$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json) Hash identifier: iweJexv1Nzk3qC/mvpa+uVcYEbuyIWU7g62T4y2BEwE= Subject key identifier: 9C:87:55:A8:D7:60:F9:69:ED:B7:57:BF:10:60:2B:93:86:85:24:18 Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Certificate serial: 65498331284952C9B1E0D02576FA009B2E9C6BD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:34 +0000 Manifest this update: Tue 12 May 2026 18:13:34 +0000 Manifest next update: Wed 13 May 2026 21:06:34 +0000 Files and hashes: 1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: bz9fkpqldkXv6UQS4A3aka9dCoky7gQ4x6JJR4wV6A8=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:49:83:31:28:49:52:c9:b1:e0:d0:25:76:fa:00:9b:2e:9c:6b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Validity Not Before: May 12 18:13:34 2026 GMT Not After : May 13 21:06:34 2026 GMT Subject: CN=9C8755A8D760F969EDB757BF10602B9386852418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2d:d2:33:63:56:e5:a0:4c:37:7f:c7:b2:62: ea:61:c3:4c:d2:5d:55:0c:08:6c:54:8e:01:42:2e: 64:2c:8e:b3:1e:95:76:36:7e:cf:b9:8c:04:56:21: bf:28:8d:ef:69:8c:fb:a6:47:d0:ed:e0:d7:12:9f: c6:33:81:9a:d9:48:1e:9c:00:15:f7:d4:b3:8b:7d: b7:68:06:b9:74:60:eb:90:70:79:c3:b4:c0:ea:7f: b5:e1:3b:2a:34:ca:94:c1:10:3d:26:c6:db:dd:8f: 14:8b:25:22:30:c3:75:c1:27:fc:cb:4c:e8:88:94: c1:4a:ff:0a:2f:b7:c5:c7:33:f2:55:fe:74:6a:6c: a1:95:59:f3:85:49:a5:0c:9c:38:db:14:fc:2a:10: 01:cc:82:8b:c6:f3:65:c7:c4:f5:4a:fa:ba:77:78: df:1f:d1:63:b6:c4:65:22:3b:58:4b:b4:9d:b7:cc: a2:f9:c7:f0:80:73:2e:7b:2e:f3:bc:e9:6f:c4:d6: 6b:c1:4a:81:c5:fe:c1:40:b0:1b:5a:34:a7:2a:00: cb:10:ca:85:7f:ae:5f:b4:37:55:17:f4:1d:7c:40: d1:9c:a7:33:ad:8d:80:d1:5d:fb:2c:64:a5:74:86: b1:78:8f:d5:67:52:1b:cc:0d:b4:f9:10:2e:54:5b: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:55:A8:D7:60:F9:69:ED:B7:57:BF:10:60:2B:93:86:85:24:18 X509v3 Authority Key Identifier: keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:48:49:02:06:ed:c7:28:59:e6:b5:98:14:f7:b5:84:d0:85: 87:d9:b1:1d:d3:ee:26:17:f0:c7:a3:f4:32:5e:70:36:d7:41: 35:1b:9d:40:0e:b0:c1:0e:45:b4:46:6d:ab:7f:42:a0:4e:15: 5c:c3:57:73:22:75:a5:1b:b6:ec:ab:ab:86:da:54:7b:a4:11: 0e:14:f5:f6:b4:86:04:54:80:99:1b:48:c3:1f:49:84:00:38: 26:d3:d5:cd:c3:f3:df:bd:9f:7c:0a:35:a5:16:35:a9:15:4b: 5a:14:b3:39:16:38:73:95:14:3d:b3:e8:82:da:36:d9:37:4a: 90:a2:e6:07:67:b1:a7:77:5d:93:66:34:8b:2e:a7:22:2e:41: 4a:7a:e9:9a:55:75:38:0d:a0:d6:6d:44:a9:21:d6:fa:d1:2c: d3:32:83:cd:65:8a:81:e8:e2:6d:3d:b9:aa:92:4f:65:c2:d7: 4f:4f:d4:46:cd:71:2a:32:1f:cf:e7:41:5c:71:73:21:a9:44: de:c6:a0:8e:f2:e8:a0:ff:31:34:69:5d:df:00:cf:6f:56:95: 75:c6:d5:19:a3:00:3f:dc:98:dd:ef:fa:2e:f3:4e:17:89:9e: 93:30:5f:79:08:9e:fb:e6:e6:eb:8f:80:76:f5:67:ee:19:30: a7:b6:1f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUmDMShJUsmx4NAldvoAmy6ca9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4 QzI5RURDNTAeFw0yNjA1MTIxODEzMzRaFw0yNjA1MTMyMTA2MzRaMDMxMTAvBgNV BAMTKDlDODc1NUE4RDc2MEY5NjlFREI3NTdCRjEwNjAyQjkzODY4NTI0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1LdIzY1bloEw3f8eyYuphw0zS XVUMCGxUjgFCLmQsjrMelXY2fs+5jARWIb8oje9pjPumR9Dt4NcSn8YzgZrZSB6c ABX31LOLfbdoBrl0YOuQcHnDtMDqf7XhOyo0ypTBED0mxtvdjxSLJSIww3XBJ/zL TOiIlMFK/wovt8XHM/JV/nRqbKGVWfOFSaUMnDjbFPwqEAHMgovG82XHxPVK+rp3 eN8f0WO2xGUiO1hLtJ23zKL5x/CAcy57LvO86W/E1mvBSoHF/sFAsBtaNKcqAMsQ yoV/rl+0N1UX9B18QNGcpzOtjYDRXfssZKV0hrF4j9VnUhvMDbT5EC5UW60XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIdVqNdg+Wntt1e/EGArk4aFJBgwHwYDVR0j BBgwFoAUmGqjoG5A0XHZk9x03vS+SYwp7cUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTRhZTU3YjMtNDZhMi00MjNkLWIyNDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2 RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4QzI5RURDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODZBQTNBMDZFNDBEMTcxRDk5M0RDNzRERUY0QkU0OThDMjlF REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJF NDk4QzI5RURDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtISQIG7ccoWea1mBT3tYTQhYfZsR3T7iYX 8Mej9DJecDbXQTUbnUAOsMEORbRGbat/QqBOFVzDV3MidaUbtuyrq4baVHukEQ4U 9fa0hgRUgJkbSMMfSYQAOCbT1c3D89+9n3wKNaUWNakVS1oUszkWOHOVFD2z6ILa Ntk3SpCi5gdnsad3XZNmNIsupyIuQUp66ZpVdTgNoNZtRKkh1vrRLNMyg81lioHo 4m09uaqST2XC109P1EbNcSoyH8/nQVxxcyGpRN7GoI7y6KD/MTRpXd8Az29WlXXG 1RmjAD/cmN3v+i7zTheJnpMwX3kInvvm5uuPgHb1Z+4ZMKe2Hyo= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client