$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: lRkFh2DQBVy5elYeDRRqTsFCz2RV091F3W22OhrZO/M= Subject key identifier: AE:33:A5:F4:65:89:15:65:3B:15:27:A6:90:8D:9A:5F:E2:68:E9:7B Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 5243C120A6D0D08F1282A694848BA3280553967A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:11 +0000 Manifest this update: Tue 12 May 2026 20:53:11 +0000 Manifest next update: Wed 13 May 2026 23:30:11 +0000 Files and hashes: 1: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) 2: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: mKE3Q+4F09bRNjKuHqHyLYS8OcK8V1ipYnQiYCqRC5o=) 3: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) 4: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:43:c1:20:a6:d0:d0:8f:12:82:a6:94:84:8b:a3:28:05:53:96:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: May 12 20:53:11 2026 GMT Not After : May 13 23:30:11 2026 GMT Subject: CN=AE33A5F4658915653B1527A6908D9A5FE268E97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:0b:56:a5:06:1a:31:4f:6e:c3:72:e9:20: ec:5b:8a:74:56:8b:99:73:7f:37:52:fd:b7:10:3c: e2:a4:69:b8:ab:b3:32:08:34:93:c8:ac:3e:00:d3: 7d:b8:df:42:07:ec:a8:fb:d9:a5:73:e7:d2:1b:a2: fc:f7:72:b8:cc:b7:11:a4:87:68:25:2c:90:68:a9: 96:c4:f8:0c:46:49:61:4e:19:cb:4c:17:65:aa:9a: e8:97:83:fe:cb:ce:bd:93:49:a4:d3:42:4c:ce:75: 15:11:14:81:36:33:fd:eb:1c:b9:83:17:9c:29:c1: b0:56:e2:44:36:4a:8f:99:a4:21:96:19:bf:5e:27: 02:8a:d6:4e:7c:e8:fa:55:01:da:ac:82:cc:95:4c: ff:6d:70:e7:e2:d1:d2:0a:6b:46:19:07:83:6b:86: 9d:56:e4:33:95:1e:75:18:e4:8a:48:10:17:b4:ea: f6:76:ce:77:9d:d0:f5:da:27:a2:23:dd:60:b5:79: a6:0f:9b:07:d7:5f:06:48:4e:b1:cf:98:ea:28:80: e5:ce:44:a1:76:95:38:dd:78:18:6d:c1:f9:4a:ad: 04:a0:d8:9b:3c:06:c4:90:95:bc:8b:d3:13:50:78: df:c0:81:30:31:fc:77:67:7c:23:b3:07:e3:6c:aa: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:33:A5:F4:65:89:15:65:3B:15:27:A6:90:8D:9A:5F:E2:68:E9:7B X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:86:89:ad:3f:d4:16:4b:6c:19:5b:c0:1d:7f:a3:5f:39:d0: db:3b:55:54:8a:e2:b5:d6:11:dd:f4:dd:6b:39:a3:e0:5b:ee: d7:ee:95:50:2b:48:8e:e4:48:10:2c:2f:fe:1d:3d:0e:03:df: e8:ff:fc:c7:b0:63:fc:6b:bb:37:42:8e:b0:21:5e:14:86:d7: 4b:bc:8b:37:75:4a:a6:69:4f:35:dc:17:70:cc:89:05:80:9f: 54:59:e8:2d:fd:a3:3b:6d:e5:48:1d:b5:02:78:70:0d:ec:aa: 52:d0:fa:6f:5b:84:65:7d:48:b1:d6:37:12:4d:7b:12:03:04: 6f:6c:78:e3:a7:ed:e4:79:ad:1e:61:3c:fa:d9:84:94:d5:0a: 9f:30:fe:d5:fc:d0:e4:79:61:00:01:db:e8:9e:10:ae:04:0b: 99:5e:9f:3d:91:78:79:8b:a8:3c:ee:9e:fe:49:ae:1d:54:4d: 52:d4:6a:39:7a:86:94:06:af:bc:4b:52:d9:31:12:99:52:df: be:64:0e:ae:db:1d:71:4a:9d:e7:4f:7d:c7:74:bc:f3:8c:1a: 0d:b4:59:28:86:b6:51:e3:ef:12:34:7a:c4:db:f2:72:04:6e: 4b:47:ee:4d:09:ba:82:b2:80:00:fd:a1:2c:c9:d4:a8:fc:2d: 1e:4a:94:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkPBIKbQ0I8SgqaUhIujKAVTlnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA1MTIyMDUzMTFaFw0yNjA1MTMyMzMwMTFaMDMxMTAvBgNV BAMTKEFFMzNBNUY0NjU4OTE1NjUzQjE1MjdBNjkwOEQ5QTVGRTI2OEU5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/gtWpQYaMU9uw3LpIOxbinRW i5lzfzdS/bcQPOKkabirszIINJPIrD4A032430IH7Kj72aVz59Ibovz3crjMtxGk h2glLJBoqZbE+AxGSWFOGctMF2WqmuiXg/7Lzr2TSaTTQkzOdRURFIE2M/3rHLmD F5wpwbBW4kQ2So+ZpCGWGb9eJwKK1k586PpVAdqsgsyVTP9tcOfi0dIKa0YZB4Nr hp1W5DOVHnUY5IpIEBe06vZ2zned0PXaJ6Ij3WC1eaYPmwfXXwZITrHPmOoogOXO RKF2lTjdeBhtwflKrQSg2Js8BsSQlbyL0xNQeN/AgTAx/HdnfCOzB+NsqgkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjOl9GWJFWU7FSemkI2aX+Jo6XswHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuGia0/1BZLbBlbwB1/o1850Ns7VVSK4rXW Ed303Ws5o+Bb7tfulVArSI7kSBAsL/4dPQ4D3+j//MewY/xruzdCjrAhXhSG10u8 izd1SqZpTzXcF3DMiQWAn1RZ6C39oztt5UgdtQJ4cA3sqlLQ+m9bhGV9SLHWNxJN exIDBG9seOOn7eR5rR5hPPrZhJTVCp8w/tX80OR5YQAB2+ieEK4EC5lenz2ReHmL qDzunv5Jrh1UTVLUajl6hpQGr7xLUtkxEplS375kDq7bHXFKnedPfcd0vPOMGg20 WSiGtlHj7xI0esTb8nIEbktH7k0JuoKygAD9oSzJ1Kj8LR5KlMk= -----END CERTIFICATE-----Generated at Wed May 13 06:48:19 2026 by rpki-client