$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: v0fyyyM48WRA7Mws9v5P5PVmRThH6IL+nReFFi30bXo= Subject key identifier: BB:E4:1A:62:4E:F9:64:2D:C6:A3:86:D3:0B:AA:97:81:0E:F2:20:73 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 0CEA3085A287D6C71A620F4DF98BDB43FB0285B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:08:33 +0000 Manifest this update: Wed 13 May 2026 00:03:33 +0000 Manifest next update: Thu 14 May 2026 00:24:33 +0000 Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) 2: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: Maz76+XRn4KcXuSPC5A+HORuYxpnMJ3rGPe6Oe8zIx8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ea:30:85:a2:87:d6:c7:1a:62:0f:4d:f9:8b:db:43:fb:02:85:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: May 13 00:03:33 2026 GMT Not After : May 14 00:24:33 2026 GMT Subject: CN=BBE41A624EF9642DC6A386D30BAA97810EF22073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:75:ee:5f:0f:a5:ed:38:2d:4e:75:90:c4: 60:1f:8f:9b:77:ad:46:cd:c0:c0:e5:0f:b4:82:f4: a6:a1:21:c5:87:95:74:a2:5f:1c:b2:ec:20:69:7d: 72:80:72:8d:80:ed:0c:dc:db:23:76:8e:48:a1:9a: 0c:c7:97:22:78:a5:3a:bf:46:4b:63:dc:12:56:5a: 98:4d:4a:71:58:4d:89:45:01:d0:f8:86:25:81:8d: 83:08:44:8f:b9:4f:15:ae:d0:d5:96:da:e1:47:a5: 6a:35:0f:af:a1:65:17:86:38:03:d1:8f:1f:56:63: 4f:3d:0f:1a:56:1b:8e:63:57:c6:b4:86:d5:f3:b6: f2:ec:b3:f2:cb:34:e6:89:e6:3b:cb:d5:72:47:91: c2:1b:a8:18:1d:4a:34:e3:a5:bf:f6:c4:9d:e4:6c: fe:bc:c4:48:7e:88:a9:76:d7:c8:0e:d2:e9:ec:60: f9:08:96:38:e7:f4:e2:5b:d2:37:c0:ce:bb:a8:1f: 75:48:39:54:c7:d4:2d:8b:7e:56:47:46:00:a5:e7: 76:09:a3:cf:a3:bc:12:b0:c4:33:f2:5a:4b:04:09: 35:b8:82:83:47:ba:c2:af:95:1b:ff:45:d1:c8:37: 74:d9:b0:18:b9:ac:4e:fa:12:64:2d:b1:9e:af:1c: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:1A:62:4E:F9:64:2D:C6:A3:86:D3:0B:AA:97:81:0E:F2:20:73 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:79:58:7e:6b:39:b2:95:02:57:59:e2:1b:56:d7:f7:79:55: 3c:60:34:d4:d8:78:3c:c2:ef:e3:16:a2:f1:a5:1b:d3:ed:fe: dd:dd:a1:fd:9b:f3:7d:97:1a:cc:84:ba:96:15:4a:53:f0:ee: cd:8d:89:7d:ea:e2:f2:c2:66:13:3c:c5:66:92:8c:85:a9:76: 5c:0d:11:30:3f:bd:87:09:1f:ab:d5:29:64:b5:f2:52:c2:51: fd:87:50:f7:a8:8f:ab:2e:a2:cb:d7:12:2b:6d:fb:6b:01:d6: a4:d5:b1:0b:6a:29:18:97:c8:a3:a7:1f:d5:e7:95:8d:d6:0a: b7:c3:55:43:33:d5:73:7e:d4:4d:f1:2b:59:f4:40:09:f6:e0: 6e:75:b8:b4:44:3d:59:5d:95:fe:bf:4d:3c:74:c9:9b:5a:0b: 2f:4a:b8:cf:b3:05:6e:e8:6b:05:9d:3c:e4:8f:68:0e:11:e7: 48:e8:6b:ea:b1:d4:8e:6e:73:52:c0:73:30:d1:64:4f:e2:aa: 12:f5:63:35:ee:a9:f6:44:30:69:22:3a:2b:bb:61:48:68:8f: 5d:7f:2f:0b:a9:c7:a9:95:55:6f:73:52:2e:fd:c6:03:7c:b2: 4a:a8:2d:8c:8a:69:a7:8e:5d:68:66:92:6b:c3:e8:80:97:58: 99:1b:97:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOowhaKH1scaYg9N+YvbQ/sChbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA1MTMwMDAzMzNaFw0yNjA1MTQwMDI0MzNaMDMxMTAvBgNV BAMTKEJCRTQxQTYyNEVGOTY0MkRDNkEzODZEMzBCQUE5NzgxMEVGMjIwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIXXuXw+l7TgtTnWQxGAfj5t3 rUbNwMDlD7SC9KahIcWHlXSiXxyy7CBpfXKAco2A7Qzc2yN2jkihmgzHlyJ4pTq/ Rktj3BJWWphNSnFYTYlFAdD4hiWBjYMIRI+5TxWu0NWW2uFHpWo1D6+hZReGOAPR jx9WY089DxpWG45jV8a0htXztvLss/LLNOaJ5jvL1XJHkcIbqBgdSjTjpb/2xJ3k bP68xEh+iKl218gO0unsYPkIljjn9OJb0jfAzruoH3VIOVTH1C2LflZHRgCl53YJ o8+jvBKwxDPyWksECTW4goNHusKvlRv/RdHIN3TZsBi5rE76EmQtsZ6vHAoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+QaYk75ZC3Go4bTC6qXgQ7yIHMwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh5WH5rObKVAldZ4htW1/d5VTxgNNTYeDzC 7+MWovGlG9Pt/t3dof2b832XGsyEupYVSlPw7s2NiX3q4vLCZhM8xWaSjIWpdlwN ETA/vYcJH6vVKWS18lLCUf2HUPeoj6suosvXEitt+2sB1qTVsQtqKRiXyKOnH9Xn lY3WCrfDVUMz1XN+1E3xK1n0QAn24G51uLREPVldlf6/TTx0yZtaCy9KuM+zBW7o awWdPOSPaA4R50joa+qx1I5uc1LAczDRZE/iqhL1YzXuqfZEMGkiOiu7YUhoj11/ Lwupx6mVVW9zUi79xgN8skqoLYyKaaeOXWhmkmvD6ICXWJkbl0g= -----END CERTIFICATE-----Generated at Wed May 13 02:40:21 2026 by rpki-client