$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json) Hash identifier: dz9sZhkTPQrxVDgUkoW0Lt6rKb84h2rqt7g7NW71nxM= Subject key identifier: 38:A9:CA:F9:AB:F3:97:ED:48:FB:62:22:49:CB:6B:E4:E7:8C:EC:51 Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Certificate serial: 2223DE2AD39959348F27F851F47540B6A158D2A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:23:42 +0000 Manifest this update: Tue 12 May 2026 07:18:42 +0000 Manifest next update: Wed 13 May 2026 10:43:42 +0000 Files and hashes: 1: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=) 2: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=) 3: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: o1ZZ01Z13/AvTiWC7Fkr030WMKchwDvvJCur/oevCVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:23:de:2a:d3:99:59:34:8f:27:f8:51:f4:75:40:b6:a1:58:d2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Validity Not Before: May 12 07:18:42 2026 GMT Not After : May 13 10:43:42 2026 GMT Subject: CN=38A9CAF9ABF397ED48FB622249CB6BE4E78CEC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:0c:6c:24:c1:66:3e:06:04:7e:a5:58:88: a9:3d:5a:bc:66:5e:bd:c3:d1:3a:57:bf:0d:10:b3: f8:5d:67:91:55:db:c5:07:73:cb:b2:b7:90:dc:9d: 46:2a:e9:31:a7:2e:ee:ea:04:3d:ab:72:d6:5f:20: 1f:9e:dd:63:fd:3d:88:fa:70:f7:8e:04:03:03:81: 85:19:c9:b8:11:b8:59:83:ee:49:09:1e:6e:c3:2c: b1:40:f0:32:8d:ea:c3:5c:fc:83:fd:54:2e:36:88: d4:ea:dc:3a:d5:f1:59:44:b3:cc:01:e0:1b:98:18: fd:93:3c:a9:ca:86:ab:c3:ff:b1:2b:a4:a5:f5:6d: a6:47:07:d4:95:46:e3:d9:51:8f:1b:ef:7e:94:5a: f7:30:78:8f:a7:f8:ef:6f:71:5f:4f:f2:c5:fe:d3: 62:e0:d1:ed:2f:61:5d:4f:1e:bc:6e:5e:34:64:f9: f6:23:3f:eb:d0:3c:12:2c:de:60:cf:df:6a:99:79: 5d:c3:ee:ca:b1:63:d8:f1:c4:3f:72:39:a3:3d:81: eb:44:3b:c2:a1:26:ca:58:3a:04:02:59:02:e9:01: fa:5d:3d:55:ec:b2:37:63:d9:91:85:7e:e4:6a:d8: b5:dd:70:98:7b:a2:5b:10:6b:2d:c8:8a:83:18:95: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:CA:F9:AB:F3:97:ED:48:FB:62:22:49:CB:6B:E4:E7:8C:EC:51 X509v3 Authority Key Identifier: keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:c6:db:96:70:b6:b2:87:21:f2:20:28:df:a3:c3:00:79: 70:20:cb:7e:93:71:77:ae:4f:3c:8f:b8:7b:d2:da:53:cd:03: 82:6a:32:04:fb:e1:3c:37:4d:ec:18:ab:bf:80:b2:6d:ae:7a: d7:72:f5:cd:e1:66:41:c0:5c:b4:81:5e:07:4f:ee:47:3b:8e: f4:cd:3c:09:ec:7c:4f:e4:91:2c:fe:10:02:da:b4:8c:8e:bd: ea:af:b2:bb:d4:70:61:d5:df:27:9d:88:71:b8:08:4c:87:4b: 19:38:cb:09:48:1b:d8:ff:8d:49:da:b4:b6:ce:6d:9a:1a:b1: 3c:fe:f8:d7:76:2f:a9:e9:5c:e5:1b:96:9f:33:05:3a:11:69: 74:3c:d4:cb:3e:2b:b1:25:1a:61:5a:ad:51:f3:8b:71:e9:64: 2c:de:f5:6b:87:b9:f5:df:bf:a4:53:b3:06:66:fe:02:26:bd: 87:de:4a:e0:79:dc:ba:87:ba:78:29:c5:2a:6e:a7:41:1f:f1: b2:b7:af:da:fc:e6:2a:67:82:96:44:21:62:b1:df:82:ca:44: c9:f1:00:35:97:a0:f8:7c:f9:31:22:dd:5b:ac:49:ed:d8:a7: e8:ad:eb:e6:44:a3:da:a2:01:42:12:62:70:fb:ab:e6:eb:73: 9c:97:ab:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiPeKtOZWTSPJ/hR9HVAtqFY0qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE QzkyOUJCNzAeFw0yNjA1MTIwNzE4NDJaFw0yNjA1MTMxMDQzNDJaMDMxMTAvBgNV BAMTKDM4QTlDQUY5QUJGMzk3RUQ0OEZCNjIyMjQ5Q0I2QkU0RTc4Q0VDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4QxsJMFmPgYEfqVYiKk9Wrxm Xr3D0TpXvw0Qs/hdZ5FV28UHc8uyt5DcnUYq6TGnLu7qBD2rctZfIB+e3WP9PYj6 cPeOBAMDgYUZybgRuFmD7kkJHm7DLLFA8DKN6sNc/IP9VC42iNTq3DrV8VlEs8wB 4BuYGP2TPKnKhqvD/7ErpKX1baZHB9SVRuPZUY8b736UWvcweI+n+O9vcV9P8sX+ 02Lg0e0vYV1PHrxuXjRk+fYjP+vQPBIs3mDP32qZeV3D7sqxY9jxxD9yOaM9getE O8KhJspYOgQCWQLpAfpdPVXssjdj2ZGFfuRq2LXdcJh7olsQay3IioMYlREPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKnK+avzl+1I+2IiSctr5OeM7FEwHwYDVR0j BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5 QkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh OTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQx RUJEQzkyOUJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADolxtuWcLayhyHyICjfo8MAeXAgy36TcXeu TzyPuHvS2lPNA4JqMgT74Tw3TewYq7+Asm2uetdy9c3hZkHAXLSBXgdP7kc7jvTN PAnsfE/kkSz+EALatIyOveqvsrvUcGHV3yediHG4CEyHSxk4ywlIG9j/jUnatLbO bZoasTz++Nd2L6npXOUblp8zBToRaXQ81Ms+K7ElGmFarVHzi3HpZCze9WuHufXf v6RTswZm/gImvYfeSuB53LqHungpxSpup0Ef8bK3r9r85ipngpZEIWKx34LKRMnx ADWXoPh8+TEi3VusSe3Yp+it6+ZEo9qiAUISYnD7q+brc5yXq6Q= -----END CERTIFICATE-----Generated at Wed May 13 01:15:25 2026 by rpki-client