$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json) Hash identifier: mSDca/M53ihIBaxt/BXN5YBTasNkP/iIRttw/Zqw4As= Subject key identifier: 6A:34:F7:59:7E:C5:D7:1A:FC:A0:A6:7F:D5:64:05:B3:51:A9:EB:A7 Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Certificate serial: 2F2042B167BC8D5758CFB941C2D9D2C874E10D42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:34 +0000 Manifest this update: Tue 12 May 2026 20:27:34 +0000 Manifest next update: Wed 13 May 2026 23:19:34 +0000 Files and hashes: 1: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: 5FvKBhxGkO8l9zy43YoAcHmE8bg1EiQCA1roJd5MoVQ=) 2: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=) 4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:20:42:b1:67:bc:8d:57:58:cf:b9:41:c2:d9:d2:c8:74:e1:0d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Validity Not Before: May 12 20:27:34 2026 GMT Not After : May 13 23:19:34 2026 GMT Subject: CN=6A34F7597EC5D71AFCA0A67FD56405B351A9EBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:0b:ba:49:5d:d5:de:68:41:76:a1:7a:ba: 2e:79:7d:b9:f2:f1:0d:7e:97:e9:e2:98:8b:74:f3: 36:c6:9a:ed:83:1c:52:fd:e7:c8:f9:67:63:e6:1c: e8:4e:2e:c8:10:df:46:cd:d8:94:24:cd:7b:44:1f: 57:e3:a8:88:df:98:09:4b:e2:5f:7f:78:2d:67:8f: 6a:25:ff:6c:8c:dc:67:07:fb:e8:6b:a2:38:9c:fa: 2b:3e:fd:a6:8f:e6:40:bf:48:9b:da:41:f5:2f:a5: f6:09:51:5e:15:09:36:72:6c:f1:24:a6:f3:98:f3: 35:2a:25:bf:22:c6:5e:56:23:1e:84:7d:b2:7d:d3: eb:ad:fa:af:53:4f:4c:4f:87:7b:4e:f7:5e:f4:16: 54:63:85:61:52:27:fd:7c:fa:14:a3:24:61:b3:25: 19:82:19:5f:7a:1b:88:4a:6a:b0:6c:4a:17:69:b9: a0:2f:4a:18:2b:5d:98:f1:c2:66:84:d7:8f:75:de: b8:5c:2b:76:9d:c1:29:ad:54:2f:ba:0a:a3:5a:12: 14:15:77:ca:16:c8:5a:01:6c:8d:a7:4b:1b:6e:ea: 5f:72:17:b6:2b:26:74:27:1f:18:9e:72:80:ad:85: dd:07:a5:f7:cd:07:e1:b1:a6:cb:8f:47:b9:79:eb: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:F7:59:7E:C5:D7:1A:FC:A0:A6:7F:D5:64:05:B3:51:A9:EB:A7 X509v3 Authority Key Identifier: keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:ad:6f:ee:4f:71:17:45:1c:da:95:ee:d9:96:55:79:1c: 52:ed:e6:1c:89:f8:9b:3f:87:58:8e:6f:a2:78:03:56:bb:6f: c3:7f:11:1e:10:be:af:c7:8a:7d:89:a4:65:32:26:a3:b4:7f: a4:bd:7b:2d:8d:11:52:73:c2:cd:8d:db:f1:de:5f:21:3a:2a: 7d:98:11:16:73:96:34:73:14:c8:8c:70:bc:fe:3e:b1:04:f2: 31:0d:18:33:5b:5e:96:51:13:c9:28:98:43:46:78:a3:d6:4d: 79:1d:82:4c:04:dd:08:33:76:ff:09:94:18:48:c2:4b:8c:ba: 8c:54:cf:0f:ef:cd:22:41:87:e2:23:2c:79:1e:ea:33:f3:0b: 6e:2c:ca:0e:20:5e:07:a1:c7:e6:b6:5f:51:2b:ac:a1:45:fa: bd:36:7a:c6:66:e6:25:88:b6:9a:88:18:5e:f9:95:4b:bb:c6: 62:7d:22:83:13:b4:24:5f:cd:17:92:b3:59:7d:fc:fa:a9:04: f4:cc:b9:cd:92:55:85:9b:3c:23:c3:32:23:c9:a3:c5:df:13: 77:46:ac:18:99:25:29:7d:f5:65:ba:03:37:cc:5b:87:5b:48: 99:f5:75:12:8d:52:c0:1d:42:47:cd:68:aa:04:76:44:73:d3: 8d:3c:51:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyBCsWe8jVdYz7lBwtnSyHThDUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFFRkIy OTc4MzcyNDAeFw0yNjA1MTIyMDI3MzRaFw0yNjA1MTMyMzE5MzRaMDMxMTAvBgNV BAMTKDZBMzRGNzU5N0VDNUQ3MUFGQ0EwQTY3RkQ1NjQwNUIzNTFBOUVCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0gu6SV3V3mhBdqF6ui55fbny 8Q1+l+nimIt08zbGmu2DHFL958j5Z2PmHOhOLsgQ30bN2JQkzXtEH1fjqIjfmAlL 4l9/eC1nj2ol/2yM3GcH++hrojic+is+/aaP5kC/SJvaQfUvpfYJUV4VCTZybPEk pvOY8zUqJb8ixl5WIx6EfbJ90+ut+q9TT0xPh3tO9170FlRjhWFSJ/18+hSjJGGz JRmCGV96G4hKarBsShdpuaAvShgrXZjxwmaE14913rhcK3adwSmtVC+6CqNaEhQV d8oWyFoBbI2nSxtu6l9yF7YrJnQnHxiecoCthd0HpffNB+GxpsuPR7l563lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajT3WX7F1xr8oKZ/1WQFs1Gp66cwHwYDVR0j BBgwFoAUgB0bTua7adP32i2p372u+yl4NyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjODAxYTAtNzkxMi00YjAxLWEyODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVF NkJCNjlEM0Y3REEyREE5REZCREFFRkIyOTc4MzcyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDFEMUI0RUU2QkI2OUQzRjdEQTJEQTlERkJEQUVGQjI5Nzgz NzI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFF RkIyOTc4MzcyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ9rW/uT3EXRRzale7ZllV5HFLt5hyJ+Js/ h1iOb6J4A1a7b8N/ER4Qvq/Hin2JpGUyJqO0f6S9ey2NEVJzws2N2/HeXyE6Kn2Y ERZzljRzFMiMcLz+PrEE8jENGDNbXpZRE8komENGeKPWTXkdgkwE3Qgzdv8JlBhI wkuMuoxUzw/vzSJBh+IjLHke6jPzC24syg4gXgehx+a2X1ErrKFF+r02esZm5iWI tpqIGF75lUu7xmJ9IoMTtCRfzReSs1l9/PqpBPTMuc2SVYWbPCPDMiPJo8XfE3dG rBiZJSl99WW6AzfMW4dbSJn1dRKNUsAdQkfNaKoEdkRz0408URE= -----END CERTIFICATE-----Generated at Wed May 13 00:44:34 2026 by rpki-client