$ rpki-client -vvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft (raw, json) Hash identifier: 4tm+moa9hnl6DuKuPKcUveu3pVbSMdeWbHwXu5pGneg= Subject key identifier: 4A:BF:36:F6:D1:1C:13:DD:CC:49:B6:B3:D4:2E:64:1F:10:99:7A:15 Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Certificate issuer: /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Certificate serial: 725EAEBA23B63EC9C3083411BAB25D1E138CBD91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:53:52 +0000 Manifest this update: Tue 12 May 2026 13:48:52 +0000 Manifest next update: Wed 13 May 2026 15:18:52 +0000 Files and hashes: 1: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=) 2: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl (hash: EFVgU8q5ambm3C982HRal9472oJa1GMDh+RjV0Zfc/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:ae:ba:23:b6:3e:c9:c3:08:34:11:ba:b2:5d:1e:13:8c:bd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Validity Not Before: May 12 13:48:52 2026 GMT Not After : May 13 15:18:52 2026 GMT Subject: CN=4ABF36F6D11C13DDCC49B6B3D42E641F10997A15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:e6:a7:d8:04:e3:28:1e:3c:76:64:56:02: 5e:d3:cd:ca:48:c7:15:d8:3f:a6:c5:d7:43:b6:52: aa:31:02:4e:39:57:3a:cd:86:f2:5d:27:4e:ba:23: 5b:86:ac:23:82:dd:e8:46:44:3c:fc:57:6e:0d:c9: 4f:78:27:dc:34:9f:fb:af:86:e7:41:c2:b9:53:ea: 2c:54:b8:3f:33:6b:d2:55:30:67:97:66:1a:bf:5c: a7:f1:c0:e8:eb:6a:43:75:b4:27:3d:f3:76:22:b5: 86:2f:7b:96:6b:36:d1:56:5b:42:5d:ee:f9:ea:11: b8:90:05:0d:bf:ef:ef:a5:d4:64:c0:de:fc:ad:99: c0:ab:19:53:29:b0:a4:2b:8e:0a:cc:50:1a:d1:69: c1:3b:b4:4b:64:0c:14:3f:73:67:19:22:bb:ed:33: 07:63:13:6b:bc:ed:ac:02:89:68:39:21:20:81:79: a4:35:b4:e2:80:1e:12:98:1c:d5:10:bf:30:58:5c: db:94:b4:09:ce:13:1e:ce:3d:10:9d:d7:32:15:17: 6d:af:e6:cf:77:22:53:18:3f:1c:20:ec:c3:e6:a8: 6c:55:4c:51:2a:9d:9f:9d:3b:b5:d4:8d:a3:18:ea: 33:aa:9e:d5:1d:7e:73:be:49:b0:12:85:5d:a4:bb: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BF:36:F6:D1:1C:13:DD:CC:49:B6:B3:D4:2E:64:1F:10:99:7A:15 X509v3 Authority Key Identifier: keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:b9:64:8c:b0:13:cc:f4:eb:dd:63:40:6b:18:f5:74:bf: d7:a5:76:4e:12:7a:51:3e:70:49:ce:db:aa:38:9b:61:a3:f6: 9f:f1:0c:06:69:c5:16:89:4d:b3:8c:98:36:47:b1:ee:79:ee: a2:fb:71:54:ec:75:ad:41:b6:de:57:e4:3a:16:8b:ac:20:16: 32:36:99:6e:ec:f6:e8:78:9d:96:5f:da:2c:4e:bc:8a:b1:18: f9:7a:d0:51:55:c0:41:65:71:bb:9d:4c:da:8d:f7:5c:02:89: 6b:81:44:55:c9:3e:2b:0b:3d:ef:14:6a:94:be:49:ff:e5:7d: be:bf:6c:61:01:ff:6b:fc:51:61:4d:93:65:7d:c4:7b:87:17: 6f:95:55:54:5b:6f:b5:a0:1f:d5:8c:fa:c4:96:f8:41:f9:14: 50:56:1e:88:2c:c9:b3:69:24:44:f4:4a:bf:aa:ec:0f:4b:fc: 92:de:08:58:9d:10:b5:5a:6e:35:67:45:de:da:b2:fd:97:ab: a9:8f:ef:72:e8:c4:99:62:9d:2c:1d:95:6d:5a:12:67:5e:5a: 10:7f:07:5e:8f:47:06:3b:13:ab:a5:d3:27:ac:31:a4:c8:c2: 27:8b:d0:25:20:5a:73:94:5c:94:e9:1f:2b:b1:bf:f2:70:90: 00:21:ac:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcl6uuiO2PsnDCDQRurJdHhOMvZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZENjA3 MDBBRjYxRjAeFw0yNjA1MTIxMzQ4NTJaFw0yNjA1MTMxNTE4NTJaMDMxMTAvBgNV BAMTKDRBQkYzNkY2RDExQzEzRERDQzQ5QjZCM0Q0MkU2NDFGMTA5OTdBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUc+an2ATjKB48dmRWAl7TzcpI xxXYP6bF10O2UqoxAk45VzrNhvJdJ066I1uGrCOC3ehGRDz8V24NyU94J9w0n/uv hudBwrlT6ixUuD8za9JVMGeXZhq/XKfxwOjrakN1tCc983YitYYve5ZrNtFWW0Jd 7vnqEbiQBQ2/7++l1GTA3vytmcCrGVMpsKQrjgrMUBrRacE7tEtkDBQ/c2cZIrvt MwdjE2u87awCiWg5ISCBeaQ1tOKAHhKYHNUQvzBYXNuUtAnOEx7OPRCd1zIVF22v 5s93IlMYPxwg7MPmqGxVTFEqnZ+dO7XUjaMY6jOqntUdfnO+SbAShV2kuxKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSr829tEcE93MSbaz1C5kHxCZehUwHwYDVR0j BBgwFoAUGguw3cUKSCJZWucY32RtYHAK9h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjMDljOWUtZmU4YS00OTg5LWI1YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERD NTBBNDgyMjU5NUFFNzE4REY2NDZENjA3MDBBRjYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTBCQjBEREM1MEE0ODIyNTk1QUU3MThERjY0NkQ2MDcwMEFG NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZE NjA3MDBBRjYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLquWSMsBPM9OvdY0BrGPV0v9eldk4SelE+ cEnO26o4m2Gj9p/xDAZpxRaJTbOMmDZHse557qL7cVTsda1Btt5X5DoWi6wgFjI2 mW7s9uh4nZZf2ixOvIqxGPl60FFVwEFlcbudTNqN91wCiWuBRFXJPisLPe8UapS+ Sf/lfb6/bGEB/2v8UWFNk2V9xHuHF2+VVVRbb7WgH9WM+sSW+EH5FFBWHogsybNp JET0Sr+q7A9L/JLeCFidELVabjVnRd7asv2Xq6mP73LoxJlinSwdlW1aEmdeWhB/ B16PRwY7E6ul0yesMaTIwieL0CUgWnOUXJTpHyuxv/JwkAAhrDI= -----END CERTIFICATE-----Generated at Wed May 13 00:45:10 2026 by rpki-client