$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: mRO7gqrIk8Fw4OTsRZWB6it4c0cA6ba8GngN7mJ8/TA= Subject key identifier: 55:11:A2:D4:04:49:54:B2:CC:BB:23:49:5A:ED:6E:63:69:DC:0C:35 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 62683A194F501166EE6B4707FA4B5327EB748B4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:23:26 +0000 Manifest this update: Tue 12 May 2026 13:18:26 +0000 Manifest next update: Wed 13 May 2026 16:54:26 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 2: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: DTamqn1hksM2OAKFiqxtsnGEdCk/MptO+11QzwiP1pg=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:68:3a:19:4f:50:11:66:ee:6b:47:07:fa:4b:53:27:eb:74:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: May 12 13:18:26 2026 GMT Not After : May 13 16:54:26 2026 GMT Subject: CN=5511A2D4044954B2CCBB23495AED6E6369DC0C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:58:bc:83:bb:ed:c8:96:ca:1a:c4:dc:d4: fd:aa:4c:00:52:57:41:fb:eb:4e:d1:be:4b:11:8f: 47:a9:df:34:44:7a:2c:92:bd:5c:bb:f1:1c:1c:35: 8c:6f:a7:f7:dc:3b:6b:52:12:d7:0c:73:69:60:e8: b3:0c:b1:cf:b5:6c:d3:08:04:ef:a1:3e:2d:82:91: 94:2e:06:79:31:76:f1:96:91:ba:40:fa:96:c9:d6: 7c:51:52:29:c7:16:97:f1:13:59:8f:9b:40:40:3e: 4b:67:62:1f:9c:25:cc:f3:44:fa:9e:bf:73:45:f4: 24:da:f2:af:c3:0f:c1:91:99:76:5a:e8:61:33:af: b6:60:62:4c:77:14:d9:15:9a:83:f5:96:70:c0:01: 43:ff:4c:19:7d:3a:1b:ad:bd:ab:89:80:5d:1d:b9: a7:33:f7:22:50:02:56:8c:bb:a9:49:c1:15:e7:32: c9:6d:3e:a4:3c:f5:5f:18:a4:27:4d:d5:32:87:e2: f4:2e:d2:ae:79:4e:a6:b3:13:3d:7b:73:65:33:50: 95:5e:d1:3f:fb:28:f7:c0:71:b2:31:be:48:65:24: 6d:4f:2e:dc:b7:1a:25:d7:db:6f:6c:eb:46:1b:9f: 7e:63:d1:63:d2:fb:08:74:1b:a7:6f:05:e7:20:f2: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:11:A2:D4:04:49:54:B2:CC:BB:23:49:5A:ED:6E:63:69:DC:0C:35 X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:03:67:f4:e7:c4:05:82:12:01:f7:bc:92:29:4e:d4:60:6e: df:02:89:2c:f8:cb:46:26:52:f6:73:ed:8c:31:9e:52:b1:39: 46:16:2a:9a:3b:59:a1:22:c3:9e:6b:10:32:19:88:e8:c4:23: 61:47:e7:e8:20:b8:ce:2d:db:6e:0c:80:8d:00:39:3d:1b:fe: d8:7d:c0:ca:b8:b6:c8:61:bc:29:7a:de:3e:e0:c9:1a:d7:1d: 36:b2:a8:15:04:04:9e:03:4d:48:20:fe:60:02:22:2c:44:69: 45:3e:26:da:72:ae:61:60:87:f9:4d:35:61:1b:61:42:80:28: 55:0f:fc:ed:a5:45:6a:c0:27:d4:4b:01:f9:7a:8d:96:c6:b9: b2:f5:46:f9:bc:70:4f:26:76:03:08:e1:1b:75:94:71:c3:50: 0b:8f:08:ae:30:6e:7d:cd:22:22:94:e0:c0:f5:16:89:fe:92: 07:f4:cf:33:6e:7c:93:26:80:2a:56:d5:7c:bc:26:10:bb:d6: 9e:01:47:3c:f6:28:b7:72:78:4b:54:91:bd:7c:61:1b:5e:dc: b4:50:bb:77:c7:5a:60:4a:e1:8f:65:e0:de:93:e9:67:e3:c9: 82:96:9e:ad:fa:a4:6d:6e:15:0e:5c:92:5c:00:c0:0c:c9:91: f6:3f:f4:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmg6GU9QEWbua0cH+ktTJ+t0i00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA1MTIxMzE4MjZaFw0yNjA1MTMxNjU0MjZaMDMxMTAvBgNV BAMTKDU1MTFBMkQ0MDQ0OTU0QjJDQ0JCMjM0OTVBRUQ2RTYzNjlEQzBDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOVi8g7vtyJbKGsTc1P2qTABS V0H7607RvksRj0ep3zREeiySvVy78RwcNYxvp/fcO2tSEtcMc2lg6LMMsc+1bNMI BO+hPi2CkZQuBnkxdvGWkbpA+pbJ1nxRUinHFpfxE1mPm0BAPktnYh+cJczzRPqe v3NF9CTa8q/DD8GRmXZa6GEzr7ZgYkx3FNkVmoP1lnDAAUP/TBl9OhutvauJgF0d uacz9yJQAlaMu6lJwRXnMsltPqQ89V8YpCdN1TKH4vQu0q55TqazEz17c2UzUJVe 0T/7KPfAcbIxvkhlJG1PLty3GiXX229s60Ybn35j0WPS+wh0G6dvBecg8vHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRGi1ARJVLLMuyNJWu1uY2ncDDUwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEDZ/TnxAWCEgH3vJIpTtRgbt8CiSz4y0Ym UvZz7YwxnlKxOUYWKpo7WaEiw55rEDIZiOjEI2FH5+gguM4t224MgI0AOT0b/th9 wMq4tshhvCl63j7gyRrXHTayqBUEBJ4DTUgg/mACIixEaUU+JtpyrmFgh/lNNWEb YUKAKFUP/O2lRWrAJ9RLAfl6jZbGubL1Rvm8cE8mdgMI4Rt1lHHDUAuPCK4wbn3N IiKU4MD1Fon+kgf0zzNufJMmgCpW1Xy8JhC71p4BRzz2KLdyeEtUkb18YRte3LRQ u3fHWmBK4Y9l4N6T6WfjyYKWnq36pG1uFQ5cklwAwAzJkfY/9Mw= -----END CERTIFICATE-----Generated at Wed May 13 03:51:29 2026 by rpki-client