$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json) Hash identifier: /xfgFbnwlM9WD5Br9YmtARSh6W+Ut5+tgKVq/ziqKNo= Subject key identifier: C3:24:8A:62:FF:CF:E8:9A:13:5B:04:76:BB:C2:39:6A:A1:11:CA:ED Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Certificate serial: 1A90E7429D546B3D96F415F2183E897FE0AE637F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:50 +0000 Manifest this update: Tue 12 May 2026 20:06:50 +0000 Manifest next update: Wed 13 May 2026 20:34:50 +0000 Files and hashes: 1: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: 9wLBvXScr58D5hI0s4krODDVpXFIcBbD2KqcrM9nUss=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:90:e7:42:9d:54:6b:3d:96:f4:15:f2:18:3e:89:7f:e0:ae:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76 Validity Not Before: May 12 20:06:50 2026 GMT Not After : May 13 20:34:50 2026 GMT Subject: CN=C3248A62FFCFE89A135B0476BBC2396AA111CAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:6a:79:5d:e5:bb:7f:7b:44:38:a8:cb:4b: 08:b0:a2:a8:fa:99:8b:27:2f:8b:9f:83:65:ab:84: 61:c2:e2:f3:b3:16:f6:5d:e9:5a:a1:56:96:35:be: 0b:07:59:d9:6d:cd:16:d0:5a:99:48:47:6d:1a:04: 0b:83:14:37:19:57:b4:b5:80:66:b2:b0:7a:d2:38: 3d:93:65:81:1a:82:c9:9b:9d:bc:5e:e6:8a:6e:42: 2a:a7:8b:3d:18:7d:79:28:fe:56:02:b5:b2:6d:50: e7:88:fc:80:78:ec:7f:47:59:5a:66:7c:65:8c:05: b9:01:a8:b2:50:7f:18:f8:5c:8c:a9:7d:cb:d0:45: 42:e5:79:45:b5:6c:15:d0:99:43:1d:b3:c1:d7:bf: 49:31:97:86:e1:1b:45:2e:42:e0:21:19:fd:d6:b7: 22:c9:1b:59:9b:8d:59:92:d3:d1:3f:93:bc:fc:5e: ae:ce:36:f1:39:ff:fc:61:62:81:05:96:6d:6c:25: a0:0f:5e:59:e8:ea:d7:ad:b2:a6:77:75:12:ff:bf: 36:79:bb:b5:d3:69:cb:f9:96:8a:11:8d:b2:41:a8: 36:82:fb:a7:8f:24:5c:74:51:c7:f6:50:f6:b3:04: bd:3f:3b:01:89:ce:46:50:e1:3d:53:ac:30:d2:a3: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:8A:62:FF:CF:E8:9A:13:5B:04:76:BB:C2:39:6A:A1:11:CA:ED X509v3 Authority Key Identifier: keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:37:d3:c5:75:3b:46:cb:8b:6a:2c:43:ed:08:46:80:07: 9b:c8:14:9a:2d:ec:d6:5e:fd:2d:35:72:19:13:e8:2d:23:69: f7:b7:25:ec:3c:35:6b:a0:78:16:34:5b:53:91:7c:54:c8:03: f9:05:c3:64:e0:2a:9c:fe:fe:66:db:67:8d:e3:95:38:00:ea: 2d:39:95:c0:d2:67:7c:e3:43:cc:96:82:b4:ae:5e:0b:2e:35: 8d:a0:6a:73:b6:aa:5c:c8:91:88:25:b7:7f:49:2d:ce:ff:cd: e9:35:f2:24:c7:25:1d:ba:c1:d5:81:57:d3:6b:77:98:84:98: 72:4e:90:32:53:f1:45:7b:5b:f5:ad:42:2a:ca:24:c7:64:f8: da:74:75:35:9b:b2:74:f4:06:32:54:13:5a:2d:a3:36:c1:a3: 6b:b0:90:b0:33:0a:b0:2c:dc:10:a1:37:13:be:c1:5a:0d:2a: d4:da:23:ea:1b:2e:8c:de:d3:24:16:80:6b:0d:db:38:6a:1e: 72:94:af:3a:62:95:ac:fb:1a:2e:a0:28:93:64:ca:86:be:fa: e1:e0:83:e6:45:bd:79:38:db:80:be:5e:e0:30:3c:f7:44:10: 83:78:90:f3:6a:b4:e8:80:c5:fb:a7:ce:d5:38:da:eb:37:d1: b6:60:bb:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpDnQp1Uaz2W9BXyGD6Jf+CuY38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdB OEE3RkE3NjAeFw0yNjA1MTIyMDA2NTBaFw0yNjA1MTMyMDM0NTBaMDMxMTAvBgNV BAMTKEMzMjQ4QTYyRkZDRkU4OUExMzVCMDQ3NkJCQzIzOTZBQTExMUNBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphmp5XeW7f3tEOKjLSwiwoqj6 mYsnL4ufg2WrhGHC4vOzFvZd6VqhVpY1vgsHWdltzRbQWplIR20aBAuDFDcZV7S1 gGaysHrSOD2TZYEagsmbnbxe5opuQiqniz0YfXko/lYCtbJtUOeI/IB47H9HWVpm fGWMBbkBqLJQfxj4XIypfcvQRULleUW1bBXQmUMds8HXv0kxl4bhG0UuQuAhGf3W tyLJG1mbjVmS09E/k7z8Xq7ONvE5//xhYoEFlm1sJaAPXlno6tetsqZ3dRL/vzZ5 u7XTacv5looRjbJBqDaC+6ePJFx0Ucf2UPazBL0/OwGJzkZQ4T1TrDDSo9kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwySKYv/P6JoTWwR2u8I5aqERyu0wHwYDVR0j BBgwFoAUNUEGY4AZ+UYG9aujqQ/rh6in+nYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ5MDZmYzAtNDM2My00ZjQ2LTliMTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4 MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdBOEE3RkE3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTQxMDY2MzgwMTlGOTQ2MDZGNUFCQTNBOTBGRUI4N0E4QTdG QTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVC ODdBOEE3RkE3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhnN9PFdTtGy4tqLEPtCEaAB5vIFJot7NZe /S01chkT6C0jafe3Jew8NWugeBY0W1ORfFTIA/kFw2TgKpz+/mbbZ43jlTgA6i05 lcDSZ3zjQ8yWgrSuXgsuNY2ganO2qlzIkYglt39JLc7/zek18iTHJR26wdWBV9Nr d5iEmHJOkDJT8UV7W/WtQirKJMdk+Np0dTWbsnT0BjJUE1otozbBo2uwkLAzCrAs 3BChNxO+wVoNKtTaI+obLoze0yQWgGsN2zhqHnKUrzpilaz7Gi6gKJNkyoa++uHg g+ZFvXk424C+XuAwPPdEEIN4kPNqtOiAxfunztU42us30bZguyw= -----END CERTIFICATE-----Generated at Wed May 13 04:26:47 2026 by rpki-client