$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json) Hash identifier: DK/GR3YbP/6t8E093pBcKQnwOso4XGzYhg6C9zB06Ng= Subject key identifier: B8:F0:7E:1A:58:93:D0:55:5B:7E:24:C6:1F:69:50:FE:E1:54:EB:2E Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Certificate serial: 0675A0BF16033D0ED6C527D456360A2F0CBE6ACC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:44:38 +0000 Manifest this update: Tue 12 May 2026 04:39:38 +0000 Manifest next update: Wed 13 May 2026 07:13:38 +0000 Files and hashes: 1: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: kma2IscuNkflJMQEu8nUERHOzsb/uWb4Tf7BN8NydL0=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:75:a0:bf:16:03:3d:0e:d6:c5:27:d4:56:36:0a:2f:0c:be:6a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Validity Not Before: May 12 04:39:38 2026 GMT Not After : May 13 07:13:38 2026 GMT Subject: CN=B8F07E1A5893D0555B7E24C61F6950FEE154EB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:bc:9e:09:96:ab:76:88:fd:9f:90:55:15: e7:8e:98:c2:0f:8b:ce:86:ac:bc:d5:c2:6e:86:7a: 36:66:ad:9e:e1:89:39:64:de:d5:98:11:b3:cf:27: 3f:fb:e6:03:4b:22:c3:c9:92:7d:4c:a2:8e:a8:24: b8:96:69:e2:33:67:70:3f:37:ea:62:6d:2d:de:4f: 19:2e:73:be:7a:68:2b:4c:be:b0:59:b4:c9:04:68: 4e:72:a3:9c:0d:32:c4:da:16:73:80:ed:86:34:dc: e6:68:dc:28:ea:ee:d7:d4:0f:ff:ea:24:b2:42:5c: 3a:5e:ef:00:ec:ee:75:2d:fd:c2:f8:9b:6c:ec:ae: 19:51:b7:7b:dc:49:2d:ed:08:bc:4b:f1:86:46:4e: de:6a:a8:37:ce:1b:ed:54:c7:28:9e:59:b1:ec:36: 19:76:4b:1f:e7:40:0a:b7:12:a6:51:fc:2f:88:94: 97:76:02:3a:a9:68:31:dd:cb:28:9e:d5:3b:5a:05: 29:b2:fb:78:4d:ab:c0:c0:6c:cd:e3:3e:a1:e1:80: a1:47:ac:ad:fc:e3:b5:b6:c5:cc:1d:0a:29:42:fc: b2:e1:81:d6:0b:6c:b7:29:f2:77:a7:e8:f5:cd:4f: 27:67:71:59:9a:cb:f3:2e:d1:41:6a:ac:b1:f8:86: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F0:7E:1A:58:93:D0:55:5B:7E:24:C6:1F:69:50:FE:E1:54:EB:2E X509v3 Authority Key Identifier: keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:82:74:b7:7a:79:6d:29:59:83:2c:75:f9:cd:9e:28:58:7d: 3e:17:fa:d4:eb:d5:27:b5:85:e1:c3:78:ce:3b:2e:58:16:79: d4:12:70:e8:38:32:de:13:41:97:e6:58:3d:bc:70:82:9a:72: 96:47:64:9e:fd:00:6d:5b:ff:06:28:09:53:25:31:c4:f0:53: 00:7f:e4:1b:c7:3a:bf:76:55:6f:1a:2c:64:f0:aa:45:f2:09: 0f:06:2a:c4:62:f0:d4:5a:aa:8a:05:82:59:da:51:c7:a5:ca: a4:57:91:d0:ef:c7:ec:c7:36:a8:a3:0b:12:e9:09:66:81:a2: 61:66:15:b6:31:d0:38:d5:17:10:0b:a8:2b:4d:87:e0:58:fc: a4:1d:b9:a6:71:60:11:7c:fe:ec:ba:a6:a3:15:bf:4f:03:99: a0:bb:b9:d5:3f:3a:3c:59:e6:d1:33:6e:83:58:5a:96:06:65: 3c:d1:ef:1c:6f:2e:b0:31:33:2c:59:fb:be:9c:0c:e9:ba:b3: ad:c2:15:34:bb:db:57:4d:55:b8:ce:2f:a7:a1:69:c7:79:15: fd:78:71:4d:45:f3:51:f5:69:5e:c9:1f:85:2a:1e:e5:f3:0a: a5:76:3c:ca:0b:c2:58:96:a1:1c:94:9f:af:3f:7d:e1:65:15: f7:fd:d7:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnWgvxYDPQ7WxSfUVjYKLwy+aswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2 MzJDMjRGODAeFw0yNjA1MTIwNDM5MzhaFw0yNjA1MTMwNzEzMzhaMDMxMTAvBgNV BAMTKEI4RjA3RTFBNTg5M0QwNTU1QjdFMjRDNjFGNjk1MEZFRTE1NEVCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwryeCZardoj9n5BVFeeOmMIP i86GrLzVwm6GejZmrZ7hiTlk3tWYEbPPJz/75gNLIsPJkn1Moo6oJLiWaeIzZ3A/ N+pibS3eTxkuc756aCtMvrBZtMkEaE5yo5wNMsTaFnOA7YY03OZo3Cjq7tfUD//q JLJCXDpe7wDs7nUt/cL4m2zsrhlRt3vcSS3tCLxL8YZGTt5qqDfOG+1UxyieWbHs Nhl2Sx/nQAq3EqZR/C+IlJd2AjqpaDHdyyie1TtaBSmy+3hNq8DAbM3jPqHhgKFH rK3847W2xcwdCilC/LLhgdYLbLcp8nen6PXNTydncVmay/Mu0UFqrLH4hoAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPB+GliT0FVbfiTGH2lQ/uFU6y4wHwYDVR0j BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1 QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3 RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuCdLd6eW0pWYMsdfnNnihYfT4X+tTr1Se1 heHDeM47LlgWedQScOg4Mt4TQZfmWD28cIKacpZHZJ79AG1b/wYoCVMlMcTwUwB/ 5BvHOr92VW8aLGTwqkXyCQ8GKsRi8NRaqooFglnaUcelyqRXkdDvx+zHNqijCxLp CWaBomFmFbYx0DjVFxALqCtNh+BY/KQduaZxYBF8/uy6pqMVv08DmaC7udU/OjxZ 5tEzboNYWpYGZTzR7xxvLrAxMyxZ+76cDOm6s63CFTS721dNVbjOL6ehacd5Ff14 cU1F81H1aV7JH4UqHuXzCqV2PMoLwliWoRyUn68/feFlFff910A= -----END CERTIFICATE-----Generated at Wed May 13 00:21:38 2026 by rpki-client