$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: cq4Ec7twOUxk/QPw4X6aIiHZfJYffsDAqHXtIBjBvWI= Subject key identifier: 61:96:C9:87:CB:CA:5A:C1:1D:A8:D4:75:74:4A:50:9C:00:99:A3:43 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 694EDFF1F234FC09BBB0E84A348DD0AD2070746C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:10:26 +0000 Manifest this update: Tue 12 May 2026 05:05:26 +0000 Manifest next update: Wed 13 May 2026 05:38:26 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) 2: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: bwEHd1ZHvf+kV6thpcaeTZvEDkqGJ9I1SF0yt79YjW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4e:df:f1:f2:34:fc:09:bb:b0:e8:4a:34:8d:d0:ad:20:70:74:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: May 12 05:05:26 2026 GMT Not After : May 13 05:38:26 2026 GMT Subject: CN=6196C987CBCA5AC11DA8D475744A509C0099A343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:de:4e:88:85:f2:c9:60:a7:0d:34:7f:6a: 42:ec:f2:00:eb:c1:24:e3:9d:1c:53:41:b2:b9:76: 70:7d:ec:ba:75:50:f1:59:35:5a:0c:72:2e:a2:2e: 3a:74:24:33:7e:5f:1e:d4:0c:cb:75:d3:d0:8c:dc: 7e:52:f3:70:a4:85:8f:b5:b9:d3:9e:20:75:95:eb: ef:83:98:87:c6:d1:8a:1d:76:1f:06:aa:97:35:da: 79:74:3b:86:10:59:97:07:49:ce:a2:0c:32:67:80: 55:3a:b4:9c:fa:fa:80:e5:6c:0c:37:7f:fa:2a:26: ab:e6:da:4f:22:1d:ba:ca:de:5c:71:17:2e:f7:2d: 4f:18:82:25:a9:3f:ff:28:d7:72:78:a3:3e:63:33: aa:db:a6:af:69:cc:94:55:d7:0a:97:6f:c5:96:45: 76:be:d8:ee:ca:41:5f:4e:4a:9b:b2:5a:93:4c:0d: 25:92:a0:69:35:1e:a0:76:81:88:ab:9b:15:55:14: 04:19:fd:f6:31:a0:06:d1:24:a5:cc:63:56:50:8d: c8:c8:1d:75:25:78:f5:f8:f3:96:a4:8c:aa:95:f3: 8d:77:d2:9a:3c:9b:f2:11:e0:c3:f2:6f:bd:7c:2a: 85:e0:c4:8f:7c:43:ba:96:19:84:a7:05:07:d4:7d: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:C9:87:CB:CA:5A:C1:1D:A8:D4:75:74:4A:50:9C:00:99:A3:43 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:72:71:cf:e4:21:cd:92:47:6e:29:91:be:ed:52:8f:51:44: bf:b5:e2:28:73:c7:99:e0:f5:53:84:a6:b8:59:b2:02:c2:89: 15:58:2e:b3:43:96:c0:49:27:3b:e8:6b:4c:51:4d:da:9a:2a: 87:f4:e0:72:09:b8:55:75:06:04:32:fc:61:99:ae:ad:da:37: 94:87:b5:73:a2:6d:0a:09:fd:e5:be:1e:7e:56:65:11:85:5e: 8e:e9:fd:d0:55:68:38:d2:d6:24:fe:22:ef:cb:8d:45:0d:22: 9d:91:9d:59:79:3d:88:66:7e:70:1f:38:5b:57:7e:36:cd:60: de:47:ee:84:83:e5:e1:43:2a:31:2a:37:d6:00:5a:26:cd:a9: b0:76:d7:a5:57:c0:74:7f:04:5c:6b:a0:00:fa:78:cf:74:e3: 78:d9:25:3e:07:5d:39:cd:bb:19:9e:8a:c0:03:10:73:c9:d3: 9f:5a:fc:24:69:43:57:f3:4c:bc:64:4d:ca:2f:0e:5b:aa:a9: 4b:97:27:bf:6d:a4:f2:13:a8:55:30:c0:9e:5a:b0:f3:74:dc: 1b:01:d6:c0:f7:a1:18:1c:01:70:3b:cb:2b:8f:75:2b:24:68: d0:df:d0:d5:aa:29:f3:05:34:fa:44:4f:b5:77:75:59:63:64: 3d:68:c3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaU7f8fI0/Am7sOhKNI3QrSBwdGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA1MTIwNTA1MjZaFw0yNjA1MTMwNTM4MjZaMDMxMTAvBgNV BAMTKDYxOTZDOTg3Q0JDQTVBQzExREE4RDQ3NTc0NEE1MDlDMDA5OUEzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98t5OiIXyyWCnDTR/akLs8gDr wSTjnRxTQbK5dnB97Lp1UPFZNVoMci6iLjp0JDN+Xx7UDMt109CM3H5S83CkhY+1 udOeIHWV6++DmIfG0Yoddh8Gqpc12nl0O4YQWZcHSc6iDDJngFU6tJz6+oDlbAw3 f/oqJqvm2k8iHbrK3lxxFy73LU8YgiWpP/8o13J4oz5jM6rbpq9pzJRV1wqXb8WW RXa+2O7KQV9OSpuyWpNMDSWSoGk1HqB2gYirmxVVFAQZ/fYxoAbRJKXMY1ZQjcjI HXUlePX485akjKqV84130po8m/IR4MPyb718KoXgxI98Q7qWGYSnBQfUfWKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZbJh8vKWsEdqNR1dEpQnACZo0MwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBycc/kIc2SR24pkb7tUo9RRL+14ihzx5ng 9VOEprhZsgLCiRVYLrNDlsBJJzvoa0xRTdqaKof04HIJuFV1BgQy/GGZrq3aN5SH tXOibQoJ/eW+Hn5WZRGFXo7p/dBVaDjS1iT+Iu/LjUUNIp2RnVl5PYhmfnAfOFtX fjbNYN5H7oSD5eFDKjEqN9YAWibNqbB216VXwHR/BFxroAD6eM9043jZJT4HXTnN uxmeisADEHPJ059a/CRpQ1fzTLxkTcovDluqqUuXJ79tpPITqFUwwJ5asPN03BsB 1sD3oRgcAXA7yyuPdSskaNDf0NWqKfMFNPpET7V3dVljZD1ow/g= -----END CERTIFICATE-----Generated at Tue May 12 22:47:08 2026 by rpki-client