$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: gp5wtLteQpzE141pA2jRUabDWGAlK2VPTQtVTKwAdjE= Subject key identifier: D3:2B:23:0E:8D:84:B5:D9:EB:43:BE:2C:56:A3:29:A3:0A:ED:A0:79 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 049B0EFE08E6CAF019C5F20F1469816891C1996F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:03:38 +0000 Manifest this update: Tue 12 May 2026 03:58:38 +0000 Manifest next update: Wed 13 May 2026 06:37:38 +0000 Files and hashes: 1: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 2: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 3: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 5: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 6: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 7: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 8: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: PKUL1CQmOPYqlxNS3axA2t7PRwS+zFB48bENfXGvVUc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9b:0e:fe:08:e6:ca:f0:19:c5:f2:0f:14:69:81:68:91:c1:99:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: May 12 03:58:38 2026 GMT Not After : May 13 06:37:38 2026 GMT Subject: CN=D32B230E8D84B5D9EB43BE2C56A329A30AEDA079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:7c:a6:02:71:41:68:7f:b8:4b:89:48:2d: 2b:6e:c6:aa:e2:fb:5a:79:fd:0d:f6:1c:66:98:4e: 07:74:df:ff:d2:7e:48:59:f6:fd:ea:e1:50:e0:2a: 3e:47:67:86:53:d6:5e:78:12:7e:57:d4:70:dd:d2: 06:c6:3f:ed:4b:92:37:06:d9:22:9e:e7:74:37:6c: d5:71:83:89:05:06:f7:7a:04:8c:e1:2a:56:57:b5: 4a:b0:0b:f0:94:0d:d0:01:52:31:20:10:e4:93:58: 06:37:00:50:19:28:2a:84:6e:2f:5a:a5:45:c9:f7: 5a:47:cf:50:41:a2:f3:9c:7c:f4:0a:e2:86:26:87: e3:db:2a:26:e4:77:b5:30:69:d0:76:7d:31:2e:91: bc:6f:f2:6f:1e:44:de:d5:f9:db:b9:92:cb:f0:12: 7c:e3:79:41:be:7d:f7:90:4e:db:67:3c:59:7a:3d: 16:ad:61:c8:2f:eb:12:1c:00:19:ba:a1:c0:7c:9f: 47:65:15:f5:46:7f:09:56:cf:0e:50:7a:79:39:9f: 4b:e6:15:c8:d4:a9:3b:62:0d:6d:50:ff:e4:83:35: 30:dd:20:36:78:63:dd:27:a4:5f:b3:e5:8b:11:0b: 96:c9:43:21:35:e3:f0:9d:41:30:9c:bb:e1:03:44: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:23:0E:8D:84:B5:D9:EB:43:BE:2C:56:A3:29:A3:0A:ED:A0:79 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:36:20:a6:fe:fe:bf:45:90:c7:e5:bc:11:ee:4c:82:20:ff: 83:5d:6f:49:ca:ab:63:90:bd:b9:84:4b:43:41:90:03:1a:4a: d4:99:ce:5d:c9:ae:7a:5c:a6:60:ee:82:40:db:fd:96:d7:e1: 5f:e5:ae:d1:d4:af:e7:c8:74:41:c6:b2:43:d3:3b:bc:56:cc: 8d:08:7e:b3:54:ad:6e:a0:ff:fa:a8:40:f2:4a:17:59:f1:b8: 27:53:a2:e8:f1:35:e0:25:70:ef:0c:5d:27:4f:62:6b:dd:a5: 01:37:14:b6:47:9c:e2:84:bd:39:85:04:02:88:9d:c6:c5:4e: da:f2:76:7f:fe:12:18:e6:f0:3c:02:71:de:b1:ea:a6:6f:5c: 53:cc:9e:58:43:0b:ac:95:3a:35:83:cf:2b:46:e1:1b:df:63: d1:a5:d3:37:38:1c:b9:c0:28:c3:41:ee:06:46:f8:d2:1b:96: b4:89:0d:30:e6:f1:93:03:64:42:fc:77:a8:e4:cb:c7:38:b2: 73:3f:a5:e8:8b:a2:c0:5d:e2:2d:4a:71:d5:26:7d:5d:26:2a: 24:61:60:ca:00:31:ec:8a:0c:dd:54:81:06:c6:63:e9:77:2b: 54:ec:29:78:55:e0:a1:ee:1a:99:3a:3f:08:b1:15:29:92:5d: c4:9e:68:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJsO/gjmyvAZxfIPFGmBaJHBmW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA1MTIwMzU4MzhaFw0yNjA1MTMwNjM3MzhaMDMxMTAvBgNV BAMTKEQzMkIyMzBFOEQ4NEI1RDlFQjQzQkUyQzU2QTMyOUEzMEFFREEwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8nymAnFBaH+4S4lILStuxqri +1p5/Q32HGaYTgd03//SfkhZ9v3q4VDgKj5HZ4ZT1l54En5X1HDd0gbGP+1LkjcG 2SKe53Q3bNVxg4kFBvd6BIzhKlZXtUqwC/CUDdABUjEgEOSTWAY3AFAZKCqEbi9a pUXJ91pHz1BBovOcfPQK4oYmh+PbKibkd7UwadB2fTEukbxv8m8eRN7V+du5ksvw EnzjeUG+ffeQTttnPFl6PRatYcgv6xIcABm6ocB8n0dlFfVGfwlWzw5Qenk5n0vm FcjUqTtiDW1Q/+SDNTDdIDZ4Y90npF+z5YsRC5bJQyE14/CdQTCcu+EDROOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ysjDo2EtdnrQ74sVqMpowrtoHkwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC02IKb+/r9FkMflvBHuTIIg/4Ndb0nKq2OQ vbmES0NBkAMaStSZzl3JrnpcpmDugkDb/ZbX4V/lrtHUr+fIdEHGskPTO7xWzI0I frNUrW6g//qoQPJKF1nxuCdToujxNeAlcO8MXSdPYmvdpQE3FLZHnOKEvTmFBAKI ncbFTtrydn/+Ehjm8DwCcd6x6qZvXFPMnlhDC6yVOjWDzytG4RvfY9Gl0zc4HLnA KMNB7gZG+NIblrSJDTDm8ZMDZEL8d6jky8c4snM/peiLosBd4i1KcdUmfV0mKiRh YMoAMeyKDN1UgQbGY+l3K1TsKXhV4KHuGpk6PwixFSmSXcSeaDM= -----END CERTIFICATE-----Generated at Tue May 12 23:06:47 2026 by rpki-client