$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: yufTX/CjRQfG5M5FUGwia5lMa7bw7WtsdRwh/zJmDdg= Subject key identifier: B4:62:E2:07:5B:3E:9C:95:85:DF:DD:05:27:37:36:A3:A5:41:2A:FD Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 4631D97F01890DC1E854C6D020EAB548463A01D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:54 +0000 Manifest this update: Tue 12 May 2026 17:47:54 +0000 Manifest next update: Wed 13 May 2026 21:20:54 +0000 Files and hashes: 1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 2: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: R9++yOv8SqCKAzHbvh4Uz7zWazxntBTf3ZrPsCPBLek=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:31:d9:7f:01:89:0d:c1:e8:54:c6:d0:20:ea:b5:48:46:3a:01:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: May 12 17:47:54 2026 GMT Not After : May 13 21:20:54 2026 GMT Subject: CN=B462E2075B3E9C9585DFDD05273736A3A5412AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:44:39:bb:56:19:e6:9d:d1:2c:02:16:46: 3b:e0:58:40:0d:10:38:5d:64:e8:0f:38:04:aa:a9: 30:f1:c5:2c:da:d6:eb:98:b3:bb:f1:c7:32:66:3c: 68:63:9f:7a:9d:a5:5e:82:89:6d:60:48:5b:c0:8a: ec:b5:e5:b8:27:af:ae:7d:f2:95:0b:74:8d:f1:05: ac:aa:0e:f7:ed:ab:87:56:01:ce:63:ff:64:3b:30: 28:4a:c0:75:7a:c7:d7:4b:e6:af:23:ca:43:0d:46: 8e:c0:2b:2a:87:31:96:ef:52:b2:79:2c:c4:5d:ae: ca:49:1c:f1:bb:44:77:69:c4:cb:32:1f:33:4c:03: 9a:7f:7f:a3:92:87:75:52:06:6d:9f:30:10:a8:99: 2b:48:d6:c1:61:7b:98:63:e9:f2:59:27:00:29:03: 07:9e:75:81:0b:c9:0a:8a:84:e9:df:81:6a:69:f8: 21:20:09:fd:c6:6b:2f:73:56:0e:cb:56:ba:85:2b: 0e:c1:6e:1b:1b:ff:fc:a2:4d:b7:b3:28:f8:79:23: 0e:54:7b:ce:75:44:66:23:b2:c8:09:3d:bf:c7:06: 8d:36:c8:1b:1d:00:52:24:c3:fe:af:de:74:78:94: e7:c8:0b:ad:ce:65:3f:bd:fe:b0:1d:8a:66:77:9e: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:E2:07:5B:3E:9C:95:85:DF:DD:05:27:37:36:A3:A5:41:2A:FD X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:0f:7b:ae:43:e0:d4:1a:01:2c:c2:b8:65:f1:98:da:c4: e0:07:2f:c0:7b:fe:db:0e:ee:4c:e6:42:3a:27:fb:f8:72:20: d5:ae:d7:37:e6:52:85:86:a9:8d:cf:4a:a3:49:42:bf:21:96: 34:6c:e3:d2:c7:d0:b7:af:9e:3e:23:1a:27:61:d4:e3:09:b7: 90:e2:e3:e1:da:24:71:88:44:1b:4f:b5:99:0e:19:a3:57:6b: 8d:14:44:a3:69:1a:4e:9d:af:a2:67:ef:47:a3:37:60:42:6e: ce:b6:d8:5d:b3:45:f9:f1:3e:80:fc:00:a6:8a:6d:aa:a6:d6: 68:d3:5e:60:48:de:04:62:61:2b:48:53:6f:61:7f:2f:0c:dd: a9:62:c2:6f:da:e3:a5:c7:55:ae:d8:72:ee:d5:0b:11:5f:fa: e6:b4:93:02:07:58:55:db:b2:f6:ea:1f:b1:9b:75:5c:cc:d3: 44:43:04:2f:96:fb:9a:08:36:13:c6:c9:a5:f6:12:4e:ba:8c: e1:ef:ee:c0:f9:c4:05:c3:39:18:d7:33:ce:48:29:53:d5:41: 1e:a5:3e:eb:72:18:d9:aa:0f:31:e3:c4:a4:dc:c5:15:3d:f6: ee:ef:d4:44:04:0f:a9:bc:ba:57:76:35:fe:2b:a1:1c:72:72: 38:04:85:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjHZfwGJDcHoVMbQIOq1SEY6AdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA1MTIxNzQ3NTRaFw0yNjA1MTMyMTIwNTRaMDMxMTAvBgNV BAMTKEI0NjJFMjA3NUIzRTlDOTU4NURGREQwNTI3MzczNkEzQTU0MTJBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YEQ5u1YZ5p3RLAIWRjvgWEAN EDhdZOgPOASqqTDxxSza1uuYs7vxxzJmPGhjn3qdpV6CiW1gSFvAiuy15bgnr659 8pULdI3xBayqDvftq4dWAc5j/2Q7MChKwHV6x9dL5q8jykMNRo7AKyqHMZbvUrJ5 LMRdrspJHPG7RHdpxMsyHzNMA5p/f6OSh3VSBm2fMBComStI1sFhe5hj6fJZJwAp AweedYELyQqKhOnfgWpp+CEgCf3Gay9zVg7LVrqFKw7Bbhsb//yiTbezKPh5Iw5U e851RGYjssgJPb/HBo02yBsdAFIkw/6v3nR4lOfIC63OZT+9/rAdimZ3nuuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGLiB1s+nJWF390FJzc2o6VBKv0wHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ+D3uuQ+DUGgEswrhl8ZjaxOAHL8B7/tsO 7kzmQjon+/hyINWu1zfmUoWGqY3PSqNJQr8hljRs49LH0Levnj4jGidh1OMJt5Di 4+HaJHGIRBtPtZkOGaNXa40URKNpGk6dr6Jn70ejN2BCbs622F2zRfnxPoD8AKaK baqm1mjTXmBI3gRiYStIU29hfy8M3aliwm/a46XHVa7Ycu7VCxFf+ua0kwIHWFXb svbqH7GbdVzM00RDBC+W+5oINhPGyaX2Ek66jOHv7sD5xAXDORjXM85IKVPVQR6l PutyGNmqDzHjxKTcxRU99u7v1EQED6m8uld2Nf4roRxycjgEhSo= -----END CERTIFICATE-----Generated at Wed May 13 00:13:51 2026 by rpki-client