$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft (raw, json) Hash identifier: UQl7isljYJ9qgW7I8/1raaaWQ0Zy6gelBsKbxiVWrwg= Subject key identifier: E8:ED:38:F5:B1:06:02:EC:3A:F0:B1:28:71:04:B3:01:F3:3F:DF:44 Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39 Certificate serial: 7475BC2A3DFD7DEFDC239B895AA11909827AC03F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:10 +0000 Manifest this update: Tue 12 May 2026 19:46:10 +0000 Manifest next update: Wed 13 May 2026 22:06:10 +0000 Files and hashes: 1: CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl (hash: OTKT2eKESgzdY5z1LdNZVdUYTvtU5HVJ5znIwjsn9gg=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:75:bc:2a:3d:fd:7d:ef:dc:23:9b:89:5a:a1:19:09:82:7a:c0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39 Validity Not Before: May 12 19:46:10 2026 GMT Not After : May 13 22:06:10 2026 GMT Subject: CN=E8ED38F5B10602EC3AF0B1287104B301F33FDF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:f5:18:06:c2:25:6a:50:66:20:90:9c:c3: 97:92:97:96:01:41:01:93:ae:e2:c7:13:44:7a:89: 82:2a:c0:0b:22:3f:c1:6c:87:7f:5b:b6:59:24:6e: 4c:10:f7:65:c5:77:fd:7e:c1:80:d2:54:38:e5:fd: 91:d3:5c:17:69:0b:f8:86:d8:58:de:04:f5:5b:bb: b8:4a:b9:99:3d:56:db:d3:51:b4:9f:64:eb:07:42: e1:e6:15:1f:be:4c:c7:5a:63:81:16:ef:f8:dd:fd: 82:fa:9a:77:34:34:fe:16:98:e6:a9:76:74:65:a4: 2a:7e:cb:a2:fb:6d:76:e8:f0:98:e0:f2:bc:ac:40: cd:91:27:43:8f:de:3c:ac:53:1a:6b:23:c0:f9:e7: ae:66:a9:b8:9a:42:0d:6d:1b:cc:eb:85:a6:93:61: d8:27:53:1a:91:e1:22:66:73:3d:51:fb:b1:d0:34: 21:2e:15:90:d2:57:52:63:c0:bd:e7:0c:4c:2a:5e: 38:07:62:50:69:8c:70:04:bf:83:ad:e9:1b:fc:c2: d3:ff:12:ea:9d:d1:40:9f:ba:09:43:ae:a1:7b:e1: 76:7a:57:46:2a:89:20:26:2c:a3:c0:31:64:57:0c: 77:12:a1:7d:1f:f3:ca:f1:e6:95:74:b3:06:6f:fb: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:ED:38:F5:B1:06:02:EC:3A:F0:B1:28:71:04:B3:01:F3:3F:DF:44 X509v3 Authority Key Identifier: keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ad:d1:44:f9:55:a0:48:36:2b:1b:d1:d4:2a:cd:48:e0:26: 94:58:fe:b3:56:fc:17:f8:91:e2:bb:b0:d8:df:d6:de:33:2f: 58:e3:84:49:21:1e:36:25:d4:2a:29:ac:70:29:96:54:ea:b2: 35:18:76:78:18:09:bc:48:02:09:4d:6c:01:80:3b:eb:49:b2: 60:12:ad:60:fe:d1:bd:d2:2f:9a:e6:9c:7f:a4:f9:e9:82:2c: e4:61:f7:a0:97:c2:65:20:73:1e:5b:d2:50:7a:c5:e1:61:39: e1:da:a8:82:2b:18:fe:7a:6c:2e:81:f8:51:46:a3:77:9f:b4: e2:90:0e:52:ca:cd:ff:8e:ee:c7:4b:f6:f7:d8:29:bb:5e:0c: 3e:60:68:99:db:7b:7c:49:c9:76:80:e3:99:b7:47:27:9d:ae: 57:aa:c5:3d:b0:dc:23:6f:9a:34:2b:7d:b0:8c:36:42:42:08: 00:2f:6a:16:47:9c:5c:97:49:e6:8b:62:5b:b9:95:24:5a:c4: 52:fe:71:67:25:ee:20:c7:26:c8:ad:04:45:d9:c3:1b:1a:36: 37:c4:ab:46:b9:d0:45:13:cd:29:91:69:59:5e:a9:82:3a:7d: 27:84:7d:3c:06:c2:24:de:f0:ce:4c:5e:3f:56:b0:8a:72:b9: 97:6f:f5:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHW8Kj39fe/cI5uJWqEZCYJ6wD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1NUU3NDEyODcxQUIwRjQyMzQ3RTJGRUUxRjY4MTUw MzVDN0MzOTAeFw0yNjA1MTIxOTQ2MTBaFw0yNjA1MTMyMjA2MTBaMDMxMTAvBgNV BAMTKEU4RUQzOEY1QjEwNjAyRUMzQUYwQjEyODcxMDRCMzAxRjMzRkRGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaM/UYBsIlalBmIJCcw5eSl5YB QQGTruLHE0R6iYIqwAsiP8Fsh39btlkkbkwQ92XFd/1+wYDSVDjl/ZHTXBdpC/iG 2FjeBPVbu7hKuZk9VtvTUbSfZOsHQuHmFR++TMdaY4EW7/jd/YL6mnc0NP4WmOap dnRlpCp+y6L7bXbo8Jjg8rysQM2RJ0OP3jysUxprI8D5565mqbiaQg1tG8zrhaaT YdgnUxqR4SJmcz1R+7HQNCEuFZDSV1JjwL3nDEwqXjgHYlBpjHAEv4Ot6Rv8wtP/ Euqd0UCfuglDrqF74XZ6V0YqiSAmLKPAMWRXDHcSoX0f88rx5pV0swZv+9KjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6O049bEGAuw68LEocQSzAfM/30QwHwYDVR0j BBgwFoAUz1XnQShxqw9CNH4v7h9oFQNcfDkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRjNmNjZDItODg5Ny00YTRlLTgxY2UtYzM2MWE1ZTY4ZGQ2LzAvQ0Y1NUU3NDEy ODcxQUIwRjQyMzQ3RTJGRUUxRjY4MTUwMzVDN0MzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjU1RTc0MTI4NzFBQjBGNDIzNDdFMkZFRTFGNjgxNTAzNUM3 QzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvQ0Y1NUU3NDEyODcxQUIwRjQyMzQ3RTJGRUUxRjY4 MTUwMzVDN0MzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALat0UT5VaBINisb0dQqzUjgJpRY/rNW/Bf4 keK7sNjf1t4zL1jjhEkhHjYl1CoprHApllTqsjUYdngYCbxIAglNbAGAO+tJsmAS rWD+0b3SL5rmnH+k+emCLORh96CXwmUgcx5b0lB6xeFhOeHaqIIrGP56bC6B+FFG o3eftOKQDlLKzf+O7sdL9vfYKbteDD5gaJnbe3xJyXaA45m3RyedrleqxT2w3CNv mjQrfbCMNkJCCAAvahZHnFyXSeaLYlu5lSRaxFL+cWcl7iDHJsitBEXZwxsaNjfE q0a50EUTzSmRaVleqYI6fSeEfTwGwiTe8M5MXj9WsIpyuZdv9VY= -----END CERTIFICATE-----Generated at Tue May 12 22:56:37 2026 by rpki-client