$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: CNg7Rg0q7+pNmCiILfmYDAgnm1pOdpLDEy5reSLLE40= Subject key identifier: 32:E4:C8:76:4C:DA:AB:FF:38:D7:02:F1:6D:D3:38:50:F6:8D:DD:BE Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 3F5A8F01BA3102BF450AE8395A776D72896E8627 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:51:24 +0000 Manifest this update: Tue 12 May 2026 05:46:24 +0000 Manifest next update: Wed 13 May 2026 09:27:24 +0000 Files and hashes: 1: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: MSBSO/3/+6LaJghHwMQQ1zW6sbi2z06xkBFkRr3kveg=) 2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:8f:01:ba:31:02:bf:45:0a:e8:39:5a:77:6d:72:89:6e:86:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: May 12 05:46:24 2026 GMT Not After : May 13 09:27:24 2026 GMT Subject: CN=32E4C8764CDAABFF38D702F16DD33850F68DDDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:36:d2:3b:9f:71:1a:60:ed:33:db:6f:85: 64:08:70:f1:e2:ee:63:9c:3e:4e:5a:aa:83:38:09: 63:e6:d3:1e:68:ce:19:43:ae:45:49:f7:75:22:37: 27:11:51:4c:2a:19:c5:26:dd:04:0b:e6:45:3a:26: 6f:89:bf:10:9e:51:c6:48:fa:d9:50:a9:81:8d:c6: 1c:0c:52:32:2b:55:e8:0e:dd:04:6f:eb:4a:a5:93: 96:83:1e:9e:30:8c:3c:e1:7e:d8:3f:d0:7e:02:c0: 6b:6c:a2:21:a3:34:91:f2:84:4c:1b:c3:4f:a1:99: 1b:ad:f3:1a:b4:d0:57:b7:c9:b2:1c:d1:99:99:87: 2c:68:1d:e8:36:01:9f:b7:ba:58:36:d8:c3:c2:f5: 4d:dc:ea:f8:59:28:2e:af:97:5e:bc:1a:fb:13:96: b1:e6:bb:b4:41:b5:46:4b:e3:56:d8:fa:97:e8:01: 74:de:5d:2c:70:c7:24:a6:24:ce:c1:5f:99:1d:eb: f3:2a:4e:5d:8f:c3:c4:36:d8:4f:ef:13:38:6e:10: c5:e8:18:e5:cd:a3:94:5e:59:9f:1b:48:60:1f:74: 7d:61:19:fd:5f:44:69:64:0e:76:32:ba:78:5f:0a: b1:3e:f1:f4:f2:14:bb:a7:e3:e7:7a:48:13:6d:2d: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:C8:76:4C:DA:AB:FF:38:D7:02:F1:6D:D3:38:50:F6:8D:DD:BE X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7f:30:de:03:f8:fc:3b:94:ab:24:0f:54:67:a4:e5:c0:7c: 4b:64:79:d7:37:70:0f:29:37:88:64:fe:eb:72:3c:13:8e:f2: 7f:99:66:ac:db:53:04:7b:20:92:54:f0:51:1c:63:8a:88:7f: 08:e4:96:17:e6:9f:b5:d2:d3:d5:3f:3d:5f:e4:a6:04:44:2c: 36:75:c3:8c:be:1b:78:b8:95:96:75:bc:c5:60:5c:62:90:07: 25:ad:46:38:96:e9:ec:24:27:cd:3d:0d:bd:c0:a6:b4:cd:fa: ec:e7:7e:24:86:1b:6c:03:01:4f:b8:ae:0e:84:d6:6f:d8:16: 15:70:3f:df:2e:b5:68:40:73:11:90:d9:f6:ff:0f:ff:f8:56: 73:29:8b:91:3e:7b:3f:58:7a:3b:46:01:7c:db:db:4c:64:bf: 3c:ba:ad:4b:e7:85:e6:8c:b4:9c:e0:80:88:f5:55:e3:d7:40: 76:a6:81:39:57:71:dd:7a:bc:42:91:b8:28:25:ef:df:0f:f8: f9:bc:b5:67:f5:56:60:44:99:3d:e9:42:72:21:d7:d3:2f:a0: 11:97:45:29:e1:1c:cf:3f:a3:5c:db:8e:a6:07:ea:78:d9:ba: 2c:ee:21:2f:f7:c4:d1:3f:64:65:f9:fb:12:03:a4:e6:25:52: ab:0e:ac:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1qPAboxAr9FCug5WndtcoluhicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA1MTIwNTQ2MjRaFw0yNjA1MTMwOTI3MjRaMDMxMTAvBgNV BAMTKDMyRTRDODc2NENEQUFCRkYzOEQ3MDJGMTZERDMzODUwRjY4REREQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMzbSO59xGmDtM9tvhWQIcPHi 7mOcPk5aqoM4CWPm0x5ozhlDrkVJ93UiNycRUUwqGcUm3QQL5kU6Jm+JvxCeUcZI +tlQqYGNxhwMUjIrVegO3QRv60qlk5aDHp4wjDzhftg/0H4CwGtsoiGjNJHyhEwb w0+hmRut8xq00Fe3ybIc0ZmZhyxoHeg2AZ+3ulg22MPC9U3c6vhZKC6vl168GvsT lrHmu7RBtUZL41bY+pfoAXTeXSxwxySmJM7BX5kd6/MqTl2Pw8Q22E/vEzhuEMXo GOXNo5ReWZ8bSGAfdH1hGf1fRGlkDnYyunhfCrE+8fTyFLun4+d6SBNtLdUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuTIdkzaq/841wLxbdM4UPaN3b4wHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx/MN4D+Pw7lKskD1RnpOXAfEtkedc3cA8p N4hk/utyPBOO8n+ZZqzbUwR7IJJU8FEcY4qIfwjklhfmn7XS09U/PV/kpgRELDZ1 w4y+G3i4lZZ1vMVgXGKQByWtRjiW6ewkJ809Db3AprTN+uznfiSGG2wDAU+4rg6E 1m/YFhVwP98utWhAcxGQ2fb/D//4VnMpi5E+ez9YejtGAXzb20xkvzy6rUvnheaM tJzggIj1VePXQHamgTlXcd16vEKRuCgl798P+Pm8tWf1VmBEmT3pQnIh19MvoBGX RSnhHM8/o1zbjqYH6njZuizuIS/3xNE/ZGX5+xIDpOYlUqsOrMc= -----END CERTIFICATE-----Generated at Tue May 12 22:47:16 2026 by rpki-client