$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: XeHnV5iM7bXgzrXPfmy4oG3pUSjtpjkWOuoyXkSUQgQ= Subject key identifier: 38:5E:F2:7B:D7:C9:C6:CE:C2:EB:61:5A:4B:41:B7:9E:45:63:66:EA Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 07657F5DA03DA3CA49074C7EE282FBEC4C9F5DC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:04 +0000 Manifest this update: Tue 12 May 2026 20:48:04 +0000 Manifest next update: Wed 13 May 2026 23:12:04 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 2: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) 3: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: PyU1pw1JiWgbzonoQyk4xfWO5TbzWHae17nHoF7GS18=) 4: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:65:7f:5d:a0:3d:a3:ca:49:07:4c:7e:e2:82:fb:ec:4c:9f:5d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: May 12 20:48:04 2026 GMT Not After : May 13 23:12:04 2026 GMT Subject: CN=385EF27BD7C9C6CEC2EB615A4B41B79E456366EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:88:d3:c4:f0:36:1b:00:6e:ac:c9:ce:57: 74:63:2b:ae:9d:75:d5:4b:04:79:c3:e9:3f:9e:5e: bd:e4:be:7a:35:9b:58:30:8d:98:f1:db:a8:09:fe: 20:d5:89:f8:a6:73:95:63:ed:2b:d8:73:8e:58:be: 8b:e1:56:9d:e5:8a:78:16:80:2d:34:c2:11:12:15: c5:03:94:1f:cf:82:28:bc:fa:b7:7c:e5:40:d2:31: 70:2e:2a:32:69:7a:41:a4:a9:a3:37:95:22:4d:8d: 08:13:b4:b3:7c:a9:20:35:fd:36:a6:0f:a0:19:5b: d6:b0:09:8f:54:ad:50:94:d8:0c:e2:0a:ca:b0:25: b6:d7:cb:1c:f6:b7:47:33:f1:b6:76:1f:f2:94:0b: 8f:e8:f3:45:93:cb:60:2d:33:06:34:80:0b:6d:e0: ad:46:40:fb:50:ab:e2:bd:8a:99:5b:97:1f:ca:57: d9:0c:f4:25:34:09:a8:11:ab:e5:71:dc:e2:1b:a4: 94:e5:43:a5:0b:d7:ce:46:51:13:4a:ce:35:1b:c5: c6:35:d9:50:c0:72:3f:c2:52:5e:f9:b7:31:00:9e: 01:70:0f:b2:c6:57:71:58:36:3c:f3:f6:3f:7d:b7: 5a:82:1f:f4:c6:50:5c:e6:7d:65:60:aa:a6:83:33: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:F2:7B:D7:C9:C6:CE:C2:EB:61:5A:4B:41:B7:9E:45:63:66:EA X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:f2:2c:38:c7:e4:9b:fe:b1:ca:fd:9c:e4:73:ff:19:e3: d8:48:f4:20:e2:59:09:10:61:08:cc:c6:1f:87:e0:04:c0:54: 4b:40:99:13:2c:ba:8d:28:06:b2:54:16:a3:b1:9d:34:77:22: 9b:9a:65:97:dc:d7:8b:68:5c:3e:d3:c9:ca:d3:7e:06:3c:5e: 82:76:b0:28:0c:44:80:cc:65:21:d7:79:5a:d8:dd:d1:c8:d6: da:6f:d2:d4:82:f1:90:32:fc:1b:86:dd:f5:1d:6a:ce:2b:86: 70:bd:0e:9d:f2:9b:93:be:0b:69:24:b1:98:c9:b4:9f:0b:1a: 77:32:17:24:35:5c:51:ce:68:fd:f8:8e:9f:d9:5a:38:97:b3: 1d:60:d0:a8:80:f8:4f:b9:0e:20:b3:19:88:81:76:e5:9f:72: 11:d8:f5:a3:39:0f:19:30:94:c6:27:25:1c:68:b3:5c:20:49: 69:51:c3:c1:03:4b:42:57:f6:2e:e5:f7:ef:4c:f6:6f:c7:37: 17:c3:89:0a:16:2f:ed:61:0c:11:39:d3:8e:a5:e2:1a:96:16: d3:ac:69:7b:ba:ee:3c:3b:c2:ba:23:36:03:1e:98:5e:33:84: b4:a8:67:02:99:1d:48:12:0d:89:7e:8b:dc:07:74:69:25:a7: 16:cc:1c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2V/XaA9o8pJB0x+4oL77EyfXcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA1MTIyMDQ4MDRaFw0yNjA1MTMyMzEyMDRaMDMxMTAvBgNV BAMTKDM4NUVGMjdCRDdDOUM2Q0VDMkVCNjE1QTRCNDFCNzlFNDU2MzY2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DojTxPA2GwBurMnOV3RjK66d ddVLBHnD6T+eXr3kvno1m1gwjZjx26gJ/iDVifimc5Vj7SvYc45YvovhVp3lingW gC00whESFcUDlB/Pgii8+rd85UDSMXAuKjJpekGkqaM3lSJNjQgTtLN8qSA1/Tam D6AZW9awCY9UrVCU2AziCsqwJbbXyxz2t0cz8bZ2H/KUC4/o80WTy2AtMwY0gAtt 4K1GQPtQq+K9iplblx/KV9kM9CU0CagRq+Vx3OIbpJTlQ6UL185GURNKzjUbxcY1 2VDAcj/CUl75tzEAngFwD7LGV3FYNjzz9j99t1qCH/TGUFzmfWVgqqaDMwcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOF7ye9fJxs7C62FaS0G3nkVjZuowHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkd8iw4x+Sb/rHK/Zzkc/8Z49hI9CDiWQkQ YQjMxh+H4ATAVEtAmRMsuo0oBrJUFqOxnTR3IpuaZZfc14toXD7TycrTfgY8XoJ2 sCgMRIDMZSHXeVrY3dHI1tpv0tSC8ZAy/BuG3fUdas4rhnC9Dp3ym5O+C2kksZjJ tJ8LGncyFyQ1XFHOaP34jp/ZWjiXsx1g0KiA+E+5DiCzGYiBduWfchHY9aM5Dxkw lMYnJRxos1wgSWlRw8EDS0JX9i7l9+9M9m/HNxfDiQoWL+1hDBE5046l4hqWFtOs aXu67jw7wrojNgMemF4zhLSoZwKZHUgSDYl+i9wHdGklpxbMHOU= -----END CERTIFICATE-----Generated at Wed May 13 04:16:46 2026 by rpki-client