$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: 9u6OeGd+gQc6JwYw3xwXJf5bRT0wpQUy5xDlZuxNI90= Subject key identifier: 29:BD:08:1C:85:AB:E0:4D:76:7E:2A:BF:79:1B:A7:3A:A7:80:1D:06 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: C8D30D34B13B300A3FE2325B4799257EAF0D99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:51:26 +0000 Manifest this update: Tue 12 May 2026 05:46:26 +0000 Manifest next update: Wed 13 May 2026 08:31:26 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 4: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: 3Qu0MQGJyPH7kA+RKwQU7loUeLo5bLveWotERQBfsto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c8:d3:0d:34:b1:3b:30:0a:3f:e2:32:5b:47:99:25:7e:af:0d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: May 12 05:46:26 2026 GMT Not After : May 13 08:31:26 2026 GMT Subject: CN=29BD081C85ABE04D767E2ABF791BA73AA7801D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:68:8f:fc:bf:7d:3a:5c:0e:91:55:d9:6e: 3a:d6:aa:5b:b2:57:4d:1f:4d:71:0c:41:4a:9c:01: e5:fd:4f:df:3e:f0:03:15:f1:8a:ba:a5:a8:fc:0d: 5a:9f:6e:71:08:f2:4c:8c:cf:8e:0d:3c:d8:36:14: c9:7c:67:6f:0b:24:19:c8:89:ec:6a:48:d5:b4:0d: 75:9d:1c:2e:63:f1:41:d3:4c:d3:a2:85:60:c2:4e: e4:1d:99:52:d3:7f:61:c5:c7:b3:58:c5:2d:87:22: 87:b5:b4:f7:1c:9c:41:8e:18:49:8d:a3:94:65:de: 41:d2:1b:2e:0c:5f:b5:7b:7d:1f:1d:89:49:ae:8b: 92:80:f9:29:01:61:ce:e0:73:66:80:fd:50:68:b6: 13:ef:a4:77:68:ac:92:7a:5c:ef:c3:83:b3:3a:7a: 31:e6:e9:30:8c:a9:46:e9:b7:2f:59:40:88:62:e0: 03:ff:b5:d0:8d:ad:74:99:99:5e:c0:d5:5c:80:16: 58:bd:07:46:3d:50:2b:a6:59:c4:ac:6c:2f:eb:92: 12:a7:28:72:40:f6:c1:d2:ff:dc:26:a4:5f:f2:62: 88:3f:32:8b:ee:8f:c5:c1:db:e7:e7:2f:03:3a:16: c0:69:85:d5:c7:ff:e6:c5:13:70:3f:bb:ae:ce:b9: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:08:1C:85:AB:E0:4D:76:7E:2A:BF:79:1B:A7:3A:A7:80:1D:06 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2e:82:c9:50:17:9c:7c:b7:a0:dc:72:c4:fe:78:93:65:0b: b1:c7:6e:c0:3f:f7:82:6e:bc:e6:5c:b4:72:5d:aa:e0:de:91: 7f:62:1a:11:d6:52:23:9b:0d:75:04:d2:89:dd:67:5c:ef:62: 9a:fa:3d:9b:17:d4:e2:5d:88:f3:04:11:db:81:b6:b6:48:a7: d7:27:64:a3:58:81:12:10:d1:d9:f6:1d:81:0b:fa:67:71:ee: be:26:a7:15:ba:c8:62:44:a9:e6:34:e6:21:a8:0e:a4:cc:c2: 01:2a:28:f0:b1:b2:aa:8b:88:10:9d:d5:35:ff:26:44:5b:f6: 45:ed:54:83:1f:fc:b7:11:82:ee:e9:a2:f9:5d:4c:a3:41:81: 90:af:a1:c9:d5:a2:9c:e3:66:fe:9b:74:cf:09:37:63:38:bc: e7:5f:57:2b:d3:0f:d3:40:fc:75:2c:2e:02:fb:d7:d7:1c:c2: d4:2d:62:fb:ff:88:e2:f9:b5:4d:76:59:3f:38:72:34:32:8e: 39:24:da:17:26:8a:6b:a1:d6:9d:ee:38:66:ce:5a:f4:c6:6a: 12:b0:a0:00:ff:fa:e1:d9:dd:e0:36:c3:ef:c1:69:05:68:03: 94:7e:ce:de:58:e7:33:6e:53:1a:0d:3b:d3:ce:4c:93:c9:54: d0:34:d5:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMjTDTSxOzAKP+IyW0eZJX6vDZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA1MTIwNTQ2MjZaFw0yNjA1MTMwODMxMjZaMDMxMTAvBgNV BAMTKDI5QkQwODFDODVBQkUwNEQ3NjdFMkFCRjc5MUJBNzNBQTc4MDFEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03GiP/L99OlwOkVXZbjrWqluy V00fTXEMQUqcAeX9T98+8AMV8Yq6paj8DVqfbnEI8kyMz44NPNg2FMl8Z28LJBnI iexqSNW0DXWdHC5j8UHTTNOihWDCTuQdmVLTf2HFx7NYxS2HIoe1tPccnEGOGEmN o5Rl3kHSGy4MX7V7fR8diUmui5KA+SkBYc7gc2aA/VBothPvpHdorJJ6XO/Dg7M6 ejHm6TCMqUbpty9ZQIhi4AP/tdCNrXSZmV7A1VyAFli9B0Y9UCumWcSsbC/rkhKn KHJA9sHS/9wmpF/yYog/Movuj8XB2+fnLwM6FsBphdXH/+bFE3A/u67OuQgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKb0IHIWr4E12fiq/eRunOqeAHQYwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMugslQF5x8t6DccsT+eJNlC7HHbsA/94Ju vOZctHJdquDekX9iGhHWUiObDXUE0ondZ1zvYpr6PZsX1OJdiPMEEduBtrZIp9cn ZKNYgRIQ0dn2HYEL+mdx7r4mpxW6yGJEqeY05iGoDqTMwgEqKPCxsqqLiBCd1TX/ JkRb9kXtVIMf/LcRgu7povldTKNBgZCvocnVopzjZv6bdM8JN2M4vOdfVyvTD9NA /HUsLgL719ccwtQtYvv/iOL5tU12WT84cjQyjjkk2hcmimuh1p3uOGbOWvTGahKw oAD/+uHZ3eA2w+/BaQVoA5R+zt5Y5zNuUxoNO9POTJPJVNA01W8= -----END CERTIFICATE-----Generated at Wed May 13 02:19:05 2026 by rpki-client