$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: CKoqkfcrd/Lg3ZmMp5+DcGNfPBWwLodvQMkYKzwPKjA= Subject key identifier: 3F:5F:3A:E0:FD:5E:3F:90:05:C5:DC:B1:A6:F5:DF:3B:FA:BD:C6:88 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 0B2AC0D93E620FF400ED1A72E78E8AD36DA763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:39:32 +0000 Manifest this update: Tue 12 May 2026 04:34:32 +0000 Manifest next update: Wed 13 May 2026 05:47:32 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 2: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: rkZ+RNOeHzwTy6k/nEyT+r64yJLz2aQ8jyF6KPGuUDo=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2a:c0:d9:3e:62:0f:f4:00:ed:1a:72:e7:8e:8a:d3:6d:a7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: May 12 04:34:32 2026 GMT Not After : May 13 05:47:32 2026 GMT Subject: CN=3F5F3AE0FD5E3F9005C5DCB1A6F5DF3BFABDC688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:eb:95:5e:03:a6:be:34:14:8c:d7:35:e3: d6:3a:40:e0:9a:64:a4:e2:0e:54:8f:72:38:78:43: 10:c2:7d:2b:a7:0b:b4:ca:ee:7b:1d:49:46:f0:bb: 07:4d:08:80:f3:e1:a0:b9:a4:79:c8:b5:13:d2:61: 65:67:1a:32:98:a1:6a:c8:11:82:51:88:bb:a2:56: f6:68:ae:3e:19:5f:4a:e2:45:22:aa:e2:8e:12:38: 5e:5e:12:42:8a:a9:0a:0a:29:43:2b:83:e9:c2:f2: 9b:a7:19:f3:f1:6a:7e:4c:35:9a:99:1e:a1:da:37: a1:ce:7c:e2:86:45:ec:2a:bb:1c:ae:d0:4f:7d:0b: da:e8:37:b7:d1:8b:53:f9:5c:45:eb:be:43:e9:fc: 7e:b4:d0:38:b3:e2:f8:28:1b:64:f1:1f:86:68:42: 96:13:d5:ca:61:3b:61:5a:f6:eb:44:0e:6b:c9:50: 71:41:6a:b8:3f:de:2a:e6:76:07:cc:90:2d:bc:39: b7:cd:65:f7:84:d0:5a:06:c2:38:0c:2e:07:35:0b: 80:ce:f5:1e:da:84:7f:c2:1b:04:f1:60:1c:31:cc: a7:81:ff:dc:2c:b2:57:d2:cc:fa:6e:f0:9e:ed:dc: db:c1:2c:13:22:d1:a1:65:eb:25:54:57:7e:19:05: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5F:3A:E0:FD:5E:3F:90:05:C5:DC:B1:A6:F5:DF:3B:FA:BD:C6:88 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:17:c2:c5:a6:c3:ac:c4:a8:a2:bb:9f:66:84:1f:27:da: 00:da:39:cc:b6:cc:4a:64:25:9d:89:96:c9:5e:9c:ca:ad:62: 7b:35:a5:75:2e:4b:98:03:1c:c5:12:81:14:e3:cf:44:38:de: 1d:c9:7c:8c:24:ad:e2:88:2b:cb:51:e7:87:bd:49:ec:39:e8: 8a:e9:06:31:4e:6f:fb:4b:d0:1c:4f:db:6b:03:7b:18:7b:b5: 8e:06:be:ad:44:29:04:5a:d7:d3:fc:a4:69:6d:b4:44:b5:0b: c6:ee:1f:3d:f6:f8:6e:56:ee:e8:47:d6:5f:cf:5b:0e:27:aa: a6:3d:56:7c:91:0c:db:0a:b4:d0:7a:b1:10:68:92:7c:23:b0: af:96:6c:f6:17:ec:0f:f9:cb:0f:db:a9:84:a4:7d:3a:a4:cc: ad:6a:2f:90:0d:c9:6f:d5:61:8a:44:39:83:18:82:7b:60:22: a7:fa:7a:9d:fb:0a:ff:29:28:d9:30:49:0d:14:6a:8c:be:33: 6e:43:05:24:c9:e2:a5:9a:a6:b7:78:ff:bd:11:c1:43:b3:c9: 32:cd:57:6e:e2:a6:0a:8b:76:cd:fd:54:3d:9e:82:6a:e3:b6: 84:1e:17:59:5d:99:d2:bb:60:9f:a2:7d:07:84:11:2b:7c:c6: 8e:e7:e5:99 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITCyrA2T5iD/QA7Rpy546K022nYzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1 RTVCMjBFMB4XDTI2MDUxMjA0MzQzMloXDTI2MDUxMzA1NDczMlowMzExMC8GA1UE AxMoM0Y1RjNBRTBGRDVFM0Y5MDA1QzVEQ0IxQTZGNURGM0JGQUJEQzY4ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRD65VeA6a+NBSM1zXj1jpA4Jpk pOIOVI9yOHhDEMJ9K6cLtMruex1JRvC7B00IgPPhoLmkeci1E9JhZWcaMpihasgR glGIu6JW9miuPhlfSuJFIqrijhI4Xl4SQoqpCgopQyuD6cLym6cZ8/Fqfkw1mpke odo3oc584oZF7Cq7HK7QT30L2ug3t9GLU/lcReu+Q+n8frTQOLPi+CgbZPEfhmhC lhPVymE7YVr260QOa8lQcUFquD/eKuZ2B8yQLbw5t81l94TQWgbCOAwuBzULgM71 HtqEf8IbBPFgHDHMp4H/3CyyV9LM+m7wnu3c28EsEyLRoWXrJVRXfhkFKosCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ/Xzrg/V4/kAXF3LGm9d87+r3GiDAfBgNVHSME GDAWgBQdZDscbmKd8EKo86Vfm5mQReWyDjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC8xRDY0M0IxQzZF NjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVCMjBFLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzFENjQzQjFDNkU2MjlERjA0MkE4RjNBNTVGOUI5OTkwNDVFNUIy MEUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYTBiNGYxNS03NzIwLTRmMmEtODM0 My04ZTM3ZmFlODdhNTQvMC8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5 MDQ1RTVCMjBFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAFdMXwsWmw6zEqKK7n2aEHyfaANo5zLbMSmQl nYmWyV6cyq1iezWldS5LmAMcxRKBFOPPRDjeHcl8jCSt4ogry1Hnh71J7DnoiukG MU5v+0vQHE/bawN7GHu1jga+rUQpBFrX0/ykaW20RLULxu4fPfb4blbu6EfWX89b Dieqpj1WfJEM2wq00HqxEGiSfCOwr5Zs9hfsD/nLD9uphKR9OqTMrWovkA3Jb9Vh ikQ5gxiCe2Aip/p6nfsK/yko2TBJDRRqjL4zbkMFJMnipZqmt3j/vRHBQ7PJMs1X buKmCot2zf1UPZ6CauO2hB4XWV2Z0rtgn6J9B4QRK3zGjuflmQ== -----END CERTIFICATE-----Generated at Tue May 12 22:19:29 2026 by rpki-client