$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: YR0s2lsBdpfO4qI5GpcPz8wE5rPHT8C2Rg7ZF/ndNhk= Subject key identifier: BB:BD:9E:06:09:41:83:BB:A6:9E:56:2A:D6:79:AE:03:7B:D4:76:68 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 32D207DCDD7A5F7D5CC220C1904189EE3084E0F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:20 +0000 Manifest this update: Tue 12 May 2026 19:15:20 +0000 Manifest next update: Wed 13 May 2026 22:37:20 +0000 Files and hashes: 1: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: LvXuVZdoBMzalRtYPXMrf0ylZQSCMAA85EBcpyJj4IU=) 2: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 3: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d2:07:dc:dd:7a:5f:7d:5c:c2:20:c1:90:41:89:ee:30:84:e0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: May 12 19:15:20 2026 GMT Not After : May 13 22:37:20 2026 GMT Subject: CN=BBBD9E06094183BBA69E562AD679AE037BD47668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:fa:04:0b:1c:f5:1a:d2:3c:24:01:3c:8d: 1f:db:55:ef:45:13:96:e6:cf:36:86:40:00:c4:97: d6:f5:35:48:6f:72:d2:1e:c0:6e:c4:e3:af:55:88: 55:9a:e6:44:50:1e:89:ca:a5:cd:83:5c:46:1d:60: a5:ce:40:66:cf:ee:a4:c0:7b:41:2b:32:28:33:24: 5a:d0:20:87:c8:30:2c:f5:58:b1:13:f4:c2:ce:bf: 33:45:9a:f1:5a:48:4e:0d:92:0c:90:56:57:ba:29: 95:f9:c8:b8:48:b1:20:84:e5:8a:1f:a4:7a:e7:9c: ec:d2:5c:cc:6b:bd:ab:71:83:0e:1d:ce:3e:90:dd: 17:00:d6:31:76:ff:3f:72:6a:3d:ff:ba:3e:4d:37: 90:88:05:2c:56:d8:09:df:c0:fa:12:f2:dc:e8:c3: a1:ab:dd:ef:9e:54:a7:44:f5:d2:22:5d:e1:46:0e: 93:53:b8:5b:86:3f:8b:75:ef:c9:b5:03:ee:1b:e4: af:29:98:d0:a4:b4:03:4a:69:b6:a7:94:b9:99:34: 2e:bd:9b:96:7d:43:69:05:98:cb:61:d7:7c:04:09: e7:fa:4c:01:9d:c3:45:f6:40:af:27:34:47:df:06: 9c:f3:13:52:9a:bb:f5:2f:58:85:9c:5e:18:f8:38: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:9E:06:09:41:83:BB:A6:9E:56:2A:D6:79:AE:03:7B:D4:76:68 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:ee:1f:6c:ca:6a:26:fe:6c:82:07:69:96:01:db:c2:94: f3:b0:e1:b8:39:49:50:82:c4:bb:55:7e:d7:1d:56:5f:35:61: 60:32:7a:cc:d4:c3:67:34:4b:e4:f3:d9:a3:63:e3:5e:9b:06: 8f:b7:1e:79:9d:a2:d7:38:11:5d:ec:d3:1d:ea:6d:1c:69:24: 0d:08:bd:d1:a2:98:e3:5f:48:21:a4:9e:2b:00:d5:02:b2:4f: 30:e7:6b:0b:32:fe:f4:74:d0:9e:cf:0a:c8:65:30:1d:6e:67: 67:42:f8:b8:13:fe:2e:6b:df:ec:20:49:cf:60:46:ac:3f:33: 13:51:33:9e:ae:80:f8:a4:2d:5b:31:62:45:50:33:b8:51:f9: df:09:99:46:bd:b8:89:bf:bf:00:15:3f:ea:41:a6:47:b9:c0: 19:88:f6:32:c4:14:e6:3c:33:c9:89:a4:ba:85:30:1f:fe:e8: 88:f9:86:80:cb:79:aa:af:0c:e7:11:02:5f:94:e5:be:88:ad: e2:e8:3a:da:0f:cc:8e:5c:e8:61:39:de:e1:f1:40:2e:a0:9b: 61:09:80:70:06:71:b3:dd:9f:ad:eb:8f:1f:b4:20:7d:f1:4b: 51:43:7f:85:2c:60:f5:77:5e:31:14:d6:77:d3:7f:8f:72:b8: d8:9f:f3:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtIH3N16X31cwiDBkEGJ7jCE4PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA1MTIxOTE1MjBaFw0yNjA1MTMyMjM3MjBaMDMxMTAvBgNV BAMTKEJCQkQ5RTA2MDk0MTgzQkJBNjlFNTYyQUQ2NzlBRTAzN0JENDc2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkA/oECxz1GtI8JAE8jR/bVe9F E5bmzzaGQADEl9b1NUhvctIewG7E469ViFWa5kRQHonKpc2DXEYdYKXOQGbP7qTA e0ErMigzJFrQIIfIMCz1WLET9MLOvzNFmvFaSE4NkgyQVle6KZX5yLhIsSCE5Yof pHrnnOzSXMxrvatxgw4dzj6Q3RcA1jF2/z9yaj3/uj5NN5CIBSxW2AnfwPoS8tzo w6Gr3e+eVKdE9dIiXeFGDpNTuFuGP4t178m1A+4b5K8pmNCktANKabanlLmZNC69 m5Z9Q2kFmMth13wECef6TAGdw0X2QK8nNEffBpzzE1Kau/UvWIWcXhj4OIk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu72eBglBg7umnlYq1nmuA3vUdmgwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKK7h9symom/myCB2mWAdvClPOw4bg5SVCC xLtVftcdVl81YWAyeszUw2c0S+Tz2aNj416bBo+3Hnmdotc4EV3s0x3qbRxpJA0I vdGimONfSCGknisA1QKyTzDnawsy/vR00J7PCshlMB1uZ2dC+LgT/i5r3+wgSc9g Rqw/MxNRM56ugPikLVsxYkVQM7hR+d8JmUa9uIm/vwAVP+pBpke5wBmI9jLEFOY8 M8mJpLqFMB/+6Ij5hoDLeaqvDOcRAl+U5b6IreLoOtoPzI5c6GE53uHxQC6gm2EJ gHAGcbPdn63rjx+0IH3xS1FDf4UsYPV3XjEU1nfTf49yuNif89Y= -----END CERTIFICATE-----Generated at Wed May 13 02:33:42 2026 by rpki-client