$ rpki-client -vvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json) Hash identifier: w94jqyw4kWXSJ/ty1O0iFbHKcugtWLMEoQa85TuFT4E= Subject key identifier: F1:C2:8E:B0:95:03:05:52:5E:56:DF:4D:33:27:7E:69:8C:EF:49:9C Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Certificate serial: 3386E923365A869E6795C616BE3C508F3C7ED8C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:44:07 +0000 Manifest this update: Tue 12 May 2026 07:39:07 +0000 Manifest next update: Wed 13 May 2026 09:22:07 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=) 2: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: dP4zwoumGj+3EZUbtHHp03EXfwvrmI6gFYPCrLD/A6s=) 3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:86:e9:23:36:5a:86:9e:67:95:c6:16:be:3c:50:8f:3c:7e:d8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F Validity Not Before: May 12 07:39:07 2026 GMT Not After : May 13 09:22:07 2026 GMT Subject: CN=F1C28EB0950305525E56DF4D33277E698CEF499C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:28:7f:68:b8:26:eb:1c:04:27:75:fb:15: 19:bf:3f:d4:f4:8b:19:05:1e:a5:2e:52:d4:92:2e: f7:df:8f:b9:fd:e0:3e:ee:5a:7c:98:38:b1:ab:16: 5d:7d:29:88:e5:27:fc:2b:b5:c3:c3:b4:25:7e:9c: 0e:0f:04:6e:40:38:c3:f0:3c:db:56:b0:de:69:48: 54:d5:ea:0a:c2:c4:c7:55:c7:9b:9a:65:b5:c4:f1: a0:6e:ed:a6:9f:ba:e1:66:2c:0e:b6:1d:8e:d8:f2: 75:b7:16:75:ca:94:4b:59:5b:10:75:7a:50:8d:01: b3:5d:ad:d1:23:df:7c:c2:48:3d:37:37:6f:c1:7a: f0:54:2f:85:b6:70:e7:d6:87:a1:99:b8:0b:f5:c6: a7:8c:6b:32:2e:9e:aa:b7:f6:e7:bb:30:fb:a8:ff: d1:e8:38:05:04:71:f4:86:f2:27:f3:9a:9f:9f:d7: 23:d1:91:4d:5e:04:33:74:57:eb:04:dc:b3:9e:42: 8d:3e:1e:5e:a4:97:e7:97:86:ed:bf:fa:8a:1c:8b: 1c:f6:67:0e:4f:7d:69:ae:3f:08:5a:bd:43:7e:5d: 4b:34:1c:e0:1e:42:32:8c:ff:8f:99:16:02:6d:91: 83:6a:ed:67:d7:68:77:e1:1d:08:8a:71:94:8c:65: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C2:8E:B0:95:03:05:52:5E:56:DF:4D:33:27:7E:69:8C:EF:49:9C X509v3 Authority Key Identifier: keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:ed:9d:47:88:94:19:1c:bc:b3:85:68:cf:dc:a8:e6:af: 32:7b:1e:81:ce:c0:2b:cd:ce:0b:18:45:c4:78:b2:39:d3:f0: c6:18:06:a3:3a:19:7c:78:bf:bf:22:82:b7:67:db:e5:64:9e: da:bd:4c:3e:d4:a5:c4:55:32:aa:12:fe:c0:d7:dd:03:11:2a: 6f:2e:f5:94:63:5d:74:01:dc:32:cb:53:f3:ce:13:bc:96:1e: 3f:34:d3:bd:22:99:33:4e:93:a1:3a:31:a7:17:3b:b2:28:2f: e2:33:9b:f0:ce:1b:a3:96:e2:8a:9d:51:03:d5:df:1d:98:07: 5c:a4:31:9e:57:3f:10:0e:00:8f:cc:a8:3e:eb:b5:c4:82:55: bd:33:d1:cc:d5:f0:d3:90:46:08:03:2c:8c:fd:9e:7d:46:5a: 89:74:e2:91:46:58:8f:0f:cb:b7:c2:d1:57:a7:f7:f4:6a:a7: 48:5e:70:de:89:0a:95:02:2a:3e:0d:3c:29:f0:fa:06:ae:27: 60:76:8b:87:99:e0:07:54:f7:2b:f7:2c:5e:e9:b6:70:21:73: 13:56:d2:4a:a9:1a:17:b7:3d:07:47:7c:68:7a:4b:6f:c8:ab: 57:6d:26:8f:6d:b9:1f:44:9f:3d:48:86:fd:f2:35:8e:bb:62: fb:ed:26:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4bpIzZahp5nlcYWvjxQjzx+2MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3RDBG RDkzREI2RjAeFw0yNjA1MTIwNzM5MDdaFw0yNjA1MTMwOTIyMDdaMDMxMTAvBgNV BAMTKEYxQzI4RUIwOTUwMzA1NTI1RTU2REY0RDMzMjc3RTY5OENFRjQ5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOih/aLgm6xwEJ3X7FRm/P9T0 ixkFHqUuUtSSLvffj7n94D7uWnyYOLGrFl19KYjlJ/wrtcPDtCV+nA4PBG5AOMPw PNtWsN5pSFTV6grCxMdVx5uaZbXE8aBu7aafuuFmLA62HY7Y8nW3FnXKlEtZWxB1 elCNAbNdrdEj33zCSD03N2/BevBUL4W2cOfWh6GZuAv1xqeMazIunqq39ue7MPuo /9HoOAUEcfSG8ifzmp+f1yPRkU1eBDN0V+sE3LOeQo0+Hl6kl+eXhu2/+oocixz2 Zw5PfWmuPwhavUN+XUs0HOAeQjKM/4+ZFgJtkYNq7WfXaHfhHQiKcZSMZbYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8cKOsJUDBVJeVt9NMyd+aYzvSZwwHwYDVR0j BBgwFoAUkU0wY1TSiA4tgACoQJan0P2T228wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVlMjA4OGEtYzlmZi00ZDg0LWJlNGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1 NEQyODgwRTJEODAwMEE4NDA5NkE3RDBGRDkzREI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTREMzA2MzU0RDI4ODBFMkQ4MDAwQTg0MDk2QTdEMEZEOTNE QjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvOTE0RDMwNjM1NEQyODgwRTJEODAwMEE4NDA5NkE3 RDBGRDkzREI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0p7Z1HiJQZHLyzhWjP3KjmrzJ7HoHOwCvN zgsYRcR4sjnT8MYYBqM6GXx4v78igrdn2+Vkntq9TD7UpcRVMqoS/sDX3QMRKm8u 9ZRjXXQB3DLLU/POE7yWHj80070imTNOk6E6MacXO7IoL+Izm/DOG6OW4oqdUQPV 3x2YB1ykMZ5XPxAOAI/MqD7rtcSCVb0z0czV8NOQRggDLIz9nn1GWol04pFGWI8P y7fC0Ven9/Rqp0hecN6JCpUCKj4NPCnw+gauJ2B2i4eZ4AdU9yv3LF7ptnAhcxNW 0kqpGhe3PQdHfGh6S2/Iq1dtJo9tuR9Enz1Ihv3yNY67YvvtJpA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client