$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: eFUE3Lcu5oUWAI6ToLGlkz0/+fWELK/piiMIjGNRtwo= Subject key identifier: A5:BF:BE:F7:4C:DC:BD:81:B3:1B:4F:4E:34:83:94:00:E9:D5:1C:B1 Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 049E447921B0796E9C73B26FF6D78A241ECD662A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:01:02 +0000 Manifest this update: Wed 13 May 2026 01:56:02 +0000 Manifest next update: Thu 14 May 2026 02:04:02 +0000 Files and hashes: 1: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: lcGZhcVslN6ayw/rEVV9nLgCID/lHLbWLl2bkVHfsik=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 3: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9e:44:79:21:b0:79:6e:9c:73:b2:6f:f6:d7:8a:24:1e:cd:66:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: May 13 01:56:02 2026 GMT Not After : May 14 02:04:02 2026 GMT Subject: CN=A5BFBEF74CDCBD81B31B4F4E34839400E9D51CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:b9:8e:cd:92:99:5c:df:b3:21:03:55:39: 3e:f2:ab:06:5e:e0:b1:60:e4:da:fe:3a:8a:04:76: e3:9e:60:18:b4:10:a3:60:39:78:42:c8:a4:3c:a0: b6:7a:23:7e:df:77:48:1a:b2:f2:b8:a6:3a:85:60: 51:6c:f7:4a:d0:1e:8b:04:6a:1c:58:42:8c:14:70: c8:e3:c1:10:f4:28:f7:17:59:0c:d0:e3:6d:1d:06: fe:1f:fa:a7:72:ef:b8:2c:7d:a8:3d:5c:78:42:17: ec:93:d6:42:35:12:c6:cf:a7:77:dd:74:9b:5c:8a: 07:e2:4c:49:15:c3:71:59:52:5a:e1:bb:b8:a8:a8: 7f:c0:7f:1b:7b:26:8b:a5:07:16:fd:73:cb:b1:1e: 47:93:ed:88:c1:81:bc:b4:91:c0:41:07:4a:21:d8: 15:c2:df:54:a1:a1:a0:c1:cb:63:59:35:65:86:32: 7c:59:f7:4d:0d:e1:69:3f:65:0b:90:4a:ac:74:c8: 48:02:24:49:4a:cc:89:b8:03:aa:a2:18:8f:f0:29: 13:3b:0d:c1:58:5b:65:f2:2d:a6:7a:48:27:86:a7: 48:53:19:94:b9:56:54:f5:49:80:5d:db:78:9d:a1: 98:f9:1c:ad:5b:5a:e4:f5:5b:aa:a5:a7:9a:6d:81: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:BE:F7:4C:DC:BD:81:B3:1B:4F:4E:34:83:94:00:E9:D5:1C:B1 X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:61:55:4e:b3:f7:9f:14:99:fd:f4:7f:7c:c0:5f:d3:24:59: 78:04:1d:32:ee:92:86:54:91:ef:01:73:bf:a3:cc:37:1a:76: c2:ca:ed:75:a0:9a:18:17:9d:4a:38:96:2b:14:43:30:c4:a2: 5d:ce:7d:61:0d:a8:f1:63:01:9a:7d:b6:00:1a:0b:66:6d:6c: 76:50:cf:66:9d:27:a6:d2:6d:14:21:3b:9a:89:59:2e:33:6f: 4a:69:f4:27:1c:ee:36:6d:2f:68:b9:8d:94:2f:b1:49:5f:24: cc:7d:0d:20:33:6b:b6:06:80:4d:54:67:a5:e1:da:c9:19:4a: 33:82:2f:c8:bc:3f:f9:50:80:96:1e:aa:15:84:f9:25:36:eb: 83:84:73:69:4f:3f:30:a2:e8:a3:de:85:90:b4:d3:cd:b4:24: c4:c8:7f:05:63:11:58:5c:24:59:55:de:eb:84:ff:d3:f8:ad: f2:a2:f3:14:e7:eb:f7:15:d1:d9:a3:fd:a6:87:36:44:d2:a4: c8:d8:18:a9:2d:0e:93:a0:ef:a7:62:da:5a:a4:a1:02:4b:bc: ce:5c:82:f3:e6:ee:19:82:f0:18:95:82:19:b1:bc:65:86:c4: cf:07:24:86:ed:07:73:26:99:e2:59:18:96:0a:b9:c3:47:af: 71:28:d1:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJ5EeSGweW6cc7Jv9teKJB7NZiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA1MTMwMTU2MDJaFw0yNjA1MTQwMjA0MDJaMDMxMTAvBgNV BAMTKEE1QkZCRUY3NENEQ0JEODFCMzFCNEY0RTM0ODM5NDAwRTlENTFDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRLmOzZKZXN+zIQNVOT7yqwZe 4LFg5Nr+OooEduOeYBi0EKNgOXhCyKQ8oLZ6I37fd0gasvK4pjqFYFFs90rQHosE ahxYQowUcMjjwRD0KPcXWQzQ420dBv4f+qdy77gsfag9XHhCF+yT1kI1EsbPp3fd dJtcigfiTEkVw3FZUlrhu7ioqH/Afxt7JoulBxb9c8uxHkeT7YjBgby0kcBBB0oh 2BXC31ShoaDBy2NZNWWGMnxZ900N4Wk/ZQuQSqx0yEgCJElKzIm4A6qiGI/wKRM7 DcFYW2XyLaZ6SCeGp0hTGZS5VlT1SYBd23idoZj5HK1bWuT1W6qlp5ptgTplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpb++90zcvYGzG09ONIOUAOnVHLEwHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAphVU6z958Umf30f3zAX9MkWXgEHTLukoZU ke8Bc7+jzDcadsLK7XWgmhgXnUo4lisUQzDEol3OfWENqPFjAZp9tgAaC2ZtbHZQ z2adJ6bSbRQhO5qJWS4zb0pp9Ccc7jZtL2i5jZQvsUlfJMx9DSAza7YGgE1UZ6Xh 2skZSjOCL8i8P/lQgJYeqhWE+SU264OEc2lPPzCi6KPehZC00820JMTIfwVjEVhc JFlV3uuE/9P4rfKi8xTn6/cV0dmj/aaHNkTSpMjYGKktDpOg76di2lqkoQJLvM5c gvPm7hmC8BiVghmxvGWGxM8HJIbtB3MmmeJZGJYKucNHr3Eo0Xs= -----END CERTIFICATE-----Generated at Wed May 13 03:59:33 2026 by rpki-client