$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft File: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft (raw, json) Hash identifier: MBtXjU3uRquxC5XfQNVAfbuMTcUHN4EMfWlcnbjULSE= Subject key identifier: 0B:90:6B:70:FF:54:6A:B6:ED:E5:27:06:EB:01:34:30:4D:49:83:D3 Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Certificate serial: 6DFF7D1300C5027E4B993EDCDB107CD6A43A8DA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:29:15 +0000 Manifest this update: Tue 12 May 2026 14:24:15 +0000 Manifest next update: Wed 13 May 2026 16:14:15 +0000 Files and hashes: 1: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=) 2: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=) 3: D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl (hash: la1vuBioe4fmWSnVyK+qjFEAGLRxvqSl7a8lPZ8NixU=) 4: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: bx3Jz5RMo6M/oNMchr0+LwmSKVwAEYYJfafpXARS4Ho=) 5: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=) 6: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 1n9vrO/e00jv7CzxxHzwEFPz/e1n9uFRka2H9k4SRco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ff:7d:13:00:c5:02:7e:4b:99:3e:dc:db:10:7c:d6:a4:3a:8d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF Validity Not Before: May 12 14:24:15 2026 GMT Not After : May 13 16:14:15 2026 GMT Subject: CN=0B906B70FF546AB6EDE52706EB0134304D4983D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:5e:0a:8e:5d:cd:0c:9b:bf:48:ea:21:1c: c2:af:29:6e:3b:36:11:39:89:fc:b3:a0:21:14:15: 42:d6:57:a2:cd:18:37:6b:27:73:b7:3a:2c:93:4e: c1:08:eb:9c:36:f0:cc:89:3c:c6:e8:de:d6:e6:8c: c4:5b:00:ee:b7:e9:d1:e9:fb:7e:62:df:f8:8c:e1: 4f:51:61:91:de:81:22:fa:c3:34:c0:29:b1:77:32: eb:0b:2b:0e:6c:0d:9e:4d:5e:54:64:27:ee:ec:45: 90:8f:ae:f8:36:20:eb:04:71:b3:f0:d7:83:46:9c: 9c:97:7d:67:cb:55:91:69:fd:18:91:23:85:e6:a4: f0:0f:e2:fd:da:27:99:7e:d3:62:58:91:5f:9d:dd: 17:a1:33:f8:f6:6e:19:ca:88:f8:3f:e0:05:35:78: 75:d2:67:98:fb:64:cf:35:12:db:af:30:d5:d7:bd: 2f:5f:25:52:b5:38:87:ae:5c:e8:db:cd:11:f1:b3: c7:1c:c2:c6:aa:8b:76:d7:9f:ef:2e:ad:30:c6:16: b2:b4:69:6a:d0:d3:43:58:d4:de:c1:a9:2c:f1:c7: aa:9f:24:7b:92:07:63:58:cb:05:4c:e0:23:c6:49: 73:b7:cb:0e:2c:43:f4:90:64:01:6c:ba:45:55:a7: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:6B:70:FF:54:6A:B6:ED:E5:27:06:EB:01:34:30:4D:49:83:D3 X509v3 Authority Key Identifier: keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:88:8c:38:d1:d4:4e:d6:b8:e8:99:e4:42:9a:4c:da:3a:38: fc:2b:01:98:bb:fc:1d:00:60:38:65:e0:2f:45:60:78:e4:8d: 61:fb:6c:d6:e8:98:5f:93:88:cc:05:b3:d2:b0:01:58:3d:61: 0a:96:3e:8b:8c:29:4d:de:c9:52:eb:b5:18:66:e6:79:81:70: 6e:7e:36:74:06:dd:25:c3:df:4c:d6:ad:d6:45:45:61:04:54: e6:7a:ce:1f:e5:70:99:04:44:8c:44:c8:b3:91:2b:97:ab:8a: 3b:53:d6:22:7e:15:64:df:64:3b:5a:22:13:f1:39:a7:d1:46: 43:03:de:46:43:26:69:df:49:35:82:4d:73:9a:bc:13:7f:c7: fd:c4:88:7a:97:1f:ac:a8:e0:05:a6:44:67:a8:83:9d:04:55: ce:8b:93:4e:e6:84:9f:9e:3c:8b:d8:7f:ba:39:a7:72:a4:ac: 42:6c:e3:d8:bd:7f:ed:ff:80:1f:30:9b:66:02:4e:00:1c:f3: 14:68:e5:ef:6b:cf:9b:45:ae:33:da:ea:16:48:34:7a:16:a4: d7:5c:d7:e5:24:ac:2d:65:e0:77:2a:dc:d9:84:b8:e8:bf:fb: 22:e7:53:64:3a:02:9e:f7:fa:6e:24:2d:93:58:75:49:95:4f: 26:df:12:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf99EwDFAn5LmT7c2xB81qQ6jaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND OTFGRURCRjAeFw0yNjA1MTIxNDI0MTVaFw0yNjA1MTMxNjE0MTVaMDMxMTAvBgNV BAMTKDBCOTA2QjcwRkY1NDZBQjZFREU1MjcwNkVCMDEzNDMwNEQ0OTgzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgV4Kjl3NDJu/SOohHMKvKW47 NhE5ifyzoCEUFULWV6LNGDdrJ3O3OiyTTsEI65w28MyJPMbo3tbmjMRbAO636dHp +35i3/iM4U9RYZHegSL6wzTAKbF3MusLKw5sDZ5NXlRkJ+7sRZCPrvg2IOsEcbPw 14NGnJyXfWfLVZFp/RiRI4XmpPAP4v3aJ5l+02JYkV+d3RehM/j2bhnKiPg/4AU1 eHXSZ5j7ZM81EtuvMNXXvS9fJVK1OIeuXOjbzRHxs8ccwsaqi3bXn+8urTDGFrK0 aWrQ00NY1N7BqSzxx6qfJHuSB2NYywVM4CPGSXO3yw4sQ/SQZAFsukVVp1nLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5BrcP9Uarbt5ScG6wE0ME1Jg9MwHwYDVR0j BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0 RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThF NkNDOTFGRURCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOIjDjR1E7WuOiZ5EKaTNo6OPwrAZi7/B0A YDhl4C9FYHjkjWH7bNbomF+TiMwFs9KwAVg9YQqWPouMKU3eyVLrtRhm5nmBcG5+ NnQG3SXD30zWrdZFRWEEVOZ6zh/lcJkERIxEyLORK5erijtT1iJ+FWTfZDtaIhPx OafRRkMD3kZDJmnfSTWCTXOavBN/x/3EiHqXH6yo4AWmRGeog50EVc6Lk07mhJ+e PIvYf7o5p3KkrEJs49i9f+3/gB8wm2YCTgAc8xRo5e9rz5tFrjPa6hZINHoWpNdc 1+UkrC1l4Hcq3NmEuOi/+yLnU2Q6Ap73+m4kLZNYdUmVTybfEj4= -----END CERTIFICATE-----Generated at Wed May 13 02:16:01 2026 by rpki-client