$ rpki-client -vvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft File: A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json) Hash identifier: ErZ0oIo+jNZLl+MBNx5nu5C08HUrupcVCi/uGgxQkvk= Subject key identifier: CE:77:A5:EA:38:92:86:1C:2D:F3:25:03:DC:5A:DC:98:23:F4:2A:40 Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3 Certificate issuer: /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3 Certificate serial: 4B8ECB7132DBFE6FDEE4DAE2C25664131AEFB74F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:57:59 +0000 Manifest this update: Tue 12 May 2026 17:52:59 +0000 Manifest next update: Wed 13 May 2026 20:44:59 +0000 Files and hashes: 1: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: eTDircW7D2arBDNxheHI0uYMm583y8Zq2axutktg9z4=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8e:cb:71:32:db:fe:6f:de:e4:da:e2:c2:56:64:13:1a:ef:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3 Validity Not Before: May 12 17:52:59 2026 GMT Not After : May 13 20:44:59 2026 GMT Subject: CN=CE77A5EA3892861C2DF32503DC5ADC9823F42A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:ce:b2:ec:b2:02:44:40:54:84:6a:cc:15: 6e:ec:63:b5:1f:d2:fa:43:28:64:20:66:c3:b8:46: d1:b6:98:c2:05:4d:04:d0:47:da:60:b5:c0:2c:0c: 4a:8b:59:db:ac:07:bd:9e:ba:c7:09:e3:a3:39:d4: bf:47:a1:69:f4:03:8e:c1:e9:af:3f:ae:cf:b9:74: 4b:64:d9:89:9d:9a:c6:87:8f:44:fc:31:9f:41:1f: de:b6:ac:ed:37:01:a7:00:3f:3a:0b:48:1b:24:d7: 0c:db:19:84:eb:6e:75:f3:f0:ac:1e:5b:40:e0:70: 8f:6f:1b:7f:0b:1e:38:21:64:de:6e:6a:6a:c5:20: 93:66:51:bb:0c:95:6e:82:98:15:65:0f:2a:5a:9e: 8d:94:21:f8:b1:7b:3e:fe:dc:4b:a3:1b:60:0e:6e: bc:b5:ce:21:ff:54:71:de:e6:81:42:a0:c2:e8:47: b4:52:4f:30:4c:30:06:e5:36:f5:1c:b8:bd:8d:f1: 92:53:fd:d8:84:e7:6d:72:f3:cf:6a:b3:e7:1c:55: f0:5f:9e:b8:cd:2b:81:8d:ef:c4:be:2c:05:8b:80: 48:2d:00:1b:9b:4a:93:8e:04:a4:ad:21:54:ef:b4: 01:df:1d:69:29:4e:e3:08:3f:87:b3:36:09:fa:93: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:77:A5:EA:38:92:86:1C:2D:F3:25:03:DC:5A:DC:98:23:F4:2A:40 X509v3 Authority Key Identifier: keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:df:ee:d9:57:1c:85:47:62:56:7d:b2:36:f0:08:93:c1:8c: 31:e5:65:5e:04:68:c2:18:5f:ee:7d:ac:79:71:88:ec:17:e8: 3e:e4:3c:d5:89:00:0f:3b:db:ef:8d:62:cd:35:39:c4:86:8c: fe:62:60:0d:a1:a1:2b:98:10:3f:3b:30:12:95:7b:2c:5c:05: 99:de:6d:e7:b7:38:dc:a0:82:90:1d:94:23:13:f1:b1:6e:54: 3d:aa:96:d2:84:e1:be:ff:ad:93:1c:79:79:40:70:9b:0c:92: c7:2b:b4:42:80:79:d2:be:2c:37:89:28:41:54:84:66:de:c5: f6:a3:81:f7:b9:c1:d8:15:fb:16:e5:86:68:c5:7a:f0:8c:e1: b5:59:22:d0:d9:4b:45:27:ce:9e:a6:75:2a:6c:93:87:d2:2d: fc:d1:63:8d:a2:5a:a2:d2:73:7e:b7:c5:af:96:aa:fa:7d:5c: c0:56:4f:99:6e:2d:b9:c4:1d:d4:a5:0a:63:35:1f:27:77:7d: bf:25:c4:dc:f4:94:89:5f:76:3a:53:db:da:35:e0:01:86:1d: 33:e5:11:9a:56:92:84:dc:c9:04:94:4f:35:ff:1c:1e:a3:0f: 1a:2e:77:f3:94:c5:e9:8a:ad:a9:2c:e7:90:91:b5:42:65:46: 66:c0:b5:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS47LcTLb/m/e5NriwlZkExrvt08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5 ODU5RERBMzAeFw0yNjA1MTIxNzUyNTlaFw0yNjA1MTMyMDQ0NTlaMDMxMTAvBgNV BAMTKENFNzdBNUVBMzg5Mjg2MUMyREYzMjUwM0RDNUFEQzk4MjNGNDJBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5M6y7LICREBUhGrMFW7sY7Uf 0vpDKGQgZsO4RtG2mMIFTQTQR9pgtcAsDEqLWdusB72euscJ46M51L9HoWn0A47B 6a8/rs+5dEtk2YmdmsaHj0T8MZ9BH962rO03AacAPzoLSBsk1wzbGYTrbnXz8Kwe W0DgcI9vG38LHjghZN5uamrFIJNmUbsMlW6CmBVlDypano2UIfixez7+3EujG2AO bry1ziH/VHHe5oFCoMLoR7RSTzBMMAblNvUcuL2N8ZJT/diE521y889qs+ccVfBf nrjNK4GN78S+LAWLgEgtABubSpOOBKStIVTvtAHfHWkpTuMIP4ezNgn6k1ltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznel6jiShhwt8yUD3FrcmCP0KkAwHwYDVR0j BBgwFoAUpDxhDBUmKvH5kz4WCjCuPZhZ3aMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFiY2U3MWUtNGVlNC00NTkwLTk0ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMx NTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5ODU5RERBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDNDNjEwQzE1MjYyQUYxRjk5MzNFMTYwQTMwQUUzRDk4NTlE REEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFF M0Q5ODU5RERBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7f7tlXHIVHYlZ9sjbwCJPBjDHlZV4EaMIY X+59rHlxiOwX6D7kPNWJAA872++NYs01OcSGjP5iYA2hoSuYED87MBKVeyxcBZne bee3ONyggpAdlCMT8bFuVD2qltKE4b7/rZMceXlAcJsMkscrtEKAedK+LDeJKEFU hGbexfajgfe5wdgV+xblhmjFevCM4bVZItDZS0Unzp6mdSpsk4fSLfzRY42iWqLS c363xa+Wqvp9XMBWT5luLbnEHdSlCmM1Hyd3fb8lxNz0lIlfdjpT29o14AGGHTPl EZpWkoTcyQSUTzX/HB6jDxoud/OUxemKraks55CRtUJlRmbAtYg= -----END CERTIFICATE-----Generated at Wed May 13 00:21:38 2026 by rpki-client