$ rpki-client -vvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: mLIx4AUl2QntuWcSXLxg3qN1T89LYNOtNRKkr68CALQ= Subject key identifier: 2F:8C:41:6E:F9:6C:22:3A:01:FC:3A:D6:CD:0B:E3:55:E6:24:AB:92 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 370761E2C8283C0DAADF41338FDF919CF56824B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:30:46 +0000 Manifest this update: Tue 12 May 2026 02:25:46 +0000 Manifest next update: Wed 13 May 2026 06:28:46 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) 3: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: aqoZ30eRE9hNf1PwPgk2sFfkkB2+JRiDisRtCjNftJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:07:61:e2:c8:28:3c:0d:aa:df:41:33:8f:df:91:9c:f5:68:24:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: May 12 02:25:46 2026 GMT Not After : May 13 06:28:46 2026 GMT Subject: CN=2F8C416EF96C223A01FC3AD6CD0BE355E624AB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:0c:68:37:5b:89:dd:c4:f9:6c:2c:e4:ff: 91:18:25:20:59:38:53:ac:a8:4f:1d:5a:6e:5d:36: c7:15:ab:71:23:be:2c:6a:c6:d0:df:3c:42:fa:07: 8a:5c:0c:83:b7:ec:31:df:94:50:54:b3:c2:50:79: a0:5d:da:3f:07:2f:5f:d5:c6:a3:0b:db:ce:75:9f: 12:72:5f:49:86:79:5f:a7:39:b3:68:b1:2a:a8:d1: 4c:cc:b4:00:be:ec:35:60:d7:bd:1f:97:ea:32:23: 5a:97:fc:53:44:d7:82:3a:ce:63:34:6f:d3:02:df: 91:fa:98:43:a0:e7:fd:68:3c:30:b1:73:c4:6e:54: 89:70:cb:74:79:62:79:57:51:7f:9c:2a:71:92:59: e2:2c:69:25:73:c7:f6:99:93:3f:44:66:ce:b8:c5: 0a:92:0d:2a:bc:35:fe:a5:58:b9:50:ff:d6:69:6a: 78:0c:13:02:f1:72:c1:80:4a:56:70:b0:7e:c8:05: d6:11:e7:b9:db:23:e8:79:5d:4b:5c:51:95:52:26: fa:8d:d1:23:2f:bd:e7:66:99:d2:24:3e:f8:d9:37: a9:42:26:2f:3b:70:62:43:fb:dc:dc:c2:51:e2:01: 84:ef:3b:c2:92:f3:ad:44:f8:86:dd:ba:8e:51:12: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8C:41:6E:F9:6C:22:3A:01:FC:3A:D6:CD:0B:E3:55:E6:24:AB:92 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:16:6b:96:b0:02:6b:37:7e:46:07:99:c7:87:e9:64:ad:74: ad:68:23:55:26:1e:da:3e:66:a4:1d:2c:06:73:6e:1e:f1:34: e9:1e:77:9a:63:a1:3b:a9:b9:2d:83:05:dc:58:9e:79:d7:c6: a8:a8:d5:4a:fb:c8:2d:18:cb:b4:73:d1:eb:b2:fc:4d:09:59: 23:64:7a:69:a2:ed:8a:fc:ae:c5:67:9c:5e:86:c9:20:33:1d: 61:b9:34:2c:80:8e:7c:bb:99:48:8c:63:c6:fd:db:ac:c8:b1: 8b:bb:43:1e:75:b7:cd:40:5b:87:6b:3c:0c:c0:26:51:3f:2c: db:18:76:a9:82:79:42:24:b3:00:1f:30:1b:10:83:d7:0f:9d: ab:56:1d:ac:b1:69:af:43:4d:a7:84:03:65:d3:33:2a:95:ab: 97:f1:cb:f3:4f:3e:5c:b0:bd:d4:f3:9d:cf:e9:9a:7c:cc:d0: 59:b8:ef:77:4d:1a:6f:71:fd:92:7c:09:94:a0:9c:37:e8:6a: bb:b4:68:25:ea:7d:bc:d6:47:2e:5b:10:68:77:f1:bb:0a:7e: f0:f7:ea:ec:43:ef:f4:b5:58:b5:47:08:38:22:32:57:16:84: 52:63:c5:69:a9:27:8b:5e:77:48:51:83:da:8d:e8:af:9b:df: 74:f7:ed:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwdh4sgoPA2q30Ezj9+RnPVoJLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA1MTIwMjI1NDZaFw0yNjA1MTMwNjI4NDZaMDMxMTAvBgNV BAMTKDJGOEM0MTZFRjk2QzIyM0EwMUZDM0FENkNEMEJFMzU1RTYyNEFCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7gxoN1uJ3cT5bCzk/5EYJSBZ OFOsqE8dWm5dNscVq3EjvixqxtDfPEL6B4pcDIO37DHflFBUs8JQeaBd2j8HL1/V xqML2851nxJyX0mGeV+nObNosSqo0UzMtAC+7DVg170fl+oyI1qX/FNE14I6zmM0 b9MC35H6mEOg5/1oPDCxc8RuVIlwy3R5YnlXUX+cKnGSWeIsaSVzx/aZkz9EZs64 xQqSDSq8Nf6lWLlQ/9ZpangMEwLxcsGASlZwsH7IBdYR57nbI+h5XUtcUZVSJvqN 0SMvvedmmdIkPvjZN6lCJi87cGJD+9zcwlHiAYTvO8KS861E+Ibduo5REnPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4xBbvlsIjoB/DrWzQvjVeYkq5IwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYWa5awAms3fkYHmceH6WStdK1oI1UmHto+ ZqQdLAZzbh7xNOked5pjoTupuS2DBdxYnnnXxqio1Ur7yC0Yy7Rz0euy/E0JWSNk emmi7Yr8rsVnnF6GySAzHWG5NCyAjny7mUiMY8b926zIsYu7Qx51t81AW4drPAzA JlE/LNsYdqmCeUIkswAfMBsQg9cPnatWHayxaa9DTaeEA2XTMyqVq5fxy/NPPlyw vdTznc/pmnzM0Fm473dNGm9x/ZJ8CZSgnDfoaru0aCXqfbzWRy5bEGh38bsKfvD3 6uxD7/S1WLVHCDgiMlcWhFJjxWmpJ4ted0hRg9qN6K+b33T37a8= -----END CERTIFICATE-----Generated at Tue May 12 22:19:34 2026 by rpki-client