$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: fSBfuvBjS1kAsJPHLR6kKn567s/7x8I9gyJj40M1l+w= Subject key identifier: F1:89:20:BF:58:97:18:67:40:48:6E:63:41:18:DC:E8:1E:3F:7B:0F Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 5AC4A8AE949E79DF1EC947EA78BA4C4754E96486 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:27:21 +0000 Manifest this update: Tue 12 May 2026 20:22:21 +0000 Manifest next update: Wed 13 May 2026 23:17:21 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 3: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 5: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: N/ZuG869C+ytUUK2jgXZQ1/12Z3ohYdtVyAAxx7q+3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c4:a8:ae:94:9e:79:df:1e:c9:47:ea:78:ba:4c:47:54:e9:64:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: May 12 20:22:21 2026 GMT Not After : May 13 23:17:21 2026 GMT Subject: CN=F18920BF5897186740486E634118DCE81E3F7B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e8:2a:29:7b:ae:d9:e3:51:54:71:d5:03:9e: 31:85:97:c4:bc:6b:08:ed:4e:56:f4:d9:9c:18:05: 22:41:1a:24:32:fb:99:7f:fa:bc:18:ff:88:b7:f4: a5:9b:51:e1:8e:44:83:cb:be:d3:cf:81:9a:f2:2f: fd:db:20:60:48:f7:99:cb:41:70:52:0b:2e:6f:97: a6:3e:30:f7:3f:3d:11:75:04:a4:93:1b:4b:f4:18: b5:5a:d0:7e:4a:2d:f8:e5:ec:30:30:17:15:5b:5c: c8:29:8c:ea:23:38:f7:a0:d7:f5:12:6b:9a:1f:4d: 07:6f:b7:e8:61:4b:5b:75:f9:c5:8a:22:c7:de:c2: e5:29:be:69:db:58:5e:9f:b3:54:23:5c:8a:fd:7f: 6b:c5:f0:18:91:40:22:e4:1b:cd:48:a6:66:47:e4: cd:21:56:bb:6f:9a:27:c7:df:f1:04:ec:0a:2d:a7: e1:77:e6:3f:d3:f0:f5:d0:a3:a1:be:b7:09:e6:11: 9d:52:1c:a1:16:52:18:fc:9b:8a:b2:7e:77:f2:af: f0:96:d9:10:c6:68:06:d7:13:66:7c:4d:94:42:68: b6:15:af:d3:1e:e5:5c:85:a5:cd:64:26:29:60:ad: e6:db:44:25:49:3a:6f:28:57:ad:6e:c3:9e:5c:4b: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:20:BF:58:97:18:67:40:48:6E:63:41:18:DC:E8:1E:3F:7B:0F X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:02:a4:7c:2d:a8:b2:c7:bb:33:9f:e1:ee:de:70:c1:e8:51: 46:df:69:55:31:0f:ca:73:a4:44:e7:d2:a5:db:a6:b8:5a:4e: c9:ed:22:2a:00:eb:65:47:9c:2a:d4:c8:51:42:d0:f5:58:dc: 3f:cf:ef:2d:09:3d:7b:09:58:01:aa:ae:6e:14:c0:70:cc:55: 59:b8:d8:22:7f:f2:f5:19:b0:e8:c0:ef:70:46:fd:6b:29:78: 75:a3:4a:2b:dc:8d:38:6f:68:db:d2:d7:0d:6c:17:7a:4e:35: bc:c7:92:25:ac:dd:1f:fe:50:01:d1:fa:bc:0b:9c:32:24:af: 1a:22:dd:7f:76:1b:6e:3f:14:91:c9:63:b6:03:db:10:bb:01: a3:9d:88:85:c1:c0:fb:1c:6b:4c:8c:9a:30:cf:31:25:20:74: 32:77:13:5d:83:f5:4a:78:a1:b6:1a:4a:31:18:9e:4a:a2:1d: cf:12:94:71:3b:a7:15:b8:28:ec:d3:ab:65:90:bd:a8:5c:73: 23:1d:e0:fc:16:37:95:33:20:c8:6c:fd:2f:28:c4:ea:f3:96: f4:97:6f:d5:38:59:a4:0c:92:d8:9f:44:a5:a9:c4:53:c4:e1: b7:0c:82:77:51:6d:1f:3c:ad:4a:46:be:0d:0f:34:63:52:0b: 25:52:31:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsSorpSeed8eyUfqeLpMR1TpZIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA1MTIyMDIyMjFaFw0yNjA1MTMyMzE3MjFaMDMxMTAvBgNV BAMTKEYxODkyMEJGNTg5NzE4Njc0MDQ4NkU2MzQxMThEQ0U4MUUzRjdCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6Cope67Z41FUcdUDnjGFl8S8 awjtTlb02ZwYBSJBGiQy+5l/+rwY/4i39KWbUeGORIPLvtPPgZryL/3bIGBI95nL QXBSCy5vl6Y+MPc/PRF1BKSTG0v0GLVa0H5KLfjl7DAwFxVbXMgpjOojOPeg1/US a5ofTQdvt+hhS1t1+cWKIsfewuUpvmnbWF6fs1QjXIr9f2vF8BiRQCLkG81IpmZH 5M0hVrtvmifH3/EE7Aotp+F35j/T8PXQo6G+twnmEZ1SHKEWUhj8m4qyfnfyr/CW 2RDGaAbXE2Z8TZRCaLYVr9Me5VyFpc1kJilgrebbRCVJOm8oV61uw55cS3+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Ykgv1iXGGdASG5jQRjc6B4/ew8wHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0CpHwtqLLHuzOf4e7ecMHoUUbfaVUxD8pz pETn0qXbprhaTsntIioA62VHnCrUyFFC0PVY3D/P7y0JPXsJWAGqrm4UwHDMVVm4 2CJ/8vUZsOjA73BG/WspeHWjSivcjThvaNvS1w1sF3pONbzHkiWs3R/+UAHR+rwL nDIkrxoi3X92G24/FJHJY7YD2xC7AaOdiIXBwPsca0yMmjDPMSUgdDJ3E12D9Up4 obYaSjEYnkqiHc8SlHE7pxW4KOzTq2WQvahccyMd4PwWN5UzIMhs/S8oxOrzlvSX b9U4WaQMktifRKWpxFPE4bcMgndRbR88rUpGvg0PNGNSCyVSMVg= -----END CERTIFICATE-----Generated at Wed May 13 04:19:44 2026 by rpki-client