$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json) Hash identifier: GLTW/aO7kehpAJ70a3oqqpmqMuRqC1YA1NqBpJUqHYc= Subject key identifier: 28:A3:06:D9:06:C4:EA:27:E0:F9:EF:4C:B8:2F:38:2C:BA:4E:74:A5 Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Certificate serial: 0361976301549F9BA289E00BFEA53857BE9CC81C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:25:42 +0000 Manifest this update: Tue 12 May 2026 22:20:42 +0000 Manifest next update: Thu 14 May 2026 00:28:42 +0000 Files and hashes: 1: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: BKcr9Hhf8065h5thgQvIEC9tupnHrI5OGhx6zxm5hgQ=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:61:97:63:01:54:9f:9b:a2:89:e0:0b:fe:a5:38:57:be:9c:c8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Validity Not Before: May 12 22:20:42 2026 GMT Not After : May 14 00:28:42 2026 GMT Subject: CN=28A306D906C4EA27E0F9EF4CB82F382CBA4E74A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:63:ad:aa:54:59:6b:73:65:7a:51:67:8d: e1:75:92:60:fe:18:1c:bb:bd:8b:d5:dc:a5:53:44: 6a:89:6a:59:89:25:00:c2:b6:b3:e6:42:14:d1:eb: 49:29:d0:50:32:71:b2:18:83:f9:05:79:1d:64:c1: 85:a5:eb:2d:98:3f:3f:13:75:ee:ec:4b:84:c3:e5: 13:82:13:68:2f:64:9e:3f:7d:a3:76:33:4d:6a:e6: b1:78:f8:52:60:c0:8b:37:9c:98:8d:4e:3f:a6:90: c1:82:14:9a:6d:c8:d6:27:d3:0e:55:1d:d0:de:e8: 01:d6:89:33:92:89:b0:99:c1:92:68:d8:68:f8:c9: c2:87:50:04:13:84:10:61:70:c1:30:6d:54:c1:74: 48:4a:67:41:a4:36:df:de:31:b8:3b:e7:5c:c6:fa: 2b:e9:67:b2:b9:9b:9a:c2:76:ed:5e:81:7f:04:6c: 44:0e:7e:a5:ed:89:7f:ea:40:d5:17:d3:00:5b:6f: 66:13:5b:9c:1b:15:52:fd:56:ba:b5:58:bf:8c:16: 49:c6:88:1c:24:3a:51:ee:e6:4e:3f:48:0e:81:51: 4e:cf:ca:37:03:14:78:99:91:67:39:c5:17:85:78: 96:62:3e:83:03:92:2b:53:fb:bb:f4:7d:7d:78:51: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:06:D9:06:C4:EA:27:E0:F9:EF:4C:B8:2F:38:2C:BA:4E:74:A5 X509v3 Authority Key Identifier: keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:80:bf:f3:ad:6a:fe:e7:a4:dc:62:5c:0b:7b:7b:48:fe:67: 09:23:e6:82:f4:38:60:38:df:55:46:12:52:1e:c7:cb:21:a4: 12:58:73:eb:57:8c:74:bc:ea:16:30:df:96:ad:e7:c9:80:29: 28:25:4a:85:4a:d4:e4:74:1f:88:76:6a:5e:b7:1f:40:6d:6c: 3c:6c:af:30:62:57:59:36:9b:a9:ba:59:97:7f:da:36:71:50: dc:b1:bc:cd:6d:6c:d8:0d:3a:6a:c5:f9:8f:27:3b:b4:4f:13: 93:29:80:70:6c:d5:32:07:46:22:2e:04:7a:0f:c2:60:3c:80: 67:65:36:72:dd:d9:cd:9d:44:d8:26:91:a5:49:c2:73:ef:fb: 6b:1d:d3:41:f4:1d:d4:ed:ad:c9:63:74:6c:9f:97:80:60:4c: d4:1a:0b:fa:ca:9a:87:15:fb:18:6c:f5:35:e4:8a:c5:50:90: 2c:b6:f8:c8:af:e9:ea:3f:ae:2e:dd:1d:5e:0f:60:ea:d9:f6: 92:50:35:12:a4:93:ef:59:72:24:51:32:2b:46:b9:ee:18:c0: 2d:48:b4:3f:d4:ad:32:f3:a4:51:df:c9:9b:77:a2:a9:79:a2: 32:63:c9:1e:c7:77:7f:03:65:a3:bd:fb:6a:c6:4d:cd:a9:0b: bb:fd:2a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2GXYwFUn5uiieAL/qU4V76cyBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4 MjEwODU5NDAeFw0yNjA1MTIyMjIwNDJaFw0yNjA1MTQwMDI4NDJaMDMxMTAvBgNV BAMTKDI4QTMwNkQ5MDZDNEVBMjdFMEY5RUY0Q0I4MkYzODJDQkE0RTc0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sGOtqlRZa3NlelFnjeF1kmD+ GBy7vYvV3KVTRGqJalmJJQDCtrPmQhTR60kp0FAycbIYg/kFeR1kwYWl6y2YPz8T de7sS4TD5ROCE2gvZJ4/faN2M01q5rF4+FJgwIs3nJiNTj+mkMGCFJptyNYn0w5V HdDe6AHWiTOSibCZwZJo2Gj4ycKHUAQThBBhcMEwbVTBdEhKZ0GkNt/eMbg751zG +ivpZ7K5m5rCdu1egX8EbEQOfqXtiX/qQNUX0wBbb2YTW5wbFVL9Vrq1WL+MFknG iBwkOlHu5k4/SA6BUU7PyjcDFHiZkWc5xReFeJZiPoMDkitT+7v0fX14UQrjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKMG2QbE6ifg+e9MuC84LLpOdKUwHwYDVR0j BBgwFoAUhNjXP0CqxU+lRxxJ0bCyYIIQhZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4MDQ2N2MtYWViMi00MDk1LThmNTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0 MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4MjEwODU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEQ4RDczRjQwQUFDNTRGQTU0NzFDNDlEMUIwQjI2MDgyMTA4 NTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIy NjA4MjEwODU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmAv/Otav7npNxiXAt7e0j+Zwkj5oL0OGA4 31VGElIex8shpBJYc+tXjHS86hYw35at58mAKSglSoVK1OR0H4h2al63H0BtbDxs rzBiV1k2m6m6WZd/2jZxUNyxvM1tbNgNOmrF+Y8nO7RPE5MpgHBs1TIHRiIuBHoP wmA8gGdlNnLd2c2dRNgmkaVJwnPv+2sd00H0HdTtrcljdGyfl4BgTNQaC/rKmocV +xhs9TXkisVQkCy2+Miv6eo/ri7dHV4PYOrZ9pJQNRKkk+9ZciRRMitGue4YwC1I tD/UrTLzpFHfyZt3oql5ojJjyR7Hd38DZaO9+2rGTc2pC7v9Kjo= -----END CERTIFICATE-----Generated at Wed May 13 06:01:07 2026 by rpki-client