$ rpki-client -vvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: fn5lSRpF3G67VGlgxiNSQv07Vr/N/9v9itXxhJ3zv1g= Subject key identifier: C1:E5:A5:BF:F1:C4:64:44:1D:67:83:F8:53:2D:15:38:2E:7A:B3:DE Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 22DBE27B4CC6BC7061D46E1319EAA622AFC98E16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:07 +0000 Manifest this update: Tue 12 May 2026 17:17:07 +0000 Manifest next update: Wed 13 May 2026 18:36:07 +0000 Files and hashes: 1: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: 6jyoTo/pZPEdz/t84+hvta1nhLVGOfgvin15vCATquo=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 3: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) 4: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:db:e2:7b:4c:c6:bc:70:61:d4:6e:13:19:ea:a6:22:af:c9:8e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: May 12 17:17:07 2026 GMT Not After : May 13 18:36:07 2026 GMT Subject: CN=C1E5A5BFF1C464441D6783F8532D15382E7AB3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:73:cc:b0:1c:4d:77:91:eb:3b:37:75:3a: f4:d6:1b:c0:83:2c:23:a9:95:bc:2a:6f:bc:e3:ce: 92:04:64:74:3c:4f:00:ac:8f:91:ec:48:63:52:f0: 35:06:ec:7f:52:2d:1c:e2:99:c9:ab:15:18:4c:d1: 44:b0:fa:48:49:13:1d:b7:65:45:5e:f2:1d:b0:16: f5:9c:55:1b:88:01:91:90:d0:4f:08:69:3a:d7:a0: ad:03:63:ed:58:78:5f:cf:1e:38:9a:03:51:97:84: e5:36:c2:a8:d8:6d:93:ff:72:10:fe:44:f8:39:20: 06:25:8f:5f:ad:1e:d2:bc:4e:94:13:2b:ef:b9:6c: cd:68:77:c8:34:22:fa:c4:88:b8:56:80:f9:4a:c0: 08:b1:97:55:f0:08:6a:c7:93:c6:d0:08:5c:cd:2e: 03:a7:f6:d0:99:11:46:ac:ee:58:41:71:c9:88:bb: 75:47:78:a3:e8:a8:51:90:10:50:61:34:80:a3:34: e9:1e:f8:f6:89:e5:13:fa:1a:5f:14:3f:36:62:b0: d8:58:ee:7f:69:da:78:0c:69:66:65:3c:cd:10:b3: ed:95:fb:27:e4:6d:04:a7:d7:1f:64:d7:be:d0:7e: 0b:7c:49:49:3b:db:08:67:d4:db:ab:0e:6b:3f:f2: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:A5:BF:F1:C4:64:44:1D:67:83:F8:53:2D:15:38:2E:7A:B3:DE X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1b:6b:67:8d:d4:c0:9d:69:b2:8d:0b:4a:f2:6f:10:6d:1e: 13:5e:29:25:a5:99:ca:df:06:13:33:35:c7:e0:aa:da:37:71: 64:a5:11:58:39:2d:e4:dc:f6:de:47:d3:75:f1:b1:d5:8c:e3: c1:47:6e:6b:36:04:b3:67:38:47:4a:5d:ea:6e:89:54:80:97: 00:30:29:72:1b:e9:ae:8e:c7:a7:e9:1f:ea:bb:14:82:88:ac: 08:52:8c:d5:1e:e1:d9:4d:cf:ee:bd:ea:e2:8b:d2:87:de:2e: eb:2a:42:c0:a1:67:57:aa:75:74:eb:ea:f0:b7:44:21:db:b4: 70:de:a7:6d:75:02:fe:e0:5f:d0:e7:43:33:c2:7d:38:e7:6b: 78:5f:ee:39:5c:00:72:4e:8d:0f:92:ce:57:b7:61:78:96:96: 5d:57:27:1c:9e:14:02:5b:13:8b:ea:0c:33:c9:df:50:89:a9: 6c:91:78:b1:28:38:6b:7f:f9:4e:b5:ff:b8:ca:1e:07:b6:45: f2:79:f2:7d:f0:fa:01:0d:d5:6d:3b:05:8f:1a:f1:b0:a7:1f: ff:46:0c:d7:ad:50:ee:83:cd:80:b6:8c:3a:bb:b3:4c:1b:7a: f4:0c:c4:d7:ac:40:46:02:74:62:b6:a3:5a:f6:ee:cd:96:6e: 13:8e:16:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItvie0zGvHBh1G4TGeqmIq/JjhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA1MTIxNzE3MDdaFw0yNjA1MTMxODM2MDdaMDMxMTAvBgNV BAMTKEMxRTVBNUJGRjFDNDY0NDQxRDY3ODNGODUzMkQxNTM4MkU3QUIzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+nPMsBxNd5HrOzd1OvTWG8CD LCOplbwqb7zjzpIEZHQ8TwCsj5HsSGNS8DUG7H9SLRzimcmrFRhM0USw+khJEx23 ZUVe8h2wFvWcVRuIAZGQ0E8IaTrXoK0DY+1YeF/PHjiaA1GXhOU2wqjYbZP/chD+ RPg5IAYlj1+tHtK8TpQTK++5bM1od8g0IvrEiLhWgPlKwAixl1XwCGrHk8bQCFzN LgOn9tCZEUas7lhBccmIu3VHeKPoqFGQEFBhNICjNOke+PaJ5RP6Gl8UPzZisNhY 7n9p2ngMaWZlPM0Qs+2V+yfkbQSn1x9k177Qfgt8SUk72whn1NurDms/8pklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUweWlv/HEZEQdZ4P4Uy0VOC56s94wHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoba2eN1MCdabKNC0rybxBtHhNeKSWlmcrf BhMzNcfgqto3cWSlEVg5LeTc9t5H03XxsdWM48FHbms2BLNnOEdKXepuiVSAlwAw KXIb6a6Ox6fpH+q7FIKIrAhSjNUe4dlNz+696uKL0ofeLusqQsChZ1eqdXTr6vC3 RCHbtHDep211Av7gX9DnQzPCfTjna3hf7jlcAHJOjQ+Szle3YXiWll1XJxyeFAJb E4vqDDPJ31CJqWyReLEoOGt/+U61/7jKHge2RfJ58n3w+gEN1W07BY8a8bCnH/9G DNetUO6DzYC2jDq7s0wbevQMxNesQEYCdGK2o1r27s2WbhOOFlU= -----END CERTIFICATE-----Generated at Wed May 13 02:49:32 2026 by rpki-client