$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: SeVe6KDocuV6d7FU75BZ9wzZmbUZsXq8YvOikKl4OVc= Subject key identifier: 76:C8:9B:41:C4:E4:BA:15:12:28:92:0B:C5:E3:81:C0:19:07:B0:77 Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 08A3146848A7A50CE917391BCEB1FC9FB222854C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:33:34 +0000 Manifest this update: Tue 12 May 2026 13:28:34 +0000 Manifest next update: Wed 13 May 2026 15:44:34 +0000 Files and hashes: 1: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: 2oYUjgf87uQ2l2de8f9Fv0kxKojzeFVgvFnIcGh3hdo=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a3:14:68:48:a7:a5:0c:e9:17:39:1b:ce:b1:fc:9f:b2:22:85:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: May 12 13:28:34 2026 GMT Not After : May 13 15:44:34 2026 GMT Subject: CN=76C89B41C4E4BA151228920BC5E381C01907B077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:b2:da:4d:11:0a:46:d2:51:74:67:9a:83: 13:c5:3e:96:3d:fe:71:89:3e:73:d8:f9:3b:bb:b1: 21:90:f9:40:71:3c:9c:9e:eb:e6:7c:6b:5e:d0:d5: 68:53:24:c9:6d:26:4a:bc:07:fd:cf:1a:25:be:52: 12:a4:e0:8a:f8:50:be:7c:83:76:47:31:86:e4:79: 54:87:e9:2e:7e:3b:b3:d5:10:c4:38:fe:79:9c:fa: 80:6a:1e:f8:2b:09:de:31:57:5f:ba:78:91:1d:c1: 03:31:de:08:f6:50:91:40:68:25:9b:3b:54:83:6f: 7b:23:2c:23:6d:3f:ba:70:48:b1:4c:1c:41:7c:78: 10:2d:58:7d:2c:c8:89:36:3d:ed:95:06:57:cc:8f: e8:a9:b3:90:73:f1:2c:b9:f4:37:e9:4d:53:a8:a4: 56:ed:9a:d2:34:a2:60:49:8c:82:7c:d6:29:ff:dc: 59:71:e8:77:eb:f0:60:51:1e:ea:af:eb:6c:7d:c8: d3:55:63:95:a6:ae:a1:99:ae:c4:00:99:c8:08:91: b9:46:e6:14:69:25:66:2e:8d:6d:15:55:60:7d:76: 05:d4:f3:90:53:7c:65:10:5e:c1:32:5e:fc:a6:f6: 18:17:88:67:f5:c1:44:50:4b:b7:bb:1b:59:0c:c2: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:9B:41:C4:E4:BA:15:12:28:92:0B:C5:E3:81:C0:19:07:B0:77 X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d1:09:34:04:4b:1a:e0:69:bd:cd:de:ce:d9:72:02:60:b8: d0:fd:61:51:a1:01:ed:00:48:28:4f:ab:ed:df:c2:d0:44:09: a5:a4:28:20:8d:09:51:8e:5d:86:4a:1a:be:98:42:8b:0c:35: 11:d3:7d:0b:c1:f7:83:2b:b3:5d:a6:ec:ed:16:14:19:b7:24: a6:c5:d1:59:c9:99:ce:ea:be:7e:b8:d0:3f:a3:ef:d0:27:ba: 9c:77:5b:bb:2f:f0:19:b6:70:3b:57:26:bc:48:a4:ad:6c:35: 2f:bc:07:22:17:01:ab:e9:73:36:fc:54:e3:53:97:73:63:da: 9d:10:6b:88:8b:5a:3e:1a:b1:e7:dc:e6:91:02:f5:cb:cc:e3: 14:90:48:1e:b4:8f:a9:49:bd:ce:08:a4:9f:dc:e3:2c:2e:4f: 77:f3:83:2e:8c:a7:18:96:87:d5:bf:e6:e5:bb:3c:20:88:10: e5:2a:d2:18:01:82:4a:16:4b:e9:e8:3d:04:c8:f6:bf:d5:9e: 73:5f:60:1f:94:5e:9a:08:0a:0e:c6:8f:32:8e:a4:6b:eb:aa: a0:b3:8e:8f:2b:e2:2d:50:b2:ab:34:5e:6a:90:f1:3f:cc:dc: d0:67:95:ab:a5:dd:5d:7d:05:13:f2:16:45:6d:97:2f:c3:18: a9:42:bd:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKMUaEinpQzpFzkbzrH8n7IihUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjA1MTIxMzI4MzRaFw0yNjA1MTMxNTQ0MzRaMDMxMTAvBgNV BAMTKDc2Qzg5QjQxQzRFNEJBMTUxMjI4OTIwQkM1RTM4MUMwMTkwN0IwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBebLaTREKRtJRdGeagxPFPpY9 /nGJPnPY+Tu7sSGQ+UBxPJye6+Z8a17Q1WhTJMltJkq8B/3PGiW+UhKk4Ir4UL58 g3ZHMYbkeVSH6S5+O7PVEMQ4/nmc+oBqHvgrCd4xV1+6eJEdwQMx3gj2UJFAaCWb O1SDb3sjLCNtP7pwSLFMHEF8eBAtWH0syIk2Pe2VBlfMj+ips5Bz8Sy59DfpTVOo pFbtmtI0omBJjIJ81in/3Flx6Hfr8GBRHuqv62x9yNNVY5WmrqGZrsQAmcgIkblG 5hRpJWYujW0VVWB9dgXU85BTfGUQXsEyXvym9hgXiGf1wURQS7e7G1kMwmoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsibQcTkuhUSKJILxeOBwBkHsHcwHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvRCTQESxrgab3N3s7ZcgJguND9YVGhAe0A SChPq+3fwtBECaWkKCCNCVGOXYZKGr6YQosMNRHTfQvB94Mrs12m7O0WFBm3JKbF 0VnJmc7qvn640D+j79Anupx3W7sv8Bm2cDtXJrxIpK1sNS+8ByIXAavpczb8VONT l3Nj2p0Qa4iLWj4asefc5pEC9cvM4xSQSB60j6lJvc4IpJ/c4ywuT3fzgy6MpxiW h9W/5uW7PCCIEOUq0hgBgkoWS+noPQTI9r/VnnNfYB+UXpoICg7GjzKOpGvrqqCz jo8r4i1Qsqs0XmqQ8T/M3NBnlaul3V19BRPyFkVtly/DGKlCvUI= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client