$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: +EavZ9grICmHBkL/O0P7wn0uFX1AzQoRSkVEZJFQVNY= Subject key identifier: 5F:32:95:53:58:91:09:7A:0F:A5:76:BA:CA:B5:37:8A:E4:BF:FB:DB Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 7E48FFB0DA2516BA644193252FA7CBBE949A3756 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:05:34 +0000 Manifest this update: Tue 12 May 2026 09:00:34 +0000 Manifest next update: Wed 13 May 2026 11:39:34 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) 3: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: lqyZV5WquhfvfrdVFEELvBX/XR2rsjWzZwpP550Pznk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:48:ff:b0:da:25:16:ba:64:41:93:25:2f:a7:cb:be:94:9a:37:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: May 12 09:00:34 2026 GMT Not After : May 13 11:39:34 2026 GMT Subject: CN=5F3295535891097A0FA576BACAB5378AE4BFFBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:a2:88:07:65:a5:0e:cc:94:10:d9:b9:90: 5e:8f:6e:4b:59:e9:7e:70:33:5c:4c:b6:f5:a6:97: 65:3e:7d:7a:ac:67:5b:62:aa:b0:bf:13:11:9d:dc: a8:60:95:f0:71:cd:36:42:7c:c8:3f:2b:80:96:2e: d1:b1:68:70:13:b4:a9:30:f1:6f:1e:3e:95:95:97: 9c:63:70:e7:18:04:0b:54:0d:46:fe:22:61:40:6d: d3:19:05:55:4b:0a:d3:51:65:32:1a:d1:19:f0:89: e5:79:2f:d2:e4:44:9a:09:ed:b2:65:7c:45:45:34: dc:f9:e9:99:2c:da:15:41:ae:0e:3e:49:be:9d:37: a1:81:cc:e7:5d:8b:95:75:74:59:56:58:03:89:89: a0:a0:c7:3c:66:e5:ed:2c:87:d0:4f:b0:8a:d6:f2: 43:a7:9c:4b:91:bb:e8:61:89:fb:9f:33:fe:a1:4e: f6:c8:36:4a:e1:13:cf:5b:3c:68:84:93:ca:e9:ab: 82:c2:c7:de:00:bc:11:e3:58:90:1c:9b:fe:53:8d: 49:25:cf:08:d9:ca:90:db:4e:1a:db:88:29:6a:ab: 80:c1:cf:e8:9c:d9:b6:8b:0c:2f:fc:f1:07:dd:df: 87:09:10:79:79:f6:04:82:96:d7:35:e3:4d:42:f0: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:32:95:53:58:91:09:7A:0F:A5:76:BA:CA:B5:37:8A:E4:BF:FB:DB X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f0:55:6d:d4:76:93:02:e5:ee:3b:92:b0:88:d3:38:c0:17: b6:7b:02:e5:26:01:df:bf:37:38:c5:a1:97:45:98:13:a0:3e: ab:c3:cf:77:c8:5a:f1:91:92:11:4d:22:0f:4c:72:2f:1c:da: 06:1a:84:32:6e:67:0f:87:c9:12:f9:75:cf:22:4d:01:3d:62: 83:e2:67:80:f2:51:4d:7e:ac:75:f6:13:f1:d4:4a:a7:87:55: c7:26:31:6d:40:89:69:02:71:2c:7e:d7:fe:79:49:f1:8b:ae: 0c:6e:b4:b2:46:f1:4f:d1:47:41:4c:e1:ac:02:99:d0:e8:b5: 10:cc:dc:d8:24:ce:db:07:9e:b6:69:7a:ee:de:d8:e3:75:07: af:c4:b6:1e:50:fb:00:d2:54:18:6d:01:44:a2:8a:47:9f:ac: 63:24:43:cf:55:1b:fe:88:0b:ba:4b:d5:00:12:cf:98:61:bd: eb:4a:eb:98:cc:c4:5d:a4:96:35:f0:93:9c:f0:69:94:6e:92: d7:f7:c1:a6:5b:83:75:8a:df:2f:4d:dc:83:09:20:1f:a2:25: 65:91:34:d1:ac:89:31:bf:0d:b0:22:3e:d8:7a:9d:d3:69:3a: 61:cc:1c:6a:39:2f:57:7b:c5:c9:d2:c1:0f:93:44:2c:e5:6e: e5:a5:14:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkj/sNolFrpkQZMlL6fLvpSaN1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA1MTIwOTAwMzRaFw0yNjA1MTMxMTM5MzRaMDMxMTAvBgNV BAMTKDVGMzI5NTUzNTg5MTA5N0EwRkE1NzZCQUNBQjUzNzhBRTRCRkZCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz6KIB2WlDsyUENm5kF6PbktZ 6X5wM1xMtvWml2U+fXqsZ1tiqrC/ExGd3KhglfBxzTZCfMg/K4CWLtGxaHATtKkw 8W8ePpWVl5xjcOcYBAtUDUb+ImFAbdMZBVVLCtNRZTIa0RnwieV5L9LkRJoJ7bJl fEVFNNz56Zks2hVBrg4+Sb6dN6GBzOddi5V1dFlWWAOJiaCgxzxm5e0sh9BPsIrW 8kOnnEuRu+hhifufM/6hTvbINkrhE89bPGiEk8rpq4LCx94AvBHjWJAcm/5TjUkl zwjZypDbThrbiClqq4DBz+ic2baLDC/88Qfd34cJEHl59gSCltc1401C8B5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXzKVU1iRCXoPpXa6yrU3iuS/+9swHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLwVW3UdpMC5e47krCI0zjAF7Z7AuUmAd+/ NzjFoZdFmBOgPqvDz3fIWvGRkhFNIg9Mci8c2gYahDJuZw+HyRL5dc8iTQE9YoPi Z4DyUU1+rHX2E/HUSqeHVccmMW1AiWkCcSx+1/55SfGLrgxutLJG8U/RR0FM4awC mdDotRDM3NgkztsHnrZpeu7e2ON1B6/Eth5Q+wDSVBhtAUSiikefrGMkQ89VG/6I C7pL1QASz5hhvetK65jMxF2kljXwk5zwaZRuktf3waZbg3WK3y9N3IMJIB+iJWWR NNGsiTG/DbAiPth6ndNpOmHMHGo5L1d7xcnSwQ+TRCzlbuWlFF4= -----END CERTIFICATE-----Generated at Tue May 12 23:27:47 2026 by rpki-client