$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json) Hash identifier: d41q98WsIgWo4Ux+K0SzjgDhYM8PKWJCak8+lhYBF7U= Subject key identifier: D8:C0:A8:37:4A:78:A5:0F:DB:0C:FF:B0:8D:9B:98:C0:86:2C:72:5F Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F Certificate serial: 03D6EB68FC2280B817F986BD544B5C760EBABF93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:42 +0000 Manifest this update: Tue 12 May 2026 20:01:42 +0000 Manifest next update: Wed 13 May 2026 21:09:42 +0000 Files and hashes: 1: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: 2OOckq9LwTxJcpyd8MqJMxicfJVcFtCaL0Z/Eyw6iDs=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=) 3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d6:eb:68:fc:22:80:b8:17:f9:86:bd:54:4b:5c:76:0e:ba:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F Validity Not Before: May 12 20:01:42 2026 GMT Not After : May 13 21:09:42 2026 GMT Subject: CN=D8C0A8374A78A50FDB0CFFB08D9B98C0862C725F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:25:cf:e5:d2:aa:67:4e:1f:1d:a4:a0:83:62: f8:22:ff:b8:48:e5:5b:f4:bc:f3:b1:2f:59:a2:7b: 9d:6b:a4:ba:e6:c9:7f:94:75:d3:54:9b:34:54:85: 73:a8:ee:e0:55:ff:38:a8:e9:4e:0d:c1:a3:83:17: 6e:75:39:09:0e:b3:ab:61:b7:20:46:0c:bc:44:f3: 25:0b:c2:1c:eb:a8:a0:ea:44:4e:26:08:7f:77:c3: 11:c9:3e:1e:d7:2d:57:25:ae:63:11:cb:66:78:ea: 17:76:a7:68:7c:11:8b:de:fc:e9:87:3e:90:02:fb: 26:36:24:ae:eb:e6:1f:31:92:60:36:2e:54:82:ae: 6e:ac:cd:24:1c:12:99:80:e6:99:b5:04:09:66:bf: cd:c5:4a:ca:81:08:ff:af:35:6c:d7:6d:b1:7e:b8: 70:cb:66:92:80:0b:e4:8b:d0:c2:ea:24:55:e3:d2: 2d:ec:24:c0:d2:b8:b7:11:f2:26:04:a7:9e:57:05: 74:6d:e2:c4:91:e0:4b:b7:c2:bb:ca:b0:6d:8f:a2: cf:75:a3:62:ac:95:b9:e8:bd:12:56:1b:fe:3e:16: 33:3f:e2:b2:4f:84:f8:68:e9:79:ef:ee:98:5e:f0: 52:48:fd:45:18:6e:e1:a3:e5:8c:74:4b:d3:ce:52: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:A8:37:4A:78:A5:0F:DB:0C:FF:B0:8D:9B:98:C0:86:2C:72:5F X509v3 Authority Key Identifier: keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:dc:00:87:73:76:21:6c:49:13:40:35:fd:03:4d:d6:a6:77: d6:69:70:a5:2f:4f:5b:6f:87:ec:34:f6:1c:37:c7:e6:72:43: ce:02:f1:29:b1:a0:0e:06:4d:4c:50:b5:fb:6f:0d:1e:ac:6b: 15:1f:fb:cd:3f:a7:99:13:3f:88:b6:a2:25:2f:e3:9f:2d:c4: 64:ac:fd:9d:ec:89:d7:17:40:36:57:b5:6b:9d:b0:36:ea:6f: 45:40:ac:17:37:47:b2:ed:17:0c:40:49:7f:a0:2a:55:4c:61: 8c:df:60:78:20:9b:76:4d:36:05:d7:a6:b3:07:6f:bc:29:1a: 63:e1:09:0e:26:b4:2d:7f:0b:52:b4:82:d5:22:77:ad:20:f7: 09:2b:e5:7c:d7:74:ec:ba:c7:28:5b:d4:23:66:51:60:d2:75: c8:1c:ba:d2:33:85:47:9b:de:bc:17:17:7d:42:af:14:7d:c8: 08:a3:39:d9:21:2f:9d:c0:e8:3c:92:19:99:aa:ec:24:26:8f: d5:ee:eb:41:2d:1f:32:ed:1e:42:a4:a8:12:f7:3a:e0:84:97: db:ef:ea:77:87:e8:56:54:f2:b1:ec:7e:1f:70:0b:ef:9f:82: 4c:1b:bc:21:41:c4:a1:52:62:19:4e:13:8e:e5:76:db:b6:c9: 86:da:c9:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9braPwigLgX+Ya9VEtcdg66v5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF NjBBMjE3RjAeFw0yNjA1MTIyMDAxNDJaFw0yNjA1MTMyMTA5NDJaMDMxMTAvBgNV BAMTKEQ4QzBBODM3NEE3OEE1MEZEQjBDRkZCMDhEOUI5OEMwODYyQzcyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsJc/l0qpnTh8dpKCDYvgi/7hI 5Vv0vPOxL1mie51rpLrmyX+UddNUmzRUhXOo7uBV/zio6U4NwaODF251OQkOs6th tyBGDLxE8yULwhzrqKDqRE4mCH93wxHJPh7XLVclrmMRy2Z46hd2p2h8EYve/OmH PpAC+yY2JK7r5h8xkmA2LlSCrm6szSQcEpmA5pm1BAlmv83FSsqBCP+vNWzXbbF+ uHDLZpKAC+SL0MLqJFXj0i3sJMDSuLcR8iYEp55XBXRt4sSR4Eu3wrvKsG2Pos91 o2KslbnovRJWG/4+FjM/4rJPhPho6Xnv7phe8FJI/UUYbuGj5Yx0S9POUpxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MCoN0p4pQ/bDP+wjZuYwIYscl8wHwYDVR0j BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy MTdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2 NjVFNjBBMjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjcAIdzdiFsSRNANf0DTdamd9ZpcKUvT1tv h+w09hw3x+ZyQ84C8SmxoA4GTUxQtftvDR6saxUf+80/p5kTP4i2oiUv458txGSs /Z3sidcXQDZXtWudsDbqb0VArBc3R7LtFwxASX+gKlVMYYzfYHggm3ZNNgXXprMH b7wpGmPhCQ4mtC1/C1K0gtUid60g9wkr5XzXdOy6xyhb1CNmUWDSdcgcutIzhUeb 3rwXF31CrxR9yAijOdkhL53A6DySGZmq7CQmj9Xu60EtHzLtHkKkqBL3OuCEl9vv 6neH6FZU8rHsfh9wC++fgkwbvCFBxKFSYhlOE47ldtu2yYbayRM= -----END CERTIFICATE-----Generated at Wed May 13 05:55:25 2026 by rpki-client