$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: ZxPa59cmtHIvAmjrWqTbgS1fF6DyTl06gbM6Rr/74XA= Subject key identifier: 63:71:90:F6:FC:87:88:1E:D3:48:F7:39:4B:6D:EC:CA:F4:03:DA:41 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 7B363F8D4F6C8D3614676B1EC41C0340D429C8DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:56:28 +0000 Manifest this update: Tue 12 May 2026 19:51:28 +0000 Manifest next update: Wed 13 May 2026 22:06:28 +0000 Files and hashes: 1: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 2: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 3: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) 5: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: 3SqOmj/92k0FEoAmpzdrBlRFhxjKyOTgTdLuN6xYfU0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:36:3f:8d:4f:6c:8d:36:14:67:6b:1e:c4:1c:03:40:d4:29:c8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: May 12 19:51:28 2026 GMT Not After : May 13 22:06:28 2026 GMT Subject: CN=637190F6FC87881ED348F7394B6DECCAF403DA41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:b9:bc:0f:b5:bf:fa:e4:ec:24:cb:94:40: 40:36:14:ab:79:9b:c2:be:17:48:d9:6c:62:4b:0b: 21:7d:e8:40:3f:aa:d1:56:08:2a:93:54:1f:4f:fe: 1b:e4:07:f4:85:c1:22:01:e3:71:8a:a1:18:ca:be: f7:df:a2:e7:3f:b2:3f:2b:c2:2d:9e:f5:48:00:34: 88:d2:9d:f9:ee:5a:46:3b:c7:d4:2c:13:70:0a:e4: cc:b4:aa:5c:10:25:b2:38:55:cc:9d:2b:49:03:ee: 4e:49:39:d9:9d:47:a0:0d:32:fa:17:ff:52:87:97: 28:31:f6:09:4d:09:c1:da:cd:be:28:3d:7e:54:d4: 9d:ae:a0:24:d6:21:3e:f2:67:ed:13:8c:a7:12:5a: cb:3c:5f:63:ac:ee:91:b3:3a:f0:f3:7d:6d:28:e4: d6:0a:71:a0:2a:0e:88:2e:39:18:ed:1d:37:4a:37: 89:ab:d3:01:f8:e8:27:4d:37:b1:d1:1c:24:92:2e: e4:8b:3a:9e:af:e2:e7:e4:39:8c:0e:45:72:2e:0f: 1a:1d:3c:a5:a3:76:1e:7c:2b:6b:e9:4a:e4:4b:fd: a7:c0:17:a0:bf:97:f4:e7:85:f9:e3:15:07:2c:b2: d9:20:3d:48:7e:91:2e:ae:5f:b1:ca:77:76:0e:6f: a2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:71:90:F6:FC:87:88:1E:D3:48:F7:39:4B:6D:EC:CA:F4:03:DA:41 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d9:c6:46:13:d8:c8:d5:49:64:2e:1e:8f:58:0e:ab:25:d0: f5:03:c5:28:6d:1b:b6:a5:76:4f:49:e3:f2:17:58:47:2b:bb: c5:c5:83:f9:b3:52:20:a6:33:6e:69:37:d6:db:55:51:c4:2b: 43:c1:4a:6d:f5:52:02:e2:74:17:bb:ab:82:1a:52:f1:b9:e9: aa:7e:44:ee:14:22:15:2c:de:10:11:7b:0d:5f:72:71:7f:a3: fd:fc:c9:07:a2:cf:03:f0:c1:32:6b:b8:73:b1:54:80:20:69: 34:ce:ec:d5:ee:dc:9a:12:c9:fa:41:8f:13:cb:72:4e:ba:20: 3f:59:90:4e:a6:9f:69:b1:0b:59:c8:eb:93:98:5f:ed:07:22: 3b:55:38:51:7d:9c:d5:5b:29:4a:d9:64:02:b1:89:e2:ea:ca: 78:3f:ec:ee:50:55:25:5e:86:f2:f7:9f:84:9f:d3:ad:65:60: 30:3b:f8:4d:e0:d6:3e:26:b2:da:30:66:ab:0b:ed:91:05:d6: 21:a1:99:56:39:19:82:12:2b:c3:28:c8:2c:4a:af:ab:46:71: 60:ac:40:a5:55:94:1d:30:27:0a:3a:5a:6f:ab:14:d1:82:4b: cf:6d:db:68:58:24:1a:9a:59:f5:13:ab:9a:f8:3c:2d:ef:96: f8:7e:7a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezY/jU9sjTYUZ2sexBwDQNQpyN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA1MTIxOTUxMjhaFw0yNjA1MTMyMjA2MjhaMDMxMTAvBgNV BAMTKDYzNzE5MEY2RkM4Nzg4MUVEMzQ4RjczOTRCNkRFQ0NBRjQwM0RBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYLm8D7W/+uTsJMuUQEA2FKt5 m8K+F0jZbGJLCyF96EA/qtFWCCqTVB9P/hvkB/SFwSIB43GKoRjKvvffouc/sj8r wi2e9UgANIjSnfnuWkY7x9QsE3AK5My0qlwQJbI4VcydK0kD7k5JOdmdR6ANMvoX /1KHlygx9glNCcHazb4oPX5U1J2uoCTWIT7yZ+0TjKcSWss8X2Os7pGzOvDzfW0o 5NYKcaAqDoguORjtHTdKN4mr0wH46CdNN7HRHCSSLuSLOp6v4ufkOYwORXIuDxod PKWjdh58K2vpSuRL/afAF6C/l/TnhfnjFQcsstkgPUh+kS6uX7HKd3YOb6IxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY3GQ9vyHiB7TSPc5S23syvQD2kEwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHZxkYT2MjVSWQuHo9YDqsl0PUDxShtG7al dk9J4/IXWEcru8XFg/mzUiCmM25pN9bbVVHEK0PBSm31UgLidBe7q4IaUvG56ap+ RO4UIhUs3hARew1fcnF/o/38yQeizwPwwTJruHOxVIAgaTTO7NXu3JoSyfpBjxPL ck66ID9ZkE6mn2mxC1nI65OYX+0HIjtVOFF9nNVbKUrZZAKxieLqyng/7O5QVSVe hvL3n4Sf061lYDA7+E3g1j4mstowZqsL7ZEF1iGhmVY5GYISK8MoyCxKr6tGcWCs QKVVlB0wJwo6Wm+rFNGCS89t22hYJBqaWfUTq5r4PC3vlvh+ess= -----END CERTIFICATE-----Generated at Tue May 12 22:46:39 2026 by rpki-client