$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: h3DU/BetPzjIXF4l+aB98ctwauBHxhCeilnkmgrWbBQ= Subject key identifier: E0:B3:E0:A3:9D:70:AC:55:C8:DE:CB:16:F6:66:9A:CC:48:B4:29:D8 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 36A14DFD600F672348EF290AB8D1B52100E16443 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:00:34 +0000 Manifest this update: Tue 12 May 2026 15:55:34 +0000 Manifest next update: Wed 13 May 2026 16:01:34 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) 2: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: ta8ugYjAxVI9e1bWXJ5CRsYfxBDEoHOQ2/QVUdjyBvE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a1:4d:fd:60:0f:67:23:48:ef:29:0a:b8:d1:b5:21:00:e1:64:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: May 12 15:55:34 2026 GMT Not After : May 13 16:01:34 2026 GMT Subject: CN=E0B3E0A39D70AC55C8DECB16F6669ACC48B429D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:8f:28:08:3e:4f:17:4e:79:ac:c2:75:2f: 8c:d6:12:0d:fa:b7:c0:41:78:20:0d:62:84:65:1f: dc:bf:14:d2:c2:43:59:7e:07:19:9a:46:25:af:d9: 2c:f9:a0:5d:97:dd:28:85:6f:52:c7:41:a2:dc:ed: 8e:49:98:f1:b2:c1:b9:67:cd:e4:0e:21:c6:8a:6a: fc:94:3c:89:89:10:75:5c:15:13:f6:f4:7b:96:cf: cf:c1:b3:62:c8:c8:32:0e:5e:89:8a:e7:b3:da:89: 6c:6d:f6:32:a4:22:9b:37:df:cd:37:e2:a7:f7:19: 00:2a:9c:b2:5b:c2:88:a7:57:52:87:9c:dc:9c:11: 9c:df:2c:19:51:6c:58:b1:60:cc:59:24:bc:10:01: 45:71:bd:7e:b6:ec:a6:f1:de:2a:c3:e1:2b:d3:04: e8:a4:38:e5:e9:f3:7f:82:95:70:4b:e4:5e:9b:47: a4:1d:95:93:98:7c:06:e5:1a:1c:5e:4d:d1:33:71: f7:97:18:8a:64:91:b9:05:11:eb:d5:3f:2e:6c:e3: 1b:b4:87:e3:05:a8:7d:7e:f0:a4:56:cd:77:32:d4: 77:0e:f0:5e:bc:6f:8d:e1:c1:b4:7b:f7:71:7a:24: df:79:67:20:d6:c8:e2:f6:5b:fc:58:b5:b6:de:4b: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B3:E0:A3:9D:70:AC:55:C8:DE:CB:16:F6:66:9A:CC:48:B4:29:D8 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:5c:05:fa:cb:34:84:99:d8:cb:e6:fc:68:b5:26:ee:06: bf:1c:ab:b4:09:7f:98:35:5e:0b:53:4a:bd:e2:6b:cb:c1:47: b0:68:b4:56:a0:73:18:82:a5:7c:4a:02:fe:5e:2a:55:3a:d0: b4:a4:b8:9e:41:a3:ea:6b:d4:60:78:ae:25:35:00:71:59:72: 72:55:57:29:cd:de:92:7a:ee:91:a7:cb:ec:15:95:18:7b:1e: 86:91:f9:7d:4c:ae:05:29:60:41:ff:89:e8:d5:e8:a9:a8:56: c8:cd:d4:3a:72:1c:54:85:01:09:9e:40:a8:9d:8c:a9:d4:64: f3:41:93:71:1e:78:9e:a6:1a:b4:33:11:f2:ca:e6:ad:b9:4c: 2f:3c:f0:2a:2c:2b:68:18:b0:21:4b:51:77:66:ac:e9:dc:2f: 01:5d:56:b2:ae:ee:dc:f1:49:53:e8:8f:9c:c3:e7:ab:4a:51: 21:96:98:2c:7a:6b:de:a8:eb:86:ff:fe:b2:b4:bf:02:ac:a4: 3a:e4:f3:2f:a6:d9:aa:c8:6b:3c:ba:a0:30:89:05:30:d4:4e: 5c:43:3e:7a:c0:40:63:ff:6d:fa:cc:ab:f3:d1:cc:7a:f9:83: c5:81:39:52:e5:c7:c8:66:d3:e9:91:4a:8d:a7:1f:bd:49:d1: 41:ea:24:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqFN/WAPZyNI7ykKuNG1IQDhZEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA1MTIxNTU1MzRaFw0yNjA1MTMxNjAxMzRaMDMxMTAvBgNV BAMTKEUwQjNFMEEzOUQ3MEFDNTVDOERFQ0IxNkY2NjY5QUNDNDhCNDI5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGso8oCD5PF055rMJ1L4zWEg36 t8BBeCANYoRlH9y/FNLCQ1l+BxmaRiWv2Sz5oF2X3SiFb1LHQaLc7Y5JmPGywbln zeQOIcaKavyUPImJEHVcFRP29HuWz8/Bs2LIyDIOXomK57PaiWxt9jKkIps33803 4qf3GQAqnLJbwoinV1KHnNycEZzfLBlRbFixYMxZJLwQAUVxvX627Kbx3irD4SvT BOikOOXp83+ClXBL5F6bR6QdlZOYfAblGhxeTdEzcfeXGIpkkbkFEevVPy5s4xu0 h+MFqH1+8KRWzXcy1HcO8F68b43hwbR793F6JN95ZyDWyOL2W/xYtbbeSz2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4LPgo51wrFXI3ssW9maazEi0KdgwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1XXAX6yzSEmdjL5vxotSbuBr8cq7QJf5g1 XgtTSr3ia8vBR7BotFagcxiCpXxKAv5eKlU60LSkuJ5Bo+pr1GB4riU1AHFZcnJV VynN3pJ67pGny+wVlRh7HoaR+X1MrgUpYEH/iejV6KmoVsjN1DpyHFSFAQmeQKid jKnUZPNBk3EeeJ6mGrQzEfLK5q25TC888CosK2gYsCFLUXdmrOncLwFdVrKu7tzx SVPoj5zD56tKUSGWmCx6a96o64b//rK0vwKspDrk8y+m2arIazy6oDCJBTDUTlxD PnrAQGP/bfrMq/PRzHr5g8WBOVLlx8hm0+mRSo2nH71J0UHqJEs= -----END CERTIFICATE-----Generated at Wed May 13 02:37:47 2026 by rpki-client