$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: x/sYqxvDOtNfKLkNCjwVswxyUQdk8fRvDh+BrXRupoA= Subject key identifier: 4E:31:6B:B2:43:99:8D:1B:FA:0E:A0:B8:43:A7:90:55:B7:DE:CF:91 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 0933BF47AEF0C145D0135C2A1703089573E881C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:30 +0000 Manifest this update: Tue 12 May 2026 20:27:30 +0000 Manifest next update: Wed 13 May 2026 23:03:30 +0000 Files and hashes: 1: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: ED5ohyRjHBxx2hBBnd1yrpvQIsRja17FW7xw0qk2ZaI=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:33:bf:47:ae:f0:c1:45:d0:13:5c:2a:17:03:08:95:73:e8:81:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: May 12 20:27:30 2026 GMT Not After : May 13 23:03:30 2026 GMT Subject: CN=4E316BB243998D1BFA0EA0B843A79055B7DECF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:63:75:3b:8a:7c:1c:4c:5c:b3:dc:54:32: cd:42:8f:7f:0b:cf:7b:a7:8b:45:35:24:33:5d:7f: 0c:b6:45:04:8c:7d:c5:83:31:2e:3f:58:b4:6c:e4: 60:78:31:6d:fa:02:ab:bc:0e:ef:9d:0a:cb:1c:53: 67:7b:3b:ee:01:d8:81:f3:7e:36:26:f8:40:01:04: 2f:3e:d8:09:02:a7:cd:7f:9c:37:e5:4b:b4:25:b4: e1:0c:fe:33:09:d6:e0:2f:51:96:c7:4a:c0:cf:3a: 78:fb:45:83:8b:6d:16:af:d5:a9:59:83:56:0f:c2: fd:ed:c8:74:42:a5:ac:4f:f1:98:22:01:a7:80:86: 97:34:a0:c4:3b:5e:f7:02:9b:c6:25:a8:26:d3:24: 3c:14:60:8c:74:b7:1e:5d:ff:08:38:36:e6:50:cb: f4:71:f6:2b:b8:d8:d6:be:a5:4d:59:e5:5b:23:99: 03:d2:61:d0:36:93:87:0a:b2:7b:98:15:b5:f5:ee: 1f:c5:25:b4:9d:19:19:39:50:bf:aa:8e:03:3f:97: e8:36:70:61:43:b5:4f:c1:91:f9:cc:d1:9d:d5:db: b0:be:73:8e:f0:9c:53:15:b6:dd:f3:cf:cc:54:a2: 19:7c:66:31:d2:42:84:0c:4c:60:1f:75:39:e6:bd: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:6B:B2:43:99:8D:1B:FA:0E:A0:B8:43:A7:90:55:B7:DE:CF:91 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:bf:00:1b:b4:c9:13:a5:c0:6e:21:15:b7:89:ee:71:1e: 66:24:96:0c:41:fb:25:b4:43:3d:a6:d6:8c:0f:72:46:71:52: a8:98:f6:06:31:b2:1d:d4:91:b2:3d:e0:43:12:22:b9:2c:c7: 87:d1:e4:44:ad:e3:56:f4:82:f1:c4:01:fd:21:c8:c1:ec:84: e0:71:98:bd:6e:a2:62:12:e9:4c:ea:a4:8e:34:e0:cc:5e:ff: 0e:9a:e9:fa:c3:30:4a:d2:85:73:a2:64:b6:84:35:a4:06:a8: 38:2e:71:dc:d3:cd:0e:1e:83:fa:24:b7:62:10:81:18:0c:0d: 4d:9e:16:8e:bb:6f:e7:52:e7:31:bc:03:c9:1b:34:1b:2e:bb: 7d:1c:df:3d:76:aa:51:a1:a1:01:50:59:f4:17:d2:f6:63:bd: 27:97:a6:87:f2:66:e6:a5:4c:d8:97:aa:86:ad:1f:49:33:77: 6c:36:68:86:09:7d:81:e7:cb:f8:8f:81:78:c5:37:66:98:60: e1:20:1d:69:56:93:d3:41:ea:bd:99:9c:0e:93:d2:41:a6:96: 9e:af:80:de:fc:25:95:7e:74:2a:da:00:76:f1:99:2b:45:fe: a0:f6:10:21:f6:b3:53:1b:fb:1d:18:5a:e1:1a:3b:80:42:82: 19:c7:02:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTO/R67wwUXQE1wqFwMIlXPogcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA1MTIyMDI3MzBaFw0yNjA1MTMyMzAzMzBaMDMxMTAvBgNV BAMTKDRFMzE2QkIyNDM5OThEMUJGQTBFQTBCODQzQTc5MDU1QjdERUNGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYGN1O4p8HExcs9xUMs1Cj38L z3uni0U1JDNdfwy2RQSMfcWDMS4/WLRs5GB4MW36Aqu8Du+dCsscU2d7O+4B2IHz fjYm+EABBC8+2AkCp81/nDflS7QltOEM/jMJ1uAvUZbHSsDPOnj7RYOLbRav1alZ g1YPwv3tyHRCpaxP8ZgiAaeAhpc0oMQ7XvcCm8YlqCbTJDwUYIx0tx5d/wg4NuZQ y/Rx9iu42Na+pU1Z5VsjmQPSYdA2k4cKsnuYFbX17h/FJbSdGRk5UL+qjgM/l+g2 cGFDtU/BkfnM0Z3V27C+c47wnFMVtt3zz8xUohl8ZjHSQoQMTGAfdTnmvfLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjFrskOZjRv6DqC4Q6eQVbfez5EwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErvvwAbtMkTpcBuIRW3ie5xHmYklgxB+yW0 Qz2m1owPckZxUqiY9gYxsh3UkbI94EMSIrksx4fR5ESt41b0gvHEAf0hyMHshOBx mL1uomIS6UzqpI404Mxe/w6a6frDMErShXOiZLaENaQGqDgucdzTzQ4eg/okt2IQ gRgMDU2eFo67b+dS5zG8A8kbNBsuu30c3z12qlGhoQFQWfQX0vZjvSeXpofyZual TNiXqoatH0kzd2w2aIYJfYHny/iPgXjFN2aYYOEgHWlWk9NB6r2ZnA6T0kGmlp6v gN78JZV+dCraAHbxmStF/qD2ECH2s1Mb+x0YWuEaO4BCghnHAq0= -----END CERTIFICATE-----Generated at Wed May 13 01:35:56 2026 by rpki-client