$ rpki-client -vvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: r7I10R3JLDcSeSwozk/7Iwa+XULhNisJsmZ9Puy2SSU= Subject key identifier: 42:A8:0B:1D:53:40:28:01:4C:30:9A:79:0C:71:A9:11:F8:26:DC:F3 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 1DB6D696C677C44EA937363D4677932C91FEBDB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:57:59 +0000 Manifest this update: Tue 12 May 2026 17:52:59 +0000 Manifest next update: Wed 13 May 2026 20:35:59 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 3: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: 55cmSfgkoa8udDr0NCjURLIpXGdHj03LBfcMvEJr990=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b6:d6:96:c6:77:c4:4e:a9:37:36:3d:46:77:93:2c:91:fe:bd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: May 12 17:52:59 2026 GMT Not After : May 13 20:35:59 2026 GMT Subject: CN=42A80B1D534028014C309A790C71A911F826DCF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:3e:6b:01:e9:4e:27:d9:ce:b7:4e:8e:5d: 0b:0e:a2:a3:89:49:b3:1b:d9:71:c2:69:93:22:65: 4c:5f:7d:5e:22:23:71:52:e6:ae:11:aa:47:fb:ad: f8:6c:5f:9d:67:e5:2a:3c:83:46:bd:6b:05:9f:3b: ef:42:c7:25:c8:58:1c:1b:88:a0:a9:17:4d:7d:c6: 73:a4:a6:03:7d:15:c2:d2:4c:73:e9:38:d8:3e:4d: 89:7f:ad:14:9d:69:b5:57:fd:75:06:94:30:65:a3: a8:db:16:8c:6c:cf:be:15:69:1e:76:e6:4f:9e:eb: 3e:57:80:42:11:49:48:5b:ac:c8:dd:9a:7e:24:72: 8a:8e:02:1e:df:18:6e:ce:63:8c:1b:4a:42:dc:43: 52:7d:43:14:93:8b:99:3e:b1:fc:9c:a8:a3:46:52: 68:8d:a3:7c:66:31:22:86:5e:81:ca:2e:a5:fb:58: 8a:3d:67:a6:2f:1c:5a:72:e3:6d:36:c5:08:d9:80: 4b:34:a5:2f:26:71:c8:75:35:3f:c6:ae:dd:c3:8d: 5e:43:cf:8d:62:18:66:cf:0d:b9:89:ba:f6:df:56: d3:f3:e2:42:30:89:2d:50:5f:38:b5:5f:51:6a:de: 13:6c:62:94:e6:54:fe:ab:cd:b6:78:40:5e:d3:1f: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:0B:1D:53:40:28:01:4C:30:9A:79:0C:71:A9:11:F8:26:DC:F3 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:87:1b:c7:df:e3:d9:36:a3:c4:4e:0b:92:ba:de:0f:6d:37: a4:20:0d:2b:f3:b9:e7:5f:a9:72:91:13:fc:bf:97:59:b1:75: 97:a2:1d:12:b2:1b:dc:00:86:64:b2:13:bc:b1:92:49:81:5e: 77:94:88:b3:59:9f:8d:6c:b2:5b:90:62:84:b4:c4:67:33:2c: 79:ea:2e:b4:8e:a9:2a:2b:f1:c0:50:83:78:d2:0d:57:13:ee: cb:fc:5d:24:97:c0:b2:c9:da:71:e4:f8:19:da:10:47:61:55: 68:b8:07:fe:78:4f:1a:ee:61:3a:7c:a5:56:b7:78:dc:44:1d: 6c:b1:78:ec:84:68:f8:4e:a2:49:fb:41:82:80:03:d4:46:8f: cf:a4:5e:42:71:ba:e3:82:1f:d5:aa:68:f5:71:f4:67:fd:5c: 82:85:ae:80:f7:31:7d:74:f6:35:1e:22:7b:c9:07:24:02:61: 0c:95:8e:32:43:d2:04:ec:ca:6e:ca:d0:bb:64:2a:08:70:3b: 15:7c:40:a3:1c:42:d8:b0:04:c8:be:98:d9:5c:87:dc:05:b6: 94:09:96:3c:8d:80:64:eb:90:8d:fe:f6:08:b5:6d:85:30:85: 36:aa:dd:17:df:cb:3c:b9:3b:ab:86:8a:d0:8b:97:9d:77:69: 02:86:d9:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbbWlsZ3xE6pNzY9RneTLJH+vbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA1MTIxNzUyNTlaFw0yNjA1MTMyMDM1NTlaMDMxMTAvBgNV BAMTKDQyQTgwQjFENTM0MDI4MDE0QzMwOUE3OTBDNzFBOTExRjgyNkRDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oj5rAelOJ9nOt06OXQsOoqOJ SbMb2XHCaZMiZUxffV4iI3FS5q4Rqkf7rfhsX51n5So8g0a9awWfO+9CxyXIWBwb iKCpF019xnOkpgN9FcLSTHPpONg+TYl/rRSdabVX/XUGlDBlo6jbFoxsz74VaR52 5k+e6z5XgEIRSUhbrMjdmn4kcoqOAh7fGG7OY4wbSkLcQ1J9QxSTi5k+sfycqKNG UmiNo3xmMSKGXoHKLqX7WIo9Z6YvHFpy4202xQjZgEs0pS8mcch1NT/Grt3DjV5D z41iGGbPDbmJuvbfVtPz4kIwiS1QXzi1X1Fq3hNsYpTmVP6rzbZ4QF7THzbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqgLHVNAKAFMMJp5DHGpEfgm3PMwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiHG8ff49k2o8ROC5K63g9tN6QgDSvzuedf qXKRE/y/l1mxdZeiHRKyG9wAhmSyE7yxkkmBXneUiLNZn41ssluQYoS0xGczLHnq LrSOqSor8cBQg3jSDVcT7sv8XSSXwLLJ2nHk+BnaEEdhVWi4B/54TxruYTp8pVa3 eNxEHWyxeOyEaPhOokn7QYKAA9RGj8+kXkJxuuOCH9WqaPVx9Gf9XIKFroD3MX10 9jUeInvJByQCYQyVjjJD0gTsym7K0LtkKghwOxV8QKMcQtiwBMi+mNlch9wFtpQJ ljyNgGTrkI3+9gi1bYUwhTaq3Rffyzy5O6uGitCLl513aQKG2So= -----END CERTIFICATE-----Generated at Wed May 13 00:34:16 2026 by rpki-client