$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: nRnZCliV5P29XchevkCR8XApstAHZ15rcOfXVVL4b1w= Subject key identifier: A9:37:57:22:EB:13:8E:AB:94:7F:9C:0D:3E:B1:61:3B:0F:4A:C1:C8 Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 2A3A263D5D8B49E51D95ACC6F76F712F15ABD7C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:19:00 +0000 Manifest this update: Tue 12 May 2026 04:14:00 +0000 Manifest next update: Wed 13 May 2026 06:55:00 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) 2: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: 7l5mx90lIOl2B4FBbUaqmnpXU1qn1Age7nUFt1mb6Mk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3a:26:3d:5d:8b:49:e5:1d:95:ac:c6:f7:6f:71:2f:15:ab:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: May 12 04:14:00 2026 GMT Not After : May 13 06:55:00 2026 GMT Subject: CN=A9375722EB138EAB947F9C0D3EB1613B0F4AC1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:48:79:b5:02:59:c5:bd:d7:57:4e:aa:8e: d7:be:c1:2d:de:2d:e2:2f:63:f9:a6:23:d9:5c:ee: 02:d5:98:cb:47:97:64:6a:26:c9:f1:0a:63:9b:c9: 94:ce:41:58:51:24:05:25:7b:cb:13:bf:b4:f3:ab: 34:b1:04:11:18:a4:fa:32:79:c8:17:c0:05:51:ca: 50:0b:6c:f9:f6:dd:7d:39:10:79:f7:86:4a:4e:56: d7:d4:ef:f4:81:88:e2:c2:d1:8f:dd:0f:c3:da:e1: 63:2b:96:e9:4d:71:25:55:27:f4:95:ae:18:d5:77: 7c:bd:89:74:51:06:70:d6:30:18:80:06:a6:80:a4: 7e:af:05:b3:88:ef:d1:80:4a:ba:8c:5c:cf:54:4f: bf:96:3e:a0:79:14:b0:cf:15:fb:d2:1f:f8:ca:f4: 6b:08:66:d0:ff:9a:66:8d:0e:e1:9c:bb:ac:cf:2a: 52:bc:55:e6:fc:bd:c9:fb:45:97:88:0f:6f:e5:23: 1e:47:e9:43:15:c4:10:1a:73:8e:f6:54:d2:75:bf: 5f:2c:f3:d0:49:5e:ef:24:8f:08:4c:be:eb:7d:cc: 7f:38:29:f5:d3:35:02:a8:8c:80:c2:d1:92:b4:f0: 75:62:0c:c3:cd:26:ce:38:3c:58:00:1b:54:84:fd: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:57:22:EB:13:8E:AB:94:7F:9C:0D:3E:B1:61:3B:0F:4A:C1:C8 X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cc:28:e0:03:64:94:92:41:a2:36:ff:fe:a4:aa:d7:aa:ef: 47:cb:21:9d:78:0f:ed:c8:40:e5:33:c4:8b:dd:80:fe:33:47: fc:39:4f:7e:00:29:f9:e3:28:8a:d3:7f:50:47:85:bd:f4:d7: 56:33:4f:e7:c6:24:20:34:6f:40:33:6f:7e:f4:ac:d5:12:3b: 2d:da:b0:a9:b4:9b:0d:ef:c1:65:c5:57:d8:74:18:b6:4c:8c: e5:4f:9e:f7:df:e1:b6:4f:9d:8e:d7:55:df:44:81:2f:04:49: 67:cb:aa:54:b2:03:29:54:9a:9a:16:cf:a4:88:d3:03:42:58: 7f:09:1e:60:5b:f1:f2:9b:ad:b8:05:9a:ea:35:e9:c2:67:6d: fe:67:ca:f5:f1:64:09:88:84:2e:cb:78:9e:7b:46:c1:4d:9a: bf:19:0a:ee:f6:1c:9f:54:19:46:4a:9a:d5:43:a2:e3:97:6a: 69:5d:41:ac:32:9f:7c:5e:d9:1b:84:41:5f:88:77:3a:b2:ab: b0:4e:a9:3e:cf:57:2c:da:22:6c:74:02:26:49:dd:15:6e:3a: 49:2d:05:4c:03:39:e5:e7:7f:ac:43:81:81:e3:62:b3:eb:00: cf:aa:3b:5f:34:c1:51:d9:d5:eb:9a:8f:25:4c:d6:d3:fc:90: eb:56:a2:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjomPV2LSeUdlazG929xLxWr18AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjA1MTIwNDE0MDBaFw0yNjA1MTMwNjU1MDBaMDMxMTAvBgNV BAMTKEE5Mzc1NzIyRUIxMzhFQUI5NDdGOUMwRDNFQjE2MTNCMEY0QUMxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9kh5tQJZxb3XV06qjte+wS3e LeIvY/mmI9lc7gLVmMtHl2RqJsnxCmObyZTOQVhRJAUle8sTv7TzqzSxBBEYpPoy ecgXwAVRylALbPn23X05EHn3hkpOVtfU7/SBiOLC0Y/dD8Pa4WMrlulNcSVVJ/SV rhjVd3y9iXRRBnDWMBiABqaApH6vBbOI79GASrqMXM9UT7+WPqB5FLDPFfvSH/jK 9GsIZtD/mmaNDuGcu6zPKlK8Veb8vcn7RZeID2/lIx5H6UMVxBAac472VNJ1v18s 89BJXu8kjwhMvut9zH84KfXTNQKojIDC0ZK08HViDMPNJs44PFgAG1SE/cVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTdXIusTjquUf5wNPrFhOw9KwcgwHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTMKOADZJSSQaI2//6kqteq70fLIZ14D+3I QOUzxIvdgP4zR/w5T34AKfnjKIrTf1BHhb3011YzT+fGJCA0b0Azb370rNUSOy3a sKm0mw3vwWXFV9h0GLZMjOVPnvff4bZPnY7XVd9EgS8ESWfLqlSyAylUmpoWz6SI 0wNCWH8JHmBb8fKbrbgFmuo16cJnbf5nyvXxZAmIhC7LeJ57RsFNmr8ZCu72HJ9U GUZKmtVDouOXamldQawyn3xe2RuEQV+Idzqyq7BOqT7PVyzaImx0AiZJ3RVuOkkt BUwDOeXnf6xDgYHjYrPrAM+qO180wVHZ1euajyVM1tP8kOtWomw= -----END CERTIFICATE-----Generated at Tue May 12 22:39:05 2026 by rpki-client