$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: +XVdnHwQjkcOx3o1o1lqCDLu7I34ULPreLmZwRXliao= Subject key identifier: CA:D5:16:3F:D5:89:CE:38:CA:3E:88:94:62:C4:3E:97:33:0A:D3:51 Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 0EF4E9B698521E1936EC12532AE78BE59C0D844B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:41 +0000 Manifest this update: Tue 12 May 2026 16:05:41 +0000 Manifest next update: Wed 13 May 2026 20:04:41 +0000 Files and hashes: 1: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) 2: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) 3: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: WYS0+ffrSFkiXYp4Gwby0jDPE20EwP/Po4VSLdW9n8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f4:e9:b6:98:52:1e:19:36:ec:12:53:2a:e7:8b:e5:9c:0d:84:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: May 12 16:05:41 2026 GMT Not After : May 13 20:04:41 2026 GMT Subject: CN=CAD5163FD589CE38CA3E889462C43E97330AD351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:f4:70:34:fc:50:06:76:92:43:b4:41:30: 91:ba:ac:bb:32:95:11:01:cf:1e:bd:f0:c2:97:f6: f1:8b:fa:6b:26:80:8a:9d:df:16:81:fa:83:eb:54: 32:ac:ea:fd:0a:85:85:fb:66:eb:f8:f2:91:d8:b4: 50:6d:4f:71:c3:59:bd:89:d2:85:7b:d3:ed:59:ba: 87:ec:4d:be:d7:3e:86:be:c9:87:82:d3:01:d4:eb: 81:53:9f:3c:1a:70:3a:69:6e:66:21:cd:02:23:85: 6b:0a:e3:3a:82:2b:b6:a0:b4:41:c3:85:8d:93:0e: 01:56:94:29:88:f8:77:3b:3c:54:88:15:eb:b5:e4: cf:25:88:1e:82:39:7a:b1:bb:50:72:d9:3e:e0:d6: c7:c6:14:c5:f9:1e:29:7e:3f:34:ac:7f:10:79:75: 2f:d2:c5:da:4d:5c:20:0d:0b:c1:b1:8a:54:22:f9: f0:3e:11:7c:6f:a3:31:75:b5:8f:5b:99:8f:a6:c4: 27:77:73:db:d0:51:81:bb:79:81:b2:c0:af:c8:df: 98:f1:4b:f2:a9:57:6c:b6:e1:63:d2:ce:7a:3b:dd: d8:f0:23:d2:72:4a:63:d0:8f:4b:ac:3b:b6:0d:16: b5:87:39:21:2b:5c:e5:6b:c6:f6:26:24:62:cf:aa: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D5:16:3F:D5:89:CE:38:CA:3E:88:94:62:C4:3E:97:33:0A:D3:51 X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:60:cc:67:21:57:b8:e7:ac:b5:a1:4a:85:2f:70:da:8b:10: cd:89:9c:75:1c:35:94:64:0c:dd:c7:83:8f:e3:1b:ab:14:79: 92:1a:77:c8:98:3f:71:39:84:5e:47:48:00:d1:55:5e:7a:c7: 26:67:12:de:a5:3e:21:fb:b2:9c:fe:72:2f:9e:02:19:40:34: e7:e1:60:f0:2a:52:b3:6c:ae:cc:05:1c:0e:32:df:f9:0a:b2: ff:98:67:51:ee:c3:09:9a:a7:d8:4b:4a:56:03:34:77:1b:23: 4b:13:86:6f:f1:89:70:76:b1:81:1e:d0:1d:91:9f:cb:ac:51: 4c:b8:fd:51:5a:00:5a:f0:8d:10:2f:d9:c6:5c:fd:d1:14:50: 6f:1f:2f:a7:c1:f1:61:ec:0c:20:00:94:23:bb:01:52:85:f9: a3:7b:c6:07:46:68:9c:2f:bf:5b:d7:9d:51:07:ec:98:c1:95: 75:84:a5:1f:b9:c3:df:d9:63:8d:af:4a:cd:3d:0f:5f:0e:5a: e3:45:c4:34:ff:d7:dd:ed:d2:f1:5e:af:49:be:b5:55:19:dd: 47:e8:38:bc:b6:ee:96:8d:1b:af:26:6d:9c:d7:48:43:d8:97: 97:b5:ff:62:e5:99:10:49:01:b3:4c:4d:db:0c:e5:58:d3:62: a4:dd:26:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvTptphSHhk27BJTKueL5ZwNhEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA1MTIxNjA1NDFaFw0yNjA1MTMyMDA0NDFaMDMxMTAvBgNV BAMTKENBRDUxNjNGRDU4OUNFMzhDQTNFODg5NDYyQzQzRTk3MzMwQUQzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0vRwNPxQBnaSQ7RBMJG6rLsy lREBzx698MKX9vGL+msmgIqd3xaB+oPrVDKs6v0KhYX7Zuv48pHYtFBtT3HDWb2J 0oV70+1ZuofsTb7XPoa+yYeC0wHU64FTnzwacDppbmYhzQIjhWsK4zqCK7agtEHD hY2TDgFWlCmI+Hc7PFSIFeu15M8liB6COXqxu1By2T7g1sfGFMX5Hil+PzSsfxB5 dS/SxdpNXCANC8GxilQi+fA+EXxvozF1tY9bmY+mxCd3c9vQUYG7eYGywK/I35jx S/KpV2y24WPSzno73djwI9JySmPQj0usO7YNFrWHOSErXOVrxvYmJGLPqmpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUytUWP9WJzjjKPoiUYsQ+lzMK01EwHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhgzGchV7jnrLWhSoUvcNqLEM2JnHUcNZRk DN3Hg4/jG6sUeZIad8iYP3E5hF5HSADRVV56xyZnEt6lPiH7spz+ci+eAhlANOfh YPAqUrNsrswFHA4y3/kKsv+YZ1Huwwmap9hLSlYDNHcbI0sThm/xiXB2sYEe0B2R n8usUUy4/VFaAFrwjRAv2cZc/dEUUG8fL6fB8WHsDCAAlCO7AVKF+aN7xgdGaJwv v1vXnVEH7JjBlXWEpR+5w9/ZY42vSs09D18OWuNFxDT/193t0vFer0m+tVUZ3Ufo OLy27paNG68mbZzXSEPYl5e1/2LlmRBJAbNMTdsM5VjTYqTdJkM= -----END CERTIFICATE-----Generated at Tue May 12 23:20:35 2026 by rpki-client