$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json) Hash identifier: VRiulBsrqwYhihPm3i7Z90637hzP5q5tMCNBYymustg= Subject key identifier: 47:2C:5F:5C:1E:C2:F0:00:3C:D9:2A:85:D3:F5:15:D7:2C:78:3A:E6 Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Certificate serial: 56CB592097D505F80F2366987AD92C445353916A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:51 +0000 Manifest this update: Tue 12 May 2026 18:23:51 +0000 Manifest next update: Wed 13 May 2026 20:07:51 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=) 2: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=) 3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=) 5: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=) 6: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: ZvJnkJr8cfMp1DaZg3cLPPjUHWcW+IElE4icXqUjuSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:59:20:97:d5:05:f8:0f:23:66:98:7a:d9:2c:44:53:53:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Validity Not Before: May 12 18:23:51 2026 GMT Not After : May 13 20:07:51 2026 GMT Subject: CN=472C5F5C1EC2F0003CD92A85D3F515D72C783AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:b3:66:22:9a:b7:63:d1:7a:6c:a9:73:e5: 0b:ca:53:62:1c:e9:6d:bd:86:1c:0a:9f:02:7d:76: ca:d0:f6:e3:4f:93:a4:ef:84:c0:a1:99:2c:d7:6d: 1d:72:39:1c:f3:a3:2e:02:f1:bc:00:ee:f9:57:65: 59:c4:4b:fc:d8:d3:e4:a7:b3:01:8a:42:31:2a:2f: dd:0e:31:a0:75:2f:57:3a:92:d1:6e:e7:3d:05:e3: 9b:13:b2:10:8a:d4:ab:a4:ef:25:39:20:00:8a:84: 74:1a:6c:39:51:bf:2c:b4:09:c5:e3:06:7c:58:b6: 1d:91:9b:52:49:9e:d7:86:4e:3c:6b:cc:29:aa:95: 5c:5b:7d:a6:66:c7:25:38:22:fc:58:5f:c0:2d:39: fe:43:42:6c:2d:fd:31:bc:fa:e2:28:a1:42:8e:fe: 00:0e:02:1b:0e:65:9f:82:9f:47:fc:5e:72:f8:1c: 69:1d:0c:e8:69:5a:d0:ff:2b:71:a9:77:95:be:d0: c9:ce:38:eb:07:a3:a3:44:db:26:b0:29:85:de:35: 4f:df:80:87:e5:a7:8f:44:12:62:fc:97:3c:a2:08: 48:74:4a:05:9f:8b:36:58:a8:39:c6:d2:25:83:8f: 7e:52:fe:9f:5d:79:15:f8:8b:d8:0a:40:ff:0f:ad: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:5F:5C:1E:C2:F0:00:3C:D9:2A:85:D3:F5:15:D7:2C:78:3A:E6 X509v3 Authority Key Identifier: keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c5:bf:67:e2:7a:ac:34:7c:a7:18:d0:41:53:37:00:ec:18: 46:46:62:62:99:a6:32:cd:f3:50:20:ea:97:2c:49:f5:5e:90: eb:85:52:e9:b0:e2:54:5b:30:5b:d9:d8:90:1b:34:2b:1c:71: ab:a0:65:be:7a:c3:15:7e:15:8d:9e:d5:5b:4b:7d:06:5c:3a: ab:ca:a0:ed:95:dd:0b:71:53:c4:38:09:a2:54:45:e3:a5:ac: a1:6c:eb:17:7e:05:00:ad:1a:94:16:b8:e4:86:50:c8:8c:c8: c8:19:4b:f8:0d:24:d6:27:55:b5:da:c9:af:8e:57:75:2d:b6: d2:65:69:99:1d:cc:05:31:ae:45:c3:b2:53:4b:cc:86:8f:d3: bd:b9:32:bf:30:c9:cd:16:aa:d8:8c:d7:f0:1f:fe:14:c9:ca: fb:6e:e7:72:d8:c0:50:e0:2f:2b:ad:57:f3:8f:3e:21:25:54: 0b:48:0d:56:05:eb:a9:68:96:3e:da:64:26:33:4d:c2:11:ae: e4:c1:d1:74:b3:82:63:4d:ec:38:e4:5c:04:be:36:bb:7c:16: e8:50:56:a6:4f:1c:f4:69:e9:55:d6:bc:49:52:88:87:7d:a0: d1:83:34:ba:85:b0:7d:42:81:3a:a9:73:6e:b4:2f:73:fc:5c: 08:e0:58:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVstZIJfVBfgPI2aYetksRFNTkWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4 MDc3QjRFRjAeFw0yNjA1MTIxODIzNTFaFw0yNjA1MTMyMDA3NTFaMDMxMTAvBgNV BAMTKDQ3MkM1RjVDMUVDMkYwMDAzQ0Q5MkE4NUQzRjUxNUQ3MkM3ODNBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlbNmIpq3Y9F6bKlz5QvKU2Ic 6W29hhwKnwJ9dsrQ9uNPk6TvhMChmSzXbR1yORzzoy4C8bwA7vlXZVnES/zY0+Sn swGKQjEqL90OMaB1L1c6ktFu5z0F45sTshCK1Kuk7yU5IACKhHQabDlRvyy0CcXj BnxYth2Rm1JJnteGTjxrzCmqlVxbfaZmxyU4IvxYX8AtOf5DQmwt/TG8+uIooUKO /gAOAhsOZZ+Cn0f8XnL4HGkdDOhpWtD/K3Gpd5W+0MnOOOsHo6NE2yawKYXeNU/f gIflp49EEmL8lzyiCEh0SgWfizZYqDnG0iWDj35S/p9deRX4i9gKQP8PrSvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyxfXB7C8AA82SqF0/UV1yx4OuYwHwYDVR0j BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTFv2fieqw0fKcY0EFTNwDsGEZGYmKZpjLN 81Ag6pcsSfVekOuFUumw4lRbMFvZ2JAbNCsccaugZb56wxV+FY2e1VtLfQZcOqvK oO2V3QtxU8Q4CaJUReOlrKFs6xd+BQCtGpQWuOSGUMiMyMgZS/gNJNYnVbXaya+O V3UtttJlaZkdzAUxrkXDslNLzIaP0725Mr8wyc0WqtiM1/Af/hTJyvtu53LYwFDg LyutV/OPPiElVAtIDVYF66lolj7aZCYzTcIRruTB0XSzgmNN7DjkXAS+Nrt8FuhQ VqZPHPRp6VXWvElSiId9oNGDNLqFsH1CgTqpc260L3P8XAjgWME= -----END CERTIFICATE-----Generated at Tue May 12 22:56:38 2026 by rpki-client