$ rpki-client -vvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: 7PonFxEtOIeVTcNuhX4oUxcX4n9pZmvGcyzNHZ7GNfg= Subject key identifier: 31:7F:04:4C:24:8D:45:A0:13:12:C4:43:C9:63:63:A6:29:B0:0D:47 Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 6D3E0D647BEAB1F9B8587D1F464FEC974ABD2551 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 0E Signing time: Tue 12 May 2026 00:21:38 +0000 Manifest this update: Tue 12 May 2026 00:16:38 +0000 Manifest next update: Wed 13 May 2026 04:17:38 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) 2: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: 0rXaj2ey8PHy9tP2k3HMzbIBNs28SCxwWpoJZXWl3ew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3e:0d:64:7b:ea:b1:f9:b8:58:7d:1f:46:4f:ec:97:4a:bd:25:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: May 12 00:16:38 2026 GMT Not After : May 13 04:17:38 2026 GMT Subject: CN=317F044C248D45A01312C443C96363A629B00D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:e6:14:cb:ec:59:2a:3e:64:43:b1:d3:1f: 60:ff:0d:9e:42:61:ef:de:82:13:5b:2c:d7:b6:73: 53:6d:12:55:9a:c3:f9:9f:bd:0d:00:31:67:80:79: 40:4e:01:41:e7:5a:03:99:7b:b8:2e:ca:c1:0e:f1: ed:89:04:2a:94:0f:d8:d3:7d:9b:64:ed:f5:d9:3b: 8b:e0:dd:d9:c4:7b:d0:1a:b1:e9:78:28:1b:3d:fa: 50:58:31:21:fd:0d:14:f7:45:cd:9c:f9:df:37:fb: eb:90:26:fb:45:d4:cd:6e:bb:c9:e3:a1:42:e0:6d: 29:a0:8b:2c:4c:c5:0f:e1:81:57:b5:f5:8d:b9:87: 2a:77:5d:4f:aa:6b:be:d3:0a:62:bb:50:85:07:e4: d2:d9:36:90:b9:0b:2b:7a:5f:7b:8e:63:40:af:14: a1:00:35:70:02:87:7b:e6:8d:82:52:db:89:aa:66: 87:1e:38:1b:7c:6a:e0:bb:26:bb:0d:2b:f3:c0:72: b2:6e:f6:ee:34:1f:60:b1:31:d9:8f:87:7d:ef:df: f5:32:49:28:3e:c3:f6:6f:0d:32:88:9f:e4:16:4a: 45:f9:c4:25:3a:df:40:5b:bd:44:99:e5:04:92:07: 5d:f7:56:5f:ee:28:b9:25:a3:44:1a:c0:ee:1e:67: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:04:4C:24:8D:45:A0:13:12:C4:43:C9:63:63:A6:29:B0:0D:47 X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:9e:cf:65:ad:e3:e6:13:bb:69:01:0b:9b:56:a1:70:3f: 80:a8:a5:c4:b4:01:ed:4f:d2:43:f8:70:3a:cf:d3:e2:b1:d2: af:4c:70:6d:2e:44:5f:06:a4:14:29:c2:d3:98:1e:f8:66:63: c2:0a:a7:6f:b0:c1:ee:93:d1:08:51:4a:3a:50:a6:6b:b3:a4: e0:a1:66:3d:fc:29:a5:64:a5:70:34:68:79:d2:ab:64:9f:7c: a6:2a:8d:2e:04:6b:ca:99:0d:18:cf:57:fe:b3:ff:45:2f:45: 6c:4d:a9:3b:15:1e:5c:45:1d:e2:d4:41:6f:14:ba:e2:2d:e9: 32:3e:a3:f7:2e:1b:91:a2:e9:e8:dc:e4:ce:f1:e2:ca:9f:16: ca:1e:8d:f7:51:7c:eb:f5:54:ad:4b:8c:c2:ca:71:c9:26:1a: 5d:89:9e:2e:af:ba:a4:a4:17:3e:27:0f:a7:fe:18:6f:43:81: 3c:8c:79:87:44:d2:e1:1a:d8:3a:d0:79:fc:a5:1f:c0:5a:aa: 7f:6f:e2:fe:8f:82:0d:0b:53:cf:64:b8:85:58:ca:05:19:b2: 00:4a:50:34:83:ea:fd:4e:b3:ce:81:66:a3:de:6c:d2:78:2d: b5:7d:c8:20:d1:8f:f6:c0:9f:97:89:cd:9f:cc:86:9f:ae:d2: 75:6a:c9:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT4NZHvqsfm4WH0fRk/sl0q9JVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA1MTIwMDE2MzhaFw0yNjA1MTMwNDE3MzhaMDMxMTAvBgNV BAMTKDMxN0YwNDRDMjQ4RDQ1QTAxMzEyQzQ0M0M5NjM2M0E2MjlCMDBENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7eYUy+xZKj5kQ7HTH2D/DZ5C Ye/eghNbLNe2c1NtElWaw/mfvQ0AMWeAeUBOAUHnWgOZe7guysEO8e2JBCqUD9jT fZtk7fXZO4vg3dnEe9Aasel4KBs9+lBYMSH9DRT3Rc2c+d83++uQJvtF1M1uu8nj oULgbSmgiyxMxQ/hgVe19Y25hyp3XU+qa77TCmK7UIUH5NLZNpC5Cyt6X3uOY0Cv FKEANXACh3vmjYJS24mqZoceOBt8auC7JrsNK/PAcrJu9u40H2CxMdmPh33v3/Uy SSg+w/ZvDTKIn+QWSkX5xCU630BbvUSZ5QSSB133Vl/uKLklo0QawO4eZyaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMX8ETCSNRaATEsRDyWNjpimwDUcwHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDvns9lrePmE7tpAQubVqFwP4CopcS0Ae1P 0kP4cDrP0+Kx0q9McG0uRF8GpBQpwtOYHvhmY8IKp2+wwe6T0QhRSjpQpmuzpOCh Zj38KaVkpXA0aHnSq2SffKYqjS4Ea8qZDRjPV/6z/0UvRWxNqTsVHlxFHeLUQW8U uuIt6TI+o/cuG5Gi6ejc5M7x4sqfFsoejfdRfOv1VK1LjMLKcckmGl2Jni6vuqSk Fz4nD6f+GG9DgTyMeYdE0uEa2DrQefylH8Baqn9v4v6Pgg0LU89kuIVYygUZsgBK UDSD6v1Os86BZqPebNJ4LbV9yCDRj/bAn5eJzZ/Mhp+u0nVqyUA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:39 2026 by rpki-client