$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: arS/a/125NQmN0GDDGBWfKX2Zgka7Cvx0KG8IMMKngg= Subject key identifier: 45:58:22:E3:26:33:91:5F:70:D6:A7:11:14:9F:27:27:53:43:09:F1 Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 457B54E7532FB6EE6F50B5B8B619A1976BDF5C03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:16 +0000 Manifest this update: Tue 12 May 2026 06:17:16 +0000 Manifest next update: Wed 13 May 2026 07:38:16 +0000 Files and hashes: 1: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: pLDs9uY5V/TO/0Qa0+ZRWoaQfUSMiHIOC0TnUrXO6lE=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7b:54:e7:53:2f:b6:ee:6f:50:b5:b8:b6:19:a1:97:6b:df:5c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: May 12 06:17:16 2026 GMT Not After : May 13 07:38:16 2026 GMT Subject: CN=455822E32633915F70D6A711149F2727534309F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e4:5f:d3:4c:b5:2f:08:ce:a2:61:30:9f:05: b7:5c:a5:16:1d:02:e8:a6:10:48:31:03:87:d9:79: 0f:47:c9:11:fb:9f:35:69:be:a9:dd:01:f2:03:ff: 06:89:e2:43:aa:60:37:a5:5a:fd:e3:23:a0:46:86: 61:fe:af:22:a0:9d:c8:b9:7a:ad:4a:8d:bc:c0:e1: 67:cd:f7:b7:9a:92:d1:1f:d0:bf:ee:72:7c:2d:b3: 39:f0:c2:79:91:7d:38:c3:52:c7:3a:29:ae:0d:11: 33:84:d3:f1:11:7a:c7:1c:11:c9:89:ac:79:51:fb: 71:48:b2:c2:9e:da:41:ae:95:9c:bc:1f:e1:c9:4f: ed:15:c4:79:5a:a9:16:05:0e:94:76:97:e8:55:a4: d8:c6:bc:b9:91:18:d8:b6:26:6f:e1:9b:b6:e4:56: 48:75:5b:83:04:5b:66:36:0d:5c:aa:c4:07:5c:7a: ac:03:42:7f:d4:cd:3a:0e:6c:ff:dd:87:b8:e2:49: 78:2a:38:56:0e:33:40:62:90:3d:bd:f9:70:f1:c7: 5b:49:ee:8e:39:44:b2:c2:73:9d:07:38:ec:30:d1: 8a:83:e6:ae:e1:8c:54:b3:64:1b:18:2c:f4:f1:89: 97:b4:dd:c9:9c:c5:d7:0d:af:29:5b:f0:ab:70:85: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:58:22:E3:26:33:91:5F:70:D6:A7:11:14:9F:27:27:53:43:09:F1 X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:83:56:03:41:37:1c:8a:65:eb:98:b1:0f:92:73:40:18:f3: 05:6f:8c:25:91:d9:35:04:90:ec:b6:d0:51:2a:46:f3:c0:f1: 46:d9:9a:5f:4e:65:80:d1:76:b4:5a:1b:65:54:aa:bb:98:2d: 83:56:3a:e6:b5:91:08:de:eb:31:e0:d1:eb:72:6d:8d:e3:a9: 42:b0:2f:d5:dd:f4:54:38:02:97:f8:ef:a1:f7:b1:bf:60:1c: 35:f5:ae:09:2c:a3:9e:e5:59:27:c0:a5:8c:75:32:50:9c:37: 79:fc:1f:59:51:80:50:33:53:5a:ee:19:85:f0:36:04:22:ae: 1e:3a:22:e5:82:56:86:00:8c:c4:16:b4:18:83:ca:9c:84:66: b7:e1:51:11:60:68:38:97:35:4e:1c:4b:24:2d:30:76:72:e4: 6b:9e:40:e7:4d:cd:86:23:62:8d:97:10:60:da:a6:d9:99:f7: 67:e1:dd:35:73:00:9c:4b:02:e5:51:fd:d4:ce:67:59:5d:99: 07:9c:46:8d:c5:94:ef:0e:41:44:3d:18:d3:2c:b1:d7:45:60: f5:5f:b4:31:7e:2f:25:e6:39:0b:fb:83:e5:9f:0e:3b:45:db: d3:50:b3:40:c8:20:3e:f2:11:6d:38:bd:fb:6c:68:67:10:76: 06:68:7d:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXtU51Mvtu5vULW4thmhl2vfXAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA1MTIwNjE3MTZaFw0yNjA1MTMwNzM4MTZaMDMxMTAvBgNV BAMTKDQ1NTgyMkUzMjYzMzkxNUY3MEQ2QTcxMTE0OUYyNzI3NTM0MzA5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt5F/TTLUvCM6iYTCfBbdcpRYd AuimEEgxA4fZeQ9HyRH7nzVpvqndAfID/waJ4kOqYDelWv3jI6BGhmH+ryKgnci5 eq1KjbzA4WfN97eaktEf0L/ucnwtsznwwnmRfTjDUsc6Ka4NETOE0/EResccEcmJ rHlR+3FIssKe2kGulZy8H+HJT+0VxHlaqRYFDpR2l+hVpNjGvLmRGNi2Jm/hm7bk Vkh1W4MEW2Y2DVyqxAdceqwDQn/UzToObP/dh7jiSXgqOFYOM0BikD29+XDxx1tJ 7o45RLLCc50HOOww0YqD5q7hjFSzZBsYLPTxiZe03cmcxdcNrylb8KtwhQ3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVgi4yYzkV9w1qcRFJ8nJ1NDCfEwHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaDVgNBNxyKZeuYsQ+Sc0AY8wVvjCWR2TUE kOy20FEqRvPA8UbZml9OZYDRdrRaG2VUqruYLYNWOua1kQje6zHg0etybY3jqUKw L9Xd9FQ4Apf476H3sb9gHDX1rgkso57lWSfApYx1MlCcN3n8H1lRgFAzU1ruGYXw NgQirh46IuWCVoYAjMQWtBiDypyEZrfhURFgaDiXNU4cSyQtMHZy5GueQOdNzYYj Yo2XEGDaptmZ92fh3TVzAJxLAuVR/dTOZ1ldmQecRo3FlO8OQUQ9GNMssddFYPVf tDF+LyXmOQv7g+WfDjtF29NQs0DIID7yEW04vftsaGcQdgZofYM= -----END CERTIFICATE-----Generated at Wed May 13 00:31:04 2026 by rpki-client