$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: UFVn6QLgtb6QnyaaSsYStXWRpa2NpK9DJBCMbr8FcD0= Subject key identifier: 88:14:3C:38:5C:24:6B:B4:1E:BD:CF:C8:12:91:3A:FA:49:C9:35:91 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 5FF2B71F55D1F0585DED986BB8812B63F45C32FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:40:09 +0000 Manifest this update: Tue 12 May 2026 08:35:09 +0000 Manifest next update: Wed 13 May 2026 09:41:09 +0000 Files and hashes: 1: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 2: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: CWo1XEJ5vcQf7W3zgsK0/JzEJIWWtiLqOVSGc5CyNVk=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:b7:1f:55:d1:f0:58:5d:ed:98:6b:b8:81:2b:63:f4:5c:32:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: May 12 08:35:09 2026 GMT Not After : May 13 09:41:09 2026 GMT Subject: CN=88143C385C246BB41EBDCFC812913AFA49C93591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:42:ae:eb:63:f0:95:68:0a:23:71:bd:2c: f0:7a:8f:a0:fb:b4:54:ce:08:40:89:61:f9:44:e7: 74:a6:64:1a:80:e4:cd:c0:03:26:f3:49:4b:0c:84: 8c:10:3a:e3:32:25:3b:f7:e6:49:bd:d5:ef:e6:18: 99:3a:49:a1:a6:ee:04:0b:0d:96:da:1e:69:81:69: 8f:45:7f:a6:3f:72:47:a8:85:89:a9:75:bb:51:2c: f5:f3:55:95:c5:be:0e:79:3b:4f:2b:a1:a1:10:39: 95:62:7c:2f:e9:70:39:72:8f:c9:c6:5b:f4:5d:be: 0c:8a:53:47:75:91:e4:7b:5c:a1:39:34:05:f5:86: 56:39:91:79:0d:ae:62:d3:8b:bf:08:cb:48:46:18: 36:27:a3:56:c6:75:81:1a:01:ab:49:ee:3d:48:52: cf:cf:2c:6b:30:a8:6b:2f:4b:d9:1f:aa:47:23:84: d3:2f:a1:5b:94:e0:5d:c1:32:cc:b5:8e:07:13:8a: 93:2b:39:4f:69:20:be:84:fa:b7:2a:e7:ee:e8:ca: 19:4d:d8:4c:f5:24:64:58:90:34:89:73:31:3f:ea: e3:4b:48:f3:51:fa:a9:d5:87:d6:07:09:28:94:49: 60:31:e7:1d:2b:f8:8a:a1:93:39:2c:0d:a0:d9:c6: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:3C:38:5C:24:6B:B4:1E:BD:CF:C8:12:91:3A:FA:49:C9:35:91 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3f:fa:3f:05:b8:95:74:6e:bf:b0:cc:c9:56:4b:3e:87:df: 65:9a:03:df:3e:e8:e9:f2:c3:dd:85:fa:83:31:55:f6:7c:68: cb:1e:03:86:aa:bb:2f:4e:c9:69:2d:bc:d8:76:b1:ae:39:b7: 8f:ac:15:6c:56:73:44:38:2c:d6:f0:aa:6c:18:3d:e2:74:df: 73:03:47:47:cc:49:29:ae:1b:a2:e5:88:db:89:1e:1f:df:c6: 01:10:ea:15:ea:dc:e2:e2:83:ad:b4:69:81:f3:12:8f:45:fa: b2:47:b2:2e:56:42:a7:2d:0f:f7:5a:ab:01:ac:7d:18:d2:4c: aa:b5:cf:53:31:87:b2:bd:62:dd:6f:9c:fd:f2:6d:07:71:28: a7:29:50:0d:51:a0:60:dd:0b:e5:c3:2d:76:c3:ac:0f:80:13: db:4b:83:d7:7a:a2:a0:55:ef:99:28:fa:69:9c:76:53:8a:32: 31:19:d1:2b:02:38:bd:d0:02:9e:ab:29:fe:8e:2e:c7:cf:ce: da:b0:c0:8c:e1:43:51:94:04:53:7c:7a:70:5e:79:17:d5:96: 48:47:4c:c8:0b:d2:f8:2b:35:b1:12:0d:76:4b:b5:9e:8e:3b: c8:a5:01:ab:4e:66:5d:42:25:e2:3b:ae:ef:79:d5:46:79:73: ec:d0:f4:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/K3H1XR8Fhd7ZhruIErY/RcMvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA1MTIwODM1MDlaFw0yNjA1MTMwOTQxMDlaMDMxMTAvBgNV BAMTKDg4MTQzQzM4NUMyNDZCQjQxRUJEQ0ZDODEyOTEzQUZBNDlDOTM1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixkKu62PwlWgKI3G9LPB6j6D7 tFTOCECJYflE53SmZBqA5M3AAybzSUsMhIwQOuMyJTv35km91e/mGJk6SaGm7gQL DZbaHmmBaY9Ff6Y/ckeohYmpdbtRLPXzVZXFvg55O08roaEQOZVifC/pcDlyj8nG W/RdvgyKU0d1keR7XKE5NAX1hlY5kXkNrmLTi78Iy0hGGDYno1bGdYEaAatJ7j1I Us/PLGswqGsvS9kfqkcjhNMvoVuU4F3BMsy1jgcTipMrOU9pIL6E+rcq5+7oyhlN 2Ez1JGRYkDSJczE/6uNLSPNR+qnVh9YHCSiUSWAx5x0r+IqhkzksDaDZxnjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiBQ8OFwka7Qevc/IEpE6+knJNZEwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM/+j8FuJV0br+wzMlWSz6H32WaA98+6Ony w92F+oMxVfZ8aMseA4aquy9OyWktvNh2sa45t4+sFWxWc0Q4LNbwqmwYPeJ033MD R0fMSSmuG6LliNuJHh/fxgEQ6hXq3OLig620aYHzEo9F+rJHsi5WQqctD/daqwGs fRjSTKq1z1Mxh7K9Yt1vnP3ybQdxKKcpUA1RoGDdC+XDLXbDrA+AE9tLg9d6oqBV 75ko+mmcdlOKMjEZ0SsCOL3QAp6rKf6OLsfPztqwwIzhQ1GUBFN8enBeeRfVlkhH TMgL0vgrNbESDXZLtZ6OO8ilAatOZl1CJeI7ru951UZ5c+zQ9OA= -----END CERTIFICATE-----Generated at Wed May 13 01:07:14 2026 by rpki-client