:9d:cf:a3:c4:fe:be:45:b0:41:78:6d: 42:58:43:90:41:8b:16:3d:dd:a3:f6:45:96:b5:67:d8:10:b7: ff:eb:35:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiIVTlb5/WiJZRKGJjRgNVJfJb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2 NjdBODA1RjAeFw0yNjA1MTIyMTAzMzRaFw0yNjA1MTQwMDUwMzRaMDMxMTAvBgNV BAMTKDJBQTkyNTlEODRDQzMzNjExMkFEQjkwQTIzOUM1OEYyNDJBNTVDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Uig0XM5v8iWPGFmE69KcxbKj KNFqMhQaqkSpDcqNZLq5TG0rHO19bvhe5H00algRbl2U/j6i9DmtHplwLXk0m4JQ SIPlSxFmWmtf2NzM7P92hX3phhyC1jkHkgrx8EJpcaDJUZk7pxLITR2i4BBO41A3 mBul2osihqdPWFmLEdXjCOHwRx4TzIw+wOfcRgjvsZA4YkmTjFnUycVxEld019Xb fiVnO05NWj+3A8X+wQn+5zHdMnaSIwEMt3iwFKMloC+y0Z0ABSF4Qm74Th0tlP+0 leeCc0SAdD54CQRxcyYjGYlM7r89ErwnpeLawaCoGG7S4odL+w7L/B6hrovfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqklnYTMM2ESrbkKI5xY8kKlXHgwHwYDVR0j BBgwFoAUY5KATI4COHZBg3zBMAWPBWZ6gF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZhMDAyZGUtMGNkZS00NjJlLTk0MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4 RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2NjdBODA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzkyODA0QzhFMDIzODc2NDE4MzdDQzEzMDA1OEYwNTY2N0E4 MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThG MDU2NjdBODA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8BjADRBWMLdILqpJptxYNF+jeQrCc8Qs5P 2pOuv2U34OnoyHN9KxRjIYrHlrIBh3gRzdy/x5I37YxOpxJ9lPiLFXo/C/pZvuXT ud6H3ZZynxYt3WZL55/3gc3DRTzHUc5eJP/qevayu4H088s02w8/G6Dugo0nbF9h ilW5E0wCbGlv+JO/DApb9CK1H2R2V6HC6ZD90+/v3TTfyhrHVIphsW+eD8K+ECE1 Gelg+jhlHZTRmTr4Gm7J1WJmRWZysMtQWVClm68Mlv2nMjlWxTETTW1L4/6eCYCN L8O4ERedz6PE/r5FsEF4bUJYQ5BBixY93aP2RZa1Z9gQt//rNWI= -----END CERTIFICATE-----Generated at Wed May 13 06:01:10 2026 by rpki-client