$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json) Hash identifier: evJh6uRK+CX4oLwXFMsm6z3aMuFq12lLAqHTFShP/I4= Subject key identifier: D8:64:8B:19:1E:B0:11:8D:71:F8:2B:BB:63:86:CC:2F:1D:82:46:9C Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Certificate serial: 44AECACCBF32A5CE4102F03BD76B1690CBDC0799 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:56:10 +0000 Manifest this update: Tue 12 May 2026 09:51:10 +0000 Manifest next update: Wed 13 May 2026 10:53:10 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=) 2: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: 4E5yOFUZMI8vKEXUOJfhfIDW6+zmMjRb2/x2+mHol80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ae:ca:cc:bf:32:a5:ce:41:02:f0:3b:d7:6b:16:90:cb:dc:07:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Validity Not Before: May 12 09:51:10 2026 GMT Not After : May 13 10:53:10 2026 GMT Subject: CN=D8648B191EB0118D71F82BBB6386CC2F1D82469C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:c8:17:e7:0d:82:1d:93:9c:e2:d1:be:0d: bf:97:a1:15:b4:ac:73:2a:3c:17:63:2e:2f:3f:4b: eb:69:cf:20:ff:39:bb:c1:11:8b:f4:a0:1e:b1:fd: dd:25:a4:d8:cf:43:31:73:c4:e3:1f:94:bf:e1:a7: 6c:1d:8a:bf:57:86:4e:20:9c:81:4b:d0:ff:9c:d7: 32:3b:22:82:a3:81:3d:74:bb:11:89:ac:e3:70:66: 7f:01:e7:7c:63:60:30:bf:37:87:fe:84:31:ef:5f: 79:3d:15:eb:c5:fd:98:2c:1a:f8:d5:89:7b:29:e4: ef:f0:57:4d:69:b1:13:73:c3:97:1a:cb:b4:d3:82: cc:95:7a:17:3f:26:25:6a:36:a5:96:cb:d1:59:c7: ca:4a:e7:4b:95:7c:b2:6c:31:de:36:45:34:54:c3: 63:aa:dd:84:ab:95:37:fe:ee:99:6e:1b:4c:9f:ad: 6e:72:6c:b7:9f:4d:84:4b:57:f1:81:31:3a:e4:04: 7c:6c:95:d9:a3:fd:6e:64:e1:28:d0:34:7c:b0:6f: e2:04:8c:a8:e2:8e:46:ea:b4:59:96:22:fa:b9:f7: 67:72:95:46:70:e9:9e:79:60:a0:3c:85:89:8a:aa: 78:35:40:d6:3b:ea:9a:b8:d0:84:b4:b9:de:59:55: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:8B:19:1E:B0:11:8D:71:F8:2B:BB:63:86:CC:2F:1D:82:46:9C X509v3 Authority Key Identifier: keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:17:4c:15:ca:de:07:c4:7e:09:10:52:13:4f:37:a7:40:da: 42:b7:81:8e:73:8c:7c:69:51:d8:61:d6:50:f1:72:59:cc:f0: dc:d5:76:fc:59:9a:00:13:d3:c5:20:18:91:a4:88:74:32:03: d5:94:42:0c:3f:db:c5:f9:55:a1:8a:89:0b:63:26:ef:6d:b8: ad:f8:51:be:97:9d:f7:15:1e:36:61:d7:70:a5:8c:04:96:41: 20:b5:72:4f:46:36:61:e3:8f:1e:91:9e:60:5b:74:ad:d3:c1: 7e:3f:d4:e4:9c:81:33:ee:fb:7a:92:43:4c:a6:44:7f:52:b6: a9:7e:cc:da:d9:d5:7f:50:09:d4:43:a2:1d:df:78:34:86:28: 21:7a:8b:89:ee:8a:a1:1a:96:f2:fb:df:6b:b8:c5:49:72:09: c5:fa:ee:91:50:af:1d:aa:1b:57:85:eb:8d:68:8d:0f:9d:fe: 50:b4:7e:dd:df:ef:8f:8f:00:b3:dc:14:c6:2f:d4:00:fe:66: a0:4a:1d:db:ff:26:03:4a:7f:ff:f5:77:d6:c9:3d:bb:a4:2c: 0a:a5:77:90:31:e8:d9:6f:d4:82:09:d4:5d:f0:4a:f3:dd:ca: 88:74:97:f9:e0:57:8a:ae:8e:e8:80:e9:9e:5f:9b:53:4f:65: 3f:ed:ac:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURK7KzL8ypc5BAvA712sWkMvcB5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFE MjY2QTkxNTAeFw0yNjA1MTIwOTUxMTBaFw0yNjA1MTMxMDUzMTBaMDMxMTAvBgNV BAMTKEQ4NjQ4QjE5MUVCMDExOEQ3MUY4MkJCQjYzODZDQzJGMUQ4MjQ2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVMgX5w2CHZOc4tG+Db+XoRW0 rHMqPBdjLi8/S+tpzyD/ObvBEYv0oB6x/d0lpNjPQzFzxOMflL/hp2wdir9Xhk4g nIFL0P+c1zI7IoKjgT10uxGJrONwZn8B53xjYDC/N4f+hDHvX3k9FevF/ZgsGvjV iXsp5O/wV01psRNzw5cay7TTgsyVehc/JiVqNqWWy9FZx8pK50uVfLJsMd42RTRU w2Oq3YSrlTf+7pluG0yfrW5ybLefTYRLV/GBMTrkBHxsldmj/W5k4SjQNHywb+IE jKjijkbqtFmWIvq592dylUZw6Z55YKA8hYmKqng1QNY76pq40IS0ud5ZVam3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GSLGR6wEY1x+Cu7Y4bMLx2CRpwwHwYDVR0j BBgwFoAU1PrtCrXpCja129y86GuI6tJmqRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFC NUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFEMjY2QTkxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBRUQwQUI1RTkwQTM2QjVEQkRDQkNFODZCODhFQUQyNjZB OTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4 RUFEMjY2QTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEXTBXK3gfEfgkQUhNPN6dA2kK3gY5zjHxp Udhh1lDxclnM8NzVdvxZmgAT08UgGJGkiHQyA9WUQgw/28X5VaGKiQtjJu9tuK34 Ub6XnfcVHjZh13CljASWQSC1ck9GNmHjjx6RnmBbdK3TwX4/1OScgTPu+3qSQ0ym RH9Stql+zNrZ1X9QCdRDoh3feDSGKCF6i4nuiqEalvL732u4xUlyCcX67pFQrx2q G1eF641ojQ+d/lC0ft3f74+PALPcFMYv1AD+ZqBKHdv/JgNKf//1d9bJPbukLAql d5Ax6Nlv1IIJ1F3wSvPdyoh0l/ngV4qujuiA6Z5fm1NPZT/trI8= -----END CERTIFICATE-----Generated at Wed May 13 03:23:09 2026 by rpki-client