$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft File: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft (raw, json) Hash identifier: kUEhQy8d+6L+F3CubIXUFWa4+3tlBPUBV4uRz2AATTg= Subject key identifier: 13:77:C7:58:26:82:50:CF:14:5B:E7:D1:DF:E4:09:D6:53:E5:7D:27 Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 Certificate issuer: /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Certificate serial: 293C217414687AF0C1F82945BAA61FA640376B97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:42 +0000 Manifest this update: Tue 12 May 2026 19:30:42 +0000 Manifest next update: Wed 13 May 2026 22:30:42 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: qQsnDUNPeHXu+DNiw4SOcpK8StEWum36MYHLhy1M0Kc=) 2: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl (hash: +1CBo0ZaAaHQo8Tbufoxr/phP+9Od7C3F5aorlTx2dE=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: kPZOXT2GwEKlfeP/fQyv701xiJsSoJM2RbBmmUbPZZ8=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: gtZNev9cMMORIviikpj/urAy+yvYIWDnCmncjDmI/0s=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: dfrPktjrSxat3OJSIEiclXrWQZl7b22xPg7tyk7/iXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3c:21:74:14:68:7a:f0:c1:f8:29:45:ba:a6:1f:a6:40:37:6b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Validity Not Before: May 12 19:30:42 2026 GMT Not After : May 13 22:30:42 2026 GMT Subject: CN=1377C758268250CF145BE7D1DFE409D653E57D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:3d:b2:b7:0f:e6:81:28:83:f9:89:09:38: 78:0a:76:d2:a9:1f:5d:0b:8e:e9:35:d4:5b:59:14: 7a:b9:68:e0:05:d0:b1:dc:1d:6f:e6:25:24:09:be: 83:70:97:47:17:c6:87:71:e1:fd:b4:dc:84:41:9c: 55:d1:9f:47:75:d2:a6:8b:54:19:ae:c9:65:08:9a: cb:30:cb:ad:a3:e4:b1:9e:cf:31:34:ef:bb:b5:01: e1:bb:09:1a:eb:e5:e5:47:c1:f4:4f:21:9a:4a:4c: 09:f4:6f:6d:5f:b4:a5:44:6c:ea:8a:86:89:b0:c0: 60:24:e0:70:c3:9f:61:38:74:59:07:3c:c2:d8:c8: cf:b6:83:3a:ff:17:af:aa:e7:93:1b:38:c2:88:8c: 34:de:ac:13:d4:3f:4b:fc:a6:ce:11:ce:73:ab:9c: 59:76:c3:e3:9b:51:ea:ca:b5:0d:e9:b0:7b:fe:ba: e1:74:a1:0e:78:f0:49:5e:f9:a2:42:c0:fc:b5:a9: 33:03:3a:c2:91:05:f9:1b:49:14:c3:f9:4e:79:a8: f1:25:38:12:d3:ac:14:d7:a7:5e:6d:40:88:cd:e4: 37:c5:34:47:97:6f:f5:a6:94:5e:0f:04:07:7f:34: 56:f3:3d:5d:e8:9c:7a:bf:e1:57:8d:90:21:55:dd: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:C7:58:26:82:50:CF:14:5B:E7:D1:DF:E4:09:D6:53:E5:7D:27 X509v3 Authority Key Identifier: keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:37:ed:eb:3a:87:ed:ea:6f:d8:bf:21:fa:8e:c6:ba:58: ac:0f:bb:9a:60:13:50:6b:c4:3d:21:08:84:ab:b6:c6:89:a2: 34:67:b5:76:5b:82:d6:0d:e2:94:8e:eb:f3:9b:95:ee:db:6f: 82:b7:96:72:8d:a3:39:7f:dd:a3:6d:bf:94:b4:6c:58:b2:81: f5:b1:59:9f:96:4b:32:5f:e7:2a:16:e0:8d:9e:6f:1d:20:93: 56:74:25:5d:9d:90:67:cf:c5:b3:d2:6e:57:8d:e2:a6:4d:e7: b0:24:a8:b9:1b:22:3e:33:ce:83:0e:97:88:7e:fa:79:87:64: da:42:4e:7c:a8:3f:74:11:0d:55:cb:8c:16:48:2b:97:2c:e3: 3a:1a:f4:2a:56:74:85:dd:96:45:92:ab:69:57:15:66:53:b6: 17:3f:37:46:f5:93:73:c6:92:06:77:73:9b:6e:15:e2:95:13: 63:b5:20:a8:1a:a1:7f:08:e4:7e:8b:82:2f:31:ed:e2:a7:e1: 8a:fa:fa:76:26:73:83:82:d0:2a:60:d5:63:d4:76:de:a7:4b: a9:2d:d9:a9:bb:4a:ca:23:da:9f:8f:91:9c:f6:8c:1b:84:ff: 50:48:9a:6e:18:e3:e9:ca:3e:86:cc:9f:8f:b1:22:fe:c1:90: d7:24:eb:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTwhdBRoevDB+ClFuqYfpkA3a5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2 RkI4N0Y1NTAeFw0yNjA1MTIxOTMwNDJaFw0yNjA1MTMyMjMwNDJaMDMxMTAvBgNV BAMTKDEzNzdDNzU4MjY4MjUwQ0YxNDVCRTdEMURGRTQwOUQ2NTNFNTdEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIz2ytw/mgSiD+YkJOHgKdtKp H10Ljuk11FtZFHq5aOAF0LHcHW/mJSQJvoNwl0cXxodx4f203IRBnFXRn0d10qaL VBmuyWUImsswy62j5LGezzE077u1AeG7CRrr5eVHwfRPIZpKTAn0b21ftKVEbOqK homwwGAk4HDDn2E4dFkHPMLYyM+2gzr/F6+q55MbOMKIjDTerBPUP0v8ps4RznOr nFl2w+ObUerKtQ3psHv+uuF0oQ548Ele+aJCwPy1qTMDOsKRBfkbSRTD+U55qPEl OBLTrBTXp15tQIjN5DfFNEeXb/WmlF4PBAd/NFbzPV3onHq/4VeNkCFV3WKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3fHWCaCUM8UW+fR3+QJ1lPlfScwHwYDVR0j BBgwFoAUgCwssaVIZkQ0CeP94S937G+4f1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZlM2RkOTUtMmE4NS00MzllLTg0ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFB NTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2RkI4N0Y1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDJDMkNCMUE1NDg2NjQ0MzQwOUUzRkRFMTJGNzdFQzZGQjg3 RjU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3 RUM2RkI4N0Y1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu1N+3rOoft6m/YvyH6jsa6WKwPu5pgE1Br xD0hCISrtsaJojRntXZbgtYN4pSO6/Oble7bb4K3lnKNozl/3aNtv5S0bFiygfWx WZ+WSzJf5yoW4I2ebx0gk1Z0JV2dkGfPxbPSbleN4qZN57AkqLkbIj4zzoMOl4h+ +nmHZNpCTnyoP3QRDVXLjBZIK5cs4zoa9CpWdIXdlkWSq2lXFWZTthc/N0b1k3PG kgZ3c5tuFeKVE2O1IKgaoX8I5H6Lgi8x7eKn4Yr6+nYmc4OC0Cpg1WPUdt6nS6kt 2am7Ssoj2p+PkZz2jBuE/1BImm4Y4+nKPobMn4+xIv7BkNck67A= -----END CERTIFICATE-----Generated at Wed May 13 00:43:54 2026 by rpki-client