$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: rOFCfPLz5iDvVANi3dlx7P3KVCO4Z+bnzzjDvMmI5TQ= Subject key identifier: 07:CB:58:86:2B:25:AA:72:E0:F2:8A:3E:25:93:5E:80:C8:2D:06:5F Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 312DEE031DA5315ACD3F97C74214BED7053B58B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:22 +0000 Manifest this update: Tue 12 May 2026 22:05:22 +0000 Manifest next update: Wed 13 May 2026 23:05:22 +0000 Files and hashes: 1: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: cUz70E1iAc80Yu77033iMkAZaGgWunQhGBX8LkaUtUk=) 2: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 3: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2d:ee:03:1d:a5:31:5a:cd:3f:97:c7:42:14:be:d7:05:3b:58:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: May 12 22:05:22 2026 GMT Not After : May 13 23:05:22 2026 GMT Subject: CN=07CB58862B25AA72E0F28A3E25935E80C82D065F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:13:55:f5:92:30:c0:27:7d:1a:6d:8b:b8: 83:fe:6c:da:c6:3a:c8:e6:d6:be:c2:d3:4b:03:5b: a1:41:89:6f:9e:73:8d:5b:07:97:ae:95:1d:c8:78: 87:da:7c:d6:7c:61:d9:cd:54:48:d1:f9:b2:62:22: 41:2a:cc:4a:d4:2d:d5:78:64:56:ee:80:76:38:32: 48:e5:03:2c:a0:fd:51:21:f8:63:a0:9a:c3:70:aa: b9:bd:8e:68:62:5a:c0:ad:ea:2b:53:aa:08:a4:a7: b2:ec:33:72:13:8b:91:54:96:f2:bc:ba:de:c7:6a: 30:e7:6c:b2:f4:2a:6d:63:62:31:72:ee:01:45:0f: 48:23:45:9e:64:b0:07:e2:16:f9:3a:d2:45:50:6e: ca:2f:2f:1c:81:f7:6c:40:e6:0b:37:d2:fb:84:e1: 66:0d:df:9d:b5:c0:94:fb:47:12:50:a0:3b:19:f0: 02:e5:31:76:99:5d:dd:97:a1:b0:fe:ce:28:92:17: 16:76:45:05:2c:30:76:6d:72:a8:79:b1:b8:6a:b7: 26:b4:de:b6:ae:85:c9:11:ec:1e:93:eb:e3:67:ef: 54:6f:1e:6d:6b:de:ec:36:37:e3:24:2c:76:2a:d0: 0b:3f:a9:a8:6e:0c:77:6e:ac:0a:89:f3:7f:fa:20: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CB:58:86:2B:25:AA:72:E0:F2:8A:3E:25:93:5E:80:C8:2D:06:5F X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4a:b9:da:27:cf:09:b8:f8:3a:e2:64:e3:b0:b3:30:e0:47: c8:4f:0c:2f:a8:4f:85:4d:d1:20:1e:fe:86:5a:56:86:ca:d4: 8e:31:c2:91:49:af:81:c7:c3:c2:7b:b7:d5:f7:4a:2a:22:19: 0b:d9:a2:de:c8:cb:52:92:71:37:4c:75:80:63:c7:ef:3a:7f: b3:74:61:fe:b1:71:b5:70:84:2f:58:10:13:e2:1f:36:76:bd: 67:6b:00:aa:80:c7:6f:a6:38:3b:d9:45:4c:b2:f2:23:69:74: e6:1b:27:2d:97:c6:cf:61:b0:74:63:c8:28:e5:e7:9b:08:c9: 08:67:cc:87:9c:6b:55:fd:46:e5:61:a2:32:e1:22:ed:07:35: ba:2e:50:86:5b:e2:4c:36:80:38:bc:2d:59:1c:f8:6e:d6:76: 4b:07:64:87:95:a3:fb:10:67:ff:b8:28:cd:f9:00:de:f4:a1: 6a:a4:02:08:f0:ac:24:5f:f9:48:25:aa:af:ca:af:ae:7b:04: 0c:ba:a4:55:45:a7:ad:d7:c6:d5:d3:aa:c7:5a:93:49:b8:a1: ea:18:01:30:50:3d:39:92:7b:e6:1f:ec:c8:f0:ac:14:d0:0d: 12:a8:07:58:fe:c2:94:fb:9e:f3:ef:54:8d:7e:35:26:66:37: 2e:2a:53:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMS3uAx2lMVrNP5fHQhS+1wU7WLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA1MTIyMjA1MjJaFw0yNjA1MTMyMzA1MjJaMDMxMTAvBgNV BAMTKDA3Q0I1ODg2MkIyNUFBNzJFMEYyOEEzRTI1OTM1RTgwQzgyRDA2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kBNV9ZIwwCd9Gm2LuIP+bNrG Osjm1r7C00sDW6FBiW+ec41bB5eulR3IeIfafNZ8YdnNVEjR+bJiIkEqzErULdV4 ZFbugHY4MkjlAyyg/VEh+GOgmsNwqrm9jmhiWsCt6itTqgikp7LsM3ITi5FUlvK8 ut7HajDnbLL0Km1jYjFy7gFFD0gjRZ5ksAfiFvk60kVQbsovLxyB92xA5gs30vuE 4WYN3521wJT7RxJQoDsZ8ALlMXaZXd2XobD+ziiSFxZ2RQUsMHZtcqh5sbhqtya0 3rauhckR7B6T6+Nn71RvHm1r3uw2N+MkLHYq0As/qahuDHdurAqJ83/6IGyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB8tYhislqnLg8oo+JZNegMgtBl8wHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5Kudonzwm4+DriZOOwszDgR8hPDC+oT4VN 0SAe/oZaVobK1I4xwpFJr4HHw8J7t9X3SioiGQvZot7Iy1KScTdMdYBjx+86f7N0 Yf6xcbVwhC9YEBPiHzZ2vWdrAKqAx2+mODvZRUyy8iNpdOYbJy2Xxs9hsHRjyCjl 55sIyQhnzIeca1X9RuVhojLhIu0HNbouUIZb4kw2gDi8LVkc+G7WdksHZIeVo/sQ Z/+4KM35AN70oWqkAgjwrCRf+Uglqq/Kr657BAy6pFVFp63XxtXTqsdak0m4oeoY ATBQPTmSe+Yf7MjwrBTQDRKoB1j+wpT7nvPvVI1+NSZmNy4qU4Y= -----END CERTIFICATE-----Generated at Wed May 13 02:58:39 2026 by rpki-client