$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: 89dSPhzXmulk41U2YVvw7J+amDUelfXr96879ZlFA0A= Subject key identifier: CC:C2:9E:F2:10:05:F0:E8:AF:3E:CE:BD:CD:A4:93:ED:4A:44:FD:99 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 2EE0C09B46876C3652D9A41079FA723602E9B1A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:46:16 +0000 Manifest this update: Tue 12 May 2026 22:41:16 +0000 Manifest next update: Thu 14 May 2026 00:42:16 +0000 Files and hashes: 1: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: rXB2HeEEQd1DVwlsE8YALRITNTRy6OUWpu9A1rRW3xM=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e0:c0:9b:46:87:6c:36:52:d9:a4:10:79:fa:72:36:02:e9:b1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: May 12 22:41:16 2026 GMT Not After : May 14 00:42:16 2026 GMT Subject: CN=CCC29EF21005F0E8AF3ECEBDCDA493ED4A44FD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:c6:9f:61:c6:db:62:ef:0a:64:a9:bc:69: 5a:69:52:5d:34:a4:8f:ee:00:f5:a0:56:48:b8:e6: 86:37:ea:8c:30:88:6e:7b:33:1a:27:ba:9b:38:bc: 54:12:2c:8b:18:44:c5:80:f5:47:81:e4:bc:9c:64: 62:9a:fb:30:ec:06:ad:83:5e:b5:a6:01:ee:84:10: a2:9b:ab:d3:1b:03:1f:fe:3b:57:78:3c:28:be:9d: 33:60:d4:db:e2:a2:a3:a6:0f:a8:a5:8f:83:d3:b5: 9a:aa:93:60:00:e9:e9:68:68:76:1c:4e:0e:8b:bd: db:88:b5:79:f3:fe:38:d9:6e:00:99:c7:91:45:2e: a4:25:8a:fa:05:2a:a2:e9:25:b2:c7:a3:c5:5f:09: 56:79:85:a5:3b:43:e9:22:1a:50:5c:98:ec:29:45: 02:b7:0c:80:f0:36:cd:b9:01:7b:40:79:2f:67:dd: 38:a2:b4:29:62:df:be:0a:74:1e:ed:46:70:d4:42: 82:52:c8:de:cf:58:2f:1d:1b:15:24:77:f9:44:23: f9:84:c2:08:c9:66:91:03:2c:b6:2b:31:df:8d:2c: d2:f8:21:02:ff:2e:59:03:1c:fa:4a:1c:a6:7a:0f: f3:35:fa:53:c5:34:5e:ac:4a:00:79:7b:1b:63:91: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:9E:F2:10:05:F0:E8:AF:3E:CE:BD:CD:A4:93:ED:4A:44:FD:99 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9e:c0:a3:25:e5:0d:68:d7:2a:c7:31:8d:6e:09:94:44:1b: 05:09:73:9c:42:52:7a:74:57:8b:dd:d7:0e:48:85:bf:02:14: a9:39:f9:0d:b4:19:42:ca:97:fa:95:4e:9e:98:dd:8a:97:44: 8a:e1:4b:3a:fe:b1:d8:02:e4:49:fd:f1:fb:cf:48:3a:ba:34: 10:c6:59:d1:7e:da:d9:a2:e0:e4:01:09:a7:3f:31:26:07:c6: 2a:03:6c:9b:50:0b:a3:4f:c6:ff:9f:a9:c2:66:2f:aa:a2:cf: ac:64:b2:65:46:1d:c0:88:68:d9:27:2e:af:32:5f:b2:46:02: a3:e8:d6:35:d0:79:21:c6:05:5f:bc:97:fb:42:c6:ad:0d:51: aa:25:cc:33:ab:55:2c:df:dd:63:e2:f0:e0:be:54:e2:2e:06: 6e:d5:8c:48:3b:e6:fd:6a:50:7d:84:79:1f:4c:8e:75:32:5f: 9d:20:75:9e:3c:bc:58:a3:bd:ac:8b:32:5f:2e:a8:b1:f4:03: 82:02:85:99:71:14:9a:5c:c1:d7:7d:0e:59:ea:77:ab:de:b9: 7b:48:38:f6:92:d1:9d:83:bf:49:a1:02:66:b5:35:af:da:3c: 9a:bd:68:9d:c5:26:9f:60:65:e2:61:75:dc:04:82:5c:1e:33: bf:58:e5:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuDAm0aHbDZS2aQQefpyNgLpsaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA1MTIyMjQxMTZaFw0yNjA1MTQwMDQyMTZaMDMxMTAvBgNV BAMTKENDQzI5RUYyMTAwNUYwRThBRjNFQ0VCRENEQTQ5M0VENEE0NEZEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADsafYcbbYu8KZKm8aVppUl00 pI/uAPWgVki45oY36owwiG57Mxonups4vFQSLIsYRMWA9UeB5LycZGKa+zDsBq2D XrWmAe6EEKKbq9MbAx/+O1d4PCi+nTNg1NvioqOmD6ilj4PTtZqqk2AA6eloaHYc Tg6LvduItXnz/jjZbgCZx5FFLqQlivoFKqLpJbLHo8VfCVZ5haU7Q+kiGlBcmOwp RQK3DIDwNs25AXtAeS9n3TiitCli374KdB7tRnDUQoJSyN7PWC8dGxUkd/lEI/mE wgjJZpEDLLYrMd+NLNL4IQL/LlkDHPpKHKZ6D/M1+lPFNF6sSgB5extjkZiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMKe8hAF8OivPs69zaST7UpE/ZkwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWewKMl5Q1o1yrHMY1uCZREGwUJc5xCUnp0 V4vd1w5Ihb8CFKk5+Q20GULKl/qVTp6Y3YqXRIrhSzr+sdgC5En98fvPSDq6NBDG WdF+2tmi4OQBCac/MSYHxioDbJtQC6NPxv+fqcJmL6qiz6xksmVGHcCIaNknLq8y X7JGAqPo1jXQeSHGBV+8l/tCxq0NUaolzDOrVSzf3WPi8OC+VOIuBm7VjEg75v1q UH2EeR9MjnUyX50gdZ48vFijvayLMl8uqLH0A4IChZlxFJpcwdd9Dlnqd6veuXtI OPaS0Z2Dv0mhAma1Na/aPJq9aJ3FJp9gZeJhddwEglweM79Y5a8= -----END CERTIFICATE-----Generated at Wed May 13 04:19:15 2026 by rpki-client