$ rpki-client -vvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: pePT1xiiIPbdo4ygRSnEbgCfOv6XwgmsrlDDgWVAjyU= Subject key identifier: 6D:5F:F8:06:CF:F0:BD:9B:50:14:0F:75:59:6E:6B:43:B7:6B:C5:14 Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 7FE15F1EF059EDBA8A3CAE8ED47BE1D659A0CCFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:22 +0000 Manifest this update: Tue 12 May 2026 18:08:22 +0000 Manifest next update: Wed 13 May 2026 21:26:22 +0000 Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) 2: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: 3C3i/zVbNL2GrkVoWtsn7pBOh03WFme8PnD7qrohoFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e1:5f:1e:f0:59:ed:ba:8a:3c:ae:8e:d4:7b:e1:d6:59:a0:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: May 12 18:08:22 2026 GMT Not After : May 13 21:26:22 2026 GMT Subject: CN=6D5FF806CFF0BD9B50140F75596E6B43B76BC514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:50:39:b0:d3:fa:a6:d9:4c:c6:e3:9a:59: 3d:9f:8a:06:e2:65:15:19:da:64:0f:7d:f3:df:9c: 10:1e:f5:54:4f:97:01:c9:06:cc:29:18:fe:79:78: 16:22:fc:8a:00:e5:69:98:e7:41:4b:e3:21:96:25: ea:b4:66:1e:32:b5:7b:77:43:e7:6e:5f:07:0c:3a: ee:1d:21:66:2a:41:88:f2:5a:c3:1a:2d:d3:bc:72: 16:2d:b2:cc:22:92:07:13:31:16:04:a6:cb:c8:93: 64:b7:be:71:25:0c:fd:f2:5c:42:5f:7c:80:e6:d9: 30:87:10:f6:d1:45:af:ae:f1:42:8c:aa:a0:60:58: 61:26:a9:f6:86:bb:a8:92:84:0e:b7:19:a1:a2:59: 69:23:0d:23:99:48:94:e3:8b:37:b4:c4:52:cc:1e: 1b:54:3c:f6:13:3a:a7:ad:61:5b:77:ea:97:c2:63: 87:c0:50:38:e6:90:07:7c:d9:90:f4:a2:e9:eb:75: 61:6c:3d:02:af:e1:34:15:07:de:96:95:2c:bb:0f: 5f:0f:fa:00:c5:a8:cd:14:20:19:dd:06:49:4c:2e: 56:6c:1a:9f:a0:fe:a5:c4:09:fa:4a:bb:0b:4f:6c: 32:32:ad:57:17:d4:0a:fe:2c:b9:2c:12:0d:fd:60: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5F:F8:06:CF:F0:BD:9B:50:14:0F:75:59:6E:6B:43:B7:6B:C5:14 X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:51:57:59:bc:63:41:94:81:e9:e6:56:cd:7e:13:ab:ab: ff:4f:8e:2b:37:35:5d:a7:ef:a3:b4:ba:2a:a4:90:c9:ac:3d: 3d:dd:90:91:f0:00:e9:0b:75:fb:cb:81:db:a9:55:f4:f4:68: d0:48:0c:c5:0a:61:31:ff:14:1a:76:05:53:be:19:98:5a:fe: 31:fc:ff:58:5b:36:05:4a:23:ed:d0:25:5a:01:ff:00:17:19: 3b:96:59:ae:ef:81:29:57:06:a0:c7:1f:29:87:0c:f8:1d:8b: 0b:86:ec:0e:6a:50:c4:3b:03:9b:c6:a5:8a:57:cd:d9:ac:35: 4a:8e:9e:5e:3d:86:cb:2d:da:65:77:0a:2e:ce:85:e4:51:6e: c0:3b:df:38:57:dc:a1:0c:25:b0:07:f9:97:6e:60:5d:a9:b4: a3:ff:48:5f:27:7c:71:da:60:db:60:83:d5:36:be:cd:87:0a: 94:2b:e5:77:20:2f:04:b7:aa:5d:08:eb:43:1c:0e:5b:c9:d2: 86:a8:53:ab:4d:c2:7a:9b:02:e1:ac:3d:88:02:c7:a2:cc:b2: 99:b2:ad:15:5e:27:66:e2:21:2d:d4:c0:f4:f5:9e:31:08:e8: ed:0c:7d:81:98:df:73:f9:2f:a3:64:75:73:d9:4a:13:01:ec: 99:de:85:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+FfHvBZ7bqKPK6O1Hvh1lmgzPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA1MTIxODA4MjJaFw0yNjA1MTMyMTI2MjJaMDMxMTAvBgNV BAMTKDZENUZGODA2Q0ZGMEJEOUI1MDE0MEY3NTU5NkU2QjQzQjc2QkM1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQVA5sNP6ptlMxuOaWT2figbi ZRUZ2mQPffPfnBAe9VRPlwHJBswpGP55eBYi/IoA5WmY50FL4yGWJeq0Zh4ytXt3 Q+duXwcMOu4dIWYqQYjyWsMaLdO8chYtsswikgcTMRYEpsvIk2S3vnElDP3yXEJf fIDm2TCHEPbRRa+u8UKMqqBgWGEmqfaGu6iShA63GaGiWWkjDSOZSJTjize0xFLM HhtUPPYTOqetYVt36pfCY4fAUDjmkAd82ZD0ounrdWFsPQKv4TQVB96WlSy7D18P +gDFqM0UIBndBklMLlZsGp+g/qXECfpKuwtPbDIyrVcX1Ar+LLksEg39YHk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbV/4Bs/wvZtQFA91WW5rQ7drxRQwHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt0UVdZvGNBlIHp5lbNfhOrq/9Pjis3NV2n 76O0uiqkkMmsPT3dkJHwAOkLdfvLgdupVfT0aNBIDMUKYTH/FBp2BVO+GZha/jH8 /1hbNgVKI+3QJVoB/wAXGTuWWa7vgSlXBqDHHymHDPgdiwuG7A5qUMQ7A5vGpYpX zdmsNUqOnl49hsst2mV3Ci7OheRRbsA73zhX3KEMJbAH+ZduYF2ptKP/SF8nfHHa YNtgg9U2vs2HCpQr5XcgLwS3ql0I60McDlvJ0oaoU6tNwnqbAuGsPYgCx6LMspmy rRVeJ2biIS3UwPT1njEI6O0MfYGY33P5L6NkdXPZShMB7JnehU8= -----END CERTIFICATE-----Generated at Wed May 13 06:56:04 2026 by rpki-client