$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: +Tbj3jjjErshGdEaMSJ9mRClAK8RgMd4Bx1Htr46Ni4= Subject key identifier: E1:0B:0F:1F:48:B9:42:72:DA:27:B7:8D:D3:0E:37:9C:92:4A:EA:35 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 3C34D14BF98BD25E192CC229429E43F5C02D980D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:16 +0000 Manifest this update: Tue 12 May 2026 06:17:16 +0000 Manifest next update: Wed 13 May 2026 09:30:16 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) 2: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: Lt1qpSTkmuSzkB5t6HvdEFf53QGQtM9p6+cKc0Lt/iY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:d1:4b:f9:8b:d2:5e:19:2c:c2:29:42:9e:43:f5:c0:2d:98:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: May 12 06:17:16 2026 GMT Not After : May 13 09:30:16 2026 GMT Subject: CN=E10B0F1F48B94272DA27B78DD30E379C924AEA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:bc:af:ac:7c:62:e1:be:cc:f0:31:d5:9d: 1a:58:95:41:f3:ae:52:82:44:94:b4:e1:c3:2d:60: 83:cd:21:0d:d0:2e:26:af:92:d4:c5:3c:e9:e1:4f: 0c:6e:f5:54:45:fb:33:6b:da:6b:66:90:61:16:49: bf:d3:91:9f:df:a3:df:3c:04:fd:77:25:f6:8f:71: 8a:ba:7f:e7:db:86:19:af:12:10:ee:6c:ae:7f:9e: 48:8f:2a:c0:85:a4:91:75:b3:38:f5:7f:e6:7a:5b: 27:3c:ed:45:29:73:ed:1b:7a:1b:57:74:92:03:48: 81:ec:9c:66:a8:b7:dc:e7:a8:7a:b7:d6:1a:4a:7f: 67:09:3b:41:06:41:27:21:b3:74:1b:2f:a3:be:cd: 47:73:45:42:3b:2b:ae:80:56:17:72:d1:71:24:df: 8e:0e:0c:be:8c:8f:2b:bb:a8:80:7b:6e:2c:b6:f6: 07:68:20:c2:df:22:11:cb:f4:3f:e3:56:2c:91:e5: f4:30:c9:9f:8e:59:34:83:13:71:32:4e:46:8b:58: 7f:7b:90:50:e3:2d:6e:28:68:89:ea:54:24:05:a8: f0:cf:4b:71:a9:8d:79:4d:3a:f0:14:e5:de:e7:8e: ad:8a:eb:91:a9:3b:1b:30:20:91:80:b7:da:cf:34: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:0F:1F:48:B9:42:72:DA:27:B7:8D:D3:0E:37:9C:92:4A:EA:35 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:88:40:a0:65:23:f5:8d:47:e0:83:49:1d:8c:aa:2a:75:e1: 91:06:d0:bc:13:07:d0:13:83:7c:ad:14:20:bd:3d:78:eb:82: 00:4f:e7:e9:5e:8a:87:68:52:89:d7:f9:53:20:78:a4:de:0e: 25:06:cb:ac:a4:5d:ef:ee:44:be:00:fd:c3:92:83:2d:ac:2f: 9a:4b:dc:29:5a:f7:44:eb:4a:84:b4:53:28:77:03:0a:c6:95: 86:32:9a:80:3f:49:14:a5:83:d2:d5:c4:33:5f:fc:4d:17:e2: b2:62:e9:4d:51:6d:0b:bd:45:1f:af:3d:f4:a1:83:98:2f:3a: 8b:90:31:e8:c0:dc:81:c2:2b:95:b1:4b:f0:23:9a:6e:32:d0: d9:a9:1c:3a:30:ec:72:b9:03:26:cc:b0:56:8a:f8:dc:ce:60: d2:3b:78:49:31:b9:18:fd:05:ad:da:0b:5e:5c:23:a8:70:1b: e8:3b:ec:25:04:3c:c2:07:2f:c1:fe:ba:dd:53:b6:1c:53:7f: 97:79:83:a0:bc:ec:af:ac:93:2a:32:51:ad:b8:15:07:48:f1: 95:fb:4a:14:fa:98:06:cf:8e:29:d7:e4:63:2b:04:38:52:06: ef:f0:69:87:1c:1f:7a:f6:54:a8:41:b2:ed:bf:69:d0:87:6f: c4:e9:9a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDTRS/mL0l4ZLMIpQp5D9cAtmA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA1MTIwNjE3MTZaFw0yNjA1MTMwOTMwMTZaMDMxMTAvBgNV BAMTKEUxMEIwRjFGNDhCOTQyNzJEQTI3Qjc4REQzMEUzNzlDOTI0QUVBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC557yvrHxi4b7M8DHVnRpYlUHz rlKCRJS04cMtYIPNIQ3QLiavktTFPOnhTwxu9VRF+zNr2mtmkGEWSb/TkZ/fo988 BP13JfaPcYq6f+fbhhmvEhDubK5/nkiPKsCFpJF1szj1f+Z6Wyc87UUpc+0behtX dJIDSIHsnGaot9znqHq31hpKf2cJO0EGQSchs3QbL6O+zUdzRUI7K66AVhdy0XEk 344ODL6Mjyu7qIB7biy29gdoIMLfIhHL9D/jViyR5fQwyZ+OWTSDE3EyTkaLWH97 kFDjLW4oaInqVCQFqPDPS3GpjXlNOvAU5d7njq2K65GpOxswIJGAt9rPNJBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4QsPH0i5QnLaJ7eN0w43nJJK6jUwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+IQKBlI/WNR+CDSR2Mqip14ZEG0LwTB9AT g3ytFCC9PXjrggBP5+leiodoUonX+VMgeKTeDiUGy6ykXe/uRL4A/cOSgy2sL5pL 3Cla90TrSoS0Uyh3AwrGlYYymoA/SRSlg9LVxDNf/E0X4rJi6U1RbQu9RR+vPfSh g5gvOouQMejA3IHCK5WxS/Ajmm4y0NmpHDow7HK5AybMsFaK+NzOYNI7eEkxuRj9 Ba3aC15cI6hwG+g77CUEPMIHL8H+ut1TthxTf5d5g6C87K+skyoyUa24FQdI8ZX7 ShT6mAbPjinX5GMrBDhSBu/waYccH3r2VKhBsu2/adCHb8TpmnY= -----END CERTIFICATE-----Generated at Tue May 12 22:39:41 2026 by rpki-client