$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: lZGD/MzYAa4SbBRdXGjs26NrdU8F+L4Pgb4SklAJCC0= Subject key identifier: D4:88:90:B4:D1:1D:F3:8B:32:2C:B1:5E:B5:3F:A0:3E:49:03:C1:EC Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 14BA373FBE520702FB09CB0CA517D56AAEE51B0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:44:26 +0000 Manifest this update: Tue 12 May 2026 14:39:26 +0000 Manifest next update: Wed 13 May 2026 16:48:26 +0000 Files and hashes: 1: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: ftEj0WCoSFcCZGn9b2Ho5Ww/DUk3ImW/ofVYElNZsCE=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ba:37:3f:be:52:07:02:fb:09:cb:0c:a5:17:d5:6a:ae:e5:1b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: May 12 14:39:26 2026 GMT Not After : May 13 16:48:26 2026 GMT Subject: CN=D48890B4D11DF38B322CB15EB53FA03E4903C1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:7a:89:58:6f:3e:a5:18:c8:9b:5b:46:88: 84:a4:84:d8:72:f7:82:30:db:68:89:8c:15:ca:b1: 91:d9:dd:ed:b1:96:71:a2:cb:13:51:1d:f6:84:d4: d3:51:12:1d:04:c0:f6:61:ef:b1:32:5d:e0:74:27: c9:23:86:48:6e:53:ad:30:87:01:3d:dc:a7:65:e8: d3:d6:b4:47:53:13:ed:5f:1d:71:31:8c:d1:b6:27: db:71:3e:04:41:78:7d:7e:fa:ca:b9:cf:76:c9:0c: f8:ba:3e:83:3f:2f:a5:61:62:74:f7:fc:86:7d:f5: 81:8c:13:eb:1b:cd:c9:0d:66:76:9d:d3:41:78:af: 41:f2:d0:2a:5c:4d:66:00:50:96:ba:89:08:2b:e6: 83:ca:f2:f6:d7:58:c1:17:25:48:94:ad:5b:16:bf: a4:cc:fc:1b:bc:21:72:f7:89:49:6e:c6:14:3f:e4: 70:49:f7:4e:7c:86:4a:15:45:5b:ce:59:a1:f5:20: 08:60:ca:bd:0b:9e:3c:61:79:9e:05:ec:5d:0a:04: cb:a5:09:0c:6c:e6:bf:99:46:54:1f:c2:f9:b6:a8: 7b:69:90:c6:c6:f1:08:5b:a7:87:88:4b:92:5d:1c: 8b:09:da:f6:cf:aa:76:13:73:fe:83:dd:25:b9:51: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:90:B4:D1:1D:F3:8B:32:2C:B1:5E:B5:3F:A0:3E:49:03:C1:EC X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:43:26:85:6a:26:4a:6e:9a:59:c6:bd:00:0c:59:8c:e2:23: 08:ed:ed:d6:ba:41:4e:06:23:c8:be:2c:56:63:89:fd:cb:c5: b7:de:f3:32:a4:6a:5c:ed:3c:67:8d:51:a8:83:ba:4f:bf:19: 19:b9:1c:b5:75:68:4b:b8:85:37:e4:16:76:93:c6:e3:07:98: 29:04:14:ef:e1:f7:24:32:73:fd:eb:2b:66:be:24:67:73:d9: df:a5:5b:ce:d1:f7:c5:4f:2b:73:14:9d:b0:60:ec:fd:76:aa: d0:69:ce:d3:95:d0:31:ee:e1:7f:f5:df:b8:91:a0:f0:83:a9: 68:d2:ce:b5:57:65:ae:6b:b0:b5:28:a1:0e:9b:9a:f7:63:ae: ad:53:d8:d6:40:35:09:4a:95:58:6b:49:76:84:be:8e:80:79: cd:65:4b:4b:a0:80:af:db:39:a8:e6:ad:c8:37:dd:6c:61:36: 91:a0:fb:58:29:4e:8b:31:83:d5:e7:32:39:45:ef:75:ce:6f: 47:ea:8d:7d:bf:d5:0b:32:67:f8:a8:9a:63:40:41:c5:44:87: fa:01:84:e7:88:de:1b:b9:77:16:f5:20:81:f8:d3:48:b9:4c: 01:ec:5a:17:00:b9:09:97:31:6f:7b:c7:7f:9e:69:31:b7:70: a8:97:92:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLo3P75SBwL7CcsMpRfVaq7lGwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA1MTIxNDM5MjZaFw0yNjA1MTMxNjQ4MjZaMDMxMTAvBgNV BAMTKEQ0ODg5MEI0RDExREYzOEIzMjJDQjE1RUI1M0ZBMDNFNDkwM0MxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnXqJWG8+pRjIm1tGiISkhNhy 94Iw22iJjBXKsZHZ3e2xlnGiyxNRHfaE1NNREh0EwPZh77EyXeB0J8kjhkhuU60w hwE93Kdl6NPWtEdTE+1fHXExjNG2J9txPgRBeH1++sq5z3bJDPi6PoM/L6VhYnT3 /IZ99YGME+sbzckNZnad00F4r0Hy0CpcTWYAUJa6iQgr5oPK8vbXWMEXJUiUrVsW v6TM/Bu8IXL3iUluxhQ/5HBJ9058hkoVRVvOWaH1IAhgyr0LnjxheZ4F7F0KBMul CQxs5r+ZRlQfwvm2qHtpkMbG8Qhbp4eIS5JdHIsJ2vbPqnYTc/6D3SW5UWlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IiQtNEd84syLLFetT+gPkkDwewwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpDJoVqJkpumlnGvQAMWYziIwjt7da6QU4G I8i+LFZjif3Lxbfe8zKkalztPGeNUaiDuk+/GRm5HLV1aEu4hTfkFnaTxuMHmCkE FO/h9yQyc/3rK2a+JGdz2d+lW87R98VPK3MUnbBg7P12qtBpztOV0DHu4X/137iR oPCDqWjSzrVXZa5rsLUooQ6bmvdjrq1T2NZANQlKlVhrSXaEvo6Aec1lS0uggK/b Oajmrcg33WxhNpGg+1gpTosxg9XnMjlF73XOb0fqjX2/1QsyZ/iommNAQcVEh/oB hOeI3hu5dxb1IIH400i5TAHsWhcAuQmXMW97x3+eaTG3cKiXkgw= -----END CERTIFICATE-----Generated at Wed May 13 02:59:59 2026 by rpki-client