$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: 68Xqcel99aBLWun4AMw8PbtpybOlSmtjdylTMmFJfx4= Subject key identifier: FD:62:8E:4A:92:44:EF:C8:50:64:69:F5:DA:21:93:54:2B:15:AC:73 Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 1D490EA3993B106B7CA0739761B18CC445E50A10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:13:57 +0000 Manifest this update: Tue 12 May 2026 04:08:57 +0000 Manifest next update: Wed 13 May 2026 06:30:57 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 2: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 3: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: 6YrxTgNLWZFD9ncwbzkQtgDmffL0dSGSo6FZ0QYZHEk=) 4: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) 5: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 6: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:49:0e:a3:99:3b:10:6b:7c:a0:73:97:61:b1:8c:c4:45:e5:0a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: May 12 04:08:57 2026 GMT Not After : May 13 06:30:57 2026 GMT Subject: CN=FD628E4A9244EFC8506469F5DA2193542B15AC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:fb:0e:a3:75:82:9e:02:4e:af:97:18:79: 4b:09:eb:41:42:4b:b9:06:15:25:0b:1d:56:95:f0: 5e:74:8e:a9:cd:43:93:dc:e1:5d:4a:fc:39:20:ae: a3:c6:22:eb:35:6a:81:fa:4c:50:06:b1:1b:00:f3: f8:da:d2:79:bb:c4:51:83:52:25:88:74:f5:56:9c: 86:a1:f0:2d:68:94:cf:3c:23:ff:ee:76:9c:7f:a6: 95:63:56:d6:6c:9f:d2:ca:18:43:db:37:9c:61:11: da:7e:53:0e:64:dc:ea:b9:ec:49:73:fe:19:6f:d6: 14:27:3f:ed:8e:62:88:a7:eb:56:14:53:5d:61:45: 31:e2:fd:bd:a9:f8:c8:88:90:b6:d2:34:f5:e9:a4: f0:bb:16:5e:37:16:b7:e8:a4:22:01:78:c3:a6:bd: f8:69:56:dd:c9:ba:42:2e:55:fc:77:fc:76:73:b5: 77:90:13:bd:04:da:56:3f:bb:36:9a:33:75:f4:e1: 8c:8d:47:ca:48:01:e4:1d:61:51:91:44:05:31:74: c3:d0:56:8e:d9:6a:1f:a5:b8:14:61:f2:c0:ee:7f: c2:65:8b:66:f7:b2:7b:1f:8f:fd:89:10:10:31:7d: 97:e8:3a:21:4d:0b:99:5b:12:67:70:0b:a3:86:c1: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:8E:4A:92:44:EF:C8:50:64:69:F5:DA:21:93:54:2B:15:AC:73 X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:a8:cb:2b:f3:88:96:3a:7f:3c:24:0f:05:ef:09:61:30: ce:c7:6d:3e:02:d9:47:14:50:6e:e0:04:a6:f4:61:0f:e7:3e: 63:a3:3d:25:22:cb:66:e5:23:32:8e:13:27:50:f3:04:d5:70: 5f:f1:10:55:9c:a8:ac:9f:30:16:0c:6d:bc:16:00:e0:5b:6e: e2:47:7e:74:83:11:3c:5c:89:45:4a:bc:51:5b:8a:71:5b:09: 80:0f:38:e6:ae:25:2d:78:a1:83:44:ec:96:a7:2b:98:d2:18: ab:06:5d:04:2c:b1:7d:3a:29:ec:b1:73:6b:a0:6f:f1:93:41: d7:9e:c1:8e:37:2d:5b:93:f2:1d:d6:cc:e7:0a:4b:03:e8:36: 48:00:82:b5:7a:b8:49:72:15:9c:59:d7:ce:7c:97:1b:8b:01: b4:ad:e5:0a:8e:e8:a6:1d:2f:90:0d:85:9b:99:98:1b:59:bb: 5a:35:a8:8c:72:84:dc:9a:3f:7a:de:d7:68:be:92:98:b5:02: a6:84:e7:4e:84:d5:bf:55:f4:c4:ce:77:7a:3a:8f:d3:57:78: 28:fe:52:9d:7b:46:6b:04:17:0b:f2:5a:25:12:4d:8e:84:b3: c8:09:b9:01:97:96:0c:24:cd:70:47:b2:2d:c9:c4:c6:c8:5f: b4:62:34:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUkOo5k7EGt8oHOXYbGMxEXlChAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA1MTIwNDA4NTdaFw0yNjA1MTMwNjMwNTdaMDMxMTAvBgNV BAMTKEZENjI4RTRBOTI0NEVGQzg1MDY0NjlGNURBMjE5MzU0MkIxNUFDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5n/sOo3WCngJOr5cYeUsJ60FC S7kGFSULHVaV8F50jqnNQ5Pc4V1K/DkgrqPGIus1aoH6TFAGsRsA8/ja0nm7xFGD UiWIdPVWnIah8C1olM88I//udpx/ppVjVtZsn9LKGEPbN5xhEdp+Uw5k3Oq57Elz /hlv1hQnP+2OYoin61YUU11hRTHi/b2p+MiIkLbSNPXppPC7Fl43FrfopCIBeMOm vfhpVt3JukIuVfx3/HZztXeQE70E2lY/uzaaM3X04YyNR8pIAeQdYVGRRAUxdMPQ Vo7Zah+luBRh8sDuf8Jli2b3snsfj/2JEBAxfZfoOiFNC5lbEmdwC6OGwcOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WKOSpJE78hQZGn12iGTVCsVrHMwHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7pqMsr84iWOn88JA8F7wlhMM7HbT4C2UcU UG7gBKb0YQ/nPmOjPSUiy2blIzKOEydQ8wTVcF/xEFWcqKyfMBYMbbwWAOBbbuJH fnSDETxciUVKvFFbinFbCYAPOOauJS14oYNE7JanK5jSGKsGXQQssX06Keyxc2ug b/GTQdeewY43LVuT8h3WzOcKSwPoNkgAgrV6uElyFZxZ1858lxuLAbSt5QqO6KYd L5ANhZuZmBtZu1o1qIxyhNyaP3re12i+kpi1AqaE506E1b9V9MTOd3o6j9NXeCj+ Up17RmsEFwvyWiUSTY6Es8gJuQGXlgwkzXBHsi3JxMbIX7RiNEA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:23 2026 by rpki-client