$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: 7CvAHVIxZY82MNX9jExT7ho+wjtFH8xe7VRN9/Ip2jY= Subject key identifier: 7E:46:51:D3:8D:EA:92:1B:03:70:40:7B:DA:52:54:48:E9:6D:F4:21 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 3A1488F6966829F0A717DF3B3005DF1CF0FEC0D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:29 +0000 Manifest this update: Tue 12 May 2026 19:25:29 +0000 Manifest next update: Wed 13 May 2026 21:15:29 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) 2: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: 0yCVcnpHfuo5lBpzTzkz7K2L0n1fon/FV02+V7LYFoY=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:14:88:f6:96:68:29:f0:a7:17:df:3b:30:05:df:1c:f0:fe:c0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: May 12 19:25:29 2026 GMT Not After : May 13 21:15:29 2026 GMT Subject: CN=7E4651D38DEA921B0370407BDA525448E96DF421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:70:fe:86:8e:3e:e7:5e:20:5b:e1:fb:80: 18:03:41:f5:df:e9:53:dc:b8:d6:33:8c:a3:8c:a2: fd:37:58:fc:7e:1c:3b:24:06:48:3a:16:55:5b:2d: 58:0a:5c:2d:4e:61:3f:62:78:f6:cf:7d:09:9a:27: 1e:38:2a:91:8c:71:6c:f9:a0:a8:f3:95:48:5a:7f: c7:33:0c:bf:34:ff:6e:8c:e9:b8:ce:92:c1:58:39: d8:10:fb:b5:e2:61:ab:95:80:25:44:0a:9a:39:9d: 0b:db:96:bc:c8:fd:ae:6c:8d:86:cb:8d:a1:01:14: 06:18:3b:41:2c:39:ea:9e:94:a9:80:bc:26:17:6f: 76:63:21:e0:05:12:68:b5:e0:58:d2:85:f3:9f:50: 5b:b0:e0:ff:ff:fd:fc:82:2b:ff:83:fd:be:5e:bb: 46:1b:11:05:e3:f7:00:11:7a:8b:f6:f4:e3:68:2e: 67:ed:d3:b6:b4:6f:ce:2e:3a:d6:2c:56:6e:d8:42: dd:53:13:71:be:7a:15:10:ad:70:ab:7c:91:9c:cc: d4:09:eb:43:b7:0c:65:9d:0b:77:56:04:bc:67:e9: 65:97:b1:16:35:ba:56:5b:00:a0:69:d0:3c:87:04: 7e:52:5f:19:29:7d:87:91:05:13:64:38:60:8f:b8: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:46:51:D3:8D:EA:92:1B:03:70:40:7B:DA:52:54:48:E9:6D:F4:21 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e6:9d:5c:ed:49:97:6e:bb:0b:ec:f8:f3:93:a9:01:6a:bb: 48:12:30:61:df:bc:07:1b:e4:7b:42:8d:8a:e6:24:31:aa:d9: 5c:a6:dc:66:46:f1:13:9a:9d:97:55:ba:1b:a5:77:9a:58:c6: 6b:1f:34:ce:39:cf:de:fa:0b:1b:af:3a:be:65:d5:c9:8d:86: 4e:1b:ab:a4:a3:d4:d5:e4:cf:61:37:18:d8:77:55:eb:d5:e1: fc:1e:74:33:ee:eb:eb:49:ab:01:9d:7d:d7:8f:12:91:2c:8b: 21:53:f7:2e:92:90:e7:6e:a8:74:66:27:74:12:f2:53:74:4c: 19:52:e8:2b:31:ed:fd:c3:43:4f:88:fd:1d:d2:71:bd:eb:0d: ae:52:51:17:0b:89:27:3d:71:3d:96:29:18:c6:ac:ff:2f:d9: 45:42:d0:3e:02:e2:66:25:aa:5f:c7:76:d7:32:87:6a:5d:b2: 40:06:ff:da:24:da:dc:c1:1c:c1:c3:56:02:97:f7:89:02:46: 62:a4:a6:52:5b:f7:03:6b:02:67:c0:61:dd:71:9f:7a:cf:c3: 14:f3:15:70:a2:49:c5:bb:ff:09:3e:09:f0:7c:0e:01:27:2c: 1c:de:e1:ee:f8:ef:94:55:32:01:5d:2e:dd:9c:b2:60:94:45: 2e:d7:09:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhSI9pZoKfCnF987MAXfHPD+wNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA1MTIxOTI1MjlaFw0yNjA1MTMyMTE1MjlaMDMxMTAvBgNV BAMTKDdFNDY1MUQzOERFQTkyMUIwMzcwNDA3QkRBNTI1NDQ4RTk2REY0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVHD+ho4+514gW+H7gBgDQfXf 6VPcuNYzjKOMov03WPx+HDskBkg6FlVbLVgKXC1OYT9iePbPfQmaJx44KpGMcWz5 oKjzlUhaf8czDL80/26M6bjOksFYOdgQ+7XiYauVgCVECpo5nQvblrzI/a5sjYbL jaEBFAYYO0EsOeqelKmAvCYXb3ZjIeAFEmi14FjShfOfUFuw4P///fyCK/+D/b5e u0YbEQXj9wAReov29ONoLmft07a0b84uOtYsVm7YQt1TE3G+ehUQrXCrfJGczNQJ 60O3DGWdC3dWBLxn6WWXsRY1ulZbAKBp0DyHBH5SXxkpfYeRBRNkOGCPuAN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkZR043qkhsDcEB72lJUSOlt9CEwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXmnVztSZduuwvs+POTqQFqu0gSMGHfvAcb 5HtCjYrmJDGq2Vym3GZG8ROanZdVuhuld5pYxmsfNM45z976CxuvOr5l1cmNhk4b q6Sj1NXkz2E3GNh3VevV4fwedDPu6+tJqwGdfdePEpEsiyFT9y6SkOduqHRmJ3QS 8lN0TBlS6Csx7f3DQ0+I/R3Scb3rDa5SURcLiSc9cT2WKRjGrP8v2UVC0D4C4mYl ql/Hdtcyh2pdskAG/9ok2tzBHMHDVgKX94kCRmKkplJb9wNrAmfAYd1xn3rPwxTz FXCiScW7/wk+CfB8DgEnLBze4e7475RVMgFdLt2csmCURS7XCXw= -----END CERTIFICATE-----Generated at Wed May 13 02:20:20 2026 by rpki-client