$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: fv8ymjZUldjK/ikvASzrIitTxOM4Zl1GFclLGxpPYUw= Subject key identifier: 96:E1:39:1A:C0:14:2A:27:B7:60:6B:83:45:01:52:CF:6E:96:B8:91 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 79D6583288E64DCBFAB5E80359855B3699CFF042 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:29:20 +0000 Manifest this update: Tue 12 May 2026 04:24:20 +0000 Manifest next update: Wed 13 May 2026 05:48:20 +0000 Files and hashes: 1: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 3: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 4: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 7: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: r9/Az81svQVpNS4Sr3tLzhdhVj2IqhfZq4QjAEouF1o=) 8: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 9: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d6:58:32:88:e6:4d:cb:fa:b5:e8:03:59:85:5b:36:99:cf:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: May 12 04:24:20 2026 GMT Not After : May 13 05:48:20 2026 GMT Subject: CN=96E1391AC0142A27B7606B83450152CF6E96B891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:07:8b:d7:cc:83:49:81:21:e8:98:18:dc: 1a:4d:78:3c:c2:b4:b7:fd:6e:3a:fb:97:94:f7:aa: df:d0:c6:49:c9:09:2f:44:40:04:81:56:4a:ef:2f: c2:15:22:d0:4d:c7:37:c5:5a:97:fd:18:7d:bc:f6: 61:ea:d7:d9:0b:e1:42:3e:1c:10:53:5a:7b:76:72: 95:0b:84:56:85:3e:b2:7a:98:8d:af:66:7a:16:3a: 7a:d0:39:10:f9:c3:a2:d2:ea:27:8b:7b:ca:de:af: 7c:d5:1f:29:10:99:5b:d1:6a:e5:b1:5c:eb:b8:98: 48:12:dc:16:58:3a:75:49:cf:f4:42:a2:0a:6a:2a: dd:da:1b:9b:27:89:71:be:87:96:1d:24:bc:25:91: 4b:0c:bb:9f:ec:f3:7b:1f:40:27:ab:c1:d4:0f:3d: 9d:3a:ae:9a:3a:1e:d5:45:56:b4:cb:2d:d7:1f:0c: 73:0f:ac:22:70:3a:60:2e:ba:9c:79:f7:31:fb:22: c9:0e:5e:c2:69:42:53:f4:52:ab:97:65:f4:3c:eb: c8:24:40:2c:51:73:15:84:d8:0a:8e:49:be:13:6e: 6d:08:86:1c:15:99:0f:75:1f:b5:81:fe:55:21:47: 7a:6f:1c:57:a1:73:be:73:e3:fc:46:90:1e:45:d8: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E1:39:1A:C0:14:2A:27:B7:60:6B:83:45:01:52:CF:6E:96:B8:91 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:10:87:14:dc:a9:12:a4:f0:ea:70:5f:37:39:48:41:2c:23: 76:48:de:a0:b9:d7:f1:76:82:3c:d3:87:c3:6b:18:80:a9:c0: dc:28:9b:94:d8:39:04:98:8e:ea:0e:d0:1e:2f:20:bc:12:0c: 22:4c:cb:d2:06:ab:ad:82:2d:7b:cb:be:78:df:61:a0:e6:d2: be:8b:ad:24:ad:01:f3:a7:76:f1:65:15:02:22:e5:b2:ea:41: f7:f8:5f:6c:c9:31:c2:f0:9b:9b:5c:11:bb:de:76:7c:4b:87: 7a:7f:b2:8c:39:60:01:25:3b:3f:23:00:bb:3f:fb:ad:5e:8c: 9f:d2:0b:6e:d3:71:23:9b:e9:3d:51:9f:7b:0e:c7:fd:02:63: cd:25:57:5f:6c:aa:d4:0f:30:de:f3:32:75:49:82:27:2d:94: 8f:f5:0e:d8:d7:9e:c3:44:4f:58:49:4d:49:14:33:15:80:37: a8:2c:22:27:64:30:48:d0:d1:bc:4e:88:e9:dd:fa:df:1b:0f: a7:26:06:40:1c:7c:1c:d2:60:c1:8f:cb:78:6f:b6:d5:2a:fb: 3b:e7:0d:2f:6f:18:21:76:73:b8:69:7b:73:dd:07:dc:c4:9a: c0:f4:f5:a2:53:bf:c2:4a:19:ac:c1:1e:c4:21:32:eb:65:6c: 8f:e4:dd:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedZYMojmTcv6tegDWYVbNpnP8EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA1MTIwNDI0MjBaFw0yNjA1MTMwNTQ4MjBaMDMxMTAvBgNV BAMTKDk2RTEzOTFBQzAxNDJBMjdCNzYwNkI4MzQ1MDE1MkNGNkU5NkI4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizweL18yDSYEh6JgY3BpNeDzC tLf9bjr7l5T3qt/QxknJCS9EQASBVkrvL8IVItBNxzfFWpf9GH289mHq19kL4UI+ HBBTWnt2cpULhFaFPrJ6mI2vZnoWOnrQORD5w6LS6ieLe8rer3zVHykQmVvRauWx XOu4mEgS3BZYOnVJz/RCogpqKt3aG5sniXG+h5YdJLwlkUsMu5/s83sfQCerwdQP PZ06rpo6HtVFVrTLLdcfDHMPrCJwOmAuupx59zH7IskOXsJpQlP0UquXZfQ868gk QCxRcxWE2AqOSb4Tbm0IhhwVmQ91H7WB/lUhR3pvHFehc75z4/xGkB5F2MmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUluE5GsAUKie3YGuDRQFSz26WuJEwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwQhxTcqRKk8OpwXzc5SEEsI3ZI3qC51/F2 gjzTh8NrGICpwNwom5TYOQSYjuoO0B4vILwSDCJMy9IGq62CLXvLvnjfYaDm0r6L rSStAfOndvFlFQIi5bLqQff4X2zJMcLwm5tcEbvednxLh3p/sow5YAElOz8jALs/ +61ejJ/SC27TcSOb6T1Rn3sOx/0CY80lV19sqtQPMN7zMnVJgictlI/1DtjXnsNE T1hJTUkUMxWAN6gsIidkMEjQ0bxOiOnd+t8bD6cmBkAcfBzSYMGPy3hvttUq+zvn DS9vGCF2c7hpe3PdB9zEmsD09aJTv8JKGazBHsQhMutlbI/k3c4= -----END CERTIFICATE-----Generated at Tue May 12 22:47:12 2026 by rpki-client