$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: To2+lyUVlNQLm1aaUqgyAXFnqzzNQ1YMZhd6Wc+tk5E= Subject key identifier: 87:DF:08:01:09:49:B0:77:89:CF:C0:DE:40:D3:F7:9E:2C:FE:D0:80 Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 5F177F673FDAF23E3D315D6E0930C45A0F342BCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:41 +0000 Manifest this update: Tue 12 May 2026 20:01:41 +0000 Manifest next update: Wed 13 May 2026 22:38:41 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) 2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) 3: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: tSD8uP6sb2TxCzPiyKJaKu2IWXVx8vkTcKNt/gJED7k=) 4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:17:7f:67:3f:da:f2:3e:3d:31:5d:6e:09:30:c4:5a:0f:34:2b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: May 12 20:01:41 2026 GMT Not After : May 13 22:38:41 2026 GMT Subject: CN=87DF08010949B07789CFC0DE40D3F79E2CFED080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:e8:5b:cb:4a:37:82:c5:6f:42:ff:09:6e: 39:02:7c:db:3c:ba:47:8c:48:a9:0f:03:4e:cd:39: f7:a7:75:56:e5:87:bc:41:13:fb:c5:27:42:7b:d2: 15:40:49:4d:90:29:6d:30:c3:7d:52:a6:26:cc:2b: f8:6d:2b:9b:7b:93:b9:09:94:fe:22:12:70:b5:46: cf:7d:87:0c:4f:22:cb:fc:c5:0c:22:20:9c:78:2f: af:d5:02:bf:46:39:7f:b2:4d:3a:fc:73:a4:79:58: a0:e6:2f:15:39:74:b4:9b:49:dd:dc:ac:9e:d6:9f: b0:63:eb:10:b2:a2:ae:d6:c0:78:b0:81:e1:45:49: 0c:81:f5:ea:88:91:4c:ef:79:18:2c:40:68:d2:4a: cf:ef:75:f7:41:b6:1c:3f:c5:9b:23:2c:14:04:f2: df:d4:48:b4:06:a7:b1:c3:d3:82:bf:d1:a8:77:e6: f1:d1:7f:1a:a2:a6:c8:23:85:81:a8:ec:76:ee:d2: 0e:90:74:a2:8f:1b:ac:3c:3d:00:fb:aa:01:94:1c: 8b:a3:ad:0d:6a:27:c5:e1:32:12:2f:f3:38:8f:f7: 0e:30:31:af:b5:c6:5a:4a:b8:51:9c:39:28:51:a3: ce:c5:23:73:52:76:ae:58:dc:aa:12:eb:72:be:67: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:08:01:09:49:B0:77:89:CF:C0:DE:40:D3:F7:9E:2C:FE:D0:80 X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3e:cd:8c:18:9d:13:7a:68:7d:8f:6f:75:ca:1b:9e:b8:0f: 1d:3f:93:37:0c:ab:29:36:9f:2a:1c:8b:82:bd:01:b8:21:0b: 57:17:a6:bf:34:1d:98:34:66:51:7a:30:f6:19:51:dd:df:46: 33:fc:3f:7b:20:50:1e:dc:f8:e2:a4:7a:9c:ab:2a:cd:84:f0: ae:1f:75:10:41:e2:74:af:ae:4b:59:dc:2b:0d:aa:26:fe:47: 46:35:ff:98:c3:a0:32:58:68:8b:37:0c:a8:64:45:ec:04:b2: d6:d9:99:c6:ee:d0:fe:29:8d:50:2c:ac:91:c3:6d:53:87:8f: 28:0b:e2:4f:fe:bc:1b:ec:8e:40:79:e7:c9:2c:10:69:00:6e: a0:0b:c5:5b:d9:e8:a4:8e:9e:72:99:ea:a9:de:cf:e7:0b:da: 0e:ab:e6:ec:e7:7c:99:68:19:b5:30:07:0a:8b:02:8f:56:fb: 08:87:5e:27:4d:5e:bc:20:8a:92:f7:5f:cc:72:84:cd:d7:23: db:e9:05:89:86:8e:ca:6f:fc:66:0f:a0:db:c3:cd:57:d4:20: 19:61:dc:2a:fb:51:dc:9c:6b:ae:df:a0:54:d1:70:77:b9:5f: 84:c2:c1:3d:30:13:94:62:15:be:24:01:7e:43:03:40:e7:0c: a5:bc:e4:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxd/Zz/a8j49MV1uCTDEWg80K88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjA1MTIyMDAxNDFaFw0yNjA1MTMyMjM4NDFaMDMxMTAvBgNV BAMTKDg3REYwODAxMDk0OUIwNzc4OUNGQzBERTQwRDNGNzlFMkNGRUQwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjOhby0o3gsVvQv8JbjkCfNs8 ukeMSKkPA07NOfendVblh7xBE/vFJ0J70hVASU2QKW0ww31SpibMK/htK5t7k7kJ lP4iEnC1Rs99hwxPIsv8xQwiIJx4L6/VAr9GOX+yTTr8c6R5WKDmLxU5dLSbSd3c rJ7Wn7Bj6xCyoq7WwHiwgeFFSQyB9eqIkUzveRgsQGjSSs/vdfdBthw/xZsjLBQE 8t/USLQGp7HD04K/0ah35vHRfxqipsgjhYGo7Hbu0g6QdKKPG6w8PQD7qgGUHIuj rQ1qJ8XhMhIv8ziP9w4wMa+1xlpKuFGcOShRo87FI3NSdq5Y3KoS63K+Z7SBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh98IAQlJsHeJz8DeQNP3niz+0IAwHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ+zYwYnRN6aH2Pb3XKG564Dx0/kzcMqyk2 nyoci4K9AbghC1cXpr80HZg0ZlF6MPYZUd3fRjP8P3sgUB7c+OKkepyrKs2E8K4f dRBB4nSvrktZ3CsNqib+R0Y1/5jDoDJYaIs3DKhkRewEstbZmcbu0P4pjVAsrJHD bVOHjygL4k/+vBvsjkB558ksEGkAbqALxVvZ6KSOnnKZ6qnez+cL2g6r5uznfJlo GbUwBwqLAo9W+wiHXidNXrwgipL3X8xyhM3XI9vpBYmGjspv/GYPoNvDzVfUIBlh 3Cr7Udyca67foFTRcHe5X4TCwT0wE5RiFb4kAX5DA0DnDKW85Es= -----END CERTIFICATE-----Generated at Tue May 12 23:20:36 2026 by rpki-client