$ rpki-client -vvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: QmQ0sTWz5gXxi/BBb+EqM3svFnaCtmvKBegyrDVoPDY= Subject key identifier: B4:A8:58:36:D1:D0:6F:38:68:12:19:F3:EC:B8:15:AA:05:5C:37:F6 Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 0C6B1ACB0FEB31D79CE7B2326C138A5623372E1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:51 +0000 Manifest this update: Tue 12 May 2026 17:47:51 +0000 Manifest next update: Wed 13 May 2026 20:39:51 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: FjXRjyTIW7jBUwedjN45SmsENn+GAhcicAGgdt3Asa8=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: U9buHNsi2jDfo5KH+0Kih4bcNzBuDuVWdR/10Uc4Q3A=) 3: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: s+mtobtALMNmVRI6FqeqDkXnBDnXcts3Itr3twlVL7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6b:1a:cb:0f:eb:31:d7:9c:e7:b2:32:6c:13:8a:56:23:37:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: May 12 17:47:51 2026 GMT Not After : May 13 20:39:51 2026 GMT Subject: CN=B4A85836D1D06F38681219F3ECB815AA055C37F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:67:0c:83:b4:71:de:64:0c:b9:09:c5:a3: 0b:f8:d3:9b:6e:60:32:e5:55:1d:9d:12:54:28:fd: 88:f3:d6:52:b5:15:65:92:93:89:4e:fd:51:7e:2f: fd:09:35:f1:93:57:8c:4f:b7:1c:24:40:f6:39:aa: 34:9f:c8:cc:34:61:72:6e:ca:02:45:e9:8d:c6:84: c6:2a:9a:73:6d:e4:b5:eb:71:f0:9d:54:97:37:b0: 92:02:ba:96:25:ee:71:96:e1:00:b9:06:2f:83:2f: c0:c6:38:38:1a:5f:d2:e1:c2:3b:3c:44:ad:54:f9: a8:56:d4:c8:8f:a7:b6:5e:ab:91:a0:42:3e:78:52: e2:e6:6f:df:cb:12:71:e0:fe:ef:01:dc:bd:df:fd: ad:cc:a9:a4:d4:3a:14:93:51:6d:9b:f5:b7:4d:2f: ba:a9:b0:b2:8a:31:0a:6b:4e:a3:52:a0:fa:f7:c0: 07:da:7b:aa:64:b9:2b:58:38:9b:0a:02:8b:37:1b: 5d:80:5f:85:8a:6a:43:4a:cd:da:8e:01:a5:05:73: b3:d6:f6:61:34:d7:b1:4b:91:63:78:86:f9:89:a5: 6c:35:6f:ad:04:59:42:d4:a9:36:8a:18:1b:6b:ce: 38:e4:45:4f:11:98:e6:38:24:7d:61:35:6e:e0:fd: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A8:58:36:D1:D0:6F:38:68:12:19:F3:EC:B8:15:AA:05:5C:37:F6 X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f4:94:b5:8b:81:20:23:40:42:89:0a:58:5d:1e:47:79:a3: da:fe:10:65:3b:55:75:3f:1a:95:f4:bb:30:b7:be:0c:aa:54: 8c:ed:49:5c:22:eb:80:0e:d6:19:04:71:5d:a2:75:f0:37:cc: 26:e3:e8:21:93:77:d3:32:ab:ec:92:36:cd:c9:6c:7f:15:79: 1a:b3:a5:5d:b5:a5:f1:fa:98:a7:23:8a:00:c7:9d:4d:f8:9b: 7d:03:1f:3f:9f:b0:79:8c:21:13:58:cd:93:a9:43:5a:6f:b2: 1d:6f:33:7d:d1:8a:1b:18:92:8e:a0:f2:09:c8:c2:4c:74:e0: 12:11:84:49:d5:74:c0:43:3d:2f:a7:58:26:8c:91:84:c5:d4: 83:36:32:a9:a9:8a:e6:9b:fc:f3:6d:f9:4e:ce:b8:f9:09:76: 82:a3:22:30:e5:42:82:ce:e7:63:fe:e6:af:6a:11:c3:8b:51: 70:dd:3f:1b:1c:03:1d:1d:13:69:b8:b1:97:4d:d0:48:60:5d: 2c:0d:2f:e1:a0:1e:a6:f4:9e:9a:f6:1d:75:2b:76:16:01:8e: 6a:6a:6a:ec:25:1b:08:f1:5c:92:f1:47:b5:32:ce:1f:d1:01: a4:54:ac:60:7a:b2:d0:0a:ad:91:b0:5b:c2:ec:1c:19:31:9c: 50:a7:90:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGsayw/rMdec57IybBOKViM3LhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA1MTIxNzQ3NTFaFw0yNjA1MTMyMDM5NTFaMDMxMTAvBgNV BAMTKEI0QTg1ODM2RDFEMDZGMzg2ODEyMTlGM0VDQjgxNUFBMDU1QzM3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOGcMg7Rx3mQMuQnFowv405tu YDLlVR2dElQo/Yjz1lK1FWWSk4lO/VF+L/0JNfGTV4xPtxwkQPY5qjSfyMw0YXJu ygJF6Y3GhMYqmnNt5LXrcfCdVJc3sJICupYl7nGW4QC5Bi+DL8DGODgaX9Lhwjs8 RK1U+ahW1MiPp7Zeq5GgQj54UuLmb9/LEnHg/u8B3L3f/a3MqaTUOhSTUW2b9bdN L7qpsLKKMQprTqNSoPr3wAfae6pkuStYOJsKAos3G12AX4WKakNKzdqOAaUFc7PW 9mE017FLkWN4hvmJpWw1b60EWULUqTaKGBtrzjjkRU8RmOY4JH1hNW7g/UiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKhYNtHQbzhoEhnz7LgVqgVcN/YwHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/0lLWLgSAjQEKJClhdHkd5o9r+EGU7VXU/ GpX0uzC3vgyqVIztSVwi64AO1hkEcV2idfA3zCbj6CGTd9Myq+ySNs3JbH8VeRqz pV21pfH6mKcjigDHnU34m30DHz+fsHmMIRNYzZOpQ1pvsh1vM33RihsYko6g8gnI wkx04BIRhEnVdMBDPS+nWCaMkYTF1IM2Mqmpiuab/PNt+U7OuPkJdoKjIjDlQoLO 52P+5q9qEcOLUXDdPxscAx0dE2m4sZdN0EhgXSwNL+GgHqb0npr2HXUrdhYBjmpq auwlGwjxXJLxR7Uyzh/RAaRUrGB6stAKrZGwW8LsHBkxnFCnkD0= -----END CERTIFICATE-----Generated at Wed May 13 01:36:24 2026 by rpki-client