$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: H+0q05+ZFuCu2stDjx3c6VVQL9r9Fo9aK25mYmm+nDM= Subject key identifier: FC:C7:0D:E5:AA:23:DB:F8:82:FA:5F:74:1E:E5:5E:40:A3:92:2D:9D Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 705037468F48508F24F5E290444F30DBA02AA8FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: 0E Signing time: Mon 11 May 2026 23:55:59 +0000 Manifest this update: Mon 11 May 2026 23:50:59 +0000 Manifest next update: Wed 13 May 2026 03:47:59 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: HMvuZA5GEygwEQ/A4E++UiWHcNENuOx/DwxIrFLrduA=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: 8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 6IFvIlwM6aIx7tnOnE1+rdakVYbeL0dKrUmRNu3aOIc=) 4: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: uB4h7UkDPVM7ArD57fXQ1lDCWFGr4AZ9Iejle51yegU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 03:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:50:37:46:8f:48:50:8f:24:f5:e2:90:44:4f:30:db:a0:2a:a8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: May 11 23:50:59 2026 GMT Not After : May 13 03:47:59 2026 GMT Subject: CN=FCC70DE5AA23DBF882FA5F741EE55E40A3922D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:e1:76:d1:13:fa:4e:e1:e4:17:17:74:62: 0e:63:13:4f:c8:78:19:19:76:7c:c8:8c:7f:93:0f: 6b:e6:ab:b4:4e:c9:02:ff:31:5b:0b:40:87:fb:23: bb:3a:a5:8e:a5:1c:de:3f:76:81:8c:e2:1e:a1:46: 54:1d:c7:83:d3:c5:05:db:81:45:0b:38:94:48:31: c7:aa:c0:9a:17:3c:85:98:e0:ff:03:c3:9f:67:0a: c3:f2:8c:2f:de:ea:4f:53:7a:e8:cf:67:4a:b3:5c: ab:38:e3:1b:22:e8:2c:3b:09:dc:64:a1:8f:04:59: 0f:7a:11:5c:cf:1e:1c:e1:73:7f:28:dd:2f:c6:6b: 23:f8:b8:d9:57:34:4f:25:0c:9b:f1:d5:48:36:82: b7:d7:d3:1d:b1:4b:17:85:06:a5:ba:9c:4e:46:32: 83:be:bb:38:ec:8f:f6:1f:5e:44:78:83:f7:68:a0: 0c:b3:07:36:d1:20:72:fa:7b:cf:87:d0:8d:a2:79: 9e:76:42:df:ea:3f:e4:d6:0e:41:81:49:3d:f8:f6: 82:c0:ed:71:19:03:e1:e5:58:33:67:54:49:86:c5: 2b:9d:1f:11:36:69:1e:2c:f0:6e:77:ac:1f:fe:c9: 86:f1:79:83:7e:ac:2e:45:48:bc:3d:3a:a6:a5:36: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:0D:E5:AA:23:DB:F8:82:FA:5F:74:1E:E5:5E:40:A3:92:2D:9D X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cb:05:82:24:1c:66:c2:f7:c4:5a:c3:eb:6e:2a:e1:b3:aa: 7e:c8:7c:1e:fc:4d:7e:fb:3c:0f:ec:cd:db:0a:47:58:1e:fd: 3b:0a:b0:5b:6e:bd:eb:2d:1c:07:0c:9e:76:9a:6d:04:36:04: 79:59:c8:d4:4d:7b:78:d7:0e:98:cf:bd:dd:d5:48:99:f2:9f: 93:0c:47:81:84:20:30:03:d0:36:6e:5b:8c:1e:a4:a5:e0:1a: 4f:16:ae:28:48:ec:90:de:0d:a3:1c:d4:e8:8b:35:25:0c:f3: b5:e7:0f:ce:76:f0:fe:46:be:2d:97:62:00:db:36:7b:39:b2: 94:c9:d2:df:d5:5f:e3:11:3c:95:36:3a:9b:2c:93:16:06:68: eb:8d:7f:b5:aa:d2:9a:1a:4d:4d:74:64:e8:af:f7:d4:c9:38: d8:49:c0:9d:06:57:c4:d7:54:bc:ea:ab:f9:43:44:df:4b:db: 2b:83:0e:d8:e7:ae:a4:59:39:8d:f1:45:43:55:69:f6:f1:1c: 9c:bb:91:76:6d:52:a9:ac:a9:8d:98:4b:e9:ce:5f:ae:9b:26: ca:51:ae:a7:30:b4:79:14:9a:be:03:05:dc:c8:ca:05:2e:21: c3:88:33:c1:8d:09:a9:e8:80:e2:2b:a2:96:68:8f:7a:ac:0f: 32:64:dc:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFA3Ro9IUI8k9eKQRE8w26AqqPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA1MTEyMzUwNTlaFw0yNjA1MTMwMzQ3NTlaMDMxMTAvBgNV BAMTKEZDQzcwREU1QUEyM0RCRjg4MkZBNUY3NDFFRTU1RTQwQTM5MjJEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHeF20RP6TuHkFxd0Yg5jE0/I eBkZdnzIjH+TD2vmq7ROyQL/MVsLQIf7I7s6pY6lHN4/doGM4h6hRlQdx4PTxQXb gUULOJRIMceqwJoXPIWY4P8Dw59nCsPyjC/e6k9TeujPZ0qzXKs44xsi6Cw7Cdxk oY8EWQ96EVzPHhzhc38o3S/GayP4uNlXNE8lDJvx1Ug2grfX0x2xSxeFBqW6nE5G MoO+uzjsj/YfXkR4g/dooAyzBzbRIHL6e8+H0I2ieZ52Qt/qP+TWDkGBST349oLA 7XEZA+HlWDNnVEmGxSudHxE2aR4s8G53rB/+yYbxeYN+rC5FSLw9OqalNpGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/McN5aoj2/iC+l90HuVeQKOSLZ0wHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHLBYIkHGbC98Raw+tuKuGzqn7IfB78TX77 PA/szdsKR1ge/TsKsFtuvestHAcMnnaabQQ2BHlZyNRNe3jXDpjPvd3VSJnyn5MM R4GEIDAD0DZuW4wepKXgGk8WrihI7JDeDaMc1OiLNSUM87XnD8528P5Gvi2XYgDb Nns5spTJ0t/VX+MRPJU2OpsskxYGaOuNf7Wq0poaTU10ZOiv99TJONhJwJ0GV8TX VLzqq/lDRN9L2yuDDtjnrqRZOY3xRUNVafbxHJy7kXZtUqmsqY2YS+nOX66bJspR rqcwtHkUmr4DBdzIygUuIcOIM8GNCanogOIropZoj3qsDzJk3Hw= -----END CERTIFICATE-----Generated at Tue May 12 22:20:15 2026 by rpki-client