$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: SoxsAQWaaR4neBhNthqFPjq8P1M1aK2lntqSNHWZv9E= Subject key identifier: D4:E6:CC:7E:D9:01:93:76:77:CC:3D:4F:74:A8:31:49:90:A9:F8:77 Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 711787177C8DABD8C0B280E98ECEB12148DD806F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:54:30 +0000 Manifest this update: Tue 12 May 2026 18:49:30 +0000 Manifest next update: Wed 13 May 2026 20:17:30 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) 2: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: FSTfSI6q0OYAWPWerLWVlIHdCEJvCkTcuUJ2QVYk31A=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:17:87:17:7c:8d:ab:d8:c0:b2:80:e9:8e:ce:b1:21:48:dd:80:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: May 12 18:49:30 2026 GMT Not After : May 13 20:17:30 2026 GMT Subject: CN=D4E6CC7ED901937677CC3D4F74A8314990A9F877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:8e:3c:9f:aa:a9:1b:7b:73:d7:4c:8d:db: ef:3e:0c:0e:45:c2:43:0a:3d:22:24:4e:b0:99:ff: b9:bb:0a:a9:0a:8f:2f:f3:a0:bf:2c:6f:c9:ce:1c: e1:99:d6:9b:83:74:96:a0:e5:1c:00:82:21:73:1d: b1:99:6c:7c:c1:86:7c:81:5f:25:66:2c:86:ad:d6: 2a:a6:cb:80:f3:13:39:5f:ae:b6:39:23:f9:6d:f2: fa:34:15:1c:2e:64:9c:0d:b6:5b:20:fa:61:46:98: d9:a6:5d:5b:56:fe:84:49:39:d8:cd:2e:a6:32:0d: 69:f2:24:7d:fe:99:14:d5:67:38:5e:47:c6:ca:0a: 43:f3:73:26:68:02:62:69:b4:3f:ec:ba:d1:9d:44: 2a:92:e3:e2:27:ba:6f:c0:01:0f:56:51:10:73:23: e8:a5:da:c5:5c:5c:78:61:f4:0c:2c:fc:a9:92:0d: a9:38:22:ed:00:96:e2:8a:7b:e1:57:16:69:6b:47: 33:95:9b:e9:22:c2:cd:df:0f:58:aa:2a:35:ae:6e: 7d:46:f3:5b:69:8c:0c:42:10:36:be:3f:0f:87:c5: 74:aa:8b:72:31:f7:bd:6f:57:dc:f1:ba:ee:b9:87: 7b:f6:35:5d:ff:9d:58:5d:83:3a:05:69:c9:dc:11: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E6:CC:7E:D9:01:93:76:77:CC:3D:4F:74:A8:31:49:90:A9:F8:77 X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a9:28:36:0b:cb:85:42:c5:45:df:1f:73:6a:49:3b:71:fd: 3e:4a:c3:68:0d:0b:de:a5:9a:8b:d0:0b:3c:ca:b1:f1:b9:f4: fd:21:21:d6:48:7d:d6:eb:d2:59:fd:fe:4a:47:7d:71:ba:6e: 03:37:1d:9d:54:b4:19:3e:dd:10:09:25:21:6a:d2:a1:9c:bd: 6a:5a:75:e8:fc:78:a5:9d:0e:ff:20:b8:32:44:eb:2a:f1:72: 0b:a7:66:59:60:20:23:fc:21:1c:b2:45:02:f0:b9:83:3d:b2: 06:91:d9:d6:47:61:2c:7c:cb:dd:ef:20:08:58:e8:d8:b9:61: f9:a4:0c:92:31:b9:7b:a7:d9:30:92:2b:a9:1d:2b:d1:6b:79: 9b:a8:2d:4d:77:03:36:33:4b:a6:5c:e4:df:67:04:31:d0:54: b2:e8:52:51:0c:37:5f:a9:a2:53:3e:b1:0a:47:22:a4:74:56: fa:7b:b5:62:96:2d:d5:85:f3:50:7e:b0:bf:83:50:ee:8d:ad: 97:d2:16:23:ca:6f:35:4b:61:56:1e:ef:25:6d:04:ab:66:e0: d6:16:c1:13:85:c3:6e:3a:6a:67:c9:31:7b:4f:5a:05:40:e5: b3:5b:e4:24:5f:9c:ba:be:10:48:5e:af:ea:ea:32:b2:35:b8: 1b:7c:cf:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcReHF3yNq9jAsoDpjs6xIUjdgG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjA1MTIxODQ5MzBaFw0yNjA1MTMyMDE3MzBaMDMxMTAvBgNV BAMTKEQ0RTZDQzdFRDkwMTkzNzY3N0NDM0Q0Rjc0QTgzMTQ5OTBBOUY4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXY48n6qpG3tz10yN2+8+DA5F wkMKPSIkTrCZ/7m7CqkKjy/zoL8sb8nOHOGZ1puDdJag5RwAgiFzHbGZbHzBhnyB XyVmLIat1iqmy4DzEzlfrrY5I/lt8vo0FRwuZJwNtlsg+mFGmNmmXVtW/oRJOdjN LqYyDWnyJH3+mRTVZzheR8bKCkPzcyZoAmJptD/sutGdRCqS4+Inum/AAQ9WURBz I+il2sVcXHhh9Aws/KmSDak4Iu0AluKKe+FXFmlrRzOVm+kiws3fD1iqKjWubn1G 81tpjAxCEDa+Pw+HxXSqi3Ix971vV9zxuu65h3v2NV3/nVhdgzoFacncEZLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ObMftkBk3Z3zD1PdKgxSZCp+HcwHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOpKDYLy4VCxUXfH3NqSTtx/T5Kw2gNC96l movQCzzKsfG59P0hIdZIfdbr0ln9/kpHfXG6bgM3HZ1UtBk+3RAJJSFq0qGcvWpa dej8eKWdDv8guDJE6yrxcgunZllgICP8IRyyRQLwuYM9sgaR2dZHYSx8y93vIAhY 6Ni5YfmkDJIxuXun2TCSK6kdK9FreZuoLU13AzYzS6Zc5N9nBDHQVLLoUlEMN1+p olM+sQpHIqR0Vvp7tWKWLdWF81B+sL+DUO6NrZfSFiPKbzVLYVYe7yVtBKtm4NYW wROFw246amfJMXtPWgVA5bNb5CRfnLq+EEher+rqMrI1uBt8z2k= -----END CERTIFICATE-----Generated at Tue May 12 22:13:12 2026 by rpki-client