$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: rEY4mm2wky5kj0Kl7mbkz0tLd4PDBLy4w5Ptx8ZJAF0= Subject key identifier: 18:7D:39:12:B8:41:EF:23:53:11:FF:A0:18:DE:F3:91:41:AD:38:02 Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 2BFD734147521924DB066A9D053246E77ADFBB6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: 10 Signing time: Wed 13 May 2026 07:35:02 +0000 Manifest this update: Wed 13 May 2026 07:30:02 +0000 Manifest next update: Thu 14 May 2026 10:04:02 +0000 Files and hashes: 1: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) 2: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: 8xbL0ldgBGGhBxrZp5htyEgutZjsxNOEQD7Q05zb73o=) 3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fd:73:41:47:52:19:24:db:06:6a:9d:05:32:46:e7:7a:df:bb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: May 13 07:30:02 2026 GMT Not After : May 14 10:04:02 2026 GMT Subject: CN=187D3912B841EF235311FFA018DEF39141AD3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:44:77:78:0c:3c:71:00:77:6a:06:8c:03: ef:cf:f2:f9:09:e9:b0:e7:94:94:20:d9:a8:7f:d2: 62:32:f5:1b:ce:0d:8f:fc:bf:aa:36:b9:ec:f5:4a: 19:e7:5d:d8:70:7c:9e:2a:18:ab:85:43:55:a6:8d: 99:92:ef:b4:4c:1a:50:14:66:0f:1a:ed:a5:c1:5f: fb:80:d5:7e:19:78:4b:ff:42:99:9f:25:b5:b5:77: cf:2d:82:61:23:a3:65:4a:c9:13:a4:38:b0:03:16: 23:cd:8c:a7:da:fb:2e:79:49:95:ee:e8:48:7a:8b: 7d:7f:f5:07:bf:80:7f:40:88:0b:46:d4:a6:57:4d: 25:72:03:25:ed:e3:7d:0a:a9:d5:8b:19:0d:96:49: c1:fd:a2:be:16:f7:58:72:d7:c6:a2:a4:86:fc:b4: e9:ba:02:e1:f7:3f:44:10:c7:3e:59:0b:7c:89:dd: 35:9a:55:da:84:60:4a:4f:95:2f:de:17:da:6d:f2: 7b:59:00:bb:07:7b:ca:00:51:41:d3:61:fd:81:bf: cc:38:04:65:29:cd:79:93:f2:c7:cd:94:ad:0c:41: a3:94:e2:4a:ae:80:fc:37:15:82:5f:bb:3f:17:7d: c4:72:87:e4:a0:19:6b:5b:bc:8e:7d:bc:c2:78:9e: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:39:12:B8:41:EF:23:53:11:FF:A0:18:DE:F3:91:41:AD:38:02 X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0a:71:eb:86:8d:d1:2a:8d:92:fa:e5:1a:59:93:e0:62:43: 8c:c1:92:75:96:a8:4d:49:43:43:ad:9b:27:1b:b1:d9:4d:fd: 6e:76:c5:49:37:cc:ed:a9:36:5a:1e:d2:73:6d:47:2e:87:48: de:3d:57:c2:ef:97:15:5d:ca:19:cc:55:e3:f9:dd:78:3d:a3: 93:b8:95:00:b7:44:cc:9b:c2:f6:88:e8:b1:22:dd:e9:bd:99: 06:8b:ea:48:96:af:ca:5d:d5:29:40:41:7a:63:35:28:16:f3: 4f:0e:0f:7c:98:70:6b:cd:43:c9:db:d4:dd:bd:63:33:40:fa: 4b:c8:3a:ec:60:2b:c7:38:ff:f5:37:a4:3a:2c:d4:29:07:ed: 73:3a:83:06:46:68:05:a4:4d:94:4a:81:0f:33:3e:90:9f:c4: d3:25:67:4c:3d:d3:61:4a:86:db:e8:27:7c:4a:59:90:5e:c9: f3:d6:88:7c:89:4f:19:46:d1:9c:e9:a6:ae:f9:ae:fd:b9:75: 65:fb:ce:9b:c0:68:38:58:d3:5b:c2:30:3e:ac:31:55:da:da: 7f:9b:88:96:df:0c:18:07:a0:a5:fc:0e:ea:c6:55:18:6b:57: 42:9f:e7:d5:00:15:f7:be:ce:c6:8f:50:ad:a4:7f:eb:cd:ea: 70:18:a4:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/1zQUdSGSTbBmqdBTJG53rfu28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA1MTMwNzMwMDJaFw0yNjA1MTQxMDA0MDJaMDMxMTAvBgNV BAMTKDE4N0QzOTEyQjg0MUVGMjM1MzExRkZBMDE4REVGMzkxNDFBRDM4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkS0R3eAw8cQB3agaMA+/P8vkJ 6bDnlJQg2ah/0mIy9RvODY/8v6o2uez1ShnnXdhwfJ4qGKuFQ1WmjZmS77RMGlAU Zg8a7aXBX/uA1X4ZeEv/QpmfJbW1d88tgmEjo2VKyROkOLADFiPNjKfa+y55SZXu 6Eh6i31/9Qe/gH9AiAtG1KZXTSVyAyXt430KqdWLGQ2WScH9or4W91hy18aipIb8 tOm6AuH3P0QQxz5ZC3yJ3TWaVdqEYEpPlS/eF9pt8ntZALsHe8oAUUHTYf2Bv8w4 BGUpzXmT8sfNlK0MQaOU4kqugPw3FYJfuz8XfcRyh+SgGWtbvI59vMJ4nhHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGH05ErhB7yNTEf+gGN7zkUGtOAIwHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcKceuGjdEqjZL65RpZk+BiQ4zBknWWqE1J Q0OtmycbsdlN/W52xUk3zO2pNloe0nNtRy6HSN49V8LvlxVdyhnMVeP53Xg9o5O4 lQC3RMybwvaI6LEi3em9mQaL6kiWr8pd1SlAQXpjNSgW808OD3yYcGvNQ8nb1N29 YzNA+kvIOuxgK8c4//U3pDos1CkH7XM6gwZGaAWkTZRKgQ8zPpCfxNMlZ0w902FK htvoJ3xKWZBeyfPWiHyJTxlG0Zzppq75rv25dWX7zpvAaDhY01vCMD6sMVXa2n+b iJbfDBgHoKX8DurGVRhrV0Kf59UAFfe+zsaPUK2kf+vN6nAYpFk= -----END CERTIFICATE-----Generated at Wed May 13 09:47:51 2026 by rpki-client