$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: 5e8hpcNdSt82F7LmpyDOf7hnsERkHHzsdLoAMHoLBqk= Subject key identifier: 21:5E:2A:51:D7:81:12:50:D6:10:6C:7A:1C:72:28:78:A8:E1:64:DE Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 760E9BDE1DA96534E47D8AD5D47E95D537D84BE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:56:25 +0000 Manifest this update: Tue 12 May 2026 19:51:25 +0000 Manifest next update: Wed 13 May 2026 20:01:25 +0000 Files and hashes: 1: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: rL7Gj5vqXHiWmvxVqL8AIOZ4Y4Cx/hImDMXEe9g1SpM=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0e:9b:de:1d:a9:65:34:e4:7d:8a:d5:d4:7e:95:d5:37:d8:4b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: May 12 19:51:25 2026 GMT Not After : May 13 20:01:25 2026 GMT Subject: CN=215E2A51D7811250D6106C7A1C722878A8E164DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:55:77:34:84:56:7c:6a:23:f0:d6:1d:ac: a3:1e:9b:a4:54:a8:11:16:27:54:f9:b5:ab:e8:2b: 40:13:93:ce:f3:cd:07:34:62:73:04:ab:9f:fc:05: 10:bb:3f:ba:d9:65:c4:f1:54:bb:ec:b1:b2:ee:46: 25:d3:03:41:3e:af:94:a9:4a:a4:43:58:2e:e0:ff: 7f:f4:8b:d9:92:d2:e4:b1:35:3d:4b:d1:9f:69:53: ff:cf:27:da:91:dd:e9:d5:60:df:4e:52:28:fd:41: 98:02:70:02:50:00:80:33:08:5b:a1:a8:a3:50:fd: 60:12:12:48:c9:28:db:ec:f3:3b:43:ae:3c:80:7b: c7:4e:30:38:fd:a3:31:28:bb:aa:53:1b:e6:39:cd: b9:c1:65:68:58:5b:37:fb:b9:a9:b1:04:bd:d9:e4: 90:bb:4a:01:e3:d7:be:d5:e9:cd:f6:46:04:d3:f0: 14:f5:25:e0:78:68:b6:3f:bf:bb:ce:a5:d1:39:34: be:b8:20:e5:95:68:31:38:43:16:45:ca:6b:f0:e4: 59:d8:84:9c:03:2d:a1:93:1f:14:95:cd:5e:44:9f: c4:4f:61:37:f3:c8:ab:15:95:ba:c3:2f:69:22:b4: 80:73:ec:f6:4a:d9:a4:dd:48:e7:a3:86:8b:d8:8a: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:2A:51:D7:81:12:50:D6:10:6C:7A:1C:72:28:78:A8:E1:64:DE X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:92:a3:37:94:5b:50:8c:33:e3:d4:af:d0:9e:77:55:46:ba: 23:a3:26:7d:60:ab:58:62:8e:b6:4f:60:a9:5d:42:14:1c:84: 39:5b:69:54:d8:1f:5f:83:d1:b5:38:22:9a:b1:c9:87:9c:ed: b7:30:72:73:9a:87:a4:28:d5:e2:c6:73:47:80:85:f6:03:a9: 22:97:30:73:f9:18:f2:4c:f3:22:c8:3f:a0:82:80:8f:67:c6: 32:49:fa:f6:be:8a:5f:45:45:a8:18:9a:35:78:a9:a2:30:63: 53:57:28:a3:21:09:0b:11:7f:94:59:f6:0f:e0:89:53:b2:58: 00:ca:2d:19:4d:b3:b3:d9:14:9f:05:83:82:40:e3:ab:35:d8: 70:5b:d7:4a:33:37:54:e6:24:31:8c:c8:f2:ea:0e:96:59:e7: 1a:dd:cb:fe:d0:3b:95:3d:59:19:1a:9e:9e:44:4f:de:ea:82: ef:a4:45:97:c4:fd:54:29:8a:04:b5:0f:6e:34:c1:18:0c:8c: 54:62:54:3e:3d:0f:d9:8d:06:0c:48:f4:a6:33:92:f4:ee:09: f5:0d:1d:a0:5e:e4:5b:6b:75:f2:43:c4:97:b4:26:ac:ab:aa: 5b:91:61:63:39:67:cc:6f:42:5f:08:ce:df:6f:be:af:2a:07: 33:2f:af:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdg6b3h2pZTTkfYrV1H6V1TfYS+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA1MTIxOTUxMjVaFw0yNjA1MTMyMDAxMjVaMDMxMTAvBgNV BAMTKDIxNUUyQTUxRDc4MTEyNTBENjEwNkM3QTFDNzIyODc4QThFMTY0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnlV3NIRWfGoj8NYdrKMem6RU qBEWJ1T5tavoK0ATk87zzQc0YnMEq5/8BRC7P7rZZcTxVLvssbLuRiXTA0E+r5Sp SqRDWC7g/3/0i9mS0uSxNT1L0Z9pU//PJ9qR3enVYN9OUij9QZgCcAJQAIAzCFuh qKNQ/WASEkjJKNvs8ztDrjyAe8dOMDj9ozEou6pTG+Y5zbnBZWhYWzf7uamxBL3Z 5JC7SgHj177V6c32RgTT8BT1JeB4aLY/v7vOpdE5NL64IOWVaDE4QxZFymvw5FnY hJwDLaGTHxSVzV5En8RPYTfzyKsVlbrDL2kitIBz7PZK2aTdSOejhovYillRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIV4qUdeBElDWEGx6HHIoeKjhZN4wHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOSozeUW1CMM+PUr9Ced1VGuiOjJn1gq1hi jrZPYKldQhQchDlbaVTYH1+D0bU4IpqxyYec7bcwcnOah6Qo1eLGc0eAhfYDqSKX MHP5GPJM8yLIP6CCgI9nxjJJ+va+il9FRagYmjV4qaIwY1NXKKMhCQsRf5RZ9g/g iVOyWADKLRlNs7PZFJ8Fg4JA46s12HBb10ozN1TmJDGMyPLqDpZZ5xrdy/7QO5U9 WRkanp5ET97qgu+kRZfE/VQpigS1D240wRgMjFRiVD49D9mNBgxI9KYzkvTuCfUN HaBe5FtrdfJDxJe0JqyrqluRYWM5Z8xvQl8Izt9vvq8qBzMvrwY= -----END CERTIFICATE-----Generated at Wed May 13 08:45:18 2026 by rpki-client