$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: GICYonrRvUwHvGLHrPHhyp7pZ4s5TFa0za4CRGV0jc8= Subject key identifier: DA:37:C3:95:BE:DD:5D:CC:F8:F2:25:6E:F0:B9:7F:2A:63:32:73:32 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 2BD6CDC53842F70D00F209087DBB7C395CD82D2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:54:18 +0000 Manifest this update: Tue 12 May 2026 07:49:18 +0000 Manifest next update: Wed 13 May 2026 08:45:18 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 2: D88374740C8E344956042586CFB98762292C9BED.crl (hash: vGBB/mHXc+xiqzJy93wl06y3ZUfhz9gLEtAyGZKj9zI=) 3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d6:cd:c5:38:42:f7:0d:00:f2:09:08:7d:bb:7c:39:5c:d8:2d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: May 12 07:49:18 2026 GMT Not After : May 13 08:45:18 2026 GMT Subject: CN=DA37C395BEDD5DCCF8F2256EF0B97F2A63327332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:63:b9:53:81:89:20:7a:fc:8a:51:ed:a2: 99:b1:f7:6d:25:78:6f:c8:01:f1:e9:6d:7a:27:f6: 22:65:85:d3:5a:d6:58:fa:a3:b3:1b:82:35:d7:86: a5:0f:5a:6f:b0:2c:e5:11:8a:ea:a4:2c:43:4d:df: c5:00:2b:69:f8:e3:9f:3a:a5:91:d2:28:7f:ce:e9: 17:6f:d4:0f:5f:05:ab:a7:32:22:89:34:21:4d:17: 67:d1:3c:2a:57:3b:9f:42:bf:d9:81:e1:ea:22:00: 5b:88:3e:e4:6a:4b:10:db:0b:e7:c9:d6:93:61:2a: a6:a8:23:ec:47:de:90:23:9c:88:87:e3:21:02:7b: d6:fa:8f:55:ff:58:60:4b:2c:9f:a0:2a:5e:85:f9: d2:ae:2a:95:1e:07:db:b5:3d:1e:be:69:46:53:30: 40:c6:ef:ac:4b:3d:df:b0:62:71:08:5b:bb:45:6e: ba:08:51:c9:a1:49:f9:4a:12:1a:03:2c:8c:92:9d: 73:06:4f:0c:75:ea:8c:92:7a:cc:f0:94:e0:2c:c0: b0:32:93:b3:7f:60:66:94:d7:37:d5:f8:38:7b:e6: 2e:55:73:a2:28:53:db:05:95:58:f0:31:0f:9e:d9: 4c:79:7b:b3:07:a7:c1:af:8d:d4:e6:d9:6e:35:24: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:37:C3:95:BE:DD:5D:CC:F8:F2:25:6E:F0:B9:7F:2A:63:32:73:32 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:a2:05:1a:91:d4:24:64:97:03:46:cf:9d:ab:3a:99:69: f4:20:f1:f2:f3:4c:ce:1c:5e:c6:f0:0b:ff:79:7a:a4:66:b0: c2:e5:72:bb:40:08:2a:28:f0:cf:fd:98:80:1d:58:52:c7:02: 40:b1:59:29:9e:a9:a7:e2:da:51:1a:5b:5b:34:fc:10:ed:f8: 2e:2e:b5:bb:c6:29:d5:3a:4c:4f:72:73:3f:27:9e:01:76:7c: 49:f5:38:23:cd:f3:8a:b5:64:f1:1b:3d:4b:d5:eb:39:48:a0: 65:26:72:af:85:79:5a:a0:e5:a9:35:ad:f5:5c:5d:59:c4:4f: 79:94:dc:18:4c:48:20:97:4e:76:3c:c0:47:51:b8:7f:68:e8: e7:b5:a1:eb:ef:ec:16:4c:10:dd:d8:b8:f3:3f:9d:20:bb:47: 56:0a:f4:62:ad:38:5e:89:26:c3:fd:b7:f2:fe:53:ae:18:cd: e3:87:0c:56:36:e8:db:18:8f:00:5f:b2:18:22:fb:f2:94:51: b0:89:85:77:0d:27:ac:8f:1e:3a:39:3e:8e:ba:37:c2:75:55: d8:71:2b:58:d4:25:4d:7a:be:b7:f0:5a:77:34:55:40:a5:48: 96:39:cb:c9:71:4b:ba:03:1d:d3:03:a3:26:a0:24:bb:96:01: 8a:f8:5b:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9bNxThC9w0A8gkIfbt8OVzYLSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA1MTIwNzQ5MThaFw0yNjA1MTMwODQ1MThaMDMxMTAvBgNV BAMTKERBMzdDMzk1QkVERDVEQ0NGOEYyMjU2RUYwQjk3RjJBNjMzMjczMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUj2O5U4GJIHr8ilHtopmx920l eG/IAfHpbXon9iJlhdNa1lj6o7MbgjXXhqUPWm+wLOURiuqkLENN38UAK2n44586 pZHSKH/O6Rdv1A9fBaunMiKJNCFNF2fRPCpXO59Cv9mB4eoiAFuIPuRqSxDbC+fJ 1pNhKqaoI+xH3pAjnIiH4yECe9b6j1X/WGBLLJ+gKl6F+dKuKpUeB9u1PR6+aUZT MEDG76xLPd+wYnEIW7tFbroIUcmhSflKEhoDLIySnXMGTwx16oySeszwlOAswLAy k7N/YGaU1zfV+Dh75i5Vc6IoU9sFlVjwMQ+e2Ux5e7MHp8GvjdTm2W41JA71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2jfDlb7dXcz48iVu8Ll/KmMyczIwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhDogUakdQkZJcDRs+dqzqZafQg8fLzTM4c XsbwC/95eqRmsMLlcrtACCoo8M/9mIAdWFLHAkCxWSmeqafi2lEaW1s0/BDt+C4u tbvGKdU6TE9ycz8nngF2fEn1OCPN84q1ZPEbPUvV6zlIoGUmcq+FeVqg5ak1rfVc XVnET3mU3BhMSCCXTnY8wEdRuH9o6Oe1oevv7BZMEN3YuPM/nSC7R1YK9GKtOF6J JsP9t/L+U64YzeOHDFY26NsYjwBfshgi+/KUUbCJhXcNJ6yPHjo5Po66N8J1Vdhx K1jUJU16vrfwWnc0VUClSJY5y8lxS7oDHdMDoyagJLuWAYr4W2I= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client