$ rpki-client -vvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: ZAun+RxS8zIRd90KGdTmpUv7layym0z4zWPD4qBfsFU= Subject key identifier: DC:16:EA:EA:3C:22:17:8D:B1:17:46:A0:BE:AD:B8:C3:22:EB:F0:8E Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 61E6FBA2D0B7427FE327F0B57D99D43BCFDBE98B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:38:39 +0000 Manifest this update: Tue 12 May 2026 13:33:39 +0000 Manifest next update: Wed 13 May 2026 15:52:39 +0000 Files and hashes: 1: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: 2cSXw1buT6oeiwD5sS65lm0kZunGUxUuN9CdPz2MKVM=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e6:fb:a2:d0:b7:42:7f:e3:27:f0:b5:7d:99:d4:3b:cf:db:e9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: May 12 13:33:39 2026 GMT Not After : May 13 15:52:39 2026 GMT Subject: CN=DC16EAEA3C22178DB11746A0BEADB8C322EBF08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:45:fc:5f:c7:29:43:5e:96:6a:99:5a:6d: 90:b9:5b:16:c0:6a:76:2f:99:4d:69:94:59:76:bf: 1f:3a:f1:09:fd:18:34:db:90:f8:3b:6c:9a:20:82: c7:c9:12:a1:1b:69:85:f7:6c:5e:bb:df:3f:1b:c9: d1:72:57:48:09:dc:ed:c4:bb:3b:9d:65:4f:e3:bf: 36:c3:8b:c2:92:04:46:85:7b:a9:63:49:1a:5d:77: aa:98:5b:d5:53:fa:a0:ab:7f:2c:fa:1f:d7:8d:89: 31:b4:ab:36:c1:b1:ff:d7:9f:11:d8:f9:60:e8:0b: d3:37:66:3c:25:1d:e2:69:5a:cb:a1:e4:6f:31:5f: 9e:a6:ad:21:01:1e:85:4c:97:ac:d5:b5:80:78:c5: bb:8a:b5:2e:f1:c7:6a:ed:c6:c8:b9:01:17:e0:6e: df:29:39:9a:b5:2c:22:ac:e8:ee:d7:09:94:9e:46: 7a:cb:53:fc:f1:8f:92:6f:0e:b4:b4:bc:98:2e:e1: 32:fd:c1:63:0a:3f:f5:a9:26:b5:32:c7:38:ea:d9: 34:87:2d:4b:60:2f:a2:3a:63:18:29:08:bc:aa:d7: c5:62:b5:e9:0f:fb:79:24:4b:8e:b2:b3:59:7d:4d: 1a:05:27:d2:84:3c:85:27:7b:b7:ac:61:79:b8:84: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:EA:EA:3C:22:17:8D:B1:17:46:A0:BE:AD:B8:C3:22:EB:F0:8E X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3d:2f:28:fa:1c:9e:94:23:8b:20:e1:92:6b:1d:68:ad:e4: b7:a7:4d:36:51:a7:ea:b6:6f:b3:97:af:35:84:74:b4:f6:4c: 84:6c:78:cd:17:25:5b:ee:b4:0d:77:e7:1c:6d:58:93:80:20: a2:d5:be:ab:8a:15:35:47:d7:12:f9:00:34:e0:87:0a:9f:67: fa:69:1d:95:c4:f4:09:eb:3c:ef:95:45:ca:9d:be:61:be:82: 0c:c9:64:0c:d1:f6:bb:62:d9:ed:cc:46:5e:2c:fa:d0:98:4c: b0:0a:0b:80:cf:cc:63:e6:e2:bd:6b:73:f8:a7:24:cf:0c:3c: 13:9a:2f:91:9a:08:ff:0c:14:03:18:8f:8a:62:3f:9c:c8:ab: e6:24:85:d0:c0:3b:85:af:7a:3f:d7:10:4c:bc:db:18:f3:35: cd:4f:0d:52:6c:1a:13:47:28:84:42:9f:60:52:81:0f:8a:32: 9a:f1:e5:d0:c8:43:c4:ad:be:90:89:03:e3:ee:0f:13:4e:bc: 56:ed:99:84:ec:7b:aa:31:71:6e:8c:d3:26:45:c8:88:45:0f: fb:72:31:8d:18:fe:82:20:95:2f:8a:17:cd:39:1a:b0:d5:ff: 0f:a1:b2:3f:71:87:34:01:73:e3:49:cb:78:51:24:d6:90:2b: b8:6a:6a:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYeb7otC3Qn/jJ/C1fZnUO8/b6YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA1MTIxMzMzMzlaFw0yNjA1MTMxNTUyMzlaMDMxMTAvBgNV BAMTKERDMTZFQUVBM0MyMjE3OERCMTE3NDZBMEJFQURCOEMzMjJFQkYwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UEX8X8cpQ16WaplabZC5WxbA anYvmU1plFl2vx868Qn9GDTbkPg7bJoggsfJEqEbaYX3bF673z8bydFyV0gJ3O3E uzudZU/jvzbDi8KSBEaFe6ljSRpdd6qYW9VT+qCrfyz6H9eNiTG0qzbBsf/XnxHY +WDoC9M3ZjwlHeJpWsuh5G8xX56mrSEBHoVMl6zVtYB4xbuKtS7xx2rtxsi5ARfg bt8pOZq1LCKs6O7XCZSeRnrLU/zxj5JvDrS0vJgu4TL9wWMKP/WpJrUyxzjq2TSH LUtgL6I6YxgpCLyq18VitekP+3kkS46ys1l9TRoFJ9KEPIUne7esYXm4hFjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Bbq6jwiF42xF0agvq24wyLr8I4wHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw9Lyj6HJ6UI4sg4ZJrHWit5LenTTZRp+q2 b7OXrzWEdLT2TIRseM0XJVvutA135xxtWJOAIKLVvquKFTVH1xL5ADTghwqfZ/pp HZXE9AnrPO+VRcqdvmG+ggzJZAzR9rti2e3MRl4s+tCYTLAKC4DPzGPm4r1rc/in JM8MPBOaL5GaCP8MFAMYj4piP5zIq+YkhdDAO4Wvej/XEEy82xjzNc1PDVJsGhNH KIRCn2BSgQ+KMprx5dDIQ8StvpCJA+PuDxNOvFbtmYTse6oxcW6M0yZFyIhFD/ty MY0Y/oIglS+KF805GrDV/w+hsj9xhzQBc+NJy3hRJNaQK7hqarQ= -----END CERTIFICATE-----Generated at Tue May 12 23:20:42 2026 by rpki-client