$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: 28S14UR2oA8UrmwCabXPdR8LHKvX5K4wGnpPsEN6lZ4= Subject key identifier: D2:50:DE:42:B7:19:2E:49:A3:D1:20:C2:38:0D:F7:7A:5F:A2:4D:02 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 3B0B46A2BE6F219D506D56C98CF026F4A386E869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:40:14 +0000 Manifest this update: Tue 12 May 2026 15:35:14 +0000 Manifest next update: Wed 13 May 2026 16:30:14 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 2: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 3: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) 4: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: idUtBVpcoWYCUBENPwTY1DSR9fJ5K2kVLxOdapOetB8=) 5: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0b:46:a2:be:6f:21:9d:50:6d:56:c9:8c:f0:26:f4:a3:86:e8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: May 12 15:35:14 2026 GMT Not After : May 13 16:30:14 2026 GMT Subject: CN=D250DE42B7192E49A3D120C2380DF77A5FA24D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:b4:aa:c1:6d:a8:44:ea:9c:2b:a2:1b:56: 80:b3:7f:98:58:17:cf:0c:e0:e6:26:21:41:73:88: 90:a3:2e:ae:fc:39:e5:09:5c:b7:b0:9f:97:f9:9f: fd:18:a9:63:3a:10:ed:84:06:1c:a3:18:83:bf:16: 6d:e6:97:e5:c1:af:03:23:c9:3a:66:d7:fa:27:86: 64:b8:da:cc:37:27:21:c4:86:c8:47:b6:aa:02:70: ef:7a:36:45:de:4e:ed:e5:67:09:bb:ef:8d:7c:3d: 25:4f:8c:74:a7:00:79:81:8a:8e:bc:33:64:c2:04: f9:0b:0a:b5:08:98:3f:0f:38:b6:41:3b:a5:01:ea: b3:08:ee:8f:9a:eb:88:28:9d:2d:0d:47:de:b8:a5: 41:40:4b:49:1f:0e:2f:0c:f4:28:62:77:c6:ab:7e: 53:4e:3c:85:bc:a0:9f:e6:ca:8e:2a:39:47:6b:c6: 89:a5:49:a5:cb:fa:05:90:73:37:d7:a4:3e:99:e0: 36:68:e1:ce:c3:22:57:2f:aa:1d:b3:a2:b9:c8:7d: ae:7b:4c:2c:8b:d5:d6:e0:34:e6:23:e9:36:22:3f: 3b:78:68:af:cd:be:a0:b2:cd:1d:88:12:f2:a1:68: 2e:3e:ce:9f:a2:ff:8e:08:e9:c8:63:62:b2:5b:6a: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:DE:42:B7:19:2E:49:A3:D1:20:C2:38:0D:F7:7A:5F:A2:4D:02 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:82:b9:bc:59:92:62:f4:d6:8e:1a:3a:02:a1:b6:12:6e:2e: bf:22:2e:70:93:4e:6c:27:7c:5b:c7:08:12:a6:1b:26:97:b8: e3:fd:d9:17:69:eb:f2:ba:6a:b7:60:a4:1f:d0:d6:27:e5:f7: 92:73:83:52:24:a1:ff:af:81:52:47:2e:a0:06:6a:c6:2c:e5: 6f:b0:33:ed:56:a9:4b:a8:6e:59:81:3e:97:dd:0d:c0:9f:53: 07:34:6a:6f:22:9d:fd:72:a7:8e:eb:3d:1e:61:89:bf:8d:a3: a9:af:52:ac:5b:f9:95:9a:98:52:88:d9:25:67:46:cd:ca:d7: c7:97:99:3d:70:8c:44:38:77:be:ad:62:fc:df:e4:4d:bc:0b: 15:d9:9f:77:96:bd:83:54:8e:d6:41:6e:c0:96:3c:2d:d2:8a: 50:5e:8d:df:44:07:b4:e3:29:b3:04:65:1d:c7:ef:2f:73:f2: 71:cd:91:a9:00:76:72:4a:65:ba:bc:dc:04:aa:21:d1:d0:78: c6:59:4a:a4:2e:d1:bc:db:b1:ee:c9:93:e0:00:e1:76:57:f2: fb:7c:b6:48:cc:69:1c:8b:c3:40:67:f7:5b:4c:ad:69:b0:29: 5e:b8:ce:1f:a9:36:8d:08:a0:03:7a:5a:8a:5b:21:6d:9e:b3: 48:1e:ad:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwtGor5vIZ1QbVbJjPAm9KOG6GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA1MTIxNTM1MTRaFw0yNjA1MTMxNjMwMTRaMDMxMTAvBgNV BAMTKEQyNTBERTQyQjcxOTJFNDlBM0QxMjBDMjM4MERGNzdBNUZBMjREMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWLSqwW2oROqcK6IbVoCzf5hY F88M4OYmIUFziJCjLq78OeUJXLewn5f5n/0YqWM6EO2EBhyjGIO/Fm3ml+XBrwMj yTpm1/onhmS42sw3JyHEhshHtqoCcO96NkXeTu3lZwm77418PSVPjHSnAHmBio68 M2TCBPkLCrUImD8POLZBO6UB6rMI7o+a64gonS0NR964pUFAS0kfDi8M9Chid8ar flNOPIW8oJ/myo4qOUdrxomlSaXL+gWQczfXpD6Z4DZo4c7DIlcvqh2zornIfa57 TCyL1dbgNOYj6TYiPzt4aK/NvqCyzR2IEvKhaC4+zp+i/44I6chjYrJbaqL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lDeQrcZLkmj0SDCOA33el+iTQIwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOCubxZkmL01o4aOgKhthJuLr8iLnCTTmwn fFvHCBKmGyaXuOP92Rdp6/K6ardgpB/Q1ifl95Jzg1Ikof+vgVJHLqAGasYs5W+w M+1WqUuoblmBPpfdDcCfUwc0am8inf1yp47rPR5hib+No6mvUqxb+ZWamFKI2SVn Rs3K18eXmT1wjEQ4d76tYvzf5E28CxXZn3eWvYNUjtZBbsCWPC3SilBejd9EB7Tj KbMEZR3H7y9z8nHNkakAdnJKZbq83ASqIdHQeMZZSqQu0bzbse7Jk+AA4XZX8vt8 tkjMaRyLw0Bn91tMrWmwKV64zh+pNo0IoAN6WopbIW2es0gerV4= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client