$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: /4Y4N0QYiRzDu5UYrRGKq+0D030b8JkescI7cI82pfQ= Subject key identifier: B7:AF:D6:9A:F8:D3:85:B9:B6:84:2F:08:27:69:16:67:7C:9E:A7:C2 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 2A35A1E83D3562AC95928704BDA8E6D12BE350EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:48 +0000 Manifest this update: Tue 12 May 2026 19:30:48 +0000 Manifest next update: Wed 13 May 2026 22:31:48 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 3: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: caZ5ulAatY+GYt9xEmIIjhhBEyHVGtYsEDsIN+R0od8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:35:a1:e8:3d:35:62:ac:95:92:87:04:bd:a8:e6:d1:2b:e3:50:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: May 12 19:30:48 2026 GMT Not After : May 13 22:31:48 2026 GMT Subject: CN=B7AFD69AF8D385B9B6842F08276916677C9EA7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:2e:73:9c:52:97:05:32:dd:ac:18:b3:8b: ae:14:f5:dd:64:69:00:11:eb:9c:c4:e3:48:56:4e: 06:35:90:29:3c:ce:f8:4f:5f:f8:ea:94:5a:e9:7d: 80:0c:68:ac:af:d7:fa:01:6e:a6:99:9e:8d:c2:80: eb:ae:27:b5:d9:9a:8b:b9:c0:3d:0d:7e:ac:61:52: 00:bd:79:2f:be:63:79:e4:3b:0b:4a:ed:e1:b5:61: 47:5c:62:39:31:4f:c1:6f:f0:93:e0:46:5b:27:2a: a9:9a:06:2b:34:5a:a4:a9:47:be:b0:16:84:93:8f: 9b:6b:1c:ce:f4:c1:a7:ed:bc:a0:94:c7:9a:39:cd: d6:44:57:a7:bb:bc:c9:ae:79:1e:e8:93:e2:bd:b4: f9:80:cd:99:6a:1d:40:55:4b:b4:be:d2:fa:fe:09: da:81:f7:65:ce:b3:6d:21:34:8f:69:52:f5:65:21: 35:0f:92:35:d5:e2:42:18:11:45:b2:9b:e5:88:9c: 89:ed:50:23:ce:36:7c:5c:92:8a:94:66:3f:51:71: f8:14:06:b6:1f:88:86:84:3c:da:8c:aa:ac:67:ba: 1d:94:2e:d8:50:3b:f3:aa:1d:0c:6c:b6:c5:f4:2e: 29:4e:db:9e:cf:85:ac:ef:9c:89:9b:41:f7:28:3c: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AF:D6:9A:F8:D3:85:B9:B6:84:2F:08:27:69:16:67:7C:9E:A7:C2 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fa:4e:e1:c6:7d:96:62:26:a2:84:00:63:d6:85:13:6d:b2: 11:69:60:5b:68:af:d6:5d:40:37:ed:d4:24:09:fe:7d:32:da: 0c:d8:4b:92:fa:18:6c:9f:86:2c:43:6d:57:b2:8c:52:9b:47: eb:85:51:0d:4e:04:01:5e:3d:58:75:00:9c:54:57:4b:d6:ba: 45:4b:37:87:32:41:d9:55:a7:d9:af:db:70:e6:4d:0d:75:95: 41:b7:6e:01:88:5b:c8:34:e1:34:9b:f7:a6:f5:3a:ad:1c:78: 1b:af:37:a7:4b:2d:bd:21:3d:5a:17:5c:fa:2d:62:b4:5e:eb: c1:41:67:d3:83:99:da:f7:a6:10:bc:96:63:2e:90:44:61:98: 25:87:7e:bd:58:2f:8e:1f:db:23:c1:7f:ac:75:b0:ee:2f:64: 79:1e:0c:14:db:af:c9:f8:1c:86:a3:2f:d0:ce:6b:85:c8:38: 53:2d:9e:44:fb:b6:eb:84:7e:5e:cf:27:e0:bf:83:40:89:ca: 10:d3:55:8b:8f:e7:fe:2a:0f:7d:c8:f0:a9:03:c3:83:04:f6: e3:c7:5f:cb:6b:63:45:b6:4a:0e:e5:4b:b4:61:a0:67:b2:4a: bc:76:8e:28:53:cf:c2:ec:e6:08:d7:65:d8:7f:3e:53:03:17: 43:5a:44:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjWh6D01YqyVkocEvajm0SvjUOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA1MTIxOTMwNDhaFw0yNjA1MTMyMjMxNDhaMDMxMTAvBgNV BAMTKEI3QUZENjlBRjhEMzg1QjlCNjg0MkYwODI3NjkxNjY3N0M5RUE3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRBC5znFKXBTLdrBizi64U9d1k aQAR65zE40hWTgY1kCk8zvhPX/jqlFrpfYAMaKyv1/oBbqaZno3CgOuuJ7XZmou5 wD0NfqxhUgC9eS++Y3nkOwtK7eG1YUdcYjkxT8Fv8JPgRlsnKqmaBis0WqSpR76w FoSTj5trHM70waftvKCUx5o5zdZEV6e7vMmueR7ok+K9tPmAzZlqHUBVS7S+0vr+ CdqB92XOs20hNI9pUvVlITUPkjXV4kIYEUWym+WInIntUCPONnxckoqUZj9RcfgU BrYfiIaEPNqMqqxnuh2ULthQO/OqHQxstsX0LilO257PhazvnImbQfcoPIEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6/WmvjThbm2hC8IJ2kWZ3yep8IwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIr6TuHGfZZiJqKEAGPWhRNtshFpYFtor9Zd QDft1CQJ/n0y2gzYS5L6GGyfhixDbVeyjFKbR+uFUQ1OBAFePVh1AJxUV0vWukVL N4cyQdlVp9mv23DmTQ11lUG3bgGIW8g04TSb96b1Oq0ceBuvN6dLLb0hPVoXXPot YrRe68FBZ9ODmdr3phC8lmMukERhmCWHfr1YL44f2yPBf6x1sO4vZHkeDBTbr8n4 HIajL9DOa4XIOFMtnkT7tuuEfl7PJ+C/g0CJyhDTVYuP5/4qD33I8KkDw4ME9uPH X8trY0W2Sg7lS7RhoGeySrx2jihTz8Ls5gjXZdh/PlMDF0NaRHg= -----END CERTIFICATE-----Generated at Wed May 13 00:45:26 2026 by rpki-client