$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft File: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft (raw, json) Hash identifier: zIHIpPGW1Ma18nmwbpPM8IgIoZ8qVr4Jm7PotbvpujU= Subject key identifier: 17:74:85:2B:91:36:3D:9A:EC:5C:F4:20:30:D4:2F:D8:01:AA:B5:4B Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Certificate serial: 3C68B0362E4F90B9BE1D71C21C741BB0953A4DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:45:15 +0000 Manifest this update: Tue 12 May 2026 15:40:15 +0000 Manifest next update: Wed 13 May 2026 18:03:15 +0000 Files and hashes: 1: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl (hash: Vxl9Qsxk9idFGvhabtEW1cuzA76vfGFlqwGdkEZcr8M=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:68:b0:36:2e:4f:90:b9:be:1d:71:c2:1c:74:1b:b0:95:3a:4d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Validity Not Before: May 12 15:40:15 2026 GMT Not After : May 13 18:03:15 2026 GMT Subject: CN=1774852B91363D9AEC5CF42030D42FD801AAB54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:15:92:81:53:8a:92:ad:e1:f0:11:c3:98: 90:db:8a:78:46:44:42:b4:6c:89:f2:97:cb:e5:73: ec:3b:ca:b7:85:a0:e9:ee:12:e3:b6:5e:d1:11:13: 27:82:fc:16:14:4c:f5:a3:e0:bd:63:60:cc:70:14: 2f:50:e2:c4:55:9b:7c:37:c6:d8:57:ea:19:98:b1: ff:bf:a5:44:e3:3f:d3:55:73:f6:a4:f7:ca:63:54: 05:4d:1d:77:48:63:10:a9:d4:0d:33:f6:60:cd:9f: 6e:37:2b:2a:41:b8:0a:98:74:77:9b:73:c7:d6:8e: 58:39:17:70:21:f0:af:70:4c:35:1f:19:de:80:e1: ef:bc:22:e0:65:b8:8c:04:1d:58:cb:db:16:d5:d3: ed:b7:8b:e2:d5:41:f1:e6:fb:2a:45:84:5a:3d:de: fa:d9:ea:61:bb:d3:0f:95:f8:ec:a3:54:3c:ee:1b: 60:2e:48:ef:f2:82:03:66:4e:7f:04:09:24:ab:24: 7c:03:6b:54:cf:79:2b:b9:ce:be:1e:2b:87:a1:8d: 0e:8b:47:a8:a9:20:79:e4:c7:34:38:44:42:52:38: b7:fb:7e:30:18:e2:de:7b:55:11:89:72:a3:36:77: 08:a7:39:e5:50:09:54:45:b0:50:81:3a:4e:cd:d5: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:85:2B:91:36:3D:9A:EC:5C:F4:20:30:D4:2F:D8:01:AA:B5:4B X509v3 Authority Key Identifier: keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cb:ee:20:7f:30:1c:48:0a:8d:95:77:05:db:98:ec:1d:8a: df:82:b2:47:67:46:c3:81:04:57:c3:c9:26:95:e8:40:62:06: ed:d2:25:c2:73:43:77:16:3f:ef:0e:5d:15:26:aa:d9:86:b7: 7a:d3:5c:19:4f:d2:9f:54:cf:87:37:80:74:fe:54:b2:d3:c4: 70:ae:97:81:f6:4f:6f:f9:74:74:0b:e8:74:71:40:4f:41:d0: be:76:50:c2:fc:46:cb:da:ef:b6:4a:5f:ad:92:75:66:ff:e5: ab:c2:c6:5f:4a:1d:54:33:78:ae:75:00:58:6a:ce:ec:db:01: e2:19:5b:5a:dc:30:91:9a:95:30:52:e7:88:a2:90:c0:17:09: 79:27:73:4d:7f:9d:87:78:82:0e:9f:f7:b6:ed:7c:a1:53:40: b5:0a:30:1d:3e:98:27:03:bf:ef:f6:9c:75:63:e0:83:3c:05: 6f:66:60:6a:7b:d9:e4:ad:4b:82:7a:08:cd:de:49:04:e4:f0: c8:c4:93:5c:39:31:fa:04:15:fc:5f:a9:a9:6d:9f:8a:7d:2e: 00:f3:1e:c7:60:d5:84:f2:89:ee:69:45:15:8c:ea:1e:14:20: 2d:39:fa:fa:24:3a:5d:da:a3:0d:13:c0:47:8d:b3:f8:12:20: a4:5a:52:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGiwNi5PkLm+HXHCHHQbsJU6TdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2 MTQxOEFGOTAeFw0yNjA1MTIxNTQwMTVaFw0yNjA1MTMxODAzMTVaMDMxMTAvBgNV BAMTKDE3NzQ4NTJCOTEzNjNEOUFFQzVDRjQyMDMwRDQyRkQ4MDFBQUI1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oRWSgVOKkq3h8BHDmJDbinhG REK0bInyl8vlc+w7yreFoOnuEuO2XtEREyeC/BYUTPWj4L1jYMxwFC9Q4sRVm3w3 xthX6hmYsf+/pUTjP9NVc/ak98pjVAVNHXdIYxCp1A0z9mDNn243KypBuAqYdHeb c8fWjlg5F3Ah8K9wTDUfGd6A4e+8IuBluIwEHVjL2xbV0+23i+LVQfHm+ypFhFo9 3vrZ6mG70w+V+OyjVDzuG2AuSO/yggNmTn8ECSSrJHwDa1TPeSu5zr4eK4ehjQ6L R6ipIHnkxzQ4REJSOLf7fjAY4t57VRGJcqM2dwinOeVQCVRFsFCBOk7N1U27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3SFK5E2PZrsXPQgMNQv2AGqtUswHwYDVR0j BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4 QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJB NTY2MTQxOEFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbL7iB/MBxICo2VdwXbmOwdit+CskdnRsOB BFfDySaV6EBiBu3SJcJzQ3cWP+8OXRUmqtmGt3rTXBlP0p9Uz4c3gHT+VLLTxHCu l4H2T2/5dHQL6HRxQE9B0L52UML8Rsva77ZKX62SdWb/5avCxl9KHVQzeK51AFhq zuzbAeIZW1rcMJGalTBS54iikMAXCXknc01/nYd4gg6f97btfKFTQLUKMB0+mCcD v+/2nHVj4IM8BW9mYGp72eStS4J6CM3eSQTk8MjEk1w5MfoEFfxfqaltn4p9LgDz Hsdg1YTyie5pRRWM6h4UIC05+vokOl3aow0TwEeNs/gSIKRaUkU= -----END CERTIFICATE-----Generated at Wed May 13 04:54:16 2026 by rpki-client