$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json) Hash identifier: NJ65Zx6Zl7eBVXF2S3+g9l1K1k2olEog79P7vv7yCm8= Subject key identifier: B9:48:92:4E:A1:09:5D:CF:1E:0D:F2:55:58:9C:8B:E3:E8:DD:6C:E5 Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Certificate serial: 0559A5DEE53C9E7ADF6FF60555C56BDD6CC54437 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:17:07 +0000 Manifest this update: Tue 12 May 2026 23:12:07 +0000 Manifest next update: Thu 14 May 2026 01:21:07 +0000 Files and hashes: 1: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: gAH/uiy+RGjER+AiBMBFu79IcBXxbKXe/LE7lpYjlno=) 2: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:59:a5:de:e5:3c:9e:7a:df:6f:f6:05:55:c5:6b:dd:6c:c5:44:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Validity Not Before: May 12 23:12:07 2026 GMT Not After : May 14 01:21:07 2026 GMT Subject: CN=B948924EA1095DCF1E0DF255589C8BE3E8DD6CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:a0:49:b3:9a:a0:5b:0e:c0:49:f1:49:85: 17:3c:c6:78:4b:74:72:52:2c:69:38:c9:06:c1:98: 45:82:7a:92:36:72:0a:a9:f7:90:b7:2f:96:7a:de: 8f:5b:c0:8d:d9:92:9f:17:2e:0b:1b:36:67:63:dc: f1:ae:f5:6b:b6:2b:14:77:54:29:20:81:75:1a:cd: be:25:0d:65:88:c7:be:03:8f:d4:d3:6c:00:7a:ea: 6e:4a:85:ca:33:60:54:8e:bb:7f:6a:57:2e:51:f6: 28:8e:d3:8c:4d:04:13:3f:ea:62:1d:26:72:d1:7d: 7e:d9:a0:a0:28:e4:5d:0f:b9:b9:5d:d7:bb:33:03: a4:0e:3e:e9:5a:b8:f3:1d:aa:e9:13:ad:18:54:3a: 47:87:0e:f6:39:f0:d2:42:cc:57:fd:e8:d6:17:39: 0b:9e:02:1d:f4:f1:3c:1d:1f:cf:9e:da:07:e5:00: 92:a6:10:06:b4:af:7f:fa:1c:79:96:ad:4a:2b:69: c9:6e:e4:f1:ab:6a:9e:af:79:99:0b:d4:12:d1:ac: e5:fa:5c:86:6a:71:cd:ac:4f:d9:7e:ba:d9:b4:9f: 16:3a:ca:0b:43:d0:43:a9:eb:cc:a3:b4:59:5c:3e: da:8c:32:d7:cb:b0:8c:d4:eb:1a:27:f0:ee:df:35: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:92:4E:A1:09:5D:CF:1E:0D:F2:55:58:9C:8B:E3:E8:DD:6C:E5 X509v3 Authority Key Identifier: keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:63:d3:a4:ae:29:6a:32:d7:ac:3d:51:39:a6:a2:5d:8b:b5: 2a:87:7e:21:51:64:77:b3:8a:9e:bb:09:72:89:42:03:66:38: 31:d3:51:9d:f5:42:27:31:d3:dc:95:b6:37:71:2f:c9:7d:57: d3:1a:8d:8e:5a:4a:4b:08:a6:d4:38:5e:90:0a:78:d9:8c:06: 0e:90:80:95:91:8a:80:d1:54:fb:61:65:f6:8a:58:92:7b:1e: 6a:ab:9b:be:ab:fd:09:75:57:d2:b6:84:03:34:92:f0:98:73: a0:2e:0a:ca:d6:78:28:23:d7:5e:c5:1d:7b:76:a9:f5:e6:4d: 98:05:ad:a2:3e:e2:fe:cf:94:ce:ca:f7:79:7d:59:da:4d:8f: 90:c8:06:ad:3b:12:8c:b2:c7:ff:e8:e7:2a:4f:f9:81:ae:a0: 5f:c5:78:cd:c3:e9:5e:09:08:64:3e:d9:77:c5:3a:e4:3d:bc: 10:10:a5:af:22:37:b7:5d:8f:f1:77:fe:3a:4a:a6:71:1d:b2: 51:34:3e:a1:52:ac:60:e3:26:3e:da:36:75:10:f5:49:de:b1: a5:44:bf:68:40:b3:80:80:ab:53:41:b6:92:f0:e6:1e:38:0e: ea:f2:e2:ed:fa:4b:21:eb:c7:3d:06:ed:97:f3:32:6b:e2:50: 33:8d:b3:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVml3uU8nnrfb/YFVcVr3WzFRDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2 OThGRDhCMDAeFw0yNjA1MTIyMzEyMDdaFw0yNjA1MTQwMTIxMDdaMDMxMTAvBgNV BAMTKEI5NDg5MjRFQTEwOTVEQ0YxRTBERjI1NTU4OUM4QkUzRThERDZDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9qBJs5qgWw7ASfFJhRc8xnhL dHJSLGk4yQbBmEWCepI2cgqp95C3L5Z63o9bwI3Zkp8XLgsbNmdj3PGu9Wu2KxR3 VCkggXUazb4lDWWIx74Dj9TTbAB66m5KhcozYFSOu39qVy5R9iiO04xNBBM/6mId JnLRfX7ZoKAo5F0Publd17szA6QOPulauPMdqukTrRhUOkeHDvY58NJCzFf96NYX OQueAh308TwdH8+e2gflAJKmEAa0r3/6HHmWrUoraclu5PGrap6veZkL1BLRrOX6 XIZqcc2sT9l+utm0nxY6ygtD0EOp68yjtFlcPtqMMtfLsIzU6xon8O7fNSOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUiSTqEJXc8eDfJVWJyL4+jdbOUwHwYDVR0j BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0 REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBC MUE2OThGRDhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxj06SuKWoy16w9UTmmol2LtSqHfiFRZHez ip67CXKJQgNmODHTUZ31Qicx09yVtjdxL8l9V9MajY5aSksIptQ4XpAKeNmMBg6Q gJWRioDRVPthZfaKWJJ7Hmqrm76r/Ql1V9K2hAM0kvCYc6AuCsrWeCgj117FHXt2 qfXmTZgFraI+4v7PlM7K93l9WdpNj5DIBq07Eoyyx//o5ypP+YGuoF/FeM3D6V4J CGQ+2XfFOuQ9vBAQpa8iN7ddj/F3/jpKpnEdslE0PqFSrGDjJj7aNnUQ9UnesaVE v2hAs4CAq1NBtpLw5h44Dury4u36SyHrxz0G7ZfzMmviUDONs6Q= -----END CERTIFICATE-----Generated at Wed May 13 02:20:27 2026 by rpki-client