$ rpki-client -vvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json) Hash identifier: S2RoVgpk0MKN5wJpIbg7PvypviGdLaSAyndylHh75oI= Subject key identifier: FB:2F:D1:53:D2:27:AC:E6:D7:FB:E8:4E:63:97:13:BF:35:19:CD:40 Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Certificate serial: 33FF2E4D055724EE45068D604817ACE5BDAED390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:30:45 +0000 Manifest this update: Tue 12 May 2026 02:25:45 +0000 Manifest next update: Wed 13 May 2026 05:43:45 +0000 Files and hashes: 1: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=) 2: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: vXC+bm4Cm3cTw27hSDfKJe14sJbjYdpkYWuSXiJk2Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ff:2e:4d:05:57:24:ee:45:06:8d:60:48:17:ac:e5:bd:ae:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0 Validity Not Before: May 12 02:25:45 2026 GMT Not After : May 13 05:43:45 2026 GMT Subject: CN=FB2FD153D227ACE6D7FBE84E639713BF3519CD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:95:68:bb:23:3a:f3:76:02:90:8c:13:6f: 88:9e:0f:7c:16:b8:4b:91:86:fe:ac:e0:de:8c:3f: 59:0f:9e:6a:a8:6a:a4:59:02:32:8a:ea:b6:d3:5b: 8e:d5:2b:c2:b4:ab:b7:c3:dc:01:c8:21:53:da:d5: f4:13:1c:93:e5:e6:2f:0e:8a:9f:62:77:ff:41:a7: d8:73:d4:f5:eb:d4:7f:b0:50:36:b8:04:57:70:82: 60:cd:5d:3f:48:44:c1:89:c2:2c:75:e5:10:a3:a2: e3:01:61:30:23:cc:97:57:a6:22:e9:bf:14:ec:31: 99:5d:a9:36:63:d6:db:f4:2f:3e:25:84:68:e9:c0: ee:b8:a6:7b:6a:86:48:f3:64:34:ee:24:a4:58:2e: b7:f2:42:b1:57:4a:86:4d:1f:39:ba:06:7f:cf:71: 5b:06:d6:14:af:2e:9e:96:a3:d2:13:ca:6c:99:a3: f1:eb:44:88:c1:6e:5a:9f:02:65:e0:58:fe:49:4c: 79:ba:37:1c:ec:19:0f:8e:98:d2:9c:49:5f:1e:57: 57:46:12:ee:b9:cc:cf:bd:58:b9:cb:c4:ba:5d:c1: b4:62:62:0e:8c:34:3b:69:2d:5f:b5:8e:67:51:66: 61:b2:5d:44:f0:00:75:e7:2a:3c:56:d2:92:ed:5d: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:D1:53:D2:27:AC:E6:D7:FB:E8:4E:63:97:13:BF:35:19:CD:40 X509v3 Authority Key Identifier: keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:ac:9b:f0:cc:32:82:b1:a2:c8:1c:01:12:e7:f1:02:8f: e7:9a:73:54:5c:53:17:8e:61:08:92:0c:d7:e5:d2:78:07:07: 65:d4:e7:47:b5:06:2f:d8:58:b3:db:18:21:e4:97:c9:d0:f4: 77:02:d6:c4:3c:73:8c:f4:53:2e:a8:9d:b2:92:2e:18:9f:9c: e2:0e:3a:11:5e:a3:20:e3:bf:ba:ac:64:a4:7b:2d:22:75:0d: 4e:74:b8:56:a0:da:a3:23:24:fc:27:c8:7a:21:0d:cd:2b:72: 9c:1f:f1:21:e5:94:45:1d:3d:6a:a6:b9:5a:f7:f7:88:1e:cb: 51:8b:68:80:3a:a1:16:f2:13:4b:a4:f5:07:ab:1e:50:16:8d: 32:ea:23:59:e9:f7:e0:87:87:1a:cd:b1:e4:b3:f9:c3:b5:47: be:6b:fa:cb:81:13:9b:2e:ac:71:e4:c8:d3:68:57:94:88:bf: 04:f5:cc:de:bc:f8:3f:9e:b8:ec:12:02:62:3d:8e:27:e0:d5: 64:e3:4d:aa:9e:f0:a0:a2:0a:bc:07:a1:97:29:0a:88:01:20: ef:06:44:b7:1e:4b:eb:4d:96:44:5d:41:52:36:96:71:c9:05: ce:75:89:aa:ac:f9:f3:d1:1a:49:14:41:9a:fb:c1:7e:06:43: 6e:ac:52:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/8uTQVXJO5FBo1gSBes5b2u05AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG MDhEMjNEMDAeFw0yNjA1MTIwMjI1NDVaFw0yNjA1MTMwNTQzNDVaMDMxMTAvBgNV BAMTKEZCMkZEMTUzRDIyN0FDRTZEN0ZCRTg0RTYzOTcxM0JGMzUxOUNENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrq5VouyM683YCkIwTb4ieD3wW uEuRhv6s4N6MP1kPnmqoaqRZAjKK6rbTW47VK8K0q7fD3AHIIVPa1fQTHJPl5i8O ip9id/9Bp9hz1PXr1H+wUDa4BFdwgmDNXT9IRMGJwix15RCjouMBYTAjzJdXpiLp vxTsMZldqTZj1tv0Lz4lhGjpwO64pntqhkjzZDTuJKRYLrfyQrFXSoZNHzm6Bn/P cVsG1hSvLp6Wo9ITymyZo/HrRIjBblqfAmXgWP5JTHm6NxzsGQ+OmNKcSV8eV1dG Eu65zM+9WLnLxLpdwbRiYg6MNDtpLV+1jmdRZmGyXUTwAHXnKjxW0pLtXS71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+y/RU9InrObX++hOY5cTvzUZzUAwHwYDVR0j BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0 MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvHrJvwzDKCsaLIHAES5/ECj+eac1RcUxeO YQiSDNfl0ngHB2XU50e1Bi/YWLPbGCHkl8nQ9HcC1sQ8c4z0Uy6onbKSLhifnOIO OhFeoyDjv7qsZKR7LSJ1DU50uFag2qMjJPwnyHohDc0rcpwf8SHllEUdPWqmuVr3 94gey1GLaIA6oRbyE0uk9QerHlAWjTLqI1np9+CHhxrNseSz+cO1R75r+suBE5su rHHkyNNoV5SIvwT1zN68+D+euOwSAmI9jifg1WTjTaqe8KCiCrwHoZcpCogBIO8G RLceS+tNlkRdQVI2lnHJBc51iaqs+fPRGkkUQZr7wX4GQ26sUrU= -----END CERTIFICATE-----Generated at Tue May 12 22:32:19 2026 by rpki-client