$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: OM6cBR7m/ZX3mUW2vgmxgUENDKiNdtL2jRY59JKfqBg= Subject key identifier: 50:72:C6:F9:EC:0A:7E:7E:43:40:F6:8E:97:C2:26:19:E3:94:80:37 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 4CB324883261E4976126C1254E1CB3075227F79D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:41:02 +0000 Manifest this update: Tue 12 May 2026 09:36:02 +0000 Manifest next update: Wed 13 May 2026 09:47:02 +0000 Files and hashes: 1: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 2: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 5: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: o9rk3ruqTCJqRXBK4UcGJ+2Fym3mLnkMYRmFnftPmxA=) 6: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b3:24:88:32:61:e4:97:61:26:c1:25:4e:1c:b3:07:52:27:f7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: May 12 09:36:02 2026 GMT Not After : May 13 09:47:02 2026 GMT Subject: CN=5072C6F9EC0A7E7E4340F68E97C22619E3948037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:60:35:24:5a:8c:33:05:48:88:55:88:92: 57:f4:08:32:f1:d9:bc:30:c4:09:d9:c6:54:5b:2f: 63:24:4a:f0:6e:4d:4c:ab:8c:8c:13:47:23:14:96: 81:7d:8d:62:bf:78:45:f7:1e:68:cc:52:10:8b:ac: 72:78:12:f1:82:9d:27:1f:df:08:05:60:b1:5f:ba: 80:35:9c:34:e8:99:22:ac:83:ab:fa:c5:03:d6:de: ed:33:a4:9e:52:c4:cf:d7:b4:e9:b9:35:27:27:22: 71:d4:73:04:40:0e:9d:dc:49:c5:c3:1a:4a:8b:b0: aa:04:e9:11:bd:32:b7:fd:e7:ad:89:59:f4:50:38: a7:a8:ca:19:5c:55:cf:9e:c3:cf:ad:cd:a2:34:9f: e5:d5:d8:b2:08:7a:aa:39:3d:d5:dd:34:f8:cc:5e: 76:24:b3:ee:32:5e:6b:69:d6:b4:2c:db:2b:a1:84: 9a:4b:e7:6a:a6:02:54:ab:ed:f4:ad:dc:31:46:95: a8:9c:04:a3:cb:51:9f:e7:eb:40:9a:e8:d8:01:78: 7a:55:30:7a:82:50:fa:1b:a6:23:f7:e7:0d:42:52: a7:c1:11:55:12:c1:58:a4:8d:53:9d:ad:67:2d:34: 80:5f:80:54:7e:4a:5a:6a:be:a1:5d:03:d2:e7:7e: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:72:C6:F9:EC:0A:7E:7E:43:40:F6:8E:97:C2:26:19:E3:94:80:37 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fb:ef:f0:6d:55:d5:59:3b:a6:d0:16:49:4f:1a:f4:27:ae: bb:72:3d:1d:cc:6b:2e:a3:49:43:72:4f:5d:4d:c6:81:3b:07: c3:dc:60:7b:b2:a2:c8:40:72:b8:33:29:6f:6f:90:ac:db:82: b5:20:68:aa:9f:c9:8d:46:69:ac:48:49:d4:52:c6:60:b1:68: de:14:2f:3e:35:8d:67:59:15:5b:cc:20:c6:54:a1:e1:36:d1: ad:23:55:b9:62:e3:0e:3b:e8:80:98:aa:f3:cb:f5:12:f7:2a: c8:6f:7c:a5:12:ee:bf:4a:c5:66:4c:3d:74:c3:bb:0a:95:35: bc:d5:83:fa:d6:f2:da:1a:d1:7d:4e:02:ed:35:b3:ce:a0:50: 5b:43:de:ba:67:d4:00:4c:f5:55:60:5f:06:35:22:38:88:ef: c1:69:b4:9c:1f:7a:4a:b5:b8:38:b9:7b:8d:f8:20:63:e5:97: d2:3d:93:27:e4:69:e6:ca:74:a2:2e:14:39:b1:55:7a:fc:be: 92:2e:b7:dc:d0:6a:aa:42:41:3d:b2:27:c2:bb:19:47:6e:2e: 45:c5:dd:33:73:6c:1e:fd:95:a0:c9:a7:35:89:c8:1f:cc:40: f8:0c:28:6e:4a:03:4e:8e:12:4e:18:45:04:b0:7d:db:77:e5: 31:0c:e8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLMkiDJh5JdhJsElThyzB1In950wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA1MTIwOTM2MDJaFw0yNjA1MTMwOTQ3MDJaMDMxMTAvBgNV BAMTKDUwNzJDNkY5RUMwQTdFN0U0MzQwRjY4RTk3QzIyNjE5RTM5NDgwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvN2A1JFqMMwVIiFWIklf0CDLx 2bwwxAnZxlRbL2MkSvBuTUyrjIwTRyMUloF9jWK/eEX3HmjMUhCLrHJ4EvGCnScf 3wgFYLFfuoA1nDTomSKsg6v6xQPW3u0zpJ5SxM/XtOm5NScnInHUcwRADp3cScXD GkqLsKoE6RG9Mrf9562JWfRQOKeoyhlcVc+ew8+tzaI0n+XV2LIIeqo5PdXdNPjM XnYks+4yXmtp1rQs2yuhhJpL52qmAlSr7fSt3DFGlaicBKPLUZ/n60Ca6NgBeHpV MHqCUPobpiP35w1CUqfBEVUSwVikjVOdrWctNIBfgFR+SlpqvqFdA9LnfjuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUHLG+ewKfn5DQPaOl8ImGeOUgDcwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP77/BtVdVZO6bQFklPGvQnrrtyPR3May6j SUNyT11NxoE7B8PcYHuyoshAcrgzKW9vkKzbgrUgaKqfyY1GaaxISdRSxmCxaN4U Lz41jWdZFVvMIMZUoeE20a0jVbli4w476ICYqvPL9RL3KshvfKUS7r9KxWZMPXTD uwqVNbzVg/rW8toa0X1OAu01s86gUFtD3rpn1ABM9VVgXwY1IjiI78FptJwfekq1 uDi5e434IGPll9I9kyfkaebKdKIuFDmxVXr8vpIut9zQaqpCQT2yJ8K7GUduLkXF 3TNzbB79laDJpzWJyB/MQPgMKG5KA06OEk4YRQSwfdt35TEM6LI= -----END CERTIFICATE-----Generated at Tue May 12 22:19:57 2026 by rpki-client