$ rpki-client -vvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: 9SL+0YAxMdOEEU5S1Mibjxigw7LwrQw8DvcVH2dZBjw= Subject key identifier: 98:6A:2E:57:06:FF:18:A6:2B:F0:3B:BD:D4:5C:69:42:5C:FC:36:58 Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 2A163BC1E0CE0F449ED262BD13C79B1E9DC00D6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:52:54 +0000 Manifest this update: Tue 12 May 2026 06:47:54 +0000 Manifest next update: Wed 13 May 2026 09:15:54 +0000 Files and hashes: 1: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 2: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) 3: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: uZJhIbe9K/zvSiLIz9cl5ZJX7CktTrUoVfjXEO5IE4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:16:3b:c1:e0:ce:0f:44:9e:d2:62:bd:13:c7:9b:1e:9d:c0:0d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: May 12 06:47:54 2026 GMT Not After : May 13 09:15:54 2026 GMT Subject: CN=986A2E5706FF18A62BF03BBDD45C69425CFC3658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:ec:d4:80:4f:ba:0d:66:ca:68:63:2d:04: 52:ea:e4:b2:dc:00:fa:46:d0:5b:56:d1:21:3d:e5: 6e:8b:76:58:50:28:b2:2d:b9:c4:76:bc:2c:18:b3: 08:f9:bb:af:7c:34:43:c0:c3:58:d4:6f:64:1f:81: d2:e5:67:b3:83:82:a5:c8:a5:3d:84:bd:c7:01:40: ea:4f:6c:3a:b8:ef:b6:5c:08:80:e1:9e:51:5c:33: a1:2b:7a:97:2f:71:7f:ed:ec:cc:14:50:b0:34:ef: 1b:b2:11:b6:3f:e8:aa:bc:50:23:5e:09:cb:8a:f6: f2:1b:1f:f1:cf:89:5f:2a:91:b7:fb:cb:98:89:7c: f6:34:9c:12:e9:b8:97:58:c1:d7:c3:69:87:eb:1b: 39:2b:46:5a:a4:1b:1c:d3:c4:2c:28:48:04:47:38: 1a:eb:1b:06:29:f6:81:19:e6:fb:f9:4c:39:d2:c3: a0:f4:02:de:df:69:48:5d:b4:7b:fb:b7:9f:76:13: ed:4b:0e:04:39:0f:67:f2:08:58:e3:b0:df:34:47: e2:2c:ed:9d:cb:79:bb:22:5c:92:05:1f:a4:6c:a4: d8:7c:c6:c0:54:d9:d0:f6:de:f4:23:4a:73:ba:a8: 39:a3:51:62:3a:48:b6:a4:81:54:8c:67:c7:a7:4e: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:2E:57:06:FF:18:A6:2B:F0:3B:BD:D4:5C:69:42:5C:FC:36:58 X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:11:7d:df:b0:c3:53:ab:91:93:8f:eb:b1:68:d0:83:33:91: 7d:d3:0f:5f:95:db:63:de:af:6b:de:a6:9b:b4:95:ae:f0:81: 1b:77:22:08:c5:21:c2:3b:49:aa:ad:b4:d1:b7:b1:c5:1c:04: 05:05:f1:ac:53:a8:0c:dd:4a:2c:8a:62:55:a5:de:2a:af:0a: d0:e8:ee:5b:1b:ef:3f:66:4d:49:97:20:6b:5a:c4:43:5e:81: 09:81:7d:4a:1e:0a:d1:8d:fc:66:5f:21:74:fb:d3:a1:95:dc: 52:96:79:4c:d9:33:4b:fd:3f:67:e4:bd:60:eb:83:db:3b:b1: 73:cc:d5:75:0e:51:a8:d2:9b:43:c5:d5:29:32:43:14:cd:21: e4:8b:7b:1f:51:5c:4b:8a:29:28:a4:21:99:c1:af:97:89:97: d7:c8:81:3d:7d:39:f5:f7:18:6f:2a:c7:61:94:62:19:0a:94: f5:03:1b:d3:df:54:25:78:23:5f:70:61:0b:92:d3:0d:ab:8c: 53:c4:58:1c:98:a8:bb:07:76:57:ed:37:33:68:37:9e:b0:a8: b0:ec:a2:a0:a9:8a:79:35:da:c3:79:d7:1b:eb:b3:65:51:a5: fb:3b:c1:0a:d5:be:ee:7e:00:85:1e:48:0c:08:28:52:a4:27: 90:fa:fe:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhY7weDOD0Se0mK9E8ebHp3ADWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA1MTIwNjQ3NTRaFw0yNjA1MTMwOTE1NTRaMDMxMTAvBgNV BAMTKDk4NkEyRTU3MDZGRjE4QTYyQkYwM0JCREQ0NUM2OTQyNUNGQzM2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQuzUgE+6DWbKaGMtBFLq5LLc APpG0FtW0SE95W6LdlhQKLItucR2vCwYswj5u698NEPAw1jUb2QfgdLlZ7ODgqXI pT2EvccBQOpPbDq477ZcCIDhnlFcM6ErepcvcX/t7MwUULA07xuyEbY/6Kq8UCNe CcuK9vIbH/HPiV8qkbf7y5iJfPY0nBLpuJdYwdfDaYfrGzkrRlqkGxzTxCwoSARH OBrrGwYp9oEZ5vv5TDnSw6D0At7faUhdtHv7t592E+1LDgQ5D2fyCFjjsN80R+Is 7Z3LebsiXJIFH6RspNh8xsBU2dD23vQjSnO6qDmjUWI6SLakgVSMZ8enToEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGouVwb/GKYr8Du91FxpQlz8NlgwHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJURfd+ww1OrkZOP67Fo0IMzkX3TD1+V22Pe r2veppu0la7wgRt3IgjFIcI7SaqttNG3scUcBAUF8axTqAzdSiyKYlWl3iqvCtDo 7lsb7z9mTUmXIGtaxENegQmBfUoeCtGN/GZfIXT706GV3FKWeUzZM0v9P2fkvWDr g9s7sXPM1XUOUajSm0PF1SkyQxTNIeSLex9RXEuKKSikIZnBr5eJl9fIgT19OfX3 GG8qx2GUYhkKlPUDG9PfVCV4I19wYQuS0w2rjFPEWByYqLsHdlftNzNoN56wqLDs oqCpink12sN51xvrs2VRpfs7wQrVvu5+AIUeSAwIKFKkJ5D6/ik= -----END CERTIFICATE-----Generated at Wed May 13 00:21:37 2026 by rpki-client